Warning: Permanently added '10.128.0.223' (ECDSA) to the list of known hosts. 2019/12/04 07:30:40 fuzzer started 2019/12/04 07:30:42 dialing manager at 10.128.0.26:42111 2019/12/04 07:30:42 syscalls: 2689 2019/12/04 07:30:42 code coverage: enabled 2019/12/04 07:30:42 comparison tracing: enabled 2019/12/04 07:30:42 extra coverage: extra coverage is not supported by the kernel 2019/12/04 07:30:42 setuid sandbox: enabled 2019/12/04 07:30:42 namespace sandbox: enabled 2019/12/04 07:30:42 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 07:30:42 fault injection: enabled 2019/12/04 07:30:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 07:30:42 net packet injection: enabled 2019/12/04 07:30:42 net device setup: enabled 2019/12/04 07:30:42 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/04 07:30:42 devlink PCI setup: PCI device 0000:00:10.0 is not available 07:30:43 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x9, 0x21, 0x80006, 0x8}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f00000002c0), &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000000)="d5", &(0x7f0000000080)=""/217}, 0x20) 07:30:43 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005200)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="080008005f526bae1400020000000000000000000000ffffffffffd2018cbd8ffd69ff"], 0x34}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b525f}, @IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x34}}, 0x0) syzkaller login: [ 59.148310][ T8360] IPVS: ftp: loaded support on port[0] = 21 07:30:43 executing program 2: r0 = memfd_create(&(0x7f0000000080)='vmnet0\x00', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x1081806) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00\x02\x17\x87:\x1d\xe3\xa1\xac\xfc:)[\xc5\x0f`\x1eNu\xe2\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-\x04\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87state=0x0 ->cpu=1 [ 169.121965][ C0] rcu: RCU grace-period kthread stack dump: [ 169.128018][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 169.135935][ C0] Call Trace: [ 169.139242][ C0] __schedule+0x9a0/0xcc0 [ 169.143589][ C0] schedule+0x181/0x210 [ 169.147749][ C0] schedule_timeout+0x14f/0x240 [ 169.152598][ C0] ? run_local_timers+0x120/0x120 [ 169.157620][ C0] rcu_gp_kthread+0xed8/0x1770 [ 169.162386][ C0] kthread+0x332/0x350 [ 169.166445][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 169.171553][ C0] ? kthread_blkcg+0xe0/0xe0 [ 169.176137][ C0] ret_from_fork+0x24/0x30 [ 169.180572][ C0] NMI backtrace for cpu 0 [ 169.184895][ C0] CPU: 0 PID: 8384 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 169.193241][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.203291][ C0] Call Trace: [ 169.206567][ C0] [ 169.209418][ C0] dump_stack+0x1fb/0x318 [ 169.213749][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 169.218592][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 169.224746][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 169.230812][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 169.236790][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 169.242678][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 169.247790][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 169.252983][ C0] ? trace_hardirqs_off+0x74/0x80 [ 169.258057][ C0] update_process_times+0x12d/0x180 [ 169.263251][ C0] tick_sched_timer+0x263/0x420 [ 169.268095][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 169.273639][ C0] __hrtimer_run_queues+0x403/0x840 [ 169.278849][ C0] hrtimer_interrupt+0x38c/0xda0 [ 169.283805][ C0] ? debug_smp_processor_id+0x9/0x20 [ 169.289100][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 169.294734][ C0] apic_timer_interrupt+0xf/0x20 [ 169.299663][ C0] [ 169.302644][ C0] RIP: 0010:mod_memcg_page_state+0x161/0x190 [ 169.308711][ C0] Code: 3c 20 00 74 0c 48 c7 c7 28 96 0a 89 e8 a8 9e 69 00 48 83 3d c8 21 c2 07 00 74 2d e8 99 27 