[ 37.587758] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.219' (ECDSA) to the list of known hosts. [ 43.141676] random: sshd: uninitialized urandom read (32 bytes read) 2019/05/01 11:11:27 fuzzer started [ 43.356736] audit: type=1400 audit(1556709087.230:36): avc: denied { map } for pid=7093 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 45.263517] random: cc1: uninitialized urandom read (8 bytes read) 2019/05/01 11:11:29 dialing manager at 10.128.0.105:41179 2019/05/01 11:11:30 syscalls: 2434 2019/05/01 11:11:30 code coverage: enabled 2019/05/01 11:11:30 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/05/01 11:11:30 extra coverage: extra coverage is not supported by the kernel 2019/05/01 11:11:30 setuid sandbox: enabled 2019/05/01 11:11:30 namespace sandbox: enabled 2019/05/01 11:11:30 Android sandbox: /sys/fs/selinux/policy does not exist 2019/05/01 11:11:30 fault injection: enabled 2019/05/01 11:11:30 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/05/01 11:11:30 net packet injection: enabled 2019/05/01 11:11:30 net device setup: enabled [ 48.157237] random: crng init done 11:13:57 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, 0x0, &(0x7f00000001c0)) geteuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@empty, @in6=@local}}, {{@in6}, 0x0, @in=@initdev}}, 0x0) getresuid(&(0x7f0000000680), &(0x7f00000006c0)=0x0, 0x0) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000800)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0x0]) fstat(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000008c0)) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000a00)={{}, {0x1, 0x3}, [{0x2, 0x0, r1}, {0x2, 0x4, r2}, {}, {0x2, 0x4, r3}, {0x2, 0x4, r4}], {0x4, 0x4}, [{0x8, 0x7, r5}, {0x8, 0x2, r6}, {0x8, 0x0, r7}], {0x10, 0x1}}, 0x64, 0x3) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 11:13:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$TCSETS(r0, 0x5402, &(0x7f0000000200)) 11:13:58 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 194.063469] audit: type=1400 audit(1556709237.940:37): avc: denied { map } for pid=7093 comm="syz-fuzzer" path="/root/syzkaller-shm502438593" dev="sda1" ino=16461 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 11:13:58 executing program 2: syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x4000) 11:13:58 executing program 3: r0 = semget$private(0x0, 0x3, 0x0) semctl$SETVAL(r0, 0x4, 0x10, 0x0) 11:13:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) [ 194.122917] audit: type=1400 audit(1556709238.000:38): avc: denied { map } for pid=7110 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=22 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 194.343482] IPVS: ftp: loaded support on port[0] = 21 [ 194.655787] chnl_net:caif_netlink_parms(): no params data found [ 194.665035] IPVS: ftp: loaded support on port[0] = 21 [ 194.722617] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.729075] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.736242] device bridge_slave_0 entered promiscuous mode [ 194.745794] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.752295] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.759406] device bridge_slave_1 entered promiscuous mode [ 194.789296] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.804294] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.838329] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 194.850769] team0: Port device team_slave_0 added [ 194.871764] IPVS: ftp: loaded support on port[0] = 21 [ 194.884136] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 194.891864] team0: Port device team_slave_1 added [ 194.902679] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 194.922222] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 194.929438] chnl_net:caif_netlink_parms(): no params data found [ 195.022865] device hsr_slave_0 entered promiscuous mode [ 195.070351] device hsr_slave_1 entered promiscuous mode [ 195.146942] IPVS: ftp: loaded support on port[0] = 21 [ 195.165314] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 195.187300] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.195080] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.202256] device bridge_slave_0 entered promiscuous mode [ 195.209586] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 195.224169] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.231700] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.239136] device bridge_slave_1 entered promiscuous mode [ 195.279876] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 195.307081] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 195.315537] IPVS: ftp: loaded support on port[0] = 21 [ 195.375919] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 195.384382] team0: Port device team_slave_0 added [ 195.390613] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.397111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.404225] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.410740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.425714] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 195.433763] team0: Port device team_slave_1 added [ 195.445321] chnl_net:caif_netlink_parms(): no params data found [ 195.467365] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 195.475170] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 195.553381] device hsr_slave_0 entered promiscuous mode [ 195.600377] device hsr_slave_1 entered promiscuous mode [ 195.643626] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 195.666937] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 195.694184] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.720445] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.729776] IPVS: ftp: loaded support on port[0] = 21 [ 195.794733] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.801887] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.808815] device bridge_slave_0 entered promiscuous mode [ 195.818352] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.825335] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.832616] device bridge_slave_1 entered promiscuous mode [ 195.855367] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 195.878921] chnl_net:caif_netlink_parms(): no params data found [ 195.895008] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 195.950600] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 196.012635] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 196.019927] team0: Port device team_slave_0 added [ 196.045182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.057761] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 196.065389] team0: Port device team_slave_1 added [ 196.074525] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 196.082916] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.089993] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.097516] device bridge_slave_0 entered promiscuous mode [ 196.105474] chnl_net:caif_netlink_parms(): no params data found [ 196.122206] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.129012] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 196.144571] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.151584] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.158697] device bridge_slave_1 entered promiscuous mode [ 196.186289] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 