device syz_tun left promiscuous mode
ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
INFO: rcu_preempt self-detected stall on CPU
1-...: (10499 ticks this GP) idle=8c6/140000000000001/0 softirq=58619/58623 fqs=5222
(t=10500 jiffies g=17357 c=17356 q=653)
NMI backtrace for cpu 1
CPU: 1 PID: 28739 Comm: syz-executor4 Not tainted 4.14.90+ #29
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0xb9/0x11b lib/dump_stack.c:53
nmi_cpu_backtrace.cold.0+0x47/0x85 lib/nmi_backtrace.c:101
nmi_trigger_cpumask_backtrace+0x121/0x146 lib/nmi_backtrace.c:62
trigger_single_cpu_backtrace include/linux/nmi.h:158 [inline]
rcu_dump_cpu_stacks+0x171/0x1bf kernel/rcu/tree.c:1396
print_cpu_stall kernel/rcu/tree.c:1542 [inline]
check_cpu_stall kernel/rcu/tree.c:1610 [inline]
__rcu_pending kernel/rcu/tree.c:3382 [inline]
rcu_pending kernel/rcu/tree.c:3444 [inline]
rcu_check_callbacks.cold.56+0x478/0xd99 kernel/rcu/tree.c:2784
update_process_times+0x24/0x60 kernel/time/timer.c:1588
tick_sched_handle.isra.8+0x73/0x150 kernel/time/tick-sched.c:161
tick_sched_timer+0x7e/0x160 kernel/time/tick-sched.c:1321
__run_hrtimer kernel/time/hrtimer.c:1259 [inline]
__hrtimer_run_queues+0x2d0/0xc10 kernel/time/hrtimer.c:1323
hrtimer_interrupt+0x19a/0x440 kernel/time/hrtimer.c:1357
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1037 [inline]
smp_apic_timer_interrupt+0x13a/0x600 arch/x86/kernel/apic/apic.c:1062
apic_timer_interrupt+0x84/0x90 arch/x86/entry/entry_64.S:787
RIP: 0010:__sanitizer_cov_trace_pc+0x9/0x60 kernel/kcov.c:65
RSP: 0018:ffff8881c73e72e8 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff10
RAX: ffff88819b46af00 RBX: ffff8881c73e75f8 RCX: 0000000000000000
RDX: 0000000000000008 RSI: ffff8881c73e73c8 RDI: ffff8881a73370a0
RBP: ffff8881ceb49c50 R08: ffffed1034e66e14 R09: ffffed1034e66e13
R10: ffffed1034e66e13 R11: ffff8881a733709f R12: 0000000000000000
R13: 0000000000000008 R14: ffff8881c73e73c8 R15: dffffc0000000000
__output_copy kernel/events/internal.h:176 [inline]
perf_output_read_group kernel/events/core.c:5876 [inline]
perf_output_read+0x73b/0xfb0 kernel/events/core.c:5909
perf_output_sample+0x10dd/0x1780 kernel/events/core.c:5951
__perf_event_output kernel/events/core.c:6261 [inline]
perf_event_output_forward+0x121/0x230 kernel/events/core.c:6274
__perf_event_overflow+0x116/0x320 kernel/events/core.c:7510
perf_swevent_overflow+0x166/0x1f0 kernel/events/core.c:7586
perf_swevent_event+0x19c/0x270 kernel/events/core.c:7619
do_perf_sw_event kernel/events/core.c:7727 [inline]
___perf_sw_event+0x296/0x480 kernel/events/core.c:7758
__perf_sw_event+0x3f/0x70 kernel/events/core.c:7770
perf_sw_event include/linux/perf_event.h:1041 [inline]
__do_page_fault+0x77f/0xb60 arch/x86/mm/fault.c:1466
page_fault+0x22/0x50 arch/x86/entry/entry_64.S:1104
RIP: 0010:copy_user_enhanced_fast_string+0x7/0x10 arch/x86/lib/copy_user_64.S:181
RSP: 0018:ffff8881c73e7b98 EFLAGS: 00010206
RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000100
RDX: 0000000000001000 RSI: 0000000020c90000 RDI: ffff88819b945f00
RBP: 0000000020c8f100 R08: 0000000000000000 R09: 0000000000000040
R10: ffffed1033728bff R11: ffff88819b945fff R12: ffff88819b945000
R13: 00007ffffffff000 R14: 0000000020c90100 R15: ffff88819b945000
copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline]
raw_copy_from_user arch/x86/include/asm/uaccess_64.h:55 [inline]
copyin+0x99/0xc0 lib/iov_iter.c:146
