[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.097386] random: sshd: uninitialized urandom read (32 bytes read) [ 32.418511] kauditd_printk_skb: 9 callbacks suppressed [ 32.418520] audit: type=1400 audit(1556588150.949:35): avc: denied { map } for pid=6805 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 32.464354] random: sshd: uninitialized urandom read (32 bytes read) [ 33.028207] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.48' (ECDSA) to the list of known hosts. [ 38.821736] random: sshd: uninitialized urandom read (32 bytes read) 2019/04/30 01:35:57 fuzzer started [ 39.014068] audit: type=1400 audit(1556588157.549:36): avc: denied { map } for pid=6815 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 40.788847] random: cc1: uninitialized urandom read (8 bytes read) 2019/04/30 01:36:00 dialing manager at 10.128.0.105:40727 2019/04/30 01:36:00 syscalls: 2434 2019/04/30 01:36:00 code coverage: enabled 2019/04/30 01:36:00 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/04/30 01:36:00 extra coverage: extra coverage is not supported by the kernel 2019/04/30 01:36:00 setuid sandbox: enabled 2019/04/30 01:36:00 namespace sandbox: enabled 2019/04/30 01:36:00 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/30 01:36:00 fault injection: enabled 2019/04/30 01:36:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/30 01:36:00 net packet injection: enabled 2019/04/30 01:36:00 net device setup: enabled [ 43.225959] random: crng init done 01:38:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000001580)={0x9, {{0x2, 0x0, @multicast1}}}, 0x90) 01:38:27 executing program 5: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000480)="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") 01:38:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc42000000000000000000000800000900de56b5000000000800000000080008000100000008000500ac14141b080003000100050f01"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00ff04462019d947"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0xaaaaaaaaaaaace6, 0x0, 0x0, 0xeb) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x50, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:38:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000001340)='\x00\x00+\x00\x05\x00\x00\x00\x00\x00') getdents64(r1, &(0x7f0000000040)=""/106, 0x6a) getdents64(r1, &(0x7f0000001380)=""/4096, 0x1000) 01:38:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="c8"], 0x1) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 01:38:27 executing program 4: syz_mount_image$btrfs(&(0x7f00000001c0)='btrfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f00000008c0)="8da4363ac0ed0000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d042bf2319b20e1", 0x4f, 0x10000}], 0x0, 0x0) [ 189.266535] audit: type=1400 audit(1556588307.799:37): avc: denied { map } for pid=6815 comm="syz-fuzzer" path="/root/syzkaller-shm355685519" dev="sda1" ino=16490 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 189.309449] audit: type=1400 audit(1556588307.839:38): avc: denied { map } for pid=6831 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=66 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 190.170235] IPVS: ftp: loaded support on port[0] = 21 [ 190.513120] chnl_net:caif_netlink_parms(): no params data found [ 190.544361] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.551124] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.558180] device bridge_slave_0 entered promiscuous mode [ 190.564629] IPVS: ftp: loaded support on port[0] = 21 [ 190.570428] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.576857] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.584550] device bridge_slave_1 entered promiscuous mode [ 190.606038] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 190.618733] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 190.641074] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 190.648510] team0: Port device team_slave_0 added [ 190.655739] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 190.662864] team0: Port device team_slave_1 added [ 190.669776] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 190.677204] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 190.722368] IPVS: ftp: loaded support on port[0] = 21 [ 190.741932] device hsr_slave_0 entered promiscuous mode [ 190.780325] device hsr_slave_1 entered promiscuous mode [ 190.830679] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 190.840687] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 190.875717] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.882204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.889002] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.895409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.931227] IPVS: ftp: loaded support on port[0] = 21 [ 190.964232] chnl_net:caif_netlink_parms(): no params data found [ 191.028484] chnl_net:caif_netlink_parms(): no params data found [ 191.067129] IPVS: ftp: loaded support on port[0] = 21 [ 191.098693] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.105201] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.112251] device bridge_slave_0 entered promiscuous mode [ 191.119918] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.126582] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.133635] device bridge_slave_1 entered promiscuous mode [ 191.174033] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.180984] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.187965] device bridge_slave_0 entered promiscuous mode [ 191.194686] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.201144] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.208150] device bridge_slave_1 entered promiscuous mode [ 191.223275] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 191.232728] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 191.238811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.259976] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 191.293266] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 191.304662] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 191.327503] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 191.335069] team0: Port device team_slave_0 added [ 191.345021] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 191.359798] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 191.366753] IPVS: ftp: loaded support on port[0] = 21 [ 191.368220] team0: Port device team_slave_1 added [ 191.383057] chnl_net:caif_netlink_parms(): no params data found [ 191.400221] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 191.409120] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 191.416612] team0: Port device team_slave_0 added [ 191.425088] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 191.432853] team0: Port device team_slave_1 added [ 191.438953] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 191.461521] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 191.474587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.493256] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.500496] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.515091] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 191.525222] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 191.531518] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.603392] device hsr_slave_0 entered promiscuous mode [ 191.650480] device hsr_slave_1 entered promiscuous mode [ 191.701348] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 