196.205096] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 196.216799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.226523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.292186] device hsr_slave_0 entered promiscuous mode [ 196.330326] device hsr_slave_1 entered promiscuous mode [ 196.390911] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 196.399902] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 196.419191] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 196.425420] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.436023] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 196.477165] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 196.484374] team0: Port device team_slave_0 added [ 196.490148] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 196.498469] team0: Port device team_slave_1 added [ 196.503899] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 196.511533] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.518018] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.525607] device bridge_slave_0 entered promiscuous mode [ 196.532697] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.539422] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.547263] device bridge_slave_1 entered promiscuous mode [ 196.568262] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 196.588963] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 196.634282] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 196.642909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.652959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.660776] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.667207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.676443] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 196.734014] device hsr_slave_0 entered promiscuous mode [ 196.781264] device hsr_slave_1 entered promiscuous mode [ 196.841286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.850426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.858088] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.864504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.872806] chnl_net:caif_netlink_parms(): no params data found [ 196.883664] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 196.898608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.910914] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 196.925397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 196.935810] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 196.945077] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.954639] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 196.971686] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 196.977805] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.984392] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 196.995086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.003418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.010407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.036872] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 197.050801] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 197.059185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.068808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.077443] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.083846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.091214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.099285] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 197.107658] team0: Port device team_slave_0 added [ 197.113584] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 197.121250] team0: Port device team_slave_1 added [ 197.145939] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 197.152917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.161833] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 197.171507] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 197.181347] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 197.194977] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.202371] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.209536] device bridge_slave_0 entered promiscuous mode [ 197.216307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.224736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.232503] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.238857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.247356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.255278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.264274] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 197.271882] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 197.294285] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.302026] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.309086] device bridge_slave_1 entered promiscuous mode [ 197.315390] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.323180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.336246] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 197.345181] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 197.383807] device hsr_slave_0 entered promiscuous mode [ 197.420387] device hsr_slave_1 entered promiscuous mode [ 197.471276] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 197.478913] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 197.498290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.506481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.514386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.527084] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 197.544711] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.553882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.562015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.570887] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.580229] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 197.592611] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 197.599501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.607917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.618118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.626067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.635782] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.647791] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 197.669918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.677789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.687436] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 197.706384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 197.716449] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 197.730624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.738975] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 197.746285] team0: Port device team_slave_0 added [ 197.752731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.762731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.770733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.778365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.786470] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 197.792687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.800830] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 197.807345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.826362] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 