copy_page_from_iter_iovec lib/iov_iter.c:290 [inline]
copy_page_from_iter+0x320/0x7a0 lib/iov_iter.c:731
pipe_write+0x21a/0xd30 fs/pipe.c:434
call_write_iter include/linux/fs.h:1784 [inline]
new_sync_write fs/read_write.c:471 [inline]
__vfs_write+0x417/0x5c0 fs/read_write.c:484
vfs_write+0x17f/0x4d0 fs/read_write.c:546
SYSC_write fs/read_write.c:593 [inline]
SyS_write+0xc2/0x1a0 fs/read_write.c:585
do_syscall_64+0x19b/0x4b0 arch/x86/entry/common.c:289
entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x457759
RSP: 002b:00007f344989fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457759
RDX: 00000000fffffdbc RSI: 0000000020000100 RDI: 000000000000000a
RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f34498a06d4
R13: 00000000004c32c0 R14: 00000000004db0d0 R15: 00000000ffffffff
INFO: rcu_sched self-detected stall on CPU
1-...: (10475 ticks this GP) idle=8c6/140000000000001/0 softirq=58623/58623 fqs=5210
INFO: rcu_sched detected stalls on CPUs/tasks:
(t=10521 jiffies g=13255 c=13254 q=58)
1-...: (10475 ticks this GP) idle=8c6/140000000000001/0 softirq=58623/58623 fqs=5210
NMI backtrace for cpu 1
CPU: 1 PID: 28739 Comm: syz-executor4 Not tainted 4.14.90+ #29
(detected by 0, t=10521 jiffies, g=13255, c=13254, q=58)
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0xb9/0x11b lib/dump_stack.c:53
nmi_cpu_backtrace.cold.0+0x47/0x85 lib/nmi_backtrace.c:101
nmi_trigger_cpumask_backtrace+0x121/0x146 lib/nmi_backtrace.c:62
trigger_single_cpu_backtrace include/linux/nmi.h:158 [inline]
rcu_dump_cpu_stacks+0x171/0x1bf kernel/rcu/tree.c:1396
print_cpu_stall kernel/rcu/tree.c:1542 [inline]
check_cpu_stall kernel/rcu/tree.c:1610 [inline]
__rcu_pending kernel/rcu/tree.c:3382 [inline]
rcu_pending kernel/rcu/tree.c:3444 [inline]
rcu_check_callbacks.cold.56+0x478/0xd99 kernel/rcu/tree.c:2784
update_process_times+0x24/0x60 kernel/time/timer.c:1588
tick_sched_handle.isra.8+0x73/0x150 kernel/time/tick-sched.c:161
tick_sched_timer+0x7e/0x160 kernel/time/tick-sched.c:1321
__run_hrtimer kernel/time/hrtimer.c:1259 [inline]
__hrtimer_run_queues+0x2d0/0xc10 kernel/time/hrtimer.c:1323
hrtimer_interrupt+0x19a/0x440 kernel/time/hrtimer.c:1357
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1037 [inline]
smp_apic_timer_interrupt+0x13a/0x600 arch/x86/kernel/apic/apic.c:1062
apic_timer_interrupt+0x84/0x90 arch/x86/entry/entry_64.S:787
RIP: 0010:__sanitizer_cov_trace_pc+0x9/0x60 kernel/kcov.c:65
RSP: 0018:ffff8881c73e72e8 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff10
RAX: ffff88819b46af00 RBX: ffff8881c73e75f8 RCX: 0000000000000000
RDX: 0000000000000008 RSI: ffff8881c73e73c8 RDI: ffff8881a73370a0
RBP: ffff8881ceb49c50 R08: ffffed1034e66e14 R09: ffffed1034e66e13
R10: ffffed1034e66e13 R11: ffff8881a733709f R12: 0000000000000000
R13: 0000000000000008 R14: ffff8881c73e73c8 R15: dffffc0000000000
__output_copy kernel/events/internal.h:176 [inline]
perf_output_read_group kernel/events/core.c:5876 [inline]
perf_output_read+0x73b/0xfb0 kernel/events/core.c:5909
perf_output_sample+0x10dd/0x1780 kernel/events/core.c:5951
__perf_event_output kernel/events/core.c:6261 [inline]
perf_event_output_forward+0x121/0x230 kernel/events/core.c:6274
__perf_event_overflow+0x116/0x320 kernel/events/core.c:7510
perf_swevent_overflow+0x166/0x1f0 kernel/events/core.c:7586
perf_swevent_event+0x19c/0x270 kernel/events/core.c:7619
do_perf_sw_event kernel/events/core.c:7727 [inline]