191.716223] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.723273] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.730228] device bridge_slave_0 entered promiscuous mode [ 191.738860] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.745401] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.752375] device bridge_slave_1 entered promiscuous mode [ 191.758681] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 191.778681] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 191.792850] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 191.842537] device hsr_slave_0 entered promiscuous mode [ 191.880323] device hsr_slave_1 entered promiscuous mode [ 191.920782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.928526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.936227] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.942657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.974343] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 191.985955] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 191.993080] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 192.000922] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 192.021185] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 192.038516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.046438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.054163] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.060547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.069360] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 192.085242] chnl_net:caif_netlink_parms(): no params data found [ 192.109248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.129539] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 192.137198] team0: Port device team_slave_0 added [ 192.143548] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 192.151014] team0: Port device team_slave_1 added [ 192.157541] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 192.166710] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 192.175209] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 192.200902] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 192.208604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.218933] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 192.226673] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.233187] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.240761] device bridge_slave_0 entered promiscuous mode [ 192.248247] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.254697] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.261841] device bridge_slave_1 entered promiscuous mode [ 192.277002] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 192.283451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.291339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.298888] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.309471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 192.344293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.352066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.361503] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 192.379229] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 192.432533] device hsr_slave_0 entered promiscuous mode [ 192.470487] device hsr_slave_1 entered promiscuous mode [ 192.510795] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 192.520998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.528502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.539672] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 192.547720] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 192.561068] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 192.586487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.594400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.603578] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 192.609604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.624305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.657015] chnl_net:caif_netlink_parms(): no params data found [ 192.669450] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 192.677407] team0: Port device team_slave_0 added [ 192.683922] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 192.691284] team0: Port device team_slave_1 added [ 192.696503] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 192.706589] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 192.721591] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 192.730138] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 192.802611] device hsr_slave_0 entered promiscuous mode [ 192.840387] device hsr_slave_1 entered promiscuous mode [ 192.882604] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 192.894354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.903439] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 192.921931] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 192.930978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.941224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.948612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.959175] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 192.966103] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.978949] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 192.987910] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 192.998287] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 193.021041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.027930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.036611] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 193.047924] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.055359] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.063521] device bridge_slave_0 entered promiscuous mode [ 193.075343] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 193.081917] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.105947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.119577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.129888] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.136339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.145871] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 193.153484] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.159944] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.167618] device bridge_slave_1 entered promiscuous mode [ 193.182105] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 193.191067] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 193.199286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 01:38:31 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000240)=@framed={{0xffffff85, 0xa00, 0x2, 0x31000000, 0x0, 0x7b, 0xa, 0xff00}}, 0x0, 0x1, 0xc3, &(0x7f0000000000)=""/195, 0x0, 0x0, [0xc200000000000000], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 01:38:31 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xd, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$FS_IOC_FSGETXATTR(r0, 0x80045519, 0x0) [ 193.214742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.225510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.235860] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.242259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.256264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.264920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.272761] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.279394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.290638] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 