197.846345] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 197.855264] team0: Port device team_slave_1 added [ 197.861615] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 197.872978] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 197.888341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.904497] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.919907] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 197.929817] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 197.936317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.943722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.953664] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 198.015115] device hsr_slave_0 entered promiscuous mode [ 198.060332] device hsr_slave_1 entered promiscuous mode [ 198.100951] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 198.114790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.126252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.142238] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 198.148349] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.155525] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 198.165926] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 198.180312] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 198.189931] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 198.214297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.222122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.229034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.237783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.246597] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.253129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.265125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.273124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.283397] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.289757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.300568] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 198.306747] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.317697] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 198.328735] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 198.336999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.344672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.353451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.363063] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.371252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.378809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.388354] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 198.401188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 198.415503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.423568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.431496] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.437851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.445288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.456568] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 198.471623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.482599] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 198.495893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.506642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.518832] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 198.528655] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 198.536753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.545114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.554739] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 198.573753] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 198.586714] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 198.600586] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.609917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 11:14:02 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000015c0)}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000004"]) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000180)={'sit0\x00', @ifru_flags}) [ 198.626731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.638753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.647242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.657776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.668212] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 198.679830] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 198.699916] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 198.708257] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.721613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 11:14:02 executing program 3: 11:14:02 executing program 3: [ 198.731198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.738859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.752544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.768413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 11:14:02 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) [ 198.788339] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 198.800537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.815323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 11:14:02 executing program 3: ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="8cb613d38c51b6422b61caee6d0952d4", 0x10) [ 198.846355] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 198.869538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.887064] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready 11:14:02 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000d6de8e219d5586dd6008de0600303a00000000000000000000010000000000000000010200907800000000609433df000000000000000000000000000000000000000100000000000000000000000000000001"], 0x0) [ 198.900849] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 198.907308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.942770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.954416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.962372] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.968734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.975814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.984169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.994979] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 199.004392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.013319] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 199.022783] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 199.034621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.042460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.049836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.056882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.064934] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 199.076277] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 199.086819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.095443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.108426] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.114859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.122646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.130284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.139899] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 