___perf_sw_event+0x296/0x480 kernel/events/core.c:7758
__perf_sw_event+0x3f/0x70 kernel/events/core.c:7770
perf_sw_event include/linux/perf_event.h:1041 [inline]
__do_page_fault+0x77f/0xb60 arch/x86/mm/fault.c:1466
page_fault+0x22/0x50 arch/x86/entry/entry_64.S:1104
RIP: 0010:copy_user_enhanced_fast_string+0x7/0x10 arch/x86/lib/copy_user_64.S:181
RSP: 0018:ffff8881c73e7b98 EFLAGS: 00010206
RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000100
RDX: 0000000000001000 RSI: 0000000020c90000 RDI: ffff88819b945f00
RBP: 0000000020c8f100 R08: 0000000000000000 R09: 0000000000000040
R10: ffffed1033728bff R11: ffff88819b945fff R12: ffff88819b945000
R13: 00007ffffffff000 R14: 0000000020c90100 R15: ffff88819b945000
copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline]
raw_copy_from_user arch/x86/include/asm/uaccess_64.h:55 [inline]
copyin+0x99/0xc0 lib/iov_iter.c:146
copy_page_from_iter_iovec lib/iov_iter.c:290 [inline]
copy_page_from_iter+0x320/0x7a0 lib/iov_iter.c:731
pipe_write+0x21a/0xd30 fs/pipe.c:434
call_write_iter include/linux/fs.h:1784 [inline]
new_sync_write fs/read_write.c:471 [inline]
__vfs_write+0x417/0x5c0 fs/read_write.c:484
vfs_write+0x17f/0x4d0 fs/read_write.c:546
SYSC_write fs/read_write.c:593 [inline]
SyS_write+0xc2/0x1a0 fs/read_write.c:585
do_syscall_64+0x19b/0x4b0 arch/x86/entry/common.c:289
entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x457759
RSP: 002b:00007f344989fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457759
RDX: 00000000fffffdbc RSI: 0000000020000100 RDI: 000000000000000a
RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f34498a06d4
R13: 00000000004c32c0 R14: 00000000004db0d0 R15: 00000000ffffffff
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 28739 Comm: syz-executor4 Not tainted 4.14.90+ #29
task: ffff88819b46af00 task.stack: ffff8881c73e0000
RIP: 0010:__read_once_size include/linux/compiler.h:183 [inline]
RIP: 0010:atomic_read arch/x86/include/asm/atomic.h:27 [inline]
RIP: 0010:virt_spin_lock arch/x86/include/asm/qspinlock.h:86 [inline]
RIP: 0010:native_queued_spin_lock_slowpath+0x99/0x760 kernel/locking/qspinlock.c:313
RSP: 0018:ffff8881db907cd8 EFLAGS: 00000002
RAX: 0000000000000001 RBX: ffffffffb02d8440 RCX: 0000000000000000
RDX: 0000000000000001 RSI: 0000000000000000 RDI: 1ffffffff60c7101
RBP: 0000000000000003 R08: 0000000000002d28 R09: ffffffffb12e3120
R10: ffff88819b46b7d0 R11: 0000000000000001 R12: fffffbfff605b088
R13: 0000000000000001 R14: ffffffffb02d8440 R15: ffffffffb02d8440
FS: 00007f34498a0700(0000) GS:ffff8881db900000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020c90000 CR3: 00000001d1094002 CR4: 00000000001606a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:669 [inline]
queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:52 [inline]
queued_spin_lock include/asm-generic/qspinlock.h:90 [inline]
do_raw_spin_lock+0x139/0x1c0 kernel/locking/spinlock_debug.c:113
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:117 [inline]
_raw_spin_lock_irqsave+0x49/0x50 kernel/locking/spinlock.c:160
print_cpu_stall kernel/rcu/tree.c:1544 [inline]
check_cpu_stall kernel/rcu/tree.c:1610 [inline]
__rcu_pending kernel/rcu/tree.c:3382 [inline]
rcu_pending kernel/rcu/tree.c:3444 [inline]
rcu_check_callbacks.cold.56+0x480/0xd99 kernel/rcu/tree.c:2784
update_process_times+0x24/0x60 kernel/time/timer.c:1588
tick_sched_handle.isra.8+0x73/0x150 kernel/time/tick-sched.c:161
