BUG: sleeping function called from invalid context at kernel/locking/mutex.c:908
in_atomic(): 1, irqs_disabled(): 0, pid: 2905, name: syz-executor2
2 locks held by syz-executor2/2905:
#0: 00000000f09255f0 (&dev->mutex#4){+.+.}, at: vhost_process_iotlb_msg drivers/vhost/vhost.c:981 [inline]
#0: 00000000f09255f0 (&dev->mutex#4){+.+.}, at: vhost_chr_write_iter+0x1f1/0x1170 drivers/vhost/vhost.c:1049
#1: 00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: spin_lock include/linux/spinlock.h:329 [inline]
#1: 00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: vhost_iotlb_notify_vq drivers/vhost/vhost.c:940 [inline]
#1: 00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline]
#1: 00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: vhost_chr_write_iter+0x96b/0x1170 drivers/vhost/vhost.c:1049
Preemption disabled at:
[<ffffffff85e5be0b>] spin_lock include/linux/spinlock.h:329 [inline]
[<ffffffff85e5be0b>] vhost_iotlb_notify_vq drivers/vhost/vhost.c:940 [inline]
[<ffffffff85e5be0b>] vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline]
[<ffffffff85e5be0b>] vhost_chr_write_iter+0x96b/0x1170 drivers/vhost/vhost.c:1049
CPU: 0 PID: 2905 Comm: syz-executor2 Not tainted 4.20.0-rc1+ #322
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x244/0x39d lib/dump_stack.c:113
___might_sleep.cold.86+0x221/0x254 kernel/sched/core.c:6142
__might_sleep+0x95/0x190 kernel/sched/core.c:6095
__mutex_lock_common kernel/locking/mutex.c:908 [inline]
__mutex_lock+0x138/0x16f0 kernel/locking/mutex.c:1072
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
vhost_iotlb_notify_vq drivers/vhost/vhost.c:947 [inline]
vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline]
vhost_chr_write_iter+0xc76/0x1170 drivers/vhost/vhost.c:1049
vhost_net_chr_write_iter+0x59/0x70 drivers/vhost/net.c:1737
call_write_iter include/linux/fs.h:1857 [inline]
new_sync_write fs/read_write.c:474 [inline]
__vfs_write+0x6b8/0x9f0 fs/read_write.c:487
vfs_write+0x1fc/0x560 fs/read_write.c:549
ksys_write+0x101/0x260 fs/read_write.c:598
__do_sys_write fs/read_write.c:610 [inline]
__se_sys_write fs/read_write.c:607 [inline]
__x64_sys_write+0x73/0xb0 fs/read_write.c:607
do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x457569
Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fd5d22a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569
RDX: 0000000000000068 RSI: 0000000020000480 RDI: 0000000000000003
RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd5d22a36d4
R13: 00000000004c5939 R14: 00000000004d9580 R15: 00000000ffffffff
======================================================
WARNING: possible circular locking dependency detected
4.20.0-rc1+ #322 Tainted: G W
------------------------------------------------------
syz-executor2/2905 is trying to acquire lock:
000000001f929b3f (&vq->mutex){+.+.}, at: vhost_iotlb_notify_vq drivers/vhost/vhost.c:947 [inline]
000000001f929b3f (&vq->mutex){+.+.}, at: vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline]
000000001f929b3f (&vq->mutex){+.+.}, at: vhost_chr_write_iter+0xc76/0x1170 drivers/vhost/vhost.c:1049
but task is already holding lock:
00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: spin_lock include/linux/spinlock.h:329 [inline]
00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: vhost_iotlb_notify_vq drivers/vhost/vhost.c:940 [inline]
00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline]
00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: vhost_chr_write_iter+0x96b/0x1170 drivers/vhost/vhost.c:1049
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #1 (&(&dev->iotlb_lock)->rlock){+.+.}:
kobject: 'loop5' (000000005725632e): kobject_uevent_env
__raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
_raw_spin_lock+0x2d/0x40 kernel/locking/spinlock.c:144
spin_lock include/linux/spinlock.h:329 [inline]
vhost_enqueue_msg+0x90/0x260 drivers/vhost/vhost.c:2394
vhost_iotlb_miss+0x156/0x1e0 drivers/vhost/vhost.c:1165
translate_desc+0x338/0x680 drivers/vhost/vhost.c:1868
__vhost_get_user_slow.isra.26+0x3d/0x170 drivers/vhost/vhost.c:820
kobject: 'loop5' (000000005725632e): fill_kobj_path: path = '/devices/virtual/block/loop5'
__vhost_get_user drivers/vhost/vhost.c:854 [inline]
vhost_update_used_flags+0x24e/0x4a0 drivers/vhost/vhost.c:1754
vhost_vq_init_access+0x117/0x590 drivers/vhost/vhost.c:1802
vhost_net_set_backend drivers/vhost/net.c:1501 [inline]
vhost_net_ioctl+0x653/0x1bf0 drivers/vhost/net.c:1673
vfs_ioctl fs/ioctl.c:46 [inline]
file_ioctl fs/ioctl.c:509 [inline]
do_vfs_ioctl+0x1de/0x1790 fs/ioctl.c:696
ksys_ioctl+0xa9/0xd0 fs/ioctl.c:713
__do_sys_ioctl fs/ioctl.c:720 [inline]
__se_sys_ioctl fs/ioctl.c:718 [inline]
__x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:718
do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x49/0xbe
-> #0 (&vq->mutex){+.+.}:
lock_acquire+0x1ed/0x520 kernel/locking/lockdep.c:3844
__mutex_lock_common kernel/locking/mutex.c:925 [inline]
__mutex_lock+0x166/0x16f0 kernel/locking/mutex.c:1072
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
vhost_iotlb_notify_vq drivers/vhost/vhost.c:947 [inline]
vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline]
vhost_chr_write_iter+0xc76/0x1170 drivers/vhost/vhost.c:1049
vhost_net_chr_write_iter+0x59/0x70 drivers/vhost/net.c:1737
call_write_iter include/linux/fs.h:1857 [inline]
new_sync_write fs/read_write.c:474 [inline]
__vfs_write+0x6b8/0x9f0 fs/read_write.c:487
vfs_write+0x1fc/0x560 fs/read_write.c:549
ksys_write+0x101/0x260 fs/read_write.c:598
