[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   43.864742][   T25] audit: type=1800 audit(1575362057.751:25): pid=8108 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   43.884104][   T25] audit: type=1800 audit(1575362057.761:26): pid=8108 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   43.926842][   T25] audit: type=1800 audit(1575362057.761:27): pid=8108 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.199' (ECDSA) to the list of known hosts.
2019/12/03 08:34:28 fuzzer started
2019/12/03 08:34:30 dialing manager at 10.128.0.26:38907
2019/12/03 08:34:30 syscalls: 2697
2019/12/03 08:34:30 code coverage: enabled
2019/12/03 08:34:30 comparison tracing: enabled
2019/12/03 08:34:30 extra coverage: extra coverage is not supported by the kernel
2019/12/03 08:34:30 setuid sandbox: enabled
2019/12/03 08:34:30 namespace sandbox: enabled
2019/12/03 08:34:30 Android sandbox: /sys/fs/selinux/policy does not exist
2019/12/03 08:34:30 fault injection: enabled
2019/12/03 08:34:30 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/12/03 08:34:30 net packet injection: enabled
2019/12/03 08:34:30 net device setup: enabled
2019/12/03 08:34:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2019/12/03 08:34:30 devlink PCI setup: PCI device 0000:00:10.0 is not available
08:34:31 executing program 0:
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040))
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000100))

08:34:31 executing program 1:
syz_open_dev$dmmidi(0x0, 0x0, 0x110002)
r0 = getpid()
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, 0xffffffffffffffff, 0x0, 0x12, &(0x7f00000001c0)='/dev/input/mouse#\x00'}, 0x30)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x800, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r4}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0xfffffffffffffffd, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000, 0x0, 0x4]}}, r4}}, 0x48)
ioctl$SNDCTL_DSP_SETDUPLEX(r2, 0x5016, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0x0)
ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0)

syzkaller login: [   57.892934][ T8271] IPVS: ftp: loaded support on port[0] = 21
08:34:31 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x18f})

[   58.051261][ T8273] IPVS: ftp: loaded support on port[0] = 21
[   58.062545][ T8271] chnl_net:caif_netlink_parms(): no params data found
[   58.146597][ T8271] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.167170][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.186952][ T8271] device bridge_slave_0 entered promiscuous mode
[   58.216489][ T8271] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.224799][ T8271] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.248963][ T8271] device bridge_slave_1 entered promiscuous mode
[   58.265771][ T8276] IPVS: ftp: loaded support on port[0] = 21
08:34:32 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3)
r2 = fcntl$dupfd(r0, 0x0, r1)
write$P9_RSYMLINK(r2, &(0x7f0000000180)={0x14}, 0x10000015a)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
mmap(&(0x7f0000106000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0)

[   58.300511][ T8271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.335962][ T8271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.401825][ T8273] chnl_net:caif_netlink_parms(): no params data found
[   58.417318][ T8271] team0: Port device team_slave_0 added
[   58.428204][ T8271] team0: Port device team_slave_1 added
08:34:32 executing program 4:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x3310, 0x0)

[   58.679524][ T8271] device hsr_slave_0 entered promiscuous mode
[   58.748873][ T8271] device hsr_slave_1 entered promiscuous mode
08:34:32 executing program 5:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48)