tick_sched_timer+0x7e/0x160 kernel/time/tick-sched.c:1321
__run_hrtimer kernel/time/hrtimer.c:1259 [inline]
__hrtimer_run_queues+0x2d0/0xc10 kernel/time/hrtimer.c:1323
hrtimer_interrupt+0x19a/0x440 kernel/time/hrtimer.c:1357
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1037 [inline]
smp_apic_timer_interrupt+0x13a/0x600 arch/x86/kernel/apic/apic.c:1062
apic_timer_interrupt+0x84/0x90 arch/x86/entry/entry_64.S:787
RIP: 0010:__sanitizer_cov_trace_pc+0x9/0x60 kernel/kcov.c:65
RSP: 0018:ffff8881c73e72e8 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff10
RAX: ffff88819b46af00 RBX: ffff8881c73e75f8 RCX: 0000000000000000
RDX: 0000000000000008 RSI: ffff8881c73e73c8 RDI: ffff8881a73370a0
RBP: ffff8881ceb49c50 R08: ffffed1034e66e14 R09: ffffed1034e66e13
R10: ffffed1034e66e13 R11: ffff8881a733709f R12: 0000000000000000
R13: 0000000000000008 R14: ffff8881c73e73c8 R15: dffffc0000000000
__output_copy kernel/events/internal.h:176 [inline]
perf_output_read_group kernel/events/core.c:5876 [inline]
perf_output_read+0x73b/0xfb0 kernel/events/core.c:5909
perf_output_sample+0x10dd/0x1780 kernel/events/core.c:5951
__perf_event_output kernel/events/core.c:6261 [inline]
perf_event_output_forward+0x121/0x230 kernel/events/core.c:6274
__perf_event_overflow+0x116/0x320 kernel/events/core.c:7510
perf_swevent_overflow+0x166/0x1f0 kernel/events/core.c:7586
perf_swevent_event+0x19c/0x270 kernel/events/core.c:7619
do_perf_sw_event kernel/events/core.c:7727 [inline]
___perf_sw_event+0x296/0x480 kernel/events/core.c:7758
__perf_sw_event+0x3f/0x70 kernel/events/core.c:7770
perf_sw_event include/linux/perf_event.h:1041 [inline]
__do_page_fault+0x77f/0xb60 arch/x86/mm/fault.c:1466
page_fault+0x22/0x50 arch/x86/entry/entry_64.S:1104
RIP: 0010:copy_user_enhanced_fast_string+0x7/0x10 arch/x86/lib/copy_user_64.S:181
RSP: 0018:ffff8881c73e7b98 EFLAGS: 00010206
RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000100
RDX: 0000000000001000 RSI: 0000000020c90000 RDI: ffff88819b945f00
RBP: 0000000020c8f100 R08: 0000000000000000 R09: 0000000000000040
R10: ffffed1033728bff R11: ffff88819b945fff R12: ffff88819b945000
R13: 00007ffffffff000 R14: 0000000020c90100 R15: ffff88819b945000
copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline]
raw_copy_from_user arch/x86/include/asm/uaccess_64.h:55 [inline]
copyin+0x99/0xc0 lib/iov_iter.c:146
copy_page_from_iter_iovec lib/iov_iter.c:290 [inline]
copy_page_from_iter+0x320/0x7a0 lib/iov_iter.c:731
pipe_write+0x21a/0xd30 fs/pipe.c:434
call_write_iter include/linux/fs.h:1784 [inline]
new_sync_write fs/read_write.c:471 [inline]
__vfs_write+0x417/0x5c0 fs/read_write.c:484
vfs_write+0x17f/0x4d0 fs/read_write.c:546
SYSC_write fs/read_write.c:593 [inline]
SyS_write+0xc2/0x1a0 fs/read_write.c:585
do_syscall_64+0x19b/0x4b0 arch/x86/entry/common.c:289
entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x457759
RSP: 002b:00007f344989fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457759
RDX: 00000000fffffdbc RSI: 0000000020000100 RDI: 000000000000000a
RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f34498a06d4
R13: 00000000004c32c0 R14: 00000000004db0d0 R15: 00000000ffffffff
Code: 02 a9 00 00 00 80 74 53 49 89 dc 48 89 dd 41 bd 01 00 00 00 49 c1 ec 03 83 e5 07 48 b8 00 00 00 00 00 fc ff df 49 01 c4 83 c5 03 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 91 05 00 00 8b 03 85