__do_sys_write fs/read_write.c:610 [inline]
__se_sys_write fs/read_write.c:607 [inline]
__x64_sys_write+0x73/0xb0 fs/read_write.c:607
do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x49/0xbe
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(&(&dev->iotlb_lock)->rlock);
lock(&vq->mutex);
lock(&(&dev->iotlb_lock)->rlock);
lock(&vq->mutex);
*** DEADLOCK ***
2 locks held by syz-executor2/2905:
#0: 00000000f09255f0 (&dev->mutex#4){+.+.}, at: vhost_process_iotlb_msg drivers/vhost/vhost.c:981 [inline]
#0: 00000000f09255f0 (&dev->mutex#4){+.+.}, at: vhost_chr_write_iter+0x1f1/0x1170 drivers/vhost/vhost.c:1049
#1: 00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: spin_lock include/linux/spinlock.h:329 [inline]
#1: 00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: vhost_iotlb_notify_vq drivers/vhost/vhost.c:940 [inline]
#1: 00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline]
#1: 00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: vhost_chr_write_iter+0x96b/0x1170 drivers/vhost/vhost.c:1049
stack backtrace:
CPU: 0 PID: 2905 Comm: syz-executor2 Tainted: G W 4.20.0-rc1+ #322
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x244/0x39d lib/dump_stack.c:113
print_circular_bug.isra.35.cold.54+0x1bd/0x27d kernel/locking/lockdep.c:1221
check_prev_add kernel/locking/lockdep.c:1863 [inline]
check_prevs_add kernel/locking/lockdep.c:1976 [inline]
validate_chain kernel/locking/lockdep.c:2347 [inline]
__lock_acquire+0x3399/0x4c20 kernel/locking/lockdep.c:3341
lock_acquire+0x1ed/0x520 kernel/locking/lockdep.c:3844
__mutex_lock_common kernel/locking/mutex.c:925 [inline]
__mutex_lock+0x166/0x16f0 kernel/locking/mutex.c:1072
kobject: 'nullb0' (000000002e6b2c2c): kobject_uevent_env
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
vhost_iotlb_notify_vq drivers/vhost/vhost.c:947 [inline]
vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline]
vhost_chr_write_iter+0xc76/0x1170 drivers/vhost/vhost.c:1049
vhost_net_chr_write_iter+0x59/0x70 drivers/vhost/net.c:1737
call_write_iter include/linux/fs.h:1857 [inline]
new_sync_write fs/read_write.c:474 [inline]
__vfs_write+0x6b8/0x9f0 fs/read_write.c:487
vfs_write+0x1fc/0x560 fs/read_write.c:549
ksys_write+0x101/0x260 fs/read_write.c:598
__do_sys_write fs/read_write.c:610 [inline]
__se_sys_write fs/read_write.c:607 [inline]
__x64_sys_write+0x73/0xb0 fs/read_write.c:607
do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x457569
Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fd5d22a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569
RDX: 0000000000000068 RSI: 0000000020000480 RDI: 0000000000000003
RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd5d22a36d4
R13: 00000000004c5939 R14: 00000000004d9580 R15: 00000000ffffffff
kobject: 'ip6gre0' (00000000ecc56ef6): kobject_cleanup, parent (null)
kobject: 'nullb0' (000000002e6b2c2c): fill_kobj_path: path = '/devices/virtual/block/nullb0'
kobject: 'ip6gre0' (00000000ecc56ef6): auto cleanup 'remove' event
kobject: 'ip6gre0' (00000000ecc56ef6): kobject_uevent_env
kobject: 'loop4' (0000000034c947df): kobject_uevent_env
kobject: 'loop4' (0000000034c947df): fill_kobj_path: path = '/devices/virtual/block/loop4'
kobject: 'ip6gre0' (00000000ecc56ef6): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'loop5' (000000005725632e): kobject_uevent_env
kobject: 'loop5' (000000005725632e): fill_kobj_path: path = '/devices/virtual/block/loop5'
kobject: 'loop3' (000000008ab183b8): kobject_uevent_env
kobject: 'ip6gre0' (00000000ecc56ef6): calling ktype release
kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3'
kobject: 'ip6gre0': free name
kobject: 'loop0' (00000000224a0b64): kobject_uevent_env
kobject: 'rx-0' (000000006b688778): kobject_cleanup, parent 00000000cc55abcb
kobject: 'rx-0' (000000006b688778): auto cleanup 'remove' event
kobject: 'loop0' (00000000224a0b64): fill_kobj_path: path = '/devices/virtual/block/loop0'
kobject: 'rx-0' (000000006b688778): kobject_uevent_env
kobject: 'loop3' (000000008ab183b8): kobject_uevent_env
kobject: 'rx-0' (000000006b688778): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3'
kobject: 'rx-0' (000000006b688778): auto cleanup kobject_del
kobject: 'loop2' (0000000087c7399c): kobject_uevent_env
kobject: 'rx-0' (000000006b688778): calling ktype release
kobject: 'loop2' (0000000087c7399c): fill_kobj_path: path = '/devices/virtual/block/loop2'
kobject: 'rx-0': free name
kobject: 'tx-0' (00000000f533e933): kobject_cleanup, parent 00000000cc55abcb
BUG: sleeping function called from invalid context at kernel/locking/mutex.c:908
in_atomic(): 1, irqs_disabled(): 0, pid: 2959, name: syz-executor2
kobject: 'loop3' (000000008ab183b8): kobject_uevent_env
INFO: lockdep is turned off.
Preemption disabled at:
[<ffffffff85e5be0b>] spin_lock include/linux/spinlock.h:329 [inline]
[<ffffffff85e5be0b>] vhost_iotlb_notify_vq drivers/vhost/vhost.c:940 [inline]
[<ffffffff85e5be0b>] vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline]
[<ffffffff85e5be0b>] vhost_chr_write_iter+0x96b/0x1170 drivers/vhost/vhost.c:1049
CPU: 1 PID: 2959 Comm: syz-executor2 Tainted: G W 4.20.0-rc1+ #322
kobject: 'tx-0' (00000000f533e933): auto cleanup 'remove' event
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
kobject: 'tx-0' (00000000f533e933): kobject_uevent_env
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x244/0x39d lib/dump_stack.c:113
kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3'
___might_sleep.cold.86+0x221/0x254 kernel/sched/core.c:6142
kobject: 'tx-0' (00000000f533e933): kobject_uevent_env: uevent_suppress caused the event to drop!