193.304941] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 193.317808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.324775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.332633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.342398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 193.350284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.359302] bond0: Enslaving bond_slave_1 as an active interface with an up link 01:38:31 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x80000000012, 0x3d, 0x8000000001}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0, 0x2}, 0x20) [ 193.368039] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 193.379080] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 193.387651] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready 01:38:31 executing program 0: close(0xffffffffffffffff) mknod(&(0x7f0000000180)='./file0\x00', 0x1120, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) select(0x40, &(0x7f00000001c0)={0x8}, 0x0, 0x0, 0x0) write$UHID_INPUT2(r0, &(0x7f00000001c0), 0x6) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000080)={0x28}, 0x28) [ 193.417624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.430983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.452677] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.459073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.467067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.475609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.483863] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.491845] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 193.500736] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 193.506912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.514820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.522004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.530938] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 193.538665] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 193.546326] team0: Port device team_slave_0 added [ 193.552758] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 193.559862] team0: Port device team_slave_1 added [ 193.566405] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 193.575146] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 193.582453] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.589155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.597097] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.609041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.617313] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 193.627569] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 193.636907] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 193.645998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 193.664613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.673814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.681929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.689441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.697054] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.706274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 193.762752] device hsr_slave_0 entered promiscuous mode [ 193.810304] device hsr_slave_1 entered promiscuous mode [ 193.851276] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 193.859362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.867096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.874643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.882503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.890156] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.896502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.905605] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 193.912836] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 193.920832] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 193.929037] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 193.937114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.945085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.952856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.960607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.968061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.976007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.983874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.991559] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.997890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.005460] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 194.015072] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 194.024022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.035785] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 194.047075] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 194.055764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.063542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.071659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.081349] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 194.087408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.104390] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 194.119758] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 194.133494] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 194.142601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.152785] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 194.167632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.177942] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 194.189643] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 194.198775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.206942] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.214893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.223066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.230894] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.239278] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 194.253896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 194.265095] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 194.273373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.281841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.288806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.297883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.305784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.313111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.324633] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 194.331390] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.339356] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 01:38:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") socket$inet6(0xa, 0x2, 0x0) getpgid(0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000000)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x9f50) ioctl$LOOP_CLR_FD(r1, 0x4c01) [ 194.349452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.389883] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 194.396435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.412739] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 194.422927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.431879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.439410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.449532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.458449] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.464839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.481328] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 