[   58.813516][ T8280] IPVS: ftp: loaded support on port[0] = 21
[   58.853245][ T8282] IPVS: ftp: loaded support on port[0] = 21
[   58.860028][ T8273] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.868114][ T8273] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.876001][ T8273] device bridge_slave_0 entered promiscuous mode
[   58.888526][ T8273] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.895612][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.905068][ T8273] device bridge_slave_1 entered promiscuous mode
[   58.958397][ T8276] chnl_net:caif_netlink_parms(): no params data found
[   58.977514][ T8273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.990139][ T8273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.023015][ T8271] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   59.071764][ T8271] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   59.142435][ T8273] team0: Port device team_slave_0 added
[   59.151582][ T8273] team0: Port device team_slave_1 added
[   59.174648][ T8271] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   59.220802][ T8271] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   59.283610][ T8285] IPVS: ftp: loaded support on port[0] = 21
[   59.340084][ T8273] device hsr_slave_0 entered promiscuous mode
[   59.397643][ T8273] device hsr_slave_1 entered promiscuous mode
[   59.436983][ T8273] debugfs: Directory 'hsr0' with parent '/' already present!
[   59.462329][ T8276] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.470580][ T8276] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.478658][ T8276] device bridge_slave_0 entered promiscuous mode
[   59.505284][ T8276] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.514058][ T8276] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.521848][ T8276] device bridge_slave_1 entered promiscuous mode
[   59.560562][ T8273] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.621543][ T8273] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.697769][ T8276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.712832][ T8276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.727300][ T8273] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.779781][ T8276] team0: Port device team_slave_0 added
[   59.788061][ T8276] team0: Port device team_slave_1 added
[   59.794135][ T8273] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.883896][ T8280] chnl_net:caif_netlink_parms(): no params data found
[   59.958643][ T8276] device hsr_slave_0 entered promiscuous mode
[   59.997577][ T8276] device hsr_slave_1 entered promiscuous mode
[   60.036923][ T8276] debugfs: Directory 'hsr0' with parent '/' already present!
[   60.084803][ T8282] chnl_net:caif_netlink_parms(): no params data found
[   60.111561][ T8285] chnl_net:caif_netlink_parms(): no params data found
[   60.156428][ T8282] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.164213][ T8282] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.172318][ T8282] device bridge_slave_0 entered promiscuous mode
[   60.180528][ T8282] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.187842][ T8282] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.195849][ T8282] device bridge_slave_1 entered promiscuous mode
[   60.206198][ T8280] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.213614][ T8280] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.223094][ T8280] device bridge_slave_0 entered promiscuous mode
[   60.236563][ T8271] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.261676][ T8280] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.270288][ T8280] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.278458][ T8280] device bridge_slave_1 entered promiscuous mode
[   60.305699][ T8285] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.313212][ T8285] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.321998][ T8285] device bridge_slave_0 entered promiscuous mode
[   60.339010][ T8271] 8021q: adding VLAN 0 to HW filter on device team0
[   60.350693][ T8282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.370919][ T8285] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.379115][ T8285] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.387619][ T8285] device bridge_slave_1 entered promiscuous mode
[   60.394671][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   60.403374][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   60.412389][ T8276] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   60.469950][ T8282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.488807][ T8280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.512529][ T8276] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   60.560303][ T8280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.578729][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   60.588524][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   60.598993][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.606390][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.614408][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   60.623601][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   60.632749][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.640602][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.648535][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   60.658154][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   60.666701][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   60.675762][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   60.685191][ T8276] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   60.728939][ T8276] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   60.784338][ T8285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.796650][ T8285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.821724][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   60.831774][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   60.842038][ T8282] team0: Port device team_slave_0 added
[   60.863727][ T8271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   60.875509][ T8271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.894235][ T8280] team0: Port device team_slave_0 added
[   60.905336][ T8285] team0: Port device team_slave_0 added
[   60.914525][ T8282] team0: Port device team_slave_1 added