199.146663] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.154706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 199.164445] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 199.175871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.191787] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 199.199804] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 199.207749] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 199.214979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.225756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.233974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.241895] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.248263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.255241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.263442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.274035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.286979] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 199.300614] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 199.309900] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 199.318766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.328184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.336177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.344462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.352590] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.359079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.366524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.376365] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 199.386831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 199.394615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.403083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.411057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.418903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.431946] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 199.443637] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 199.457381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.470796] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 199.477268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.486258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.496204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.504724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.516157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.531502] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 199.539129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.553797] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 199.568848] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 199.578321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.592821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.609211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.619066] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 199.636304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.644037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.654571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.674210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 199.684602] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 199.695337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.704293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.712489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.725863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.736335] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 199.748360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.807957] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 199.822738] 8021q: adding VLAN 0 to HW filter on device batadv0 11:14:04 executing program 5: 11:14:04 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket(0x0, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) 11:14:04 executing program 0: 11:14:04 executing program 1: 11:14:04 executing program 2: [ 200.984654] audit: type=1400 audit(1556709244.860:39): avc: denied { create } for pid=7213 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 11:14:05 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14, 0x800) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) epoll_create(0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000440)=""/99, 0x63, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7) write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7) sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024) creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prctl$PR_GET_FP_MODE(0x2e) open(&(0x7f0000000200)='./file0\x00', 0x400, 0x2) 11:14:05 executing program 5: 11:14:05 executing program 1: 11:14:05 executing program 0: fchown(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 11:14:05 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="0adc1f123c123f319b") r0 = socket$packet(0x11, 0xffffffffffffffff, 0x300) fchown(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 11:14:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8000001000008912, 0x0) socket$packet(0x11, 0xffffffffffffffff, 0x300) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) [ 201.180987] hrtimer: interrupt took 50503 ns 11:14:05 executing program 3: 11:14:05 executing program 1: [ 201.289839] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 201.300876] audit: type=1400 audit(1556709245.170:40): avc: denied { create } for pid=7233 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 201.326916] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 201.329307] audit: type=1400 audit(1556709245.170:41): avc: denied { write } for pid=7233 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 201.363959] audit: type=1400 audit(1556709245.190:42): avc: denied { read } for pid=7233 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 201.421960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 11:14:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8000001000008912, &(0x7f0000000000)) r1 = socket$packet(0x11, 0xffffffffffffffff, 0x300) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 11:14:05 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14, 0x800) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7) write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7) sendfile(r0, r3, 0x0, 0x800000000024) creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) open(0x0, 0x0, 0x2) 11:14:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x10000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x401, 0x0, 0x0) 11:14:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d0d) 11:14:05 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) [ 201.669449] audit: type=1804 audit(1556709245.540:43): pid=7258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir539832520/syzkaller.u23uei/3/bus" dev="sda1" ino=16565 res=1 [ 201.845733] audit: type=1804 audit(1556709245.720:44): pid=7267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir539832520/syzkaller.u23uei/3/bus" dev="sda1" ino=16565 res=1 11:14:05 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x8000001000008912, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 11:14:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8000001000008912, 0x0) socket$packet(0x11, 0xffffffffffffffff, 0x300) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) [ 201.900780] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 