__might_sleep+0x95/0x190 kernel/sched/core.c:6095
kobject: 'tx-0' (00000000f533e933): auto cleanup kobject_del
__mutex_lock_common kernel/locking/mutex.c:908 [inline]
__mutex_lock+0x138/0x16f0 kernel/locking/mutex.c:1072
kobject: 'tx-0' (00000000f533e933): calling ktype release
kobject: 'tx-0': free name
kobject: 'queues' (00000000cc55abcb): kobject_cleanup, parent (null)
kobject: 'queues' (00000000cc55abcb): calling ktype release
kobject: 'queues' (00000000cc55abcb): kset_release
kobject: 'queues': free name
kobject: 'ip6tnl0' (000000004e91445f): kobject_uevent_env
kobject: 'ip6tnl0' (000000004e91445f): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'loop0' (00000000224a0b64): kobject_uevent_env
kobject: 'loop0' (00000000224a0b64): fill_kobj_path: path = '/devices/virtual/block/loop0'
kobject: 'loop3' (000000008ab183b8): kobject_uevent_env
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3'
vhost_iotlb_notify_vq drivers/vhost/vhost.c:947 [inline]
vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline]
vhost_chr_write_iter+0xc76/0x1170 drivers/vhost/vhost.c:1049
vhost_net_chr_write_iter+0x59/0x70 drivers/vhost/net.c:1737
call_write_iter include/linux/fs.h:1857 [inline]
new_sync_write fs/read_write.c:474 [inline]
__vfs_write+0x6b8/0x9f0 fs/read_write.c:487
vfs_write+0x1fc/0x560 fs/read_write.c:549
ksys_write+0x101/0x260 fs/read_write.c:598
__do_sys_write fs/read_write.c:610 [inline]
__se_sys_write fs/read_write.c:607 [inline]
__x64_sys_write+0x73/0xb0 fs/read_write.c:607
do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x457569
Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fd5d22a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569
RDX: 0000000000000068 RSI: 0000000020000480 RDI: 0000000000000003
RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd5d22a36d4
R13: 00000000004c5939 R14: 00000000004d9580 R15: 00000000ffffffff
kobject: 'ip6tnl0' (000000004e91445f): kobject_cleanup, parent (null)
kobject: 'ip6tnl0' (000000004e91445f): auto cleanup 'remove' event
kobject: 'ip6tnl0' (000000004e91445f): kobject_uevent_env
kobject: 'loop5' (000000005725632e): kobject_uevent_env
kobject: 'ip6tnl0' (000000004e91445f): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'loop5' (000000005725632e): fill_kobj_path: path = '/devices/virtual/block/loop5'
kobject: 'ip6tnl0' (000000004e91445f): calling ktype release
kobject: 'ip6tnl0': free name
kobject: 'rx-0' (00000000308c042d): kobject_cleanup, parent 000000001c721b28
kobject: 'rx-0' (00000000308c042d): auto cleanup 'remove' event
kobject: 'rx-0' (00000000308c042d): kobject_uevent_env
kobject: 'loop2' (0000000087c7399c): kobject_uevent_env
kobject: 'rx-0' (00000000308c042d): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'loop2' (0000000087c7399c): fill_kobj_path: path = '/devices/virtual/block/loop2'
kobject: 'rx-0' (00000000308c042d): auto cleanup kobject_del
kobject: 'rx-0' (00000000308c042d): calling ktype release
kobject: 'rx-0': free name
kobject: 'tx-0' (00000000c0210dea): kobject_cleanup, parent 000000001c721b28
kobject: 'tx-0' (00000000c0210dea): auto cleanup 'remove' event
kobject: 'tx-0' (00000000c0210dea): kobject_uevent_env
kobject: 'tx-0' (00000000c0210dea): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tx-0' (00000000c0210dea): auto cleanup kobject_del
kobject: 'tx-0' (00000000c0210dea): calling ktype release
kobject: 'tx-0': free name
kobject: 'queues' (000000001c721b28): kobject_cleanup, parent (null)
kobject: 'queues' (000000001c721b28): calling ktype release
kobject: 'queues' (000000001c721b28): kset_release
kobject: 'queues': free name
kobject: 'sit0' (00000000d1c55715): kobject_uevent_env
kobject: 'sit0' (00000000d1c55715): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'sit0' (00000000d1c55715): kobject_cleanup, parent (null)
kobject: 'sit0' (00000000d1c55715): auto cleanup 'remove' event
kobject: 'sit0' (00000000d1c55715): kobject_uevent_env
kobject: 'sit0' (00000000d1c55715): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'sit0' (00000000d1c55715): calling ktype release
kobject: 'sit0': free name
kobject: 'rx-0' (00000000bf203603): kobject_cleanup, parent 000000000b42d1ac
kobject: 'rx-0' (00000000bf203603): auto cleanup 'remove' event
kobject: 'rx-0' (00000000bf203603): kobject_uevent_env
kobject: 'rx-0' (00000000bf203603): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'rx-0' (00000000bf203603): auto cleanup kobject_del
kobject: 'rx-0' (00000000bf203603): calling ktype release
kobject: 'rx-0': free name
kobject: 'tx-0' (000000007e84d02c): kobject_cleanup, parent 000000000b42d1ac
kobject: 'tx-0' (000000007e84d02c): auto cleanup 'remove' event
kobject: 'tx-0' (000000007e84d02c): kobject_uevent_env
kobject: 'tx-0' (000000007e84d02c): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tx-0' (000000007e84d02c): auto cleanup kobject_del
kobject: 'tx-0' (000000007e84d02c): calling ktype release
kobject: 'tx-0': free name
kobject: 'queues' (000000000b42d1ac): kobject_cleanup, parent (null)
kobject: 'queues' (000000000b42d1ac): calling ktype release
kobject: 'queues' (000000000b42d1ac): kset_release
kobject: 'queues': free name
kobject: 'ip6_vti0' (00000000691bb581): kobject_uevent_env
kobject: 'ip6_vti0' (00000000691bb581): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'ip6_vti0' (00000000691bb581): kobject_cleanup, parent (null)
kobject: 'ip6_vti0' (00000000691bb581): auto cleanup 'remove' event
kobject: 'ip6_vti0' (00000000691bb581): kobject_uevent_env
kobject: 'ip6_vti0' (00000000691bb581): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'ip6_vti0' (00000000691bb581): calling ktype release
kobject: 'ip6_vti0': free name
kobject: 'rx-0' (00000000a7f0a4cb): kobject_cleanup, parent 000000002b2ac70e
kobject: 'rx-0' (00000000a7f0a4cb): auto cleanup 'remove' event
kobject: 'rx-0' (00000000a7f0a4cb): kobject_uevent_env
kobject: 'rx-0' (00000000a7f0a4cb): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'rx-0' (00000000a7f0a4cb): auto cleanup kobject_del
kobject: 'rx-0' (00000000a7f0a4cb): calling ktype release
kobject: 'rx-0': free name
kobject: 'tx-0' (00000000eebfd5e8): kobject_cleanup, parent 000000002b2ac70e
kobject: 'tx-0' (00000000eebfd5e8): auto cleanup 'remove' event
kobject: 'tx-0' (00000000eebfd5e8): kobject_uevent_env
kobject: 'tx-0' (00000000eebfd5e8): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tx-0' (00000000eebfd5e8): auto cleanup kobject_del
kobject: 'tx-0' (00000000eebfd5e8): calling ktype release
kobject: 'tx-0': free name
kobject: 'queues' (000000002b2ac70e): kobject_cleanup, parent (null)
kobject: 'queues' (000000002b2ac70e): calling ktype release
kobject: 'queues' (000000002b2ac70e): kset_release
kobject: 'queues': free name
kobject: 'ip_vti0' (000000008b868768): kobject_uevent_env
kobject: 'ip_vti0' (000000008b868768): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'ip_vti0' (000000008b868768): kobject_cleanup, parent (null)
kobject: 'ip_vti0' (000000008b868768): auto cleanup 'remove' event
kobject: 'ip_vti0' (000000008b868768): kobject_uevent_env
kobject: 'ip_vti0' (000000008b868768): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'ip_vti0' (000000008b868768): calling ktype release
kobject: 'ip_vti0': free name
kobject: 'rx-0' (00000000fec3b200): kobject_cleanup, parent 00000000f235e4df
kobject: 'rx-0' (00000000fec3b200): auto cleanup 'remove' event
kobject: 'rx-0' (00000000fec3b200): kobject_uevent_env
kobject: 'rx-0' (00000000fec3b200): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'rx-0' (00000000fec3b200): auto cleanup kobject_del
