[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.119' (ECDSA) to the list of known hosts. 2019/12/03 04:11:58 fuzzer started 2019/12/03 04:12:00 dialing manager at 10.128.0.26:38907 2019/12/03 04:12:00 syscalls: 2697 2019/12/03 04:12:00 code coverage: enabled 2019/12/03 04:12:00 comparison tracing: enabled 2019/12/03 04:12:00 extra coverage: extra coverage is not supported by the kernel 2019/12/03 04:12:00 setuid sandbox: enabled 2019/12/03 04:12:00 namespace sandbox: enabled 2019/12/03 04:12:00 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 04:12:00 fault injection: enabled 2019/12/03 04:12:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 04:12:00 net packet injection: enabled 2019/12/03 04:12:00 net device setup: enabled 2019/12/03 04:12:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 04:12:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 04:12:01 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='[d8:],0:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 04:12:01 executing program 1: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0xffffffffffffffff, &(0x7f0000000000)=0xd1) syzkaller login: [ 60.440622][ T8313] IPVS: ftp: loaded support on port[0] = 21 [ 60.519399][ T8315] IPVS: ftp: loaded support on port[0] = 21 04:12:01 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) [ 60.688502][ T8313] chnl_net:caif_netlink_parms(): no params data found [ 60.717149][ T8315] chnl_net:caif_netlink_parms(): no params data found [ 60.796635][ T8319] IPVS: ftp: loaded support on port[0] = 21 [ 60.807127][ T8313] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.819080][ T8313] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.827383][ T8313] device bridge_slave_0 entered promiscuous mode [ 60.853703][ T8315] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.860978][ T8315] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.869269][ T8315] device bridge_slave_0 entered promiscuous mode [ 60.877315][ T8313] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.885124][ T8313] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.893619][ T8313] device bridge_slave_1 entered promiscuous mode 04:12:02 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'batadv0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="3900000006"]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_getres(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 60.904087][ T8315] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.912063][ T8315] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.919995][ T8315] device bridge_slave_1 entered promiscuous mode [ 60.972970][ T8313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.002356][ T8313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.023614][ T8315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.086413][ T8315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.114859][ T8313] team0: Port device team_slave_0 added [ 61.144150][ T8322] IPVS: ftp: loaded support on port[0] = 21 [ 61.153487][ T8313] team0: Port device team_slave_1 added [ 61.163800][ T8319] chnl_net:caif_netlink_parms(): no params data found [ 61.178873][ T8315] team0: Port device team_slave_0 added 04:12:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000000)) [ 61.214124][ T8315] team0: Port device team_slave_1 added [ 61.285978][ T8313] device hsr_slave_0 entered promiscuous mode [ 61.344192][ T8313] device hsr_slave_1 entered promiscuous mode 04:12:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8f) [ 61.419295][ T8319] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.438526][ T8319] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.449088][ T8319] device bridge_slave_0 entered promiscuous mode [ 61.513446][ T8315] device hsr_slave_0 entered promiscuous mode [ 61.560994][ T8315] device hsr_slave_1 entered promiscuous mode [ 61.611047][ T8315] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.632960][ T8319] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.638005][ T8324] IPVS: ftp: loaded support on port[0] = 21 [ 61.640148][ T8319] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.654331][ T8319] device bridge_slave_1 entered promiscuous mode [ 61.709779][ T8319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.724532][ T8313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.804658][ T8313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.814229][ T8326] IPVS: ftp: loaded support on port[0] = 21 [ 61.886007][ T8319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.909238][ T8319] team0: Port device team_slave_0 added [ 61.917671][ T8313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.974953][ T8313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.043478][ T8319] team0: Port device team_slave_1 added [ 62.122515][ T8319] device hsr_slave_0 entered promiscuous mode [ 62.172430][ T8319] device hsr_slave_1 entered promiscuous mode [ 62.210859][ T8319] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.222851][ T8315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.278819][ T8315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.333548][ T8322] chnl_net:caif_netlink_parms(): no params data found [ 62.358960][ T8315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.426722][ T8315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.534122][ T8322] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.542508][ T8322] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.550310][ T8322] device bridge_slave_0 entered promiscuous mode [ 62.558831][ T8324] chnl_net:caif_netlink_parms(): no params data found [ 62.606944][ T8322] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.616000][ T8322] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.624659][ T8322] device bridge_slave_1 entered promiscuous mode [ 62.643814][ T8319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.721625][ T8319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.765096][ T8319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.838289][ T8319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.899029][ T8326] chnl_net:caif_netlink_parms(): no params data found [ 62.910528][ T8313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.926048][ T8322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.941203][ T8322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.958214][ T8324] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.965880][ T8324] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.974384][ T8324] device bridge_slave_0 entered promiscuous mode [ 62.999954][ T8324] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.008141][ T8324] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.016392][ T8324] device bridge_slave_1 entered promiscuous mode [ 63.034650][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.044032][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.055756][ T8322] team0: Port device team_slave_0 added [ 63.064873][ T8313] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.089006][ T8324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.103207][ T8322] team0: Port device team_slave_1 added [ 63.114263][ T8324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.141324][ T8324] team0: Port device team_slave_0 added [ 63.159049][ T8326] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.166440][ T8326] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.177668][ T8326] device bridge_slave_0 entered promiscuous mode [ 63.187494][ T8324] team0: Port device team_slave_1 added [ 63.198902][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.207981][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.216603][ T3697] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.223823][ T3697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.233777][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.242629][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.251070][ T3697] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.258114][ T3697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.265815][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.290906][ T8326] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.297999][ T8326] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.308934][ T8326] device bridge_slave_1 entered promiscuous mode [ 63.334564][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.343856][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.353867][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.362689][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.373181][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.381910][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.390269][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.433391][ T8322] device hsr_slave_0 entered promiscuous mode [ 63.471141][ T8322] device hsr_slave_1 entered promiscuous mode [ 63.540851][ T8322] debugfs: Directory 'hsr0' with parent '/' already present! [ 63.564876][ T8326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.606251][ T8326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.623700][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.632150][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.693484][ T8324] device hsr_slave_0 entered promiscuous mode [ 63.751892][ T8324] device hsr_slave_1 entered promiscuous mode [ 63.790953][ T8324] debugfs: Directory 'hsr0' with parent '/' already present! [ 63.804782][ T8319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.825609][ T8313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.837854][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.850554][ T8315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.874753][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.883395][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.892610][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.900298][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.908070][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.915804][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.925474][ T8326] team0: Port device team_slave_0 added [ 63.933419][ T8326] team0: Port device team_slave_1 added [ 63.959608][ T8315] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.013567][ T8326] device hsr_slave_0 entered promiscuous mode [ 64.051222][ T8326] device hsr_slave_1 entered promiscuous mode [ 64.091106][ T8326] debugfs: Directory 'hsr0' with parent '/' already present! [ 64.100003][ T8319] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.113891][ T8322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.167006][ T8322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.224268][ T8324] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.273898][ T8324] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.344263][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.352011][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.359577][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.369046][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.377596][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.384736][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.392479][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.401482][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.409901][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.417214][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.426308][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.435093][ T8322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.502440][ T8324] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.568063][ T8313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.575899][ T8322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.618090][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.627753][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.636469][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.644313][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.653824][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.661870][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.673191][ T8324] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.716765][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.725533][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.735069][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.743440][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.781983][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.790610][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.800534][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.812235][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.820594][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.831892][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.840135][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.848847][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.857284][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.865970][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.874742][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.883759][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.892490][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.901052][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.909916][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.919370][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.927349][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.944669][ T8319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.975535][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.987937][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.997101][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.006293][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.021677][ T8326] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 65.096805][ T8315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.107231][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.120944][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.139129][ T8326] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 65.163085][ T8334] libceph: resolve 'd8' (ret=-3): failed [ 65.168793][ T8334] libceph: parse_ips bad ip '[d8:],0' [ 65.180465][ T8337] libceph: resolve 'd8' (ret=-3): failed [ 170.180664][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 170.187660][ C0] (detected by 0, t=10502 jiffies, g=6621, q=48) [ 170.194062][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294954113-4294943610), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 170.208882][ C0] syz-executor.0 R running task 28696 8334 8313 0x0000400a [ 170.216777][ C0] Call Trace: [ 170.220050][ C0] [ 170.222903][ C0] sched_show_task+0x40f/0x560 [ 170.227662][ C0] rcu_sched_clock_irq+0x1861/0x1ad0 [ 170.237892][ C0] update_process_times+0x12d/0x180 [ 170.243094][ C0] tick_sched_timer+0x263/0x420 [ 170.247930][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 170.253464][ C0] __hrtimer_run_queues+0x403/0x840 [ 170.258664][ C0] hrtimer_interrupt+0x38c/0xda0 [ 170.263605][ C0] ? debug_smp_processor_id+0x9/0x20 [ 170.268907][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 170.274439][ C0] apic_timer_interrupt+0xf/0x20 [ 170.279356][ C0] [ 170.282289][ C0] RIP: 0010:__memcg_kmem_uncharge+0xe/0x2e0 [ 170.288168][ C0] Code: c3 08 02 00 00 48 89 df 4c 89 f6 e8 dc 7d ff ff 5b 41 5e 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 50 <89> f3 49 89 fc 48 b8 00 00 00 00 00 fc ff df 4c 8d 77 38 4d 89 f5 [ 170.307948][ C0] RSP: 0018:ffffc900026c77a0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 170.316350][ C0] RAX: ffffffff81486ea4 RBX: ffffea000252e280 RCX: 0000000000040000 [ 170.324325][ C0] RDX: ffffc90001f39000 RSI: 0000000000000000 RDI: ffffea000252e280 [ 170.332284][ C0] RBP: ffffc900026c77d0 R08: dffffc0000000000 R09: fffffbfff120248a [ 170.340244][ C0] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff8880908a1b20 [ 170.348203][ C0] R13: dffffc0000000000 R14: 1ffff11012114364 R15: ffff8880a81ed5e8 [ 170.356179][ C0] ? free_thread_stack+0x124/0x590 [ 170.361311][ C0] ? free_thread_stack+0x124/0x590 [ 170.366415][ C0] free_thread_stack+0x12e/0x590 [ 170.371366][ C0] put_task_stack+0xa3/0x130 [ 170.375943][ C0] finish_task_switch+0x3f1/0x550 [ 170.380960][ C0] __schedule+0x9a8/0xcc0 [ 170.385304][ C0] ? ___preempt_schedule+0x16/0x18 [ 170.390402][ C0] preempt_schedule+0xdb/0x120 [ 170.395157][ C0] ___preempt_schedule+0x16/0x18 [ 170.400083][ C0] ? vprintk_emit+0x2fe/0x3a0 [ 170.404747][ C0] ? vprintk_emit+0x368/0x3a0 [ 170.409413][ C0] vprintk_emit+0x36d/0x3a0 [ 170.413913][ C0] vprintk_default+0x28/0x30 [ 170.418493][ C0] vprintk_func+0x158/0x170 [ 170.423012][ C0] printk+0x62/0x8d [ 170.426814][ C0] ? vprintk_emit+0x2d4/0x3a0 [ 170.431484][ C0] ceph_parse_ips+0x9a2/0x9f0 [ 170.436161][ C0] ceph_parse_options+0x29d/0x14c0 [ 170.441264][ C0] ? destroy_fs_client+0x160/0x160 [ 170.446368][ C0] ? ceph_mount+0x15f/0x15c0 [ 170.450973][ C0] ? rcu_read_lock_sched_held+0x10b/0x170 [ 170.456688][ C0] ? kstrdup+0x4f/0x70 [ 170.460749][ C0] ? memcpy+0x49/0x60 [ 170.464722][ C0] ? int_sqrt+0x8e/0xb0 [ 170.468871][ C0] ceph_mount+0x3c7/0x15c0 [ 170.473282][ C0] ? vfs_parse_fs_string+0x13b/0x1a0 [ 170.478553][ C0] ? cap_capable+0x250/0x290 [ 170.483143][ C0] legacy_get_tree+0xf9/0x1a0 [ 170.487806][ C0] ? destroy_caches+0x60/0x60 [ 170.492474][ C0] vfs_get_tree+0x8b/0x2a0 [ 170.496885][ C0] do_mount+0x16bb/0x24f0 [ 170.501220][ C0] ? copy_mount_options+0xdc/0x3c0 [ 170.506322][ C0] ksys_mount+0xcc/0x100 [ 170.510564][ C0] __x64_sys_mount+0xbf/0xd0 [ 170.515149][ C0] do_syscall_64+0xf7/0x1c0 [ 170.519646][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 170.525526][ C0] RIP: 0033:0x45a679 [ 170.529441][ C0] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 170.549039][ C0] RSP: 002b:00007fb1e21eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 170.557443][ C0] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 170.565409][ C0] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 0000000020000040 [ 170.573370][ C0] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 170.581343][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1e21eb6d4 [ 170.589304][ C0] R13: 00000000004c7a16 R14: 00000000004de750 R15: 00000000ffffffff [ 170.597305][ C0] rcu: rcu_preempt kthread starved for 10543 jiffies! g6621 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 170.608388][ C0] rcu: RCU grace-period kthread stack dump: [ 170.614267][ C0] rcu_preempt R running task 29104 10 2 0x80004000 [ 170.622417][ C0] Call Trace: [ 170.625701][ C0] __schedule+0x9a0/0xcc0 [ 170.630031][ C0] schedule+0x181/0x210 [ 170.634178][ C0] schedule_timeout+0x14f/0x240 [ 170.639031][ C0] ? run_local_timers+0x120/0x120 [ 170.644047][ C0] rcu_gp_kthread+0xed8/0x1770 [ 170.648825][ C0] kthread+0x332/0x350 [ 170.652894][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 170.657995][ C0] ? kthread_blkcg+0xe0/0xe0 [ 170.662577][ C0] ret_from_fork+0x24/0x30