[ 42.052387][ T23] audit: type=1800 audit(1575390670.274:26): pid=7977 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 42.118930][ T23] audit: type=1800 audit(1575390670.284:27): pid=7977 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 42.140211][ T23] audit: type=1800 audit(1575390670.284:28): pid=7977 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.036517][ T23] audit: type=1800 audit(1575390671.274:29): pid=7977 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.145' (ECDSA) to the list of known hosts. 2019/12/03 16:31:22 fuzzer started 2019/12/03 16:31:24 dialing manager at 10.128.0.26:45711 2019/12/03 16:31:24 syscalls: 2689 2019/12/03 16:31:24 code coverage: enabled 2019/12/03 16:31:24 comparison tracing: enabled 2019/12/03 16:31:24 extra coverage: extra coverage is not supported by the kernel 2019/12/03 16:31:24 setuid sandbox: enabled 2019/12/03 16:31:24 namespace sandbox: enabled 2019/12/03 16:31:24 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 16:31:24 fault injection: enabled 2019/12/03 16:31:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 16:31:24 net packet injection: enabled 2019/12/03 16:31:24 net device setup: enabled 2019/12/03 16:31:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 16:31:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 16:31:25 executing program 0: unshare(0x24020400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) ppoll(&(0x7f0000000080)=[{r0}], 0x2000000000000052, 0x0, 0x0, 0x3d0) 16:31:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) read$eventfd(r0, &(0x7f00000000c0), 0xfffffeba) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r2, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xf00, @link='broadcast-link\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa0\xff\xcf\xa5\xb6\xc5&y\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80004010}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r2], 0x2}, 0x1, 0x0, 0x0, 0x8016}, 0x4a000) syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') syzkaller login: [ 57.415924][ T8143] IPVS: ftp: loaded support on port[0] = 21 16:31:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000980)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r1) [ 57.520159][ T8145] IPVS: ftp: loaded support on port[0] = 21 [ 57.582796][ T8143] chnl_net:caif_netlink_parms(): no params data found [ 57.690411][ T8143] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.717530][ T8143] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.725606][ T8143] device bridge_slave_0 entered promiscuous mode [ 57.750926][ T8143] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.766837][ T8143] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.774363][ T8143] device bridge_slave_1 entered promiscuous mode 16:31:26 executing program 3: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0/bus\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) [ 57.802545][ T8145] chnl_net:caif_netlink_parms(): no params data found [ 57.822793][ T8149] IPVS: ftp: loaded support on port[0] = 21 [ 57.855474][ T8143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.895735][ T8143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.925844][ T8145] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.946892][ T8145] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.954791][ T8145] device bridge_slave_0 entered promiscuous mode [ 57.997292][ T8143] team0: Port device team_slave_0 added [ 58.003254][ T8145] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.013895][ T8145] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.021833][ T8145] device bridge_slave_1 entered promiscuous mode [ 58.031764][ T8143] team0: Port device team_slave_1 added 16:31:26 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00D\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00D\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) [ 58.091372][ T8143] device hsr_slave_0 entered promiscuous mode [ 58.177108][ T8143] device hsr_slave_1 entered promiscuous mode [ 58.222863][ T8151] IPVS: ftp: loaded support on port[0] = 21 [ 58.245895][ T8145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.298462][ T8145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.324456][ T8153] IPVS: ftp: loaded support on port[0] = 21 16:31:26 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xc00) [ 58.354103][ T8145] team0: Port device team_slave_0 added [ 58.364223][ T8145] team0: Port device team_slave_1 added [ 58.373560][ T8143] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.460963][ T8143] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.543555][ T8143] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.600262][ T8143] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.678619][ T8145] device hsr_slave_0 entered promiscuous mode [ 58.727146][ T8145] device hsr_slave_1 entered promiscuous mode [ 58.777332][ T8145] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.794121][ T8149] chnl_net:caif_netlink_parms(): no params data found [ 58.810553][ T8155] IPVS: ftp: loaded support on port[0] = 21 [ 58.849073][ T8149] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.856215][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.864929][ T8149] device bridge_slave_0 entered promiscuous mode [ 58.899862][ T8149] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.908777][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.916331][ T8149] device bridge_slave_1 entered promiscuous mode [ 58.938945][ T8145] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.985764][ T8149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.999050][ T8149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.018818][ T8145] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.070164][ T8145] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.132287][ T8145] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.226553][ T8151] chnl_net:caif_netlink_parms(): no params data found [ 59.240995][ T8149] team0: Port device team_slave_0 added [ 59.249494][ T8149] team0: Port device team_slave_1 added [ 59.318971][ T8149] device hsr_slave_0 entered promiscuous mode [ 59.357247][ T8149] device hsr_slave_1 entered promiscuous mode [ 59.416907][ T8149] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.431226][ T8151] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.438947][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.446493][ T8151] device bridge_slave_0 entered promiscuous mode [ 59.454975][ T8151] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.462117][ T8151] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.469776][ T8151] device bridge_slave_1 entered promiscuous mode [ 59.519642][ T8151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.569866][ T8151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.601205][ T8155] chnl_net:caif_netlink_parms(): no params data found [ 59.616086][ T8151] team0: Port device team_slave_0 added [ 59.629890][ T8149] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.670353][ T8143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.682949][ T8151] team0: Port device team_slave_1 added [ 59.690726][ T8153] chnl_net:caif_netlink_parms(): no params data found [ 59.701096][ T8149] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.738483][ T8149] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.792387][ T8143] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.869616][ T8151] device hsr_slave_0 entered promiscuous mode [ 59.927186][ T8151] device hsr_slave_1 entered promiscuous mode [ 59.997309][ T8151] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.005083][ T8149] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.071688][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.080156][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.124575][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.137684][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.145969][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.153137][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.161132][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.170559][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.178986][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.186006][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.193775][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.202605][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.211247][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.220351][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.229017][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.237837][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.247434][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.255185][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.262842][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.271237][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.303843][ T8155] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.310988][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.319779][ T8155] device bridge_slave_0 entered promiscuous mode [ 60.330594][ T8151] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.388534][ T8151] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.430309][ T8145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.449062][ T8155] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.456141][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.465801][ T8155] device bridge_slave_1 entered promiscuous mode [ 60.486291][ T8151] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.519142][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.526241][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.539183][ T8153] device bridge_slave_0 entered promiscuous mode [ 60.547842][ T8153] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.554885][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.564240][ T8153] device bridge_slave_1 entered promiscuous mode [ 60.579607][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.589569][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.599705][ T8155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.612084][ T8151] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.660763][ T8153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.671888][ T8143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.685591][ T8145] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.695211][ T8155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.718881][ T8153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.735142][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.745059][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.772474][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.782225][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.791146][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.798241][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.810718][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.832209][ T8153] team0: Port device team_slave_0 added [ 60.842823][ T8153] team0: Port device team_slave_1 added [ 60.850958][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.860046][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.869984][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.877147][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.884704][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.893921][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.912411][ T8155] team0: Port device team_slave_0 added [ 60.924370][ T8155] team0: Port device team_slave_1 added [ 60.950043][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.959042][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.967884][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.976481][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.985051][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.993504][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.001690][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.018019][ T8143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.079730][ T8155] device hsr_slave_0 entered promiscuous mode [ 61.107102][ T8155] device hsr_slave_1 entered promiscuous mode [ 61.157309][ T8155] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.170707][ T8151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.182070][ T8149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.190010][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.197745][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.238688][ T8153] device hsr_slave_0 entered promiscuous mode [ 61.268580][ T8153] device hsr_slave_1 entered promiscuous mode [ 61.306833][ T8153] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.338438][ T8145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.352140][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.366084][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.381515][ T8151] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.408757][ T8145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.436194][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.444643][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.453436][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.461082][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.456725][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 166.463682][ C0] rcu: 0-...!: (10499 ticks this GP) idle=54e/1/0x4000000000000002 softirq=11210/11210 fqs=1 [ 166.474148][ C0] (t=10500 jiffies g=6229 q=52) [ 166.479162][ C0] rcu: rcu_preempt kthread starved for 10497 jiffies! g6229 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 166.490417][ C0] rcu: RCU grace-period kthread stack dump: [ 166.496292][ C0] rcu_preempt I29032 10 2 0x80004000 [ 166.502628][ C0] Call Trace: [ 166.505917][ C0] __schedule+0x9a0/0xcc0 [ 166.510253][ C0] schedule+0x181/0x210 [ 166.514401][ C0] schedule_timeout+0x14f/0x240 [ 166.519239][ C0] ? run_local_timers+0x120/0x120 [ 166.524861][ C0] rcu_gp_kthread+0xed8/0x1770 [ 166.529622][ C0] kthread+0x332/0x350 [ 166.533673][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 166.538947][ C0] ? kthread_blkcg+0xe0/0xe0 [ 166.543525][ C0] ret_from_fork+0x24/0x30 [ 166.547972][ C0] NMI backtrace for cpu 0 [ 166.552299][ C0] CPU: 0 PID: 8164 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 166.560519][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.570573][ C0] Call Trace: [ 166.573932][ C0] [ 166.576772][ C0] dump_stack+0x1fb/0x318 [ 166.585416][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 166.593791][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 166.601595][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 166.608544][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 166.614626][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 166.620515][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 166.625650][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 166.631758][ C0] ? trace_hardirqs_off+0x74/0x80 [ 166.636781][ C0] update_process_times+0x12d/0x180 [ 166.641977][ C0] tick_sched_timer+0x263/0x420 [ 166.646820][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 166.654814][ C0] __hrtimer_run_queues+0x403/0x840 [ 166.660025][ C0] hrtimer_interrupt+0x38c/0xda0 [ 166.664970][ C0] ? debug_smp_processor_id+0x9/0x20 [ 166.670286][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 166.675835][ C0] apic_timer_interrupt+0xf/0x20 [ 166.681283][ C0] [ 166.684334][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x31/0x50 [ 166.690593][ C0] Code: 0c 25 c0 1d 02 00 65 8b 15 b8 81 8b 7e f7 c2 00 01 1f 00 75 2c 8b 91 80 13 00 00 83 fa 02 75 21 48 8b 91 88 13 00 00 48 8b 32 <48> 8d 7e 01 8b 89 84 13 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 [ 166.710388][ C0] RSP: 0018:ffffc90002647930 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 166.718918][ C0] RAX: ffffffff81487433 RBX: 0000000000000000 RCX: ffff88806c2ba040 [ 166.726908][ C0] RDX: ffffc90001eb9000 RSI: 000000000003ffff RDI: 0000000000040000 [ 166.734870][ C0] RBP: ffffc90002647958 R08: 000000000003a768 R09: ffffed1012d6a2af [ 166.743058][ C0] R10: ffffed1012d6a2af R11: 0000000000000000 R12: dffffc0000000000 [ 166.751033][ C0] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff888096b51568 [ 166.760690][ C0] ? mod_memcg_page_state+0x123/0x190 [ 166.767906][ C0] ? mod_memcg_page_state+0x123/0x190 [ 166.773292][ C0] free_thread_stack+0x168/0x590 [ 166.778222][ C0] put_task_stack+0xa3/0x130 [ 166.782827][ C0] finish_task_switch+0x3f1/0x550 [ 166.787882][ C0] __schedule+0x9a8/0xcc0 [ 166.792215][ C0] ? ___preempt_schedule+0x16/0x18 [ 166.797324][ C0] preempt_schedule+0xdb/0x120 [ 166.802124][ C0] ___preempt_schedule+0x16/0x18 [ 166.808395][ C0] _raw_spin_unlock_irqrestore+0xcc/0xe0 [ 166.814027][ C0] prepare_to_wait_event+0x3c6/0x500 [ 166.819449][ C0] synchronize_rcu_expedited+0x46c/0x5a0 [ 166.826129][ C0] ? init_wait_entry+0xe0/0xe0 [ 166.830900][ C0] ? rcu_exp_sel_wait_wake+0x17c0/0x17c0 [ 166.836561][ C0] namespace_unlock+0x1f7/0x410 [ 166.842833][ C0] ? create_new_namespaces+0x6e6/0x770 [ 166.848382][ C0] put_mnt_ns+0xdf/0x200 [ 166.852642][ C0] create_new_namespaces+0x6e6/0x770 [ 166.858295][ C0] unshare_nsproxy_namespaces+0x12a/0x190 [ 166.864036][ C0] ksys_unshare+0x478/0xa00 [ 166.868549][ C0] __x64_sys_unshare+0x38/0x40 [ 166.873397][ C0] do_syscall_64+0xf7/0x1c0 [ 166.877892][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 166.883825][ C0] RIP: 0033:0x45a679 [ 166.888002][ C0] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 166.909029][ C0] RSP: 002b:00007fdac105ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 166.917563][ C0] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045a679 [ 166.925573][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000024020400 [ 166.934630][ C0] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 166.942602][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdac105f6d4 [ 166.950587][ C0] R13: 00000000004cb0d0 R14: 00000000004e47b0 R15: 00000000ffffffff