kobject: 'rx-0' (00000000fec3b200): calling ktype release
kobject: 'rx-0': free name
kobject: 'tx-0' (0000000029ccadff): kobject_cleanup, parent 00000000f235e4df
kobject: 'tx-0' (0000000029ccadff): auto cleanup 'remove' event
kobject: 'tx-0' (0000000029ccadff): kobject_uevent_env
kobject: 'tx-0' (0000000029ccadff): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tx-0' (0000000029ccadff): auto cleanup kobject_del
kobject: 'tx-0' (0000000029ccadff): calling ktype release
kobject: 'tx-0': free name
kobject: 'queues' (00000000f235e4df): kobject_cleanup, parent (null)
kobject: 'queues' (00000000f235e4df): calling ktype release
kobject: 'queues' (00000000f235e4df): kset_release
kobject: 'queues': free name
kobject: 'erspan0' (00000000f374d2ee): kobject_uevent_env
kobject: 'erspan0' (00000000f374d2ee): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'erspan0' (00000000f374d2ee): kobject_cleanup, parent (null)
kobject: 'erspan0' (00000000f374d2ee): auto cleanup 'remove' event
kobject: 'erspan0' (00000000f374d2ee): kobject_uevent_env
kobject: 'erspan0' (00000000f374d2ee): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'erspan0' (00000000f374d2ee): calling ktype release
kobject: 'erspan0': free name
kobject: 'rx-0' (000000009ef0bde7): kobject_cleanup, parent 00000000175004c9
kobject: 'rx-0' (000000009ef0bde7): auto cleanup 'remove' event
kobject: 'rx-0' (000000009ef0bde7): kobject_uevent_env
kobject: 'rx-0' (000000009ef0bde7): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'rx-0' (000000009ef0bde7): auto cleanup kobject_del
kobject: 'rx-0' (000000009ef0bde7): calling ktype release
kobject: 'rx-0': free name
kobject: 'tx-0' (000000000005f8fa): kobject_cleanup, parent 00000000175004c9
kobject: 'tx-0' (000000000005f8fa): auto cleanup 'remove' event
kobject: 'tx-0' (000000000005f8fa): kobject_uevent_env
kobject: 'tx-0' (000000000005f8fa): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tx-0' (000000000005f8fa): auto cleanup kobject_del
kobject: 'tx-0' (000000000005f8fa): calling ktype release
kobject: 'tx-0': free name
kobject: 'queues' (00000000175004c9): kobject_cleanup, parent (null)
kobject: 'queues' (00000000175004c9): calling ktype release
kobject: 'queues' (00000000175004c9): kset_release
kobject: 'queues': free name
kobject: 'gretap0' (00000000210f16b3): kobject_uevent_env
kobject: 'gretap0' (00000000210f16b3): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'gretap0' (00000000210f16b3): kobject_cleanup, parent (null)
kobject: 'gretap0' (00000000210f16b3): auto cleanup 'remove' event
kobject: 'gretap0' (00000000210f16b3): kobject_uevent_env
kobject: 'gretap0' (00000000210f16b3): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'gretap0' (00000000210f16b3): calling ktype release
kobject: 'gretap0': free name
kobject: 'rx-0' (000000007231300a): kobject_cleanup, parent 00000000641ec801
kobject: 'rx-0' (000000007231300a): auto cleanup 'remove' event
kobject: 'rx-0' (000000007231300a): kobject_uevent_env
kobject: 'rx-0' (000000007231300a): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'rx-0' (000000007231300a): auto cleanup kobject_del
kobject: 'rx-0' (000000007231300a): calling ktype release
kobject: 'rx-0': free name
kobject: 'tx-0' (00000000b69e4498): kobject_cleanup, parent 00000000641ec801
kobject: 'tx-0' (00000000b69e4498): auto cleanup 'remove' event
kobject: 'tx-0' (00000000b69e4498): kobject_uevent_env
kobject: 'tx-0' (00000000b69e4498): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tx-0' (00000000b69e4498): auto cleanup kobject_del
kobject: 'tx-0' (00000000b69e4498): calling ktype release
kobject: 'tx-0': free name
kobject: 'queues' (00000000641ec801): kobject_cleanup, parent (null)
kobject: 'queues' (00000000641ec801): calling ktype release
kobject: 'queues' (00000000641ec801): kset_release
kobject: 'queues': free name
kobject: 'gre0' (00000000aa8c081b): kobject_uevent_env
kobject: 'gre0' (00000000aa8c081b): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'gre0' (00000000aa8c081b): kobject_cleanup, parent (null)
kobject: 'gre0' (00000000aa8c081b): auto cleanup 'remove' event
kobject: 'gre0' (00000000aa8c081b): kobject_uevent_env
kobject: 'gre0' (00000000aa8c081b): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'gre0' (00000000aa8c081b): calling ktype release
kobject: 'gre0': free name
kobject: 'rx-0' (000000004ec3023d): kobject_cleanup, parent 00000000a16ddd9e
kobject: 'rx-0' (000000004ec3023d): auto cleanup 'remove' event
kobject: 'rx-0' (000000004ec3023d): kobject_uevent_env
kobject: 'rx-0' (000000004ec3023d): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'rx-0' (000000004ec3023d): auto cleanup kobject_del
kobject: 'rx-0' (000000004ec3023d): calling ktype release
kobject: 'rx-0': free name
kobject: 'tx-0' (00000000a8f827a8): kobject_cleanup, parent 00000000a16ddd9e
kobject: 'tx-0' (00000000a8f827a8): auto cleanup 'remove' event
kobject: 'tx-0' (00000000a8f827a8): kobject_uevent_env
kobject: 'tx-0' (00000000a8f827a8): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tx-0' (00000000a8f827a8): auto cleanup kobject_del
kobject: 'tx-0' (00000000a8f827a8): calling ktype release
kobject: 'tx-0': free name
kobject: 'queues' (00000000a16ddd9e): kobject_cleanup, parent (null)
kobject: 'queues' (00000000a16ddd9e): calling ktype release
kobject: 'queues' (00000000a16ddd9e): kset_release
kobject: 'queues': free name
kobject: 'tunl0' (00000000eaf3d8ce): kobject_uevent_env
kobject: 'tunl0' (00000000eaf3d8ce): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tunl0' (00000000eaf3d8ce): kobject_cleanup, parent (null)
kobject: 'tunl0' (00000000eaf3d8ce): auto cleanup 'remove' event
kobject: 'tunl0' (00000000eaf3d8ce): kobject_uevent_env
kobject: 'tunl0' (00000000eaf3d8ce): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tunl0' (00000000eaf3d8ce): calling ktype release
kobject: 'tunl0': free name
kobject: 'rx-0' (00000000128a4e0a): kobject_cleanup, parent 000000003bec5810
kobject: 'rx-0' (00000000128a4e0a): auto cleanup 'remove' event
kobject: 'rx-0' (00000000128a4e0a): kobject_uevent_env
kobject: 'rx-0' (00000000128a4e0a): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'rx-0' (00000000128a4e0a): auto cleanup kobject_del
kobject: 'rx-0' (00000000128a4e0a): calling ktype release
kobject: 'rx-0': free name
kobject: 'tx-0' (00000000c494bb0d): kobject_cleanup, parent 000000003bec5810
kobject: 'tx-0' (00000000c494bb0d): auto cleanup 'remove' event
kobject: 'tx-0' (00000000c494bb0d): kobject_uevent_env
kobject: 'tx-0' (00000000c494bb0d): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tx-0' (00000000c494bb0d): auto cleanup kobject_del
kobject: 'tx-0' (00000000c494bb0d): calling ktype release
kobject: 'tx-0': free name
kobject: 'queues' (000000003bec5810): kobject_cleanup, parent (null)
kobject: 'queues' (000000003bec5810): calling ktype release
kobject: 'queues' (000000003bec5810): kset_release
kobject: 'queues': free name
kobject: 'lo' (00000000ad8b9bd0): kobject_uevent_env
kobject: 'lo' (00000000ad8b9bd0): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'lo' (00000000ad8b9bd0): kobject_cleanup, parent (null)
kobject: 'lo' (00000000ad8b9bd0): auto cleanup 'remove' event
kobject: 'lo' (00000000ad8b9bd0): kobject_uevent_env
kobject: 'lo' (00000000ad8b9bd0): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'lo' (00000000ad8b9bd0): calling ktype release
kobject: 'lo': free name
kobject: 'loop4' (0000000034c947df): kobject_uevent_env
kobject: 'loop4' (0000000034c947df): fill_kobj_path: path = '/devices/virtual/block/loop4'
TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters.