[   60.922404][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   60.931345][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   60.940356][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   60.949222][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   60.958955][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   60.967841][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   60.977256][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   60.996580][ T8273] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.006093][ T8280] team0: Port device team_slave_1 added
[   61.020923][ T8285] team0: Port device team_slave_1 added
[   61.109222][ T8282] device hsr_slave_0 entered promiscuous mode
[   61.147419][ T8282] device hsr_slave_1 entered promiscuous mode
[   61.187103][ T8282] debugfs: Directory 'hsr0' with parent '/' already present!
[   61.249098][ T8280] device hsr_slave_0 entered promiscuous mode
[   61.287173][ T8280] device hsr_slave_1 entered promiscuous mode
[   61.327021][ T8280] debugfs: Directory 'hsr0' with parent '/' already present!
[   61.345008][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   61.353357][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   61.367526][ T8271] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.383523][ T8273] 8021q: adding VLAN 0 to HW filter on device team0
[   61.393923][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   61.401822][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   61.480127][ T8285] device hsr_slave_0 entered promiscuous mode
[   61.527569][ T8285] device hsr_slave_1 entered promiscuous mode
[   61.567012][ T8285] debugfs: Directory 'hsr0' with parent '/' already present!
[   61.591541][ T8282] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   61.661218][ T8282] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  166.696753][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  166.703773][    C1] 	(detected by 1, t=10502 jiffies, g=6237, q=83)
[  166.710176][    C1] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294953791-4294943288), jiffies_till_next_fqs=1, root ->qsmask 0x0
[  166.723516][    C1] rcu_preempt     R  running task    29104    10      2 0x80004008
[  166.731403][    C1] Call Trace:
[  166.734677][    C1]  <IRQ>
[  166.737545][    C1]  sched_show_task+0x40f/0x560
[  166.742310][    C1]  rcu_sched_clock_irq+0x1861/0x1ad0
[  166.747588][    C1]  update_process_times+0x12d/0x180
[  166.752776][    C1]  tick_sched_timer+0x263/0x420
[  166.757613][    C1]  ? tick_setup_sched_timer+0x3d0/0x3d0
[  166.763152][    C1]  __hrtimer_run_queues+0x403/0x840
[  166.768366][    C1]  hrtimer_interrupt+0x38c/0xda0
[  166.773325][    C1]  ? debug_smp_processor_id+0x9/0x20
[  166.778616][    C1]  smp_apic_timer_interrupt+0x109/0x280
[  166.784165][    C1]  apic_timer_interrupt+0xf/0x20
[  166.789089][    C1]  </IRQ>
[  166.792019][    C1] RIP: 0010:__memcg_kmem_uncharge+0xd/0x2e0
[  166.797899][    C1] Code: 81 c3 08 02 00 00 48 89 df 4c 89 f6 e8 dc 7d ff ff 5b 41 5e 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 <50> 89 f3 49 89 fc 48 b8 00 00 00 00 00 fc ff df 4c 8d 77 38 4d 89
[  166.820829][    C1] RSP: 0018:ffffc90000d0fc10 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[  166.829240][    C1] RAX: ffffffff81486ea4 RBX: ffffea00024b7780 RCX: ffff8880a9de8280
[  166.837207][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea00024b7780
[  166.845162][    C1] RBP: ffffc90000d0fc38 R08: 000000000003a768 R09: fffffbfff120248a
[  166.853209][    C1] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff88808cceada0
[  166.861166][    C1] R13: dffffc0000000000 R14: 1ffff1101199d5b4 R15: ffff8880950656a8
[  166.869141][    C1]  ? free_thread_stack+0x124/0x590
[  166.874247][    C1]  free_thread_stack+0x12e/0x590
[  166.879176][    C1]  put_task_stack+0xa3/0x130
[  166.883772][    C1]  finish_task_switch+0x3f1/0x550
[  166.888789][    C1]  __schedule+0x9a8/0xcc0
[  166.893117][    C1]  schedule+0x181/0x210
[  166.897263][    C1]  schedule_timeout+0x14f/0x240
[  166.902104][    C1]  ? run_local_timers+0x120/0x120
[  166.907144][    C1]  rcu_gp_kthread+0xed8/0x1770
[  166.911905][    C1]  kthread+0x332/0x350
[  166.915958][    C1]  ? rcu_report_qs_rsp+0x140/0x140
[  166.921055][    C1]  ? kthread_blkcg+0xe0/0xe0
[  166.925634][    C1]  ret_from_fork+0x24/0x30
[  166.930066][    C1] rcu: rcu_preempt kthread starved for 10525 jiffies! g6237 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  166.941146][    C1] rcu: RCU grace-period kthread stack dump:
[  166.947022][    C1] rcu_preempt     R  running task    29104    10      2 0x80004008
[  166.954911][    C1] Call Trace:
[  166.958182][    C1]  <IRQ>
[  166.961025][    C1]  sched_show_task+0x40f/0x560
[  166.965785][    C1]  rcu_check_gp_kthread_starvation+0x170/0x1b0
[  166.972038][    C1]  rcu_sched_clock_irq+0x17d3/0x1ad0
[  166.977335][    C1]  update_process_times+0x12d/0x180
[  166.982536][    C1]  tick_sched_timer+0x263/0x420
[  166.987375][    C1]  ? tick_setup_sched_timer+0x3d0/0x3d0
[  166.992912][    C1]  __hrtimer_run_queues+0x403/0x840
[  166.998110][    C1]  hrtimer_interrupt+0x38c/0xda0
[  167.003053][    C1]  ? debug_smp_processor_id+0x9/0x20
[  167.008329][    C1]  smp_apic_timer_interrupt+0x109/0x280
[  167.013865][    C1]  apic_timer_interrupt+0xf/0x20
[  167.018786][    C1]  </IRQ>
[  167.021717][    C1] RIP: 0010:__memcg_kmem_uncharge+0xd/0x2e0
[  167.027598][    C1] Code: 81 c3 08 02 00 00 48 89 df 4c 89 f6 e8 dc 7d ff ff 5b 41 5e 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 <50> 89 f3 49 89 fc 48 b8 00 00 00 00 00 fc ff df 4c 8d 77 38 4d 89
[  167.047191][    C1] RSP: 0018:ffffc90000d0fc10 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[  167.055588][    C1] RAX: ffffffff81486ea4 RBX: ffffea00024b7780 RCX: ffff8880a9de8280
[  167.063547][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea00024b7780
[  167.071507][    C1] RBP: ffffc90000d0fc38 R08: 000000000003a768 R09: fffffbfff120248a
[  167.079551][    C1] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff88808cceada0
[  167.087511][    C1] R13: dffffc0000000000 R14: 1ffff1101199d5b4 R15: ffff8880950656a8
[  167.095502][    C1]  ? free_thread_stack+0x124/0x590
[  167.101130][    C1]  free_thread_stack+0x12e/0x590
[  167.106057][    C1]  put_task_stack+0xa3/0x130
[  167.110725][    C1]  finish_task_switch+0x3f1/0x550
[  167.115742][    C1]  __schedule+0x9a8/0xcc0
[  167.120069][    C1]  schedule+0x181/0x210
[  167.124212][    C1]  schedule_timeout+0x14f/0x240
[  167.129078][    C1]  ? run_local_timers+0x120/0x120
[  167.134216][    C1]  rcu_gp_kthread+0xed8/0x1770
[  167.138988][    C1]  kthread+0x332/0x350
[  167.143047][    C1]  ? rcu_report_qs_rsp+0x140/0x140
[  167.148152][    C1]  ? kthread_blkcg+0xe0/0xe0
[  167.152733][    C1]  ret_from_fork+0x24/0x30