201.925982] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 201.995253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.057987] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 202.110287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 11:14:06 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14, 0x800) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7) write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7) sendfile(r0, r3, 0x0, 0x800000000024) creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) open(0x0, 0x0, 0x2) [ 377.786463] audit: type=1400 audit(1556709421.660:45): avc: denied { map } for pid=7280 comm="sh" path="/bin/dash" dev="sda1" ino=1473 scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 427.990680] INFO: task syz-executor.2:7118 blocked for more than 140 seconds. [ 427.998161] Not tainted 4.14.114 #4 [ 428.002520] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.010547] syz-executor.2 D24992 7118 1 0x00000004 [ 428.016274] Call Trace: [ 428.019043] __schedule+0x7be/0x1cf0 [ 428.023110] ? __mutex_lock+0x737/0x1470 [ 428.027219] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.032304] schedule+0x92/0x1c0 [ 428.035675] schedule_preempt_disabled+0x13/0x20 [ 428.040525] __mutex_lock+0x73c/0x1470 [ 428.044504] ? lo_ioctl+0x87/0x1c70 [ 428.048240] ? lock_downgrade+0x620/0x6e0 [ 428.052447] ? mutex_trylock+0x1c0/0x1c0 [ 428.056524] ? avc_has_extended_perms+0x8ec/0xe40 [ 428.061429] ? putname+0xdb/0x120 [ 428.064887] ? avc_ss_reset+0x110/0x110 [ 428.068855] ? kasan_slab_free+0x75/0xc0 [ 428.073097] mutex_lock_nested+0x16/0x20 [ 428.077163] ? mutex_lock_nested+0x16/0x20 [ 428.081454] lo_ioctl+0x87/0x1c70 [ 428.084913] ? loop_probe+0x160/0x160 [ 428.088711] blkdev_ioctl+0x983/0x1880 [ 428.092652] ? blkpg_ioctl+0x980/0x980 [ 428.096644] ? __might_sleep+0x93/0xb0 [ 428.101283] block_ioctl+0xde/0x120 [ 428.104915] ? blkdev_fallocate+0x3b0/0x3b0 [ 428.109267] do_vfs_ioctl+0x7b9/0x1070 [ 428.113238] ? selinux_file_mprotect+0x5d0/0x5d0 [ 428.118006] ? ioctl_preallocate+0x1c0/0x1c0 [ 428.122617] ? putname+0xe0/0x120 [ 428.126201] ? do_sys_open+0x221/0x430 [ 428.130257] ? security_file_ioctl+0x83/0xc0 [ 428.134669] ? security_file_ioctl+0x8f/0xc0 [ 428.139068] SyS_ioctl+0x8f/0xc0 [ 428.142488] ? do_vfs_ioctl+0x1070/0x1070 [ 428.146648] do_syscall_64+0x1eb/0x630 [ 428.150728] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.155706] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.161025] RIP: 0033:0x458c17 [ 428.164228] RSP: 002b:00007ffed72beaf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.172026] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c17 [ 428.179607] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 428.186925] RBP: 0000000000000009 R08: 0000000000000000 R09: 000000000000000a [ 428.194246] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 428.202311] R13: 00007ffed72beb30 R14: 0000000000031398 R15: 00007ffed72beb40 [ 428.209631] INFO: task syz-executor.1:7119 blocked for more than 140 seconds. [ 428.216984] Not tainted 4.14.114 #4 [ 428.221170] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.229143] syz-executor.1 D25168 7119 1 0x00000004 [ 428.235378] Call Trace: [ 428.237978] __schedule+0x7be/0x1cf0 [ 428.241839] ? __mutex_lock+0x737/0x1470 [ 428.245913] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.251006] schedule+0x92/0x1c0 [ 428.254387] schedule_preempt_disabled+0x13/0x20 [ 428.259141] __mutex_lock+0x73c/0x1470 [ 428.263084] ? trace_hardirqs_on+0x10/0x10 [ 428.267389] ? lo_open+0x1d/0xb0 [ 428.270827] ? refcount_add+0x40/0x50 [ 428.274634] ? mutex_trylock+0x1c0/0x1c0 [ 428.278692] ? find_held_lock+0x35/0x130 [ 428.282819] ? disk_get_part+0x9c/0x140 [ 428.286991] ? lock_downgrade+0x6e0/0x6e0 [ 428.291242] ? loop_unregister_transfer+0x90/0x90 [ 428.296096] mutex_lock_nested+0x16/0x20 [ 428.300223] ? mutex_lock_nested+0x16/0x20 [ 428.304503] lo_open+0x1d/0xb0 [ 428.307707] __blkdev_get+0x2c9/0x1120 [ 428.311654] ? __blkdev_put+0x7f0/0x7f0 [ 428.315635] ? bd_acquire+0x178/0x2c0 [ 428.319469] ? find_held_lock+0x35/0x130 [ 428.323613] blkdev_get+0xa8/0x8e0 [ 428.327161] ? bd_may_claim+0xd0/0xd0 [ 428.331070] ? _raw_spin_unlock+0x2d/0x50 [ 428.335245] blkdev_open+0x1d1/0x260 [ 428.338957] ? security_file_open+0x8f/0x1a0 [ 428.343455] do_dentry_open+0x73e/0xeb0 [ 428.347438] ? bd_acquire+0x2c0/0x2c0 [ 428.351406] vfs_open+0x105/0x230 [ 428.354869] path_openat+0x8bd/0x3f70 [ 428.358662] ? trace_hardirqs_on+0x10/0x10 [ 428.363668] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 428.368436] ? find_held_lock+0x35/0x130 [ 428.372554] ? __alloc_fd+0x1d4/0x4a0 [ 428.376507] do_filp_open+0x18e/0x250 [ 428.380516] ? may_open_dev+0xe0/0xe0 [ 428.384468] ? _raw_spin_unlock+0x2d/0x50 [ 428.388780] ? __alloc_fd+0x1d4/0x4a0 [ 428.392733] do_sys_open+0x2c5/0x430 [ 428.396457] ? filp_open+0x70/0x70 [ 428.399982] SyS_open+0x2d/0x40 [ 428.403378] ? do_sys_open+0x430/0x430 [ 428.407317] do_syscall_64+0x1eb/0x630 [ 428.411267] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.416158] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.421392] RIP: 0033:0x412d20 [ 428.424622] RSP: 002b:00007ffebd32c3d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 428.432594] RAX: ffffffffffffffda RBX: 0000000000031521 RCX: 0000000000412d20 [ 428.440108] RDX: 00007ffebd32c46a RSI: 0000000000000002 RDI: 00007ffebd32c460 [ 428.447386] RBP: 0000000000000007 R08: 0000000000000000 R09: 000000000000000a [ 428.454756] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 428.462059] R13: 00007ffebd32c410 R14: 00000000000313a6 R15: 00007ffebd32c420 [ 428.469358] INFO: task syz-executor.4:7120 blocked for more than 140 seconds. [ 428.476852] Not tainted 4.14.114 #4 [ 428.481129] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.489345] syz-executor.4 D24992 7120 1 0x00000004 [ 428.495674] Call Trace: [ 428.498276] __schedule+0x7be/0x1cf0 [ 428.502208] ? __mutex_lock+0x737/0x1470 [ 428.506373] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.511523] schedule+0x92/0x1c0 [ 428.514902] schedule_preempt_disabled+0x13/0x20 [ 428.519654] __mutex_lock+0x73c/0x1470 [ 428.523613] ? lo_ioctl+0x87/0x1c70 [ 428.527249] ? lock_downgrade+0x621/0x6e0 [ 428.531881] ? mutex_trylock+0x1c0/0x1c0 [ 428.535956] ? avc_has_extended_perms+0x8ec/0xe40 [ 428.540862] ? putname+0xdb/0x120 [ 428.544328] ? avc_ss_reset+0x110/0x110 [ 428.548294] ? kasan_slab_free+0x75/0xc0 [ 428.552426] mutex_lock_nested+0x16/0x20 [ 428.556494] ? mutex_lock_nested+0x16/0x20 [ 428.561043] lo_ioctl+0x87/0x1c70 [ 428.564494] ? loop_probe+0x160/0x160 [ 428.568292] blkdev_ioctl+0x983/0x1880 [ 428.572247] ? blkpg_ioctl+0x980/0x980 [ 428.576134] ? __might_sleep+0x93/0xb0 [ 428.580094] block_ioctl+0xde/0x120 [ 428.583717] ? blkdev_fallocate+0x3b0/0x3b0 [ 428.588027] do_vfs_ioctl+0x7b9/0x1070 [ 428.592107] ? selinux_file_mprotect+0x5d0/0x5d0 [ 428.596857] ? ioctl_preallocate+0x1c0/0x1c0 [ 428.601385] ? putname+0xe0/0x120 [ 428.604837] ? do_sys_open+0x221/0x430 [ 428.608738] ? security_file_ioctl+0x83/0xc0 [ 428.613187] ? security_file_ioctl+0x8f/0xc0 [ 428.617677] SyS_ioctl+0x8f/0xc0 [ 428.621441] ? do_vfs_ioctl+0x1070/0x1070 [ 428.625676] do_syscall_64+0x1eb/0x630 [ 428.629544] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.634548] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.639747] RIP: 0033:0x458c17 [ 