kobject: 'loop3' (000000008ab183b8): kobject_uevent_env
kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3'
BUG: sleeping function called from invalid context at kernel/locking/mutex.c:908
in_atomic(): 1, irqs_disabled(): 0, pid: 2992, name: syz-executor2
INFO: lockdep is turned off.
Preemption disabled at:
[<ffffffff85e5be0b>] spin_lock include/linux/spinlock.h:329 [inline]
[<ffffffff85e5be0b>] vhost_iotlb_notify_vq drivers/vhost/vhost.c:940 [inline]
[<ffffffff85e5be0b>] vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline]
[<ffffffff85e5be0b>] vhost_chr_write_iter+0x96b/0x1170 drivers/vhost/vhost.c:1049
CPU: 0 PID: 2992 Comm: syz-executor2 Tainted: G W 4.20.0-rc1+ #322
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x244/0x39d lib/dump_stack.c:113
___might_sleep.cold.86+0x221/0x254 kernel/sched/core.c:6142
__might_sleep+0x95/0x190 kernel/sched/core.c:6095
__mutex_lock_common kernel/locking/mutex.c:908 [inline]
__mutex_lock+0x138/0x16f0 kernel/locking/mutex.c:1072
kobject: 'loop3' (000000008ab183b8): kobject_uevent_env
kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3'
kobject: 'loop3' (000000008ab183b8): kobject_uevent_env
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3'
vhost_iotlb_notify_vq drivers/vhost/vhost.c:947 [inline]
vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline]
vhost_chr_write_iter+0xc76/0x1170 drivers/vhost/vhost.c:1049
vhost_net_chr_write_iter+0x59/0x70 drivers/vhost/net.c:1737
call_write_iter include/linux/fs.h:1857 [inline]
new_sync_write fs/read_write.c:474 [inline]
__vfs_write+0x6b8/0x9f0 fs/read_write.c:487
kobject: 'loop5' (000000005725632e): kobject_uevent_env
vfs_write+0x1fc/0x560 fs/read_write.c:549
kobject: 'loop5' (000000005725632e): fill_kobj_path: path = '/devices/virtual/block/loop5'
ksys_write+0x101/0x260 fs/read_write.c:598
__do_sys_write fs/read_write.c:610 [inline]
__se_sys_write fs/read_write.c:607 [inline]
__x64_sys_write+0x73/0xb0 fs/read_write.c:607
do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x457569
Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fd5d22a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569
RDX: 0000000000000068 RSI: 0000000020000480 RDI: 0000000000000003
RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd5d22a36d4
R13: 00000000004c5939 R14: 00000000004d9580 R15: 00000000ffffffff
kobject: 'loop2' (0000000087c7399c): kobject_uevent_env
kobject: 'loop2' (0000000087c7399c): fill_kobj_path: path = '/devices/virtual/block/loop2'
kobject: 'rx-0' (00000000483f9ebd): kobject_cleanup, parent 00000000acc73935
kobject: 'rx-0' (00000000483f9ebd): auto cleanup 'remove' event
kobject: 'rx-0' (00000000483f9ebd): kobject_uevent_env
kobject: 'rx-0' (00000000483f9ebd): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'rx-0' (00000000483f9ebd): auto cleanup kobject_del
kobject: 'rx-0' (00000000483f9ebd): calling ktype release
kobject: 'rx-0': free name
kobject: 'tx-0' (00000000c73568f0): kobject_cleanup, parent 00000000acc73935
kobject: 'tx-0' (00000000c73568f0): auto cleanup 'remove' event
kobject: 'tx-0' (00000000c73568f0): kobject_uevent_env
kobject: 'tx-0' (00000000c73568f0): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tx-0' (00000000c73568f0): auto cleanup kobject_del
kobject: 'tx-0' (00000000c73568f0): calling ktype release
kobject: 'tx-0': free name
kobject: 'queues' (00000000acc73935): kobject_cleanup, parent (null)
kobject: 'queues' (00000000acc73935): calling ktype release
kobject: 'queues' (00000000acc73935): kset_release
kobject: 'queues': free name
kobject: 'ip6gre0' (00000000d5c67627): kobject_uevent_env
kobject: 'ip6gre0' (00000000d5c67627): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'ip6gre0' (00000000d5c67627): kobject_cleanup, parent (null)
kobject: 'ip6gre0' (00000000d5c67627): auto cleanup 'remove' event
kobject: 'ip6gre0' (00000000d5c67627): kobject_uevent_env
kobject: 'ip6gre0' (00000000d5c67627): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'ip6gre0' (00000000d5c67627): calling ktype release
kobject: 'ip6gre0': free name
kobject: 'rx-0' (000000002491970b): kobject_cleanup, parent 00000000dda49fa6
kobject: 'rx-0' (000000002491970b): auto cleanup 'remove' event
kobject: 'rx-0' (000000002491970b): kobject_uevent_env
kobject: 'rx-0' (000000002491970b): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'rx-0' (000000002491970b): auto cleanup kobject_del
kobject: 'rx-0' (000000002491970b): calling ktype release
kobject: 'rx-0': free name
kobject: 'tx-0' (0000000027e9661a): kobject_cleanup, parent 00000000dda49fa6
kobject: 'loop0' (00000000224a0b64): kobject_uevent_env
kobject: 'tx-0' (0000000027e9661a): auto cleanup 'remove' event
kobject: 'loop0' (00000000224a0b64): fill_kobj_path: path = '/devices/virtual/block/loop0'
kobject: 'tx-0' (0000000027e9661a): kobject_uevent_env
kobject: 'tx-0' (0000000027e9661a): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tx-0' (0000000027e9661a): auto cleanup kobject_del
kobject: 'tx-0' (0000000027e9661a): calling ktype release
kobject: 'tx-0': free name
kobject: 'queues' (00000000dda49fa6): kobject_cleanup, parent (null)
kobject: 'queues' (00000000dda49fa6): calling ktype release
kobject: 'queues' (00000000dda49fa6): kset_release
kobject: 'queues': free name
kobject: 'ip6tnl0' (00000000099276f7): kobject_uevent_env
kobject: 'ip6tnl0' (00000000099276f7): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'ip6tnl0' (00000000099276f7): kobject_cleanup, parent (null)
kobject: 'ip6tnl0' (00000000099276f7): auto cleanup 'remove' event
kobject: 'ip6tnl0' (00000000099276f7): kobject_uevent_env
kobject: 'ip6tnl0' (00000000099276f7): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'ip6tnl0' (00000000099276f7): calling ktype release
kobject: 'ip6tnl0': free name
kobject: 'rx-0' (00000000b11cae38): kobject_cleanup, parent 00000000853dcc37
kobject: 'rx-0' (00000000b11cae38): auto cleanup 'remove' event
kobject: 'rx-0' (00000000b11cae38): kobject_uevent_env
kobject: 'rx-0' (00000000b11cae38): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'rx-0' (00000000b11cae38): auto cleanup kobject_del