194.497039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.512035] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 194.520981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.527960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.537208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 01:38:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x4}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)) [ 194.549902] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.556314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.566553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.579021] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 194.589880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.603949] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 194.613363] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 194.642534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.649470] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 194.653511] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 194.679060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.689840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.700281] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 194.715997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 194.726170] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 194.737950] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.747199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.763660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.774374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.782989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.792984] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.803985] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 194.813642] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 194.823887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.834711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.843955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.855540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 01:38:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0) dup2(r1, r0) [ 194.864750] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.871296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.877740] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 194.899397] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 194.932379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.939569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.959914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.990918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.015342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.029642] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.036223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.052351] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 195.058412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.073055] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 195.087828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.107666] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 195.115656] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 195.123089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.139641] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 195.149584] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 195.163792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.174925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.185061] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.192974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.202705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.213220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 195.222466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.229632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.243011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.257309] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 195.265882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.276264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.292199] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 195.298388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.326976] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 195.349100] 8021q: adding VLAN 0 to HW filter on device batadv0 01:38:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003}) dup2(r1, r0) 01:38:34 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x201, &(0x7f0000000540)={0x0}) 01:38:34 executing program 0: pause() syz_execute_func(&(0x7f0000000080)="3666440f50f564ff0941c366440f56c9660f3a16649c6700c4617b12e5c441dfd04b00c442019dcc0f11d466400f3820c4") syz_execute_func(&(0x7f00000010c0)="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") 01:38:34 executing program 1: futex(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000001a00)="4a2be91c39980f05f7a6aae28920aec4a37bf0c50141e2e922ebc4a2fdc4c2b13815ad000000eceb262f43ca070064d11bc021c36f3d136400380000f2d2dec461dc57b1e67d0b25c4dc836d78d2beedbeed40dbe1491e2f160f41fe4cbec5c54d0f2c718f56c4627d793bc422c1afccc401b1e9bb05000000f8f86d40b2672641aff340aefa437e061f76ed1feda827c4a2a9095351c48255973b0f3a16288836670fe0a9f27f00009ad645672e3e66460fc2a90010000032450f700e008b8b27c4a2798f092802cee126e1d8463307383baac45b61c4217b708600800000001f1f460f3300028f6a78106f650300000066440fd3620066413a010fc442fd21b19b0f0f89ce000000a000f2f1a1c9000000001adddd411171f200594f01dcdc62c9ae49f1a79ad08181942400092ddd8f0b00c4a17ae64295007bf208b522ba22faa9a70000c481fc2eae2500000036338d8d83b9520800000dc4e27d0ed280003685aad9c7d26c1b014c593e40d9f50f001e570000a858edc4a125eb59dcc42119da3cb01100430fd1a2d08212d4e51cc40521f95a1717cc474cf9f240150f9e8b790f1adc000021f15a0cdac421fd29fa002d08000000009b5d8ea7a728285675440faff7653e460f19690dd58f4848cf241e4afcc423897ea165d400000632ad32750831c44109f89700008020") [ 195.617359] hrtimer: interrupt took 51145 ns [ 195.653124] warning: process `syz-executor.0' used the deprecated sysctl system call with [ 196.472866] BTRFS: device fsid ecf6f2a2-2997-48ae-b81e-1b00920efd9a devid 0 transid 63367720689871620 /dev/loop4 01:38:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003}) dup2(r1, r0) 01:38:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, 0x7fff, 0x0, 0x40, &(0x7f00001cb000/0x1000)=nil}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x2, 0x8000000000000000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7, 0x3, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0xfffffffbfffffffe, 0x0, 0x7fffffd, 0x0, 0xd1f, 0x6aa2, 0x40, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcd84}, 0x800000200000000, 0x2}, 0x0, 0x0, r1, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) mknod(&(0x7f0000000080)='./file0\x00', 0x80, 0xc56) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000001c0)={'vcan0\x00', {0x2, 0x4e23, @local}}) syz_execute_func(&(0x7f0000000100)="98460f72d4000f05c442fd31d3c4a37bf0c53e14d541e2e99fc4c1c162c112e296fbf39b0fc4014e66f66d220fa0e509ab34d1c4e10b0cdfc440a2b0d5be165e1d22ebf4a5b712650d0f6123d8894f0c0fddb2c95787fc3766450fe3900e00000000011d1dac26f20f38f0b4b60e000000c4660f7cafb11e00001166a79c6060545457f0b00bc483894837008d00f2f244c3c4c25d9dce826eae72f442dae966410f3a1754bf0099c42ec492df125b26264788fe58c4a1dd7dbbbfdd5cc6c4631540c4da7dc1c422e93c15e2b10400ae666744d8960000010030a1c9d6110ff8c11dc4a2b1e264") 