2e 00 4c 89 ff 57 9d 0f 1f 44 00 00 <5b> 41 5c 41 5e 41 5f 5d c3 e8 81 27 2e 00 0f 0b e8 7a 27 2e 00 0f [ 169.328405][ C0] RSP: 0018:ffffc90002a671a8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 169.336900][ C0] RAX: ffffffff81487433 RBX: 0000000000000000 RCX: 0000000000040000 [ 169.345667][ C0] RDX: ffffc90001ef9000 RSI: 000000000003ffff RDI: 0000000000040000 [ 169.353643][ C0] RBP: ffffc90002a671c8 R08: 000000000003a768 R09: ffffed1011ed8e7f [ 169.361615][ C0] R10: ffffed1011ed8e7f R11: 0000000000000000 R12: dffffc0000000000 [ 169.369596][ C0] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff88808f6c73e8 [ 169.377591][ C0] ? mod_memcg_page_state+0x123/0x190 [ 169.383025][ C0] ? mod_memcg_page_state+0x123/0x190 [ 169.388436][ C0] free_thread_stack+0x168/0x590 [ 169.393373][ C0] put_task_stack+0xa3/0x130 [ 169.397962][ C0] finish_task_switch+0x3f1/0x550 [ 169.402986][ C0] __schedule+0x9a8/0xcc0 [ 169.407320][ C0] preempt_schedule_irq+0xc1/0x140 [ 169.412427][ C0] retint_kernel+0x1b/0x2b [ 169.416838][ C0] RIP: 0010:rmqueue_pcplist+0x2c23/0x2d20 [ 169.422595][ C0] Code: 03 80 3c 18 00 74 0c 48 c7 c7 28 96 0a 89 e8 64 a2 07 00 48 83 3d 84 25 60 07 00 0f 84 f8 00 00 00 48 8b bd e8 fe ff ff 57 9d <0f> 1f 44 00 00 65 48 8b 04 25 28 00 00 00 48 3b 45 d0 0f 85 d0 00 [ 169.442287][ C0] RSP: 0018:ffffc90002a67428 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff02 [ 169.450708][ C0] RAX: 1ffffffff12152c5 RBX: dffffc0000000000 RCX: 0000000000040000 [ 169.458674][ C0] RDX: ffffc90001ef9000 RSI: 00000000000052b0 RDI: 0000000000000286 [ 169.466699][ C0] RBP: ffffc90002a67718 R08: ffff88808861c898 R09: fffff94000525e37 [ 169.474670][ C0] R10: fffff94000525e37 R11: 0000000000000000 R12: ffff88812fffb6c0 [ 169.482688][ C0] R13: 0000000000000000 R14: ffffea000292f180 R15: 0000000000000000 [ 169.490737][ C0] rmqueue+0x49/0x2080 [ 169.494809][ C0] ? retint_kernel+0x2b/0x2b [ 169.499398][ C0] ? __fs_reclaim_release+0x4/0x20 [ 169.504507][ C0] ? __kasan_check_read+0x11/0x20 [ 169.509534][ C0] get_page_from_freelist+0x746/0xaa0 [ 169.514911][ C0] __alloc_pages_nodemask+0x264/0x5d0 [ 169.520292][ C0] alloc_pages_current+0x2db/0x500 [ 169.525402][ C0] __vmalloc_node_range+0x42f/0x940 [ 169.530606][ C0] ? bpf_map_area_alloc+0x1f/0x30 [ 169.535623][ C0] __vmalloc_node_flags_caller+0x7e/0x90 [ 169.541248][ C0] ? bpf_map_area_alloc+0x1f/0x30 [ 169.546269][ C0] __bpf_map_area_alloc+0xe2/0x100 [ 169.551559][ C0] bpf_map_area_alloc+0x1f/0x30 [ 169.556404][ C0] htab_map_alloc+0x6e5/0x12d0 [ 169.561202][ C0] __do_sys_bpf+0x354a/0xc890 [ 169.565881][ C0] ? kcov_ioctl+0x285/0x2c0 [ 169.570428][ C0] ? __might_fault+0xf9/0x160 [ 169.575110][ C0] ? check_preemption_disabled+0xb4/0x260 [ 169.580821][ C0] ? debug_smp_processor_id+0x9/0x20 [ 169.586104][ C0] ? debug_smp_processor_id+0x1c/0x20 [ 169.591521][ C0] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 169.597589][ C0] ? prepare_exit_to_usermode+0x221/0x5b0 [ 169.603302][ C0] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 169.609016][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 169.614471][ C0] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 169.620752][ C0] ? do_syscall_64+0x1d/0x1c0 [ 169.625424][ C0] __x64_sys_bpf+0x7a/0x90 [ 169.629840][ C0] do_syscall_64+0xf7/0x1c0 [ 169.634340][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 169.640229][ C0] RIP: 0033:0x45a679 [ 169.644130][ C0] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 169.663904][ C0] RSP: 002b:00007fe620212c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.672311][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 169.680284][ C0] RDX: 000000000000003c RSI: 0000000020001b00 RDI: 0000000000000000 [ 169.688337][ C0] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 169.696300][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6202136d4 [ 169.704648][ C0] R13: 00000000004c0c65 R14: 00000000004d4730 R15: 00000000ffffffff