kobject: 'rx-0' (00000000b11cae38): calling ktype release
kobject: 'rx-0': free name
kobject: 'tx-0' (000000005d4feba6): kobject_cleanup, parent 00000000853dcc37
kobject: 'tx-0' (000000005d4feba6): auto cleanup 'remove' event
kobject: 'tx-0' (000000005d4feba6): kobject_uevent_env
kobject: 'tx-0' (000000005d4feba6): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tx-0' (000000005d4feba6): auto cleanup kobject_del
kobject: 'tx-0' (000000005d4feba6): calling ktype release
kobject: 'tx-0': free name
kobject: 'queues' (00000000853dcc37): kobject_cleanup, parent (null)
kobject: 'queues' (00000000853dcc37): calling ktype release
kobject: 'queues' (00000000853dcc37): kset_release
kobject: 'queues': free name
kobject: 'sit0' (000000002063d58a): kobject_uevent_env
kobject: 'sit0' (000000002063d58a): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'sit0' (000000002063d58a): kobject_cleanup, parent (null)
kobject: 'sit0' (000000002063d58a): auto cleanup 'remove' event
kobject: 'sit0' (000000002063d58a): kobject_uevent_env
kobject: 'sit0' (000000002063d58a): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'sit0' (000000002063d58a): calling ktype release
kobject: 'sit0': free name
kobject: 'rx-0' (0000000077830bf8): kobject_cleanup, parent 000000001976ee75
kobject: 'rx-0' (0000000077830bf8): auto cleanup 'remove' event
kobject: 'rx-0' (0000000077830bf8): kobject_uevent_env
kobject: 'rx-0' (0000000077830bf8): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'rx-0' (0000000077830bf8): auto cleanup kobject_del
kobject: 'rx-0' (0000000077830bf8): calling ktype release
kobject: 'rx-0': free name
kobject: 'tx-0' (0000000049d7df06): kobject_cleanup, parent 000000001976ee75
kobject: 'tx-0' (0000000049d7df06): auto cleanup 'remove' event
kobject: 'tx-0' (0000000049d7df06): kobject_uevent_env
kobject: 'tx-0' (0000000049d7df06): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tx-0' (0000000049d7df06): auto cleanup kobject_del
kobject: 'tx-0' (0000000049d7df06): calling ktype release
kobject: 'tx-0': free name
kobject: 'queues' (000000001976ee75): kobject_cleanup, parent (null)
kobject: 'queues' (000000001976ee75): calling ktype release
kobject: 'queues' (000000001976ee75): kset_release
kobject: 'queues': free name
kobject: 'ip6_vti0' (000000003cc3a313): kobject_uevent_env
kobject: 'ip6_vti0' (000000003cc3a313): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'ip6_vti0' (000000003cc3a313): kobject_cleanup, parent (null)
kobject: 'ip6_vti0' (000000003cc3a313): auto cleanup 'remove' event
kobject: 'ip6_vti0' (000000003cc3a313): kobject_uevent_env
kobject: 'ip6_vti0' (000000003cc3a313): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'ip6_vti0' (000000003cc3a313): calling ktype release
kobject: 'ip6_vti0': free name
kobject: 'rx-0' (0000000023e990be): kobject_cleanup, parent 000000002a0142f9
kobject: 'rx-0' (0000000023e990be): auto cleanup 'remove' event
kobject: 'rx-0' (0000000023e990be): kobject_uevent_env
kobject: 'rx-0' (0000000023e990be): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'rx-0' (0000000023e990be): auto cleanup kobject_del
kobject: 'rx-0' (0000000023e990be): calling ktype release
kobject: 'rx-0': free name
kobject: 'tx-0' (000000000d4ba0a1): kobject_cleanup, parent 000000002a0142f9
kobject: 'tx-0' (000000000d4ba0a1): auto cleanup 'remove' event
kobject: 'tx-0' (000000000d4ba0a1): kobject_uevent_env
kobject: 'tx-0' (000000000d4ba0a1): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tx-0' (000000000d4ba0a1): auto cleanup kobject_del
kobject: 'tx-0' (000000000d4ba0a1): calling ktype release
kobject: 'tx-0': free name
kobject: 'queues' (000000002a0142f9): kobject_cleanup, parent (null)
kobject: 'queues' (000000002a0142f9): calling ktype release
kobject: 'queues' (000000002a0142f9): kset_release
kobject: 'queues': free name
kobject: 'ip_vti0' (000000006829aeb5): kobject_uevent_env
kobject: 'ip_vti0' (000000006829aeb5): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'ip_vti0' (000000006829aeb5): kobject_cleanup, parent (null)
kobject: 'ip_vti0' (000000006829aeb5): auto cleanup 'remove' event
kobject: 'ip_vti0' (000000006829aeb5): kobject_uevent_env
kobject: 'ip_vti0' (000000006829aeb5): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'ip_vti0' (000000006829aeb5): calling ktype release
kobject: 'ip_vti0': free name
kobject: 'rx-0' (000000003b232512): kobject_cleanup, parent 00000000777a2568
kobject: 'rx-0' (000000003b232512): auto cleanup 'remove' event
kobject: 'rx-0' (000000003b232512): kobject_uevent_env
kobject: 'rx-0' (000000003b232512): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'rx-0' (000000003b232512): auto cleanup kobject_del
kobject: 'rx-0' (000000003b232512): calling ktype release
kobject: 'rx-0': free name
kobject: 'tx-0' (0000000044dce8a8): kobject_cleanup, parent 00000000777a2568
kobject: 'tx-0' (0000000044dce8a8): auto cleanup 'remove' event
kobject: 'tx-0' (0000000044dce8a8): kobject_uevent_env
kobject: 'tx-0' (0000000044dce8a8): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tx-0' (0000000044dce8a8): auto cleanup kobject_del
kobject: 'tx-0' (0000000044dce8a8): calling ktype release
kobject: 'tx-0': free name
kobject: 'queues' (00000000777a2568): kobject_cleanup, parent (null)
kobject: 'queues' (00000000777a2568): calling ktype release
kobject: 'queues' (00000000777a2568): kset_release
kobject: 'queues': free name
kobject: 'erspan0' (00000000484778ad): kobject_uevent_env
kobject: 'erspan0' (00000000484778ad): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'erspan0' (00000000484778ad): kobject_cleanup, parent (null)
kobject: 'erspan0' (00000000484778ad): auto cleanup 'remove' event
kobject: 'erspan0' (00000000484778ad): kobject_uevent_env
kobject: 'erspan0' (00000000484778ad): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'erspan0' (00000000484778ad): calling ktype release
kobject: 'erspan0': free name
kobject: 'rx-0' (00000000cff4faed): kobject_cleanup, parent 000000001c03678c
kobject: 'rx-0' (00000000cff4faed): auto cleanup 'remove' event
kobject: 'rx-0' (00000000cff4faed): kobject_uevent_env