01:38:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) get_robust_list(0x0, 0x0, 0x0) 01:38:35 executing program 3: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:38:35 executing program 1: setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x480000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x20000000, 0xffffffffffffffff, 0xe3}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 01:38:35 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) 01:38:35 executing program 3: pause() syz_execute_func(&(0x7f0000001040)="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") 01:38:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003}) dup2(r1, r0) 01:38:35 executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") msgsnd(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="03"], 0x1, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) 01:38:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x10e755) clone(0x300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x15, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x80000000000004) fcntl$setstatus(r1, 0x4, 0x10000000042807) 01:38:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000180)=0x21) write$binfmt_aout(r0, &(0x7f0000000280)={{}, "", [[]]}, 0x120) 01:38:35 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001580)=""/4096, 0x1000) 01:38:35 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="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", 0xfc) 01:38:35 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001580)=""/4096, 0x1000) 01:38:35 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, [0x12000000]}) 01:38:35 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001580)=""/4096, 0x1000) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0xac) [ 196.947188] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. 01:38:38 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xd, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, 0x0) 01:38:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93 /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.020666] syz-executor.5 D24992 6838 1 0x00000004 [ 428.026301] Call Trace: [ 428.028990] __schedule+0x7be/0x1cf0 [ 428.032833] ? __mutex_lock+0x737/0x1470 [ 428.036960] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.042306] schedule+0x92/0x1c0 [ 428.045934] schedule_preempt_disabled+0x13/0x20 [ 428.050783] __mutex_lock+0x73c/0x1470 [ 428.054681] ? lo_ioctl+0x87/0x1c70 [ 428.058370] ? lock_downgrade+0x620/0x6e0 [ 428.062815] ? mutex_trylock+0x1c0/0x1c0 [ 428.066872] ? avc_has_extended_perms+0x8ec/0xe40 [ 428.072348] ? putname+0xdb/0x120 [ 428.075813] ? avc_ss_reset+0x110/0x110 [ 428.079787] ? kasan_slab_free+0x75/0xc0 [ 428.084098] mutex_lock_nested+0x16/0x20 [ 428.088347] ? mutex_lock_nested+0x16/0x20 [ 428.092864] lo_ioctl+0x87/0x1c70 [ 428.096379] ? loop_probe+0x160/0x160 [ 428.100348] blkdev_ioctl+0x983/0x1880 [ 428.104229] ? blkpg_ioctl+0x980/0x980 [ 428.108172] ? __might_sleep+0x93/0xb0 [ 428.112174] block_ioctl+0xde/0x120 [ 428.115797] ? blkdev_fallocate+0x3b0/0x3b0 [ 428.120193] do_vfs_ioctl+0x7b9/0x1070 [ 428.124078] ? selinux_file_mprotect+0x5d0/0x5d0 [ 428.129132] ? ioctl_preallocate+0x1c0/0x1c0 [ 428.133646] ? putname+0xe0/0x120 [ 428.137161] ? do_sys_open+0x221/0x430 [ 428.141142] ? security_file_ioctl+0x83/0xc0 [ 428.145549] ? security_file_ioctl+0x8f/0xc0 [ 428.150006] SyS_ioctl+0x8f/0xc0 [ 428.153487] ? do_vfs_ioctl+0x1070/0x1070 [ 428.157738] do_syscall_64+0x1eb/0x630 [ 428.161725] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.166584] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.171864] RIP: 0033:0x458c17 [ 428.175049] RSP: 002b:00007ffdb831e688 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.182804] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c17 [ 428.190182] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 428.197461] RBP: 0000000000000042 R08: 0000000000000000 R09: 000000000000000a [ 428.205263] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 428.212602] R13: 00007ffdb831e6c0 R14: 0000000000032529 R15: 00007ffdb831e6d0 [ 428.219921] INFO: task syz-executor.0:6837 blocked for more than 140 seconds. [ 428.227301] Not tainted 4.14.114 #4 [ 428.231567] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.239528] syz-executor.0 D24848 6837 1 0x00000004 [ 428.245244] Call Trace: [ 428.247836] __schedule+0x7be/0x1cf0 [ 428.251594] ? __mutex_lock+0x737/0x1470 [ 428.255753] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.260832] schedule+0x92/0x1c0 [ 428.264203] schedule_preempt_disabled+0x13/0x20 [ 428.269169] __mutex_lock+0x73c/0x1470 [ 428.273329] ? trace_hardirqs_on+0x10/0x10 [ 428.277565] ? lo_open+0x1d/0xb0 [ 428.280985] ? refcount_add+0x40/0x50 [ 428.284788] ? mutex_trylock+0x1c0/0x1c0 [ 428.288838] ? find_held_lock+0x35/0x130 [ 428.292973] ? disk_get_part+0x9c/0x140 [ 428.297068] ? lock_downgrade+0x6e0/0x6e0 [ 428.301259] ? loop_unregister_transfer+0x90/0x90 [ 428.306196] mutex_lock_nested+0x16/0x20 [ 428.310657] ? mutex_lock_nested+0x16/0x20 [ 428.314975] lo_open+0x1d/0xb0 [ 428.318171] __blkdev_get+0x2c9/0x1120 [ 428.322171] ? __blkdev_put+0x7f0/0x7f0 [ 428.326154] ? bd_acquire+0x178/0x2c0 [ 428.329943] ? find_held_lock+0x35/0x130 [ 428.334682] blkdev_get+0xa8/0x8e0 [ 428.338218] ? bd_may_claim+0xd0/0xd0 [ 428.342063] ? _raw_spin_unlock+0x2d/0x50 [ 428.346292] blkdev_open+0x1d1/0x260 [ 428.349989] ? security_file_open+0x8f/0x1a0 [ 428.354534] do_dentry_open+0x73e/0xeb0 [ 428.358516] ? bd_acquire+0x2c0/0x2c0 [ 428.362363] vfs_open+0x105/0x230 [ 428.365817] path_openat+0x8bd/0x3f70 [ 428.369615] ? trace_hardirqs_on+0x10/0x10 [ 428.373924] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 428.378850] ? find_held_lock+0x35/0x130 [ 428.382967] ? __alloc_fd+0x1d4/0x4a0 [ 428.386775] do_filp_open+0x18e/0x250 [ 428.390640] ? may_open_dev+0xe0/0xe0 [ 428.394513] ? _raw_spin_unlock+0x2d/0x50 [ 428.398982] ? __alloc_fd+0x1d4/0x4a0 [ 428.402849] do_sys_open+0x2c5/0x430 [ 428.406667] ? filp_open+0x70/0x70 [ 428.410484] SyS_open+0x2d/0x40 [ 428.413777] ? do_sys_open+0x430/0x430 [ 428.417676] do_syscall_64+0x1eb/0x630 [ 428.421639] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.426490] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.431748] RIP: 0033:0x412d20 [ 428.434936] RSP: 002b:00007ffc2aac5018 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 428.442707] RAX: ffffffffffffffda RBX: 0000000000032860 RCX: 0000000000412d20 [ 428.450435] RDX: 00007ffc2aac50aa RSI: 0000000000000002 RDI: 00007ffc2aac50a0 [ 428.457798] RBP: 000000000000004c R08: 0000000000000000 R09: 000000000000000a [ 428.465614] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 428.473082] R13: 00007ffc2aac5050 R14: 000000000003252d R15: 00007ffc2aac5060 [ 428.480431] INFO: task syz-executor.3:6839 blocked for more than 140 seconds. [ 428.487875] Not tainted 4.14.114 #4 [ 428.492198] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.500377] syz-executor.3 D24992 6839 1 0x00000004 [ 428.506259] Call Trace: [ 428.508889] __schedule+0x7be/0x1cf0 [ 428.512692] ? __mutex_lock+0x737/0x1470 [ 428.516761] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.521834] schedule+0x92/0x1c0 [ 428.525197] schedule_preempt_disabled+0x13/0x20 [ 428.529954] __mutex_lock+0x73c/0x1470 [ 428.533897] ? trace_hardirqs_on+0x10/0x10 [ 428.538141] ? lo_open+0x1d/0xb0 [ 428.541591] ? refcount_add+0x40/0x50 [ 428.545506] ? mutex_trylock+0x1c0/0x1c0 [ 428.549668] ? find_held_lock+0x35/0x130 [ 428.553779] ? disk_get_part+0x9c/0x140 [ 428.557757] ? lock_downgrade+0x6e0/0x6e0 [ 428.562011] ? loop_unregister_transfer+0x90/0x90 [ 428.566852] mutex_lock_nested+0x16/0x20 [ 428.571077] ? mutex_lock_nested+0x16/0x20 [ 428.575339] lo_open+0x1d/0xb0 [ 428.581786] __blkdev_get+0x2c9/0x1120 [ 428.588219] ? __blkdev_put+0x7f0/0x7f0 [ 428.592692] ? bd_acquire+0x178/0x2c0 [ 428.596496] ? find_held_lock+0x35/0x130 [ 428.600707] blkdev_get+0xa8/0x8e0 [ 428.604257] ? bd_may_claim+0xd0/0xd0 [ 428.608062] ? _raw_spin_unlock+0x2d/0x50 [ 428.612380] blkdev_open+0x1d1/0x260 [ 428.616099] ? security_file_open+0x8f/0x1a0 [ 428.620616] do_dentry_open+0x73e/0xeb0 [ 428.624605] ? bd_acquire+0x2c0/0x2c0 [ 428.628393] vfs_open+0x105/0x230 [ 428.632169] path_openat+0x8bd/0x3f70 [ 428.636055] ? trace_hardirqs_on+0x10/0x10 [ 428.640419] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 428.645302] ? find_held_lock+0x35/0x130 [ 428.649565] ? __alloc_fd+0x1d4/0x4a0 [ 428.653436] do_filp_open+0x18e/0x250 [ 428.657254] ? may_open_dev+0xe0/0xe0 [ 428.661105] ? _raw_spin_unlock+0x2d/0x50 [ 428.665329] ? __alloc_fd+0x1d4/0x4a0 [ 428.669226] do_sys_open+0x2c5/0x430 [ 428.673014] ? filp_open+0x70/0x70 [ 428.676566] SyS_open+0x2d/0x40 [ 428.679840] ? do_sys_open+0x430/0x430 [ 428.684440] do_syscall_64+0x1eb/0x630 [ 428.688379] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.693280] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.698925] RIP: 0033:0x412d20 [ 428.702159] RSP: 002b:00007ffe15169438 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 428.709865] RAX: ffffffffffffffda RBX: 000000000003285f RCX: 0000000000412d20 [ 428.717878] RDX: 00007ffe151694ca RSI: 0000000000000002 RDI: 00007ffe151694c0 [ 428.725609] RBP: 000000000000004a R08: 0000000000000000 R09: 000000000000000a [ 428.733034] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 428.740627] R13: 00007ffe15169470 R14: 000000000003252b R15: 00007ffe15169480 [ 428.748041] INFO: task syz-executor.1:6840 blocked for more than 140 seconds. [ 428.755360] Not tainted 4.14.114 #4 [ 428.759506] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.768013] syz-executor.1 D24992 6840 1 0x00000004 [ 428.773746] Call Trace: [ 428.776328] __schedule+0x7be/0x1cf0 [ 428.780172] ? __mutex_lock+0x737/0x1470 [ 428.784234] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.789254] schedule+0x92/0x1c0 [ 428.792687] schedule_preempt_disabled+0x13/0x20 [ 428.797445] __mutex_lock+0x73c/0x1470 [ 428.801477] ? lo_ioctl+0x87/0x1c70 [ 428.805205] ? lock_downgrade+0x620/0x6e0 [ 428.809348] ? mutex_trylock+0x1c0/0x1c0 [ 428.813650] ? avc_has_extended_perms+0x8ec/0xe40 [ 428.818586] ? putname+0xdb/0x120 [ 428.822109] ? avc_ss_reset+0x110/0x110 [ 428.826348] ? kasan_slab_free+0x75/0xc0 [ 428.830478] mutex_lock_nested+0x16/0x20 [ 428.834696] ? mutex_lock_nested+0x16/0x20 [ 428.839123] lo_ioctl+0x87/0x1c70 [ 428.842658] ? loop_probe+0x160/0x160 [ 428.846624] blkdev_ioctl+0x983/0x1880 [ 428.851027] ? blkpg_ioctl+0x980/0x980 [ 428.855322] ? __might_sleep+0x93/0xb0 [ 428.859469] block_ioctl+0xde/0x120 [ 428.863170] ? blkdev_fallocate+0x3b0/0x3b0 [ 428.867669] do_vfs_ioctl+0x7b9/0x1070 [ 428.871615] ? selinux_file_mprotect+0x5d0/0x5d0 [ 428.876565] ? ioctl_preallocate+0x1c0/0x1c0 [ 428.881024] ? putname+0xe0/0x120 [ 428.884485] ? do_sys_open+0x221/0x430 [ 428.888378] ? security_file_ioctl+0x83/0xc0 [ 428.893077] ? security_file_ioctl+0x8f/0xc0 [ 428.897509] SyS_ioctl+0x8f/0xc0 [ 428.900932] ? do_vfs_ioctl+0x1070/0x1070 [ 428.905185] do_syscall_64+0x1eb/0x630 [ 428.909125] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.914037] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.919276] RIP: 0033:0x458c17 [ 428.922628] RSP: 002b:00007ffc4d9599e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.930381] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c17 [ 428.937733] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 428.945648] RBP: 0000000000000056 R08: 0000000000000000 R09: 000000000000000a [ 428.953356] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 428.960706] R13: 00007ffc4d959a20 R14: 000000000003252b R15: 00007ffc4d959a30 [ 428.967989] INFO: task syz-executor.4:6842 blocked for more than 140 seconds. [ 428.975325] Not tainted 4.14.114 #4 [ 428.979475] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.988039] syz-executor.4 D25168 6842 1 0x00000004 [ 428.993741] Call Trace: [ 428.996333] __schedule+0x7be/0x1cf0 [ 429.000103] ? __mutex_lock+0x737/0x1470 [ 429.004165] ? pci_mmcfg_check_reserved+0x150/0x150 [ 429.009269] schedule+0x92/0x1c0 [ 429.012691] schedule_preempt_disabled+0x13/0x20 [ 429.017454] __mutex_lock+0x73c/0x1470 [ 429.021479] ? __mutex_unlock_slowpath+0x71/0x800 [ 429.026322] ? __blkdev_get+0x145/0x1120 [ 429.030452] ? mutex_trylock+0x1c0/0x1c0 [ 429.034528] ? exact_match+0xd/0x20 [ 429.038151] ? kobj_lookup+0x319/0x410 [ 429.042547] ? blkdev_ioctl+0x1880/0x1880 [ 429.046697] mutex_lock_nested+0x16/0x20 [ 429.050884] ? mutex_lock_nested+0x16/0x20 [ 429.055123] __blkdev_get+0x145/0x1120 [ 429.059010] ? __blkdev_put+0x7f0/0x7f0 [ 429.063073] ? bd_acquire+0x178/0x2c0 [ 429.066936] ? find_held_lock+0x35/0x130 [ 429.071065] blkdev_get+0xa8/0x8e0 [ 429.074614] ? bd_may_claim+0xd0/0xd0 [ 429.078547] ? _raw_spin_unlock+0x2d/0x50 [ 429.082816] blkdev_open+0x1d1/0x260 [ 429.086649] ? security_file_open+0x8f/0x1a0 [ 429.091125] do_dentry_open+0x73e/0xeb0 [ 429.095098] ? bd_acquire+0x2c0/0x2c0 [ 429.098978] vfs_open+0x105/0x230 [ 429.102574] path_openat+0x8bd/0x3f70 [ 429.106425] ? trace_hardirqs_on+0x10/0x10 [ 429.111221] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 429.115971] ? find_held_lock+0x35/0x130 [ 429.120231] ? __alloc_fd+0x1d4/0x4a0 [ 429.124054] do_filp_open+0x18e/0x250 [ 429.128059] ? may_open_dev+0xe0/0xe0 [ 429.131943] ? _raw_spin_unlock+0x2d/0x50 [ 429.136144] ? __alloc_fd+0x1d4/0x4a0 [ 429.139948] do_sys_open+0x2c5/0x430 [ 429.143708] ? filp_open+0x70/0x70 [ 429.147253] SyS_open+0x2d/0x40 [ 429.150687] ? do_sys_open+0x430/0x430 [ 429.154578] do_syscall_64+0x1eb/0x630 [ 429.158448] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.163424] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.168634] RIP: 0033:0x412d20 [ 429.171907] RSP: 002b:00007fff9f90d908 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 429.179710] RAX: ffffffffffffffda RBX: 0000000000032571 RCX: 0000000000412d20 [ 429.187186] RDX: 00007fff9f90d99a RSI: 0000000000000002 RDI: 00007fff9f90d990 [ 429.194714] RBP: 000000000000003b R08: 0000000000000000 R09: 000000000000000a [ 429.202089] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 429.209356] R13: 00007fff9f90d940 R14: 000000000003255d R15: 00007fff9f90d950 [ 429.216703] INFO: task blkid:7487 blocked for more than 140 seconds. [ 429.223234] Not tainted 4.14.114 #4 [ 429.227365] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.235392] blkid D28512 7487 6801 0x00000004 [ 429.241445] Call Trace: [ 429.244078] __schedule+0x7be/0x1cf0 [ 429.247784] ? __mutex_lock+0x737/0x1470 [ 429.251926] ? pci_mmcfg_check_reserved+0x150/0x150 [ 429.256947] schedule+0x92/0x1c0 [ 429.260491] schedule_preempt_disabled+0x13/0x20 [ 429.265267] __mutex_lock+0x73c/0x1470 [ 429.269255] ? trace_hardirqs_on+0x10/0x10 [ 429.273653] ? lo_release+0x84/0x1b0 [ 429.277436] ? save_trace+0x250/0x290 [ 429.281319] ? mutex_trylock+0x1c0/0x1c0 [ 429.285375] ? __blkdev_put+0x397/0x7f0 [ 429.289364] ? find_held_lock+0x35/0x130 [ 429.293725] ? __blkdev_put+0x397/0x7f0 [ 429.297702] ? loop_clr_fd+0xae0/0xae0 [ 429.301651] mutex_lock_nested+0x16/0x20 [ 429.305724] ? mutex_lock_nested+0x16/0x20 [ 429.309949] lo_release+0x84/0x1b0 [ 429.313558] ? loop_clr_fd+0xae0/0xae0 [ 429.317505] __blkdev_put+0x436/0x7f0 [ 429.321384] ? bd_set_size+0xb0/0xb0 [ 429.325197] ? wait_for_completion+0x420/0x420 [ 429.329790] blkdev_put+0x88/0x510 [ 429.333373] ? fcntl_setlk+0xb90/0xb90 [ 429.337268] ? blkdev_put+0x510/0x510 [ 429.341114] blkdev_close+0x8b/0xb0 [ 429.344752] __fput+0x277/0x7a0 [ 429.348073] ____fput+0x16/0x20 [ 429.351416] task_work_run+0x119/0x190 [ 429.355317] exit_to_usermode_loop+0x1da/0x220 [ 429.359909] do_syscall_64+0x4a9/0x630 [ 429.363875] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.368737] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.374418] RIP: 0033:0x7fcf9b13a2b0 [ 429.378128] RSP: 002b:00007ffe010a2948 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 429.385897] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fcf9b13a2b0 [ 429.393206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 429.400689] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 429.408046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000002101030 [ 429.415494] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000005 [ 429.422883] INFO: task syz-executor.2:7491 blocked for more than 140 seconds. [ 429.430305] Not tainted 4.14.114 #4 [ 429.434444] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.442490] syz-executor.2 D28704 7491 6841 0x00000004 [ 429.448222] Call Trace: [ 429.451042] __schedule+0x7be/0x1cf0 [ 429.454844] ? __mutex_lock+0x737/0x1470 [ 429.458889] ? pci_mmcfg_check_reserved+0x150/0x150 [ 429.464079] schedule+0x92/0x1c0 [ 429.467446] schedule_preempt_disabled+0x13/0x20 [ 429.472249] __mutex_lock+0x73c/0x1470 [ 429.476140] ? blkdev_reread_part+0x1f/0x40 [ 429.480510] ? mutex_trylock+0x1c0/0x1c0 [ 429.484626] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 429.489787] ? __wake_up_common_lock+0xe3/0x160 [ 429.494679] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 429.499877] mutex_lock_nested+0x16/0x20 [ 429.504526] ? mutex_lock_nested+0x16/0x20 [ 429.508759] blkdev_reread_part+0x1f/0x40 [ 429.512958] loop_reread_partitions+0x7c/0x90 [ 429.517637] loop_set_status+0xc28/0x1200 [ 429.521977] loop_set_status64+0xa6/0xf0 [ 429.526039] ? loop_set_status_old+0x2d0/0x2d0 [ 429.530687] lo_ioctl+0x5c1/0x1c70 [ 429.534222] ? loop_probe+0x160/0x160 [ 429.538007] blkdev_ioctl+0x983/0x1880 [ 429.541928] ? blkpg_ioctl+0x980/0x980 [ 429.545884] ? __might_sleep+0x93/0xb0 [ 429.549755] ? __fget+0x210/0x370 [ 429.553241] block_ioctl+0xde/0x120 [ 429.556862] ? blkdev_fallocate+0x3b0/0x3b0 [ 429.561236] do_vfs_ioctl+0x7b9/0x1070 [ 429.565117] ? selinux_file_mprotect+0x5d0/0x5d0 [ 429.569853] ? lock_downgrade+0x6e0/0x6e0 [ 429.574036] ? ioctl_preallocate+0x1c0/0x1c0 [ 429.578440] ? __fget+0x237/0x370 [ 429.581928] ? security_file_ioctl+0x8f/0xc0 [ 429.590441] SyS_ioctl+0x8f/0xc0 [ 429.593800] ? do_vfs_ioctl+0x1070/0x1070 [ 429.598028] do_syscall_64+0x1eb/0x630 [ 429.602026] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.606863] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.612206] RIP: 0033:0x458c17 [ 429.615401] RSP: 002b:00007f5a719e09f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 429.623261] RAX: ffffffffffffffda RBX: 00007f5a719e16d4 RCX: 0000000000458c17 [ 429.630954] RDX: 00007f5a719e0ab0 RSI: 0000000000004c04 RDI: 0000000000000004 [ 429.639005] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 429.646536] R10: 0000000000000075 R11: 0000000000000202 R12: 0000000000000003 [ 429.653848] R13: 0000000000000003 R14: 0000000000000004 R15: 00000000ffffffff [ 429.661189] INFO: task syz-executor.2:7499 blocked for more than 140 seconds. [ 429.668468] Not tainted 4.14.114 #4 [ 429.672677] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.681087] syz-executor.2 D29184 7499 6841 0x00000004 [ 429.686726] Call Trace: [ 429.689318] __schedule+0x7be/0x1cf0 [ 429.693349] ? __mutex_lock+0x737/0x1470 [ 429.697416] ? pci_mmcfg_check_reserved+0x150/0x150 [ 429.702556] schedule+0x92/0x1c0 [ 429.705925] schedule_preempt_disabled+0x13/0x20 [ 429.710736] __mutex_lock+0x73c/0x1470 [ 429.714732] ? __mutex_unlock_slowpath+0x71/0x800 [ 429.719843] ? __blkdev_get+0x145/0x1120 [ 429.724047] ? mutex_trylock+0x1c0/0x1c0 [ 429.728120] ? exact_match+0xd/0x20 [ 429.731920] ? kobj_lookup+0x319/0x410 [ 429.735816] ? blkdev_ioctl+0x1880/0x1880 [ 429.739953] mutex_lock_nested+0x16/0x20 [ 429.744064] ? mutex_lock_nested+0x16/0x20 [ 429.748487] __blkdev_get+0x145/0x1120 [ 429.752450] ? __blkdev_put+0x7f0/0x7f0 [ 429.756429] ? bd_acquire+0x178/0x2c0 [ 429.761076] ? find_held_lock+0x35/0x130 [ 429.765142] blkdev_get+0xa8/0x8e0 [ 429.768804] ? bd_may_claim+0xd0/0xd0 [ 429.772666] ? _raw_spin_unlock+0x2d/0x50 [ 429.776904] blkdev_open+0x1d1/0x260 [ 429.780852] ? security_file_open+0x8f/0x1a0 [ 429.785381] do_dentry_open+0x73e/0xeb0 [ 429.789414] ? bd_acquire+0x2c0/0x2c0 [ 429.793291] vfs_open+0x105/0x230 [ 429.796855] path_openat+0x8bd/0x3f70 [ 429.800713] ? trace_hardirqs_on+0x10/0x10 [ 429.805155] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 429.809826] ? find_held_lock+0x35/0x130 [ 429.814005] ? __alloc_fd+0x1d4/0x4a0 [ 429.817816] do_filp_open+0x18e/0x250 [ 429.821798] ? may_open_dev+0xe0/0xe0 [ 429.825611] ? _raw_spin_unlock+0x2d/0x50 [ 429.829882] ? __alloc_fd+0x1d4/0x4a0 [ 429.833753] do_sys_open+0x2c5/0x430 [ 429.837472] ? filp_open+0x70/0x70 [ 429.841064] ? fput+0xd4/0x150 [ 429.844255] ? SyS_pwrite64+0xca/0x140 [ 429.848153] SyS_open+0x2d/0x40 [ 429.851748] ? do_sys_open+0x430/0x430 [ 429.855718] do_syscall_64+0x1eb/0x630 [ 429.859602] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.864603] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.869806] RIP: 0033:0x412d41 [ 429.873231] RSP: 002b:00007f5a719bf9f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 429.880994] RAX: ffffffffffffffda RBX: 00007f5a719c06d4 RCX: 0000000000412d41 [ 429.888284] RDX: 00007f5a719bfbaa RSI: 0000000000000002 RDI: 00007f5a719bfba0 [ 429.896175] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 429.903487] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 [ 429.910892] R13: 0000000000000003 R14: 00007f5a719c06d4 R15: 00000000ffffffff [ 429.918258] INFO: task blkid:7493 blocked for more than 140 seconds. [ 429.924830] Not tainted 4.14.114 #4 [ 429.928973] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.937619] blkid D29040 7493 6477 0x00000004 [ 429.943312] Call Trace: [ 429.945902] __schedule+0x7be/0x1cf0 [ 429.949600] ? __mutex_lock+0x737/0x1470 [ 429.953922] ? pci_mmcfg_check_reserved+0x150/0x150 [ 429.958997] schedule+0x92/0x1c0 [ 429.962420] schedule_preempt_disabled+0x13/0x20 [ 429.967172] __mutex_lock+0x73c/0x1470 [ 429.971105] ? lo_open+0x1d/0xb0 [ 429.974558] ? refcount_add+0x40/0x50 [ 429.978571] ? mutex_trylock+0x1c0/0x1c0 [ 429.982676] ? exact_match+0xd/0x20 [ 429.986308] ? kobj_lookup+0x319/0x410 [ 429.990260] ? loop_unregister_transfer+0x90/0x90 [ 429.995253] mutex_lock_nested+0x16/0x20 [ 429.999582] ? mutex_lock_nested+0x16/0x20 [ 430.003875] lo_open+0x1d/0xb0 [ 430.007064] __blkdev_get+0xab1/0x1120 [ 430.011015] ? __blkdev_put+0x7f0/0x7f0 [ 430.014987] ? bd_acquire+0x178/0x2c0 [ 430.018882] ? find_held_lock+0x35/0x130 [ 430.023598] blkdev_get+0xa8/0x8e0 [ 430.027161] ? bd_may_claim+0xd0/0xd0 [ 430.031053] ? _raw_spin_unlock+0x2d/0x50 [ 430.035211] blkdev_open+0x1d1/0x260 [ 430.039011] ? security_file_open+0x8f/0x1a0 [ 430.043495] do_dentry_open+0x73e/0xeb0 [ 430.047478] ? bd_acquire+0x2c0/0x2c0 [ 430.051345] vfs_open+0x105/0x230 [ 430.054814] path_openat+0x8bd/0x3f70 [ 