kobject: 'rx-0' (00000000cff4faed): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'rx-0' (00000000cff4faed): auto cleanup kobject_del
kobject: 'rx-0' (00000000cff4faed): calling ktype release
kobject: 'rx-0': free name
kobject: 'tx-0' (00000000ce57ca36): kobject_cleanup, parent 000000001c03678c
kobject: 'tx-0' (00000000ce57ca36): auto cleanup 'remove' event
kobject: 'tx-0' (00000000ce57ca36): kobject_uevent_env
kobject: 'tx-0' (00000000ce57ca36): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tx-0' (00000000ce57ca36): auto cleanup kobject_del
kobject: 'tx-0' (00000000ce57ca36): calling ktype release
kobject: 'tx-0': free name
kobject: 'queues' (000000001c03678c): kobject_cleanup, parent (null)
kobject: 'queues' (000000001c03678c): calling ktype release
kobject: 'queues' (000000001c03678c): kset_release
kobject: 'queues': free name
kobject: 'gretap0' (0000000099c28359): kobject_uevent_env
kobject: 'gretap0' (0000000099c28359): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'gretap0' (0000000099c28359): kobject_cleanup, parent (null)
kobject: 'gretap0' (0000000099c28359): auto cleanup 'remove' event
kobject: 'gretap0' (0000000099c28359): kobject_uevent_env
kobject: 'gretap0' (0000000099c28359): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'gretap0' (0000000099c28359): calling ktype release
kobject: 'gretap0': free name
kobject: 'rx-0' (000000009d212ba4): kobject_cleanup, parent 0000000072e9e86f
kobject: 'rx-0' (000000009d212ba4): auto cleanup 'remove' event
kobject: 'rx-0' (000000009d212ba4): kobject_uevent_env
kobject: 'rx-0' (000000009d212ba4): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'rx-0' (000000009d212ba4): auto cleanup kobject_del
kobject: 'rx-0' (000000009d212ba4): calling ktype release
kobject: 'rx-0': free name
kobject: 'tx-0' (00000000547a6237): kobject_cleanup, parent 0000000072e9e86f
kobject: 'tx-0' (00000000547a6237): auto cleanup 'remove' event
kobject: 'tx-0' (00000000547a6237): kobject_uevent_env
kobject: 'tx-0' (00000000547a6237): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tx-0' (00000000547a6237): auto cleanup kobject_del
kobject: 'tx-0' (00000000547a6237): calling ktype release
kobject: 'tx-0': free name
kobject: 'queues' (0000000072e9e86f): kobject_cleanup, parent (null)
kobject: 'queues' (0000000072e9e86f): calling ktype release
kobject: 'queues' (0000000072e9e86f): kset_release
kobject: 'queues': free name
kobject: 'gre0' (00000000bbb7936c): kobject_uevent_env
kobject: 'gre0' (00000000bbb7936c): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'gre0' (00000000bbb7936c): kobject_cleanup, parent (null)
kobject: 'gre0' (00000000bbb7936c): auto cleanup 'remove' event
kobject: 'gre0' (00000000bbb7936c): kobject_uevent_env
kobject: 'gre0' (00000000bbb7936c): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'gre0' (00000000bbb7936c): calling ktype release
kobject: 'gre0': free name
kobject: 'rx-0' (0000000024922f5a): kobject_cleanup, parent 0000000085bc18cd
kobject: 'rx-0' (0000000024922f5a): auto cleanup 'remove' event
kobject: 'rx-0' (0000000024922f5a): kobject_uevent_env
kobject: 'rx-0' (0000000024922f5a): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'rx-0' (0000000024922f5a): auto cleanup kobject_del
kobject: 'rx-0' (0000000024922f5a): calling ktype release
kobject: 'rx-0': free name
kobject: 'tx-0' (000000009fe46ae2): kobject_cleanup, parent 0000000085bc18cd
kobject: 'tx-0' (000000009fe46ae2): auto cleanup 'remove' event
kobject: 'tx-0' (000000009fe46ae2): kobject_uevent_env
kobject: 'tx-0' (000000009fe46ae2): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tx-0' (000000009fe46ae2): auto cleanup kobject_del
kobject: 'tx-0' (000000009fe46ae2): calling ktype release
kobject: 'tx-0': free name
kobject: 'queues' (0000000085bc18cd): kobject_cleanup, parent (null)
kobject: 'queues' (0000000085bc18cd): calling ktype release
kobject: 'queues' (0000000085bc18cd): kset_release
kobject: 'queues': free name
kobject: 'tunl0' (00000000c81e7011): kobject_uevent_env
kobject: 'tunl0' (00000000c81e7011): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tunl0' (00000000c81e7011): kobject_cleanup, parent (null)
kobject: 'tunl0' (00000000c81e7011): auto cleanup 'remove' event
kobject: 'tunl0' (00000000c81e7011): kobject_uevent_env
kobject: 'tunl0' (00000000c81e7011): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tunl0' (00000000c81e7011): calling ktype release
kobject: 'tunl0': free name
kobject: 'rx-0' (00000000c5cacde2): kobject_cleanup, parent 000000004083c6ed
kobject: 'rx-0' (00000000c5cacde2): auto cleanup 'remove' event
kobject: 'rx-0' (00000000c5cacde2): kobject_uevent_env
kobject: 'rx-0' (00000000c5cacde2): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'rx-0' (00000000c5cacde2): auto cleanup kobject_del
kobject: 'rx-0' (00000000c5cacde2): calling ktype release
kobject: 'rx-0': free name
kobject: 'tx-0' (00000000b15d0c5d): kobject_cleanup, parent 000000004083c6ed
kobject: 'tx-0' (00000000b15d0c5d): auto cleanup 'remove' event
kobject: 'tx-0' (00000000b15d0c5d): kobject_uevent_env
kobject: 'tx-0' (00000000b15d0c5d): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tx-0' (00000000b15d0c5d): auto cleanup kobject_del
kobject: 'tx-0' (00000000b15d0c5d): calling ktype release
kobject: 'tx-0': free name
kobject: 'queues' (000000004083c6ed): kobject_cleanup, parent (null)
kobject: 'queues' (000000004083c6ed): calling ktype release
kobject: 'queues' (000000004083c6ed): kset_release
kobject: 'queues': free name
kobject: 'lo' (000000008b7a3c27): kobject_uevent_env
kobject: 'lo' (000000008b7a3c27): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'lo' (000000008b7a3c27): kobject_cleanup, parent (null)
kobject: 'lo' (000000008b7a3c27): auto cleanup 'remove' event
kobject: 'lo' (000000008b7a3c27): kobject_uevent_env
kobject: 'lo' (000000008b7a3c27): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'lo' (000000008b7a3c27): calling ktype release
kobject: 'lo': free name
kobject: 'loop4' (0000000034c947df): kobject_uevent_env
kobject: 'loop4' (0000000034c947df): fill_kobj_path: path = '/devices/virtual/block/loop4'
TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters.