430.058617] ? trace_hardirqs_on+0x10/0x10 [ 430.063076] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 430.067750] ? find_held_lock+0x35/0x130 [ 430.071882] ? __alloc_fd+0x1d4/0x4a0 [ 430.075703] do_filp_open+0x18e/0x250 [ 430.079507] ? may_open_dev+0xe0/0xe0 [ 430.083419] ? _raw_spin_unlock+0x2d/0x50 [ 430.087578] ? __alloc_fd+0x1d4/0x4a0 [ 430.091460] do_sys_open+0x2c5/0x430 [ 430.095268] ? filp_open+0x70/0x70 [ 430.098817] SyS_open+0x2d/0x40 [ 430.102155] ? do_sys_open+0x430/0x430 [ 430.106137] do_syscall_64+0x1eb/0x630 [ 430.110085] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.114943] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 430.120189] RIP: 0033:0x7f2d6c56f120 [ 430.123903] RSP: 002b:00007fff3e409058 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 430.132211] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2d6c56f120 [ 430.139490] RDX: 00007fff3e409f41 RSI: 0000000000000000 RDI: 00007fff3e409f41 [ 430.146854] RBP: 0000000000000000 R08: 0000000000000078 R09: 0000000000000000 [ 430.160253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000001838030 [ 430.167821] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005 [ 430.190079] [ 430.190079] Showing all locks held in the system: [ 430.196451] 1 lock held by khungtaskd/1008: [ 430.201026] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f [ 430.210207] 1 lock held by rsyslogd/6671: [ 430.214434] #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0xab/0xd0 [ 430.222769] 2 locks held by getty/6794: [ 430.226739] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.235516] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.244887] 2 locks held by getty/6795: [ 430.248857] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.257619] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.266975] 2 locks held by getty/6796: [ 430.271025] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.279711] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.289099] 2 locks held by getty/6797: [ 430.293110] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.301882] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.311235] 2 locks held by getty/6798: [ 430.315219] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.323987] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.333329] 2 locks held by getty/6799: [ 430.337302] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.346068] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.355430] 2 locks held by getty/6800: [ 430.359400] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.368256] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.377624] 1 lock held by syz-executor.5/6838: [ 430.382344] #0: (loop_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1c70 [ 430.390914] 2 locks held by syz-executor.0/6837: [ 430.395843] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.404792] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 430.412933] 2 locks held by syz-executor.3/6839: [ 430.417683] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.426478] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 430.434801] 1 lock held by syz-executor.1/6840: [ 430.439472] #0: (loop_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1c70 [ 430.447900] 1 lock held by syz-executor.4/6842: [ 430.452628] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.461374] 3 locks held by blkid/7487: [ 430.465350] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_put+0xa6/0x7f0 [ 430.473919] #1: (loop_index_mutex){+.+.}, at: [] lo_release+0x1e/0x1b0 [ 430.482574] #2: (loop_ctl_mutex#2){+.+.}, at: [] lo_release+0x84/0x1b0 [ 430.491087] 2 locks held by syz-executor.2/7491: [ 430.495847] #0: (loop_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1c70 [ 430.504247] #1: (&bdev->bd_mutex){+.+.}, at: [] blkdev_reread_part+0x1f/0x40 [ 430.513247] 1 lock held by syz-executor.2/7499: [ 430.517916] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.526670] 2 locks held by blkid/7493: [ 430.530677] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.539376] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 430.547532] [ 430.549157] ============================================= [ 430.549157] [ 430.556985] NMI backtrace for cpu 1 [ 430.560663] CPU: 1 PID: 1008 Comm: khungtaskd Not tainted 4.14.114 #4 [ 430.567243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.576601] Call Trace: [ 430.579199] dump_stack+0x138/0x19c [ 430.582834] nmi_cpu_backtrace.cold+0x57/0x94 [ 430.587334] ? irq_force_complete_move.cold+0x7d/0x7d [ 430.592535] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 430.597826] arch_trigger_cpumask_backtrace+0x14/0x20 [ 430.606155] watchdog+0x5e7/0xb90 [ 430.609628] kthread+0x31c/0x430 [ 430.613258] ? hungtask_pm_notify+0x60/0x60 [ 430.617614] ? kthread_create_on_node+0xd0/0xd0 [ 430.622272] ret_from_fork+0x3a/0x50 [ 430.626040] Sending NMI from CPU 1 to CPUs 0: [ 430.630917] NMI backtrace for cpu 0 [ 430.630920] CPU: 0 PID: 94 Comm: kworker/u4:2 Not tainted 4.14.114 #4 [ 430.630924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.630926] Workqueue: bat_events batadv_nc_worker [ 430.630930] task: ffff8880a9994140 task.stack: ffff8880a99a0000 [ 430.630933] RIP: 0010:lock_release+0x55f/0x940 [ 430.630935] RSP: 0018:ffff8880a99a7ba8 EFLAGS: 00000802 [ 430.630939] RAX: 0000000000000000 RBX: 1ffff11015334f7b RCX: 1ffff11015332936 [ 430.630942] RDX: 1ffff11015332937 RSI: 0000000000000003 RDI: ffff8880a9994140 [ 430.630945] RBP: ffff8880a99a7c40 R08: ffff8880a9994140 R09: 0000000000000003 [ 430.630948] R10: 0000000000000000 R11: ffff8880a9994140 R12: dca72f88dd043cf1 [ 430.630951] R13: ffffffff86034dc5 R14: 0000000000000003 R15: ffff8880a99a7c18 [ 430.630954] FS: 0000000000000000(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 430.630956] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.630959] CR2: 00007f9bb95bd000 CR3: 00000000a942a000 CR4: 00000000001406f0 [ 430.630962] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 430.630964] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.630966] Call Trace: [ 430.630968] ? lock_downgrade+0x6e0/0x6e0 [ 430.630971] ? batadv_nc_to_purge_nc_path_coding+0x140/0x140 [ 430.630973] _raw_spin_unlock_bh+0x1b/0x40 [ 430.630975] batadv_nc_purge_paths+0x245/0x350 [ 430.630977] ? lock_downgrade+0x6e0/0x6e0 [ 430.630979] batadv_nc_worker+0x270/0x6d0 [ 430.630981] process_one_work+0x868/0x1610 [ 430.630983] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 430.630985] worker_thread+0x5d9/0x1050 [ 430.630987] kthread+0x31c/0x430 [ 430.630989] ? process_one_work+0x1610/0x1610 [ 430.630991] ? kthread_create_on_node+0xd0/0xd0 [ 430.630993] ret_from_fork+0x3a/0x50 [ 430.630995] Code: 0d d7 a6 b9 7e 0f 85 0d fc ff ff e8 80 fb b7 ff e9 03 fc ff ff 48 b8 00 00 00 00 00 fc ff df 48 8b 55 90 48 c1 ea 03 0f b6 04 02 <84> c0 74 08 3c 03 0f 8e 84 03 00 00 41 83 e9 01 45 39 88 78 08 [ 430.631672] Kernel panic - not syncing: hung_task: blocked tasks [ 430.834790] CPU: 1 PID: 1008 Comm: khungtaskd Not tainted 4.14.114 #4 [ 430.841343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.850693] Call Trace: [ 430.853286] dump_stack+0x138/0x19c [ 430.856896] panic+0x1f2/0x438 [ 430.860068] ? add_taint.cold+0x16/0x16 [ 430.864020] ? irq_force_complete_move.cold+0x7d/0x7d [ 430.869196] watchdog+0x5f8/0xb90 [ 430.872635] kthread+0x31c/0x430 [ 430.875993] ? hungtask_pm_notify+0x60/0x60 [ 430.880394] ? kthread_create_on_node+0xd0/0xd0 [ 430.885068] ret_from_fork+0x3a/0x50 [ 430.890461] Kernel Offset: disabled [ 430.894090] Rebooting in 86400 seconds..