BUG: sleeping function called from invalid context at kernel/locking/mutex.c:908
in_atomic(): 1, irqs_disabled(): 0, pid: 3043, name: syz-executor2
kobject: 'loop3' (000000008ab183b8): kobject_uevent_env
INFO: lockdep is turned off.
Preemption disabled at:
[<ffffffff85e5be0b>] spin_lock include/linux/spinlock.h:329 [inline]
[<ffffffff85e5be0b>] vhost_iotlb_notify_vq drivers/vhost/vhost.c:940 [inline]
[<ffffffff85e5be0b>] vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline]
[<ffffffff85e5be0b>] vhost_chr_write_iter+0x96b/0x1170 drivers/vhost/vhost.c:1049
kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3'
CPU: 1 PID: 3043 Comm: syz-executor2 Tainted: G W 4.20.0-rc1+ #322
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x244/0x39d lib/dump_stack.c:113
___might_sleep.cold.86+0x221/0x254 kernel/sched/core.c:6142
__might_sleep+0x95/0x190 kernel/sched/core.c:6095
__mutex_lock_common kernel/locking/mutex.c:908 [inline]
__mutex_lock+0x138/0x16f0 kernel/locking/mutex.c:1072
kobject: 'loop5' (000000005725632e): kobject_uevent_env
kobject: 'loop5' (000000005725632e): fill_kobj_path: path = '/devices/virtual/block/loop5'
kobject: 'loop3' (000000008ab183b8): kobject_uevent_env
kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3'
kobject: 'loop0' (00000000224a0b64): kobject_uevent_env
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
vhost_iotlb_notify_vq drivers/vhost/vhost.c:947 [inline]
vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline]
vhost_chr_write_iter+0xc76/0x1170 drivers/vhost/vhost.c:1049
kobject: 'loop0' (00000000224a0b64): fill_kobj_path: path = '/devices/virtual/block/loop0'
vhost_net_chr_write_iter+0x59/0x70 drivers/vhost/net.c:1737
call_write_iter include/linux/fs.h:1857 [inline]
new_sync_write fs/read_write.c:474 [inline]
__vfs_write+0x6b8/0x9f0 fs/read_write.c:487
vfs_write+0x1fc/0x560 fs/read_write.c:549
ksys_write+0x101/0x260 fs/read_write.c:598
__do_sys_write fs/read_write.c:610 [inline]
__se_sys_write fs/read_write.c:607 [inline]
__x64_sys_write+0x73/0xb0 fs/read_write.c:607
do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x49/0xbe
kobject: 'loop5' (000000005725632e): kobject_uevent_env
RIP: 0033:0x457569
Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fd5d22a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569
RDX: 0000000000000068 RSI: 0000000020000480 RDI: 0000000000000003
kobject: 'loop5' (000000005725632e): fill_kobj_path: path = '/devices/virtual/block/loop5'
RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd5d22a36d4
R13: 00000000004c5939 R14: 00000000004d9580 R15: 00000000ffffffff
TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters.
kobject: 'loop4' (0000000034c947df): kobject_uevent_env
kobject: 'loop4' (0000000034c947df): fill_kobj_path: path = '/devices/virtual/block/loop4'
kobject: 'loop4' (0000000034c947df): kobject_uevent_env
kobject: 'loop4' (0000000034c947df): fill_kobj_path: path = '/devices/virtual/block/loop4'
kobject: 'loop0' (00000000224a0b64): kobject_uevent_env
kobject: 'loop0' (00000000224a0b64): fill_kobj_path: path = '/devices/virtual/block/loop0'
TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters.
kobject: 'loop5' (000000005725632e): kobject_uevent_env
kobject: 'loop5' (000000005725632e): fill_kobj_path: path = '/devices/virtual/block/loop5'
kobject: 'loop2' (0000000087c7399c): kobject_uevent_env
kobject: 'loop2' (0000000087c7399c): fill_kobj_path: path = '/devices/virtual/block/loop2'
kobject: 'loop4' (0000000034c947df): kobject_uevent_env
kobject: 'loop4' (0000000034c947df): fill_kobj_path: path = '/devices/virtual/block/loop4'
kobject: 'loop3' (000000008ab183b8): kobject_uevent_env
kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3'
kobject: 'loop4' (0000000034c947df): kobject_uevent_env
kobject: 'loop4' (0000000034c947df): fill_kobj_path: path = '/devices/virtual/block/loop4'
kobject: 'loop3' (000000008ab183b8): kobject_uevent_env
kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3'
kobject: 'loop5' (000000005725632e): kobject_uevent_env
kobject: 'loop5' (000000005725632e): fill_kobj_path: path = '/devices/virtual/block/loop5'
kobject: 'loop3' (000000008ab183b8): kobject_uevent_env
kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3'
kobject: 'loop0' (00000000224a0b64): kobject_uevent_env
kobject: 'loop0' (00000000224a0b64): fill_kobj_path: path = '/devices/virtual/block/loop0'
kobject: 'loop2' (0000000087c7399c): kobject_uevent_env
TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters.
kobject: 'loop2' (0000000087c7399c): fill_kobj_path: path = '/devices/virtual/block/loop2'
kobject: 'loop3' (000000008ab183b8): kobject_uevent_env
kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3'
kobject: 'loop4' (0000000034c947df): kobject_uevent_env
kobject: 'loop4' (0000000034c947df): fill_kobj_path: path = '/devices/virtual/block/loop4'
kobject: 'loop3' (000000008ab183b8): kobject_uevent_env
kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3'
kobject: 'loop4' (0000000034c947df): kobject_uevent_env
kobject: 'loop4' (0000000034c947df): fill_kobj_path: path = '/devices/virtual/block/loop4'
kobject: 'loop5' (000000005725632e): kobject_uevent_env
kobject: 'loop5' (000000005725632e): fill_kobj_path: path = '/devices/virtual/block/loop5'