428.643173] RSP: 002b:00007fff3aa419c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.651015] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c17 [ 428.658290] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 428.665607] RBP: 0000000000000005 R08: 0000000000000000 R09: 000000000000000a [ 428.672917] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 428.680233] R13: 00007fff3aa41a00 R14: 00000000000311c1 R15: 00007fff3aa41a10 [ 428.687555] INFO: task syz-executor.5:7121 blocked for more than 140 seconds. [ 428.694914] Not tainted 4.14.114 #4 [ 428.699043] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.707048] syz-executor.5 D25168 7121 1 0x00000004 [ 428.712899] Call Trace: [ 428.715482] __schedule+0x7be/0x1cf0 [ 428.719221] ? __mutex_lock+0x737/0x1470 [ 428.723312] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.728327] schedule+0x92/0x1c0 [ 428.731745] schedule_preempt_disabled+0x13/0x20 [ 428.736532] __mutex_lock+0x73c/0x1470 [ 428.740515] ? trace_hardirqs_on+0x10/0x10 [ 428.744782] ? lo_open+0x1d/0xb0 [ 428.748135] ? refcount_add+0x40/0x50 [ 428.752348] ? mutex_trylock+0x1c0/0x1c0 [ 428.756448] ? find_held_lock+0x35/0x130 [ 428.760762] ? disk_get_part+0x9c/0x140 [ 428.764740] ? lock_downgrade+0x6e0/0x6e0 [ 428.768880] ? loop_unregister_transfer+0x90/0x90 [ 428.773885] mutex_lock_nested+0x16/0x20 [ 428.777945] ? mutex_lock_nested+0x16/0x20 [ 428.782279] lo_open+0x1d/0xb0 [ 428.785473] __blkdev_get+0x2c9/0x1120 [ 428.789353] ? __blkdev_put+0x7f0/0x7f0 [ 428.793744] ? bd_acquire+0x178/0x2c0 [ 428.797585] ? find_held_lock+0x35/0x130 [ 428.801742] blkdev_get+0xa8/0x8e0 [ 428.805285] ? bd_may_claim+0xd0/0xd0 [ 428.809081] ? _raw_spin_unlock+0x2d/0x50 [ 428.813286] blkdev_open+0x1d1/0x260 [ 428.816997] ? security_file_open+0x8f/0x1a0 [ 428.821462] do_dentry_open+0x73e/0xeb0 [ 428.825433] ? bd_acquire+0x2c0/0x2c0 [ 428.829240] vfs_open+0x105/0x230 [ 428.832930] path_openat+0x8bd/0x3f70 [ 428.836734] ? trace_hardirqs_on+0x10/0x10 [ 428.841197] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 428.849374] ? find_held_lock+0x35/0x130 [ 428.853485] ? __alloc_fd+0x1d4/0x4a0 [ 428.857291] do_filp_open+0x18e/0x250 [ 428.861132] ? may_open_dev+0xe0/0xe0 [ 428.864933] ? _raw_spin_unlock+0x2d/0x50 [ 428.869066] ? __alloc_fd+0x1d4/0x4a0 [ 428.872984] do_sys_open+0x2c5/0x430 [ 428.876706] ? filp_open+0x70/0x70 [ 428.880672] SyS_open+0x2d/0x40 [ 428.884087] ? do_sys_open+0x430/0x430 [ 428.887971] do_syscall_64+0x1eb/0x630 [ 428.891916] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.896759] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.902008] RIP: 0033:0x412d20 [ 428.905186] RSP: 002b:00007ffd2a356bf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 428.912937] RAX: ffffffffffffffda RBX: 00000000000313ae RCX: 0000000000412d20 [ 428.920253] RDX: 00007ffd2a356c8a RSI: 0000000000000002 RDI: 00007ffd2a356c80 [ 428.927531] RBP: 0000000000000006 R08: 0000000000000000 R09: 000000000000000a [ 428.934863] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 428.942178] R13: 00007ffd2a356c30 R14: 00000000000312e5 R15: 00007ffd2a356c40 [ 428.949566] INFO: task syz-executor.0:7270 blocked for more than 140 seconds. [ 428.957103] Not tainted 4.14.114 #4 [ 428.961362] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.969546] syz-executor.0 D30168 7270 7115 0x00000004 [ 428.975244] Call Trace: [ 428.977924] __schedule+0x7be/0x1cf0 [ 428.981692] ? __mutex_lock+0x737/0x1470 [ 428.985812] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.990889] schedule+0x92/0x1c0 [ 428.994298] schedule_preempt_disabled+0x13/0x20 [ 428.999097] __mutex_lock+0x73c/0x1470 [ 429.003040] ? loop_control_ioctl+0x14b/0x2c0 [ 429.007630] ? mutex_trylock+0x1c0/0x1c0 [ 429.012117] ? trace_hardirqs_on+0x10/0x10 [ 429.016448] ? __radix_tree_lookup+0x1b3/0x2f0 [ 429.021095] mutex_lock_nested+0x16/0x20 [ 429.025179] ? mutex_lock_nested+0x16/0x20 [ 429.029531] loop_control_ioctl+0x14b/0x2c0 [ 429.034303] ? loop_add+0x8d0/0x8d0 [ 429.037928] ? loop_add+0x8d0/0x8d0 [ 429.041592] do_vfs_ioctl+0x7b9/0x1070 [ 429.045477] ? selinux_file_mprotect+0x5d0/0x5d0 [ 429.050281] ? lock_downgrade+0x6e0/0x6e0 [ 429.054423] ? ioctl_preallocate+0x1c0/0x1c0 [ 429.058909] ? __fget+0x237/0x370 [ 429.062419] ? security_file_ioctl+0x8f/0xc0 [ 429.066954] SyS_ioctl+0x8f/0xc0 [ 429.070381] ? do_vfs_ioctl+0x1070/0x1070 [ 429.074523] do_syscall_64+0x1eb/0x630 [ 429.078407] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.083445] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.088631] RIP: 0033:0x458da9 [ 429.091875] RSP: 002b:00007f402d108c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.099682] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 429.107006] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 [ 429.114486] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 429.121994] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f402d1096d4 [ 429.129377] R13: 00000000004c20e5 R14: 00000000004d49b8 R15: 00000000ffffffff [ 429.136721] INFO: task blkid:7257 blocked for more than 140 seconds. [ 429.143618] Not tainted 4.14.114 #4 [ 429.147754] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.155772] blkid D29040 7257 7224 0x00000004 [ 429.161452] Call Trace: [ 429.164039] __schedule+0x7be/0x1cf0 [ 429.167740] ? __mutex_lock+0x737/0x1470 [ 429.171870] ? pci_mmcfg_check_reserved+0x150/0x150 [ 429.176878] schedule+0x92/0x1c0 [ 429.180382] schedule_preempt_disabled+0x13/0x20 [ 429.185143] __mutex_lock+0x73c/0x1470 [ 429.189024] ? lo_ioctl+0x87/0x1c70 [ 429.192721] ? lock_downgrade+0x620/0x6e0 [ 429.196988] ? mutex_trylock+0x1c0/0x1c0 [ 429.201086] ? avc_has_extended_perms+0x8ec/0xe40 [ 429.205918] ? __might_fault+0x110/0x1d0 [ 429.210129] ? avc_ss_reset+0x110/0x110 [ 429.214103] mutex_lock_nested+0x16/0x20 [ 429.218148] ? mutex_lock_nested+0x16/0x20 [ 429.222428] lo_ioctl+0x87/0x1c70 [ 429.225871] ? loop_probe+0x160/0x160 [ 429.229708] blkdev_ioctl+0x983/0x1880 [ 429.233643] ? blkpg_ioctl+0x980/0x980 [ 429.237631] ? __might_sleep+0x93/0xb0 [ 429.241566] ? save_trace+0x290/0x290 [ 429.245367] block_ioctl+0xde/0x120 [ 429.248989] ? blkdev_fallocate+0x3b0/0x3b0 [ 429.253418] do_vfs_ioctl+0x7b9/0x1070 [ 429.257305] ? selinux_file_mprotect+0x5d0/0x5d0 [ 429.262106] ? ioctl_preallocate+0x1c0/0x1c0 [ 429.266517] ? lock_downgrade+0x6e0/0x6e0 [ 429.271186] ? security_file_ioctl+0x83/0xc0 [ 429.275678] ? security_file_ioctl+0x8f/0xc0 [ 429.280211] SyS_ioctl+0x8f/0xc0 [ 429.283581] ? do_vfs_ioctl+0x1070/0x1070 [ 429.287976] do_syscall_64+0x1eb/0x630 [ 429.291917] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.296801] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.302026] RIP: 0033:0x7f50ab8a0347 [ 429.305725] RSP: 002b:00007ffedc9164f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.313482] RAX: ffffffffffffffda RBX: 0000000000f80030 RCX: 00007f50ab8a0347 [ 429.320819] RDX: 0000000000000000 RSI: 0000000000005331 RDI: 0000000000000003 [ 429.328085] RBP: 0000000000000003 R08: 00007f50abb505a0 R09: 0000000000000008 [ 429.335494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.342795] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000005 [ 429.350126] INFO: task blkid:7259 blocked for more than 140 seconds. [ 429.356615] Not tainted 4.14.114 #4 [ 429.360810] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.368783] blkid D28512 7259 7225 0x00000004 [ 429.374479] Call Trace: [ 429.377215] __schedule+0x7be/0x1cf0 [ 429.380972] ? __mutex_lock+0x737/0x1470 [ 429.385172] ? pci_mmcfg_check_reserved+0x150/0x150 [ 429.390244] schedule+0x92/0x1c0 [ 429.393601] schedule_preempt_disabled+0x13/0x20 [ 429.398341] __mutex_lock+0x73c/0x1470 [ 429.402639] ? lo_release+0x1e/0x1b0 [ 429.406409] ? mutex_trylock+0x1c0/0x1c0 [ 429.410535] ? blkdev_put+0x7b/0x510 [ 429.414239] ? blkdev_put+0x7b/0x510 [ 429.417977] ? loop_clr_fd+0xae0/0xae0 [ 429.421921] mutex_lock_nested+0x16/0x20 [ 429.425982] ? mutex_lock_nested+0x16/0x20 [ 429.431444] lo_release+0x1e/0x1b0 [ 429.434977] ? loop_clr_fd+0xae0/0xae0 [ 429.438893] __blkdev_put+0x436/0x7f0 [ 429.442762] ? bd_set_size+0xb0/0xb0 [ 429.446475] ? wait_for_completion+0x420/0x420 [ 429.451133] blkdev_put+0x88/0x510 [ 429.454673] ? fcntl_setlk+0xb90/0xb90 [ 429.458554] ? blkdev_put+0x510/0x510 [ 429.462464] blkdev_close+0x8b/0xb0 [ 429.466111] __fput+0x277/0x7a0 [ 429.469382] ____fput+0x16/0x20 [ 429.472739] task_work_run+0x119/0x190 [ 429.476669] exit_to_usermode_loop+0x1da/0x220 [ 429.481342] do_syscall_64+0x4a9/0x630 [ 429.485226] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.490131] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.495435] RIP: 0033:0x7f124f0162b0 [ 429.499240] RSP: 002b:00007ffe81bc5418 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 429.507018] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f124f0162b0 [ 429.514405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 429.521772] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 429.529038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000d35030 [ 429.536825] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000005 [ 429.544145] INFO: task syz-executor.3:7264 blocked for more than 140 seconds. [ 429.551521] Not tainted 4.14.114 #4 [ 429.555692] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.563698] syz-executor.3 D28624 7264 7117 0x00000004 [ 429.569450] Call Trace: [ 429.572095] __schedule+0x7be/0x1cf0 [ 429.575804] ? __mutex_lock+0x737/0x1470 [ 429.579852] ? pci_mmcfg_check_reserved+0x150/0x150 [ 429.584915] schedule+0x92/0x1c0 [ 429.588272] schedule_preempt_disabled+0x13/0x20 [ 429.593062] __mutex_lock+0x73c/0x1470 [ 429.596936] ? blkdev_reread_part+0x1f/0x40 [ 429.601316] ? mutex_trylock+0x1c0/0x1c0 [ 429.605367] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 429.610509] ? __wake_up_common_lock+0xe3/0x160 [ 429.615182] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 429.620438] mutex_lock_nested+0x16/0x20 [ 429.624499] ? mutex_lock_nested+0x16/0x20 [ 429.628725] blkdev_reread_part+0x1f/0x40 [ 429.633001] loop_reread_partitions+0x7c/0x90 [ 429.637490] loop_set_status+0xc28/0x1200 [ 429.641767] loop_set_status64+0xa6/0xf0 [ 429.645835] ? loop_set_status_old+0x2d0/0x2d0 [ 429.650471] lo_ioctl+0x5c1/0x1c70 [ 429.653997] ? loop_probe+0x160/0x160 [ 429.657784] blkdev_ioctl+0x983/0x1880 [ 429.662085] ? blkpg_ioctl+0x980/0x980 [ 429.665981] ? __might_sleep+0x93/0xb0 [ 429.670115] ? __fget+0x210/0x370 [ 429.673565] block_ioctl+0xde/0x120 [ 429.677195] ? blkdev_fallocate+0x3b0/0x3b0 [ 429.681581] do_vfs_ioctl+0x7b9/0x1070 [ 429.685472] ? selinux_file_mprotect+0x5d0/0x5d0 [ 429.690274] ? lock_downgrade+0x6e0/0x6e0 [ 429.694463] ? ioctl_preallocate+0x1c0/0x1c0 [ 429.698867] ? __fget+0x237/0x370 [ 429.702374] ? security_file_ioctl+0x8f/0xc0 [ 429.706777] SyS_ioctl+0x8f/0xc0 [ 429.710298] ? do_vfs_ioctl+0x1070/0x1070 [ 429.714473] do_syscall_64+0x1eb/0x630 [ 429.718345] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.723512] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.728700] RIP: 0033:0x458c17 [ 429.732013] RSP: 002b:00007fbc06a579f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 429.739715] RAX: ffffffffffffffda RBX: 00007fbc06a586d4 RCX: 0000000000458c17 [ 429.747041] RDX: 00007fbc06a57ab0 RSI: 0000000000004c04 RDI: 0000000000000005 [ 429.754475] RBP: 000000000073bf00 R08: 0000000000000000 R09: 000000000000000a [ 429.761801] R10: 0000000000000075 R11: 0000000000000202 R12: 0000000000000004 [ 429.769154] R13: 0000000000000004 R14: 0000000000000005 R15: 00000000ffffffff [ 429.776507] INFO: task syz-executor.3:7278 blocked for more than 140 seconds. [ 429.783858] Not tainted 4.14.114 #4 [ 429.788093] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.796505] syz-executor.3 D29184 7278 7117 0x00000004 [ 429.802184] Call Trace: [ 429.804770] __schedule+0x7be/0x1cf0 [ 429.808691] ? __mutex_lock+0x737/0x1470 [ 429.812847] ? pci_mmcfg_check_reserved+0x150/0x150 [ 429.817861] schedule+0x92/0x1c0 [ 429.821268] schedule_preempt_disabled+0x13/0x20 [ 429.826014] __mutex_lock+0x73c/0x1470 [ 429.829891] ? __mutex_unlock_slowpath+0x71/0x800 [ 429.835183] ? __blkdev_get+0x145/0x1120 [ 429.839253] ? mutex_trylock+0x1c0/0x1c0 [ 429.843429] ? exact_match+0xd/0x20 [ 429.847135] ? kobj_lookup+0x319/0x410 [ 429.851204] ? blkdev_ioctl+0x1880/0x1880 [ 429.855398] mutex_lock_nested+0x16/0x20 [ 429.859459] ? mutex_lock_nested+0x16/0x20 [ 429.863773] __blkdev_get+0x145/0x1120 [ 429.867713] ? __blkdev_put+0x7f0/0x7f0 [ 429.871845] ? bd_acquire+0x178/0x2c0 [ 429.875762] ? find_held_lock+0x35/0x130 [ 429.879957] blkdev_get+0xa8/0x8e0 [ 429.883563] ? bd_may_claim+0xd0/0xd0 [ 429.887377] ? _raw_spin_unlock+0x2d/0x50 [ 429.891593] blkdev_open+0x1d1/0x260 [ 429.895458] ? security_file_open+0x8f/0x1a0 [ 429.899864] do_dentry_open+0x73e/0xeb0 [ 429.903953] ? bd_acquire+0x2c0/0x2c0 [ 429.907766] vfs_open+0x105/0x230 [ 429.911300] path_openat+0x8bd/0x3f70 [ 429.915160] ? trace_hardirqs_on+0x10/0x10 [ 429.919395] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 429.924788] ? find_held_lock+0x35/0x130 [ 429.928904] ? __alloc_fd+0x1d4/0x4a0 [ 429.933615] do_filp_open+0x18e/0x250 [ 429.937432] ? may_open_dev+0xe0/0xe0 [ 429.941295] ? _raw_spin_unlock+0x2d/0x50 [ 429.945456] ? __alloc_fd+0x1d4/0x4a0 [ 429.949281] do_sys_open+0x2c5/0x430 [ 429.953058] ? filp_open+0x70/0x70 [ 429.956616] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 429.962013] SyS_open+0x2d/0x40 [ 429.965295] ? do_sys_open+0x430/0x430 [ 429.969166] do_syscall_64+0x1eb/0x630 [ 429.973113] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.977965] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.983200] RIP: 0033:0x412d41 [ 429.986397] RSP: 002b:00007fbc06a369f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 429.994157] RAX: ffffffffffffffda RBX: 00007fbc06a376d4 RCX: 0000000000412d41 [ 430.001453] RDX: 00007fbc06a36baa RSI: 0000000000000002 RDI: 00007fbc06a36ba0 [ 430.009203] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 000000000000000a [ 430.016505] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 [ 430.023799] R13: 0000000000000003 R14: 00000000004dde98 R15: 00000000ffffffff [ 430.031172] INFO: task blkid:7268 blocked for more than 140 seconds. [ 430.037740] Not tainted 4.14.114 #4 [ 430.041914] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.049879] blkid D29040 7268 6723 0x00000004 [ 430.056004] Call Trace: [ 430.058596] __schedule+0x7be/0x1cf0 [ 430.062334] ? __mutex_lock+0x737/0x1470 [ 430.066399] ? pci_mmcfg_check_reserved+0x150/0x150 [ 430.071531] schedule+0x92/0x1c0 [ 430.075000] schedule_preempt_disabled+0x13/0x20 [ 430.079753] __mutex_lock+0x73c/0x1470 [ 430.083675] ? trace_hardirqs_on+0x10/0x10 [ 430.087914] ? lo_open+0x1d/0xb0 [ 430.091329] ? refcount_add+0x40/0x50 [ 430.095133] ? mutex_trylock+0x1c0/0x1c0 [ 430.099176] ? find_held_lock+0x35/0x130 [ 430.103273] ? disk_get_part+0x9c/0x140 [ 430.107255] ? lock_downgrade+0x6e0/0x6e0 [ 430.111456] ? loop_unregister_transfer+0x90/0x90 [ 430.116302] mutex_lock_nested+0x16/0x20 [ 430.120407] ? mutex_lock_nested+0x16/0x20 [ 430.124642] lo_open+0x1d/0xb0 [ 430.127851] __blkdev_get+0x2c9/0x1120 [ 430.131800] ? __blkdev_put+0x7f0/0x7f0 [ 430.135778] ? bd_acquire+0x14e/0x2c0 [ 430.139581] ? find_held_lock+0x35/0x130 [ 430.143701] blkdev_get+0xa8/0x8e0 [ 430.147248] ? bd_may_claim+0xd0/0xd0 [ 430.151164] ? _raw_spin_unlock+0x2d/0x50 [ 430.155318] blkdev_open+0x1d1/0x260 [ 430.159013] ? security_file_open+0x8f/0x1a0 [ 430.163470] do_dentry_open+0x73e/0xeb0 [ 430.167447] ? bd_acquire+0x2c0/0x2c0 [ 430.171304] vfs_open+0x105/0x230 [ 430.174759] path_openat+0x8bd/0x3f70 [ 430.178544] ? trace_hardirqs_on+0x10/0x10 [ 430.183277] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 430.187945] ? find_held_lock+0x35/0x130 [ 430.192068] ? __alloc_fd+0x1d4/0x4a0 [ 430.195893] do_filp_open+0x18e/0x250 [ 430.199681] ? may_open_dev+0xe0/0xe0 [ 430.203616] ? _raw_spin_unlock+0x2d/0x50 [ 430.207770] ? __alloc_fd+0x1d4/0x4a0 [ 430.211637] do_sys_open+0x2c5/0x430 [ 430.215357] ? filp_open+0x70/0x70 [ 430.218884] SyS_open+0x2d/0x40 [ 430.222191] ? do_sys_open+0x430/0x430 [ 430.226080] do_syscall_64+0x1eb/0x630 [ 430.229966] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.234998] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 430.240255] RIP: 0033:0x7fe66e82c120 [ 430.243987] RSP: 002b:00007ffcc9687848 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 430.251754] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe66e82c120 [ 430.259027] RDX: 00007ffcc9689f44 RSI: 0000000000000000 RDI: 00007ffcc9689f44 [ 430.266362] RBP: 0000000000000000 R08: 0000000000000078 R09: 0000000000000000 [ 430.273691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000001a17030 [ 430.281011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005 [ 430.288298] [ 430.288298] Showing all locks held in the system: [ 430.294670] 1 lock held by khungtaskd/1008: [ 430.299090] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f [ 430.308203] 2 locks held by getty/7073: [ 430.312291] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.321031] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.330400] 2 locks held by getty/7074: [ 430.334372] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.343084] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.352439] 2 locks held by getty/7075: [ 430.356407] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.365116] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.374451] 2 locks held by getty/7076: [ 430.378405] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.387194] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.396522] 2 locks held by getty/7077: [ 430.400629] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.409314] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.418638] 2 locks held by getty/7078: [ 430.422628] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.431359] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.440855] 2 locks held by getty/7079: [ 430.444815] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.453542] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.462870] 1 lock held by syz-executor.2/7118: [ 430.467517] #0: (loop_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1c70 [ 430.475888] 2 locks held by syz-executor.1/7119: [ 430.480683] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.489387] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 430.497500] 1 lock held by syz-executor.4/7120: [ 430.502211] #0: (loop_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1c70 [ 430.510613] 2 locks held by syz-executor.5/7121: [ 430.515467] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.524204] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 430.532346] 2 locks held by syz-executor.0/7270: [ 430.537109] #0: (loop_index_mutex){+.+.}, at: [] loop_control_ioctl+0x65/0x2c0 [ 430.546246] #1: (loop_ctl_mutex#2){+.+.}, at: [] loop_control_ioctl+0x14b/0x2c0 [ 430.555550] 1 lock held by blkid/7257: [ 430.559471] #0: (loop_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1c70 [ 430.567834] 2 locks held by blkid/7259: [ 430.571855] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_put+0xa6/0x7f0 [ 430.580414] #1: (loop_index_mutex){+.+.}, at: [] lo_release+0x1e/0x1b0 [ 430.588844] 2 locks held by syz-executor.3/7264: [ 430.593674] #0: (loop_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1c70 [ 430.602043] #1: (&bdev->bd_mutex){+.+.}, at: [] blkdev_reread_part+0x1f/0x40 [ 430.611046] 1 lock held by syz-executor.3/7278: [ 430.615713] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.624426] 2 locks held by blkid/7268: [ 430.628418] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.637137] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 430.645247] [ 430.646859] ============================================= [ 430.646859] [ 430.654231] NMI backtrace for cpu 0 [ 430.657868] CPU: 0 PID: 1008 Comm: khungtaskd Not tainted 4.14.114 #4 [ 430.664422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.673772] Call Trace: [ 430.676420] dump_stack+0x138/0x19c [ 430.680039] nmi_cpu_backtrace.cold+0x57/0x94 [ 430.684520] ? irq_force_complete_move.cold+0x7d/0x7d [ 430.689692] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 430.694972] arch_trigger_cpumask_backtrace+0x14/0x20 [ 430.700161] watchdog+0x5e7/0xb90 [ 430.703616] kthread+0x31c/0x430 [ 430.706964] ? hungtask_pm_notify+0x60/0x60 [ 430.711279] ? kthread_create_on_node+0xd0/0xd0 [ 430.715952] ret_from_fork+0x3a/0x50 [ 430.719794] Sending NMI from CPU 0 to CPUs 1: [ 430.724681] NMI backtrace for cpu 1 [ 430.724685] CPU: 1 PID: 255 Comm: kworker/u4:3 Not tainted 4.14.114 #4 [ 430.724689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.724692] Workqueue: bat_events batadv_nc_worker [ 430.724697] task: ffff8880a957c440 task.stack: ffff8880a9590000 [ 430.724701] RIP: 0010:debug_lockdep_rcu_enabled.part.0+0x26/0x60 [ 430.724703] RSP: 0018:ffff8880a9597cc0 EFLAGS: 00000a03 [ 430.724709] RAX: dffffc0000000000 RBX: ffff8880a957c440 RCX: 1ffffffff0f56424 [ 430.724712] RDX: 1ffff110152af997 RSI: ffff8880a957cd10 RDI: ffff8880a957ccbc [ 430.724716] RBP: ffff8880a9597cc8 R08: 0000000000000000 R09: ffff8880a957cd30 [ 430.724719] R10: ffff8880a957cd10 R11: ffff8880a957c440 R12: ffff888063806138 [ 430.724723] R13: 0000000000000310 R14: ffff88806380a5c0 R15: dffffc0000000000 [ 430.724726] FS: 0000000000000000(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 430.724729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.724733] CR2: 00007f83e50ff930 CR3: 000000007fd3a000 CR4: 00000000001406e0 [ 430.724735] Call Trace: [ 430.724738] debug_lockdep_rcu_enabled+0x71/0xa0 [ 430.724740] batadv_nc_worker+0x10c/0x6d0 [ 430.724743] ? batadv_nc_worker+0xd3/0x6d0 [ 430.724745] process_one_work+0x868/0x1610 [ 430.724748] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 430.724751] worker_thread+0x5d9/0x1050 [ 430.724753] kthread+0x31c/0x430 [ 430.724756] ? process_one_work+0x1610/0x1610 [ 430.724758] ? kthread_create_on_node+0xd0/0xd0 [ 430.724761] ret_from_fork+0x3a/0x50 [ 430.724762] Code: 0f 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 53 65 48 8b 1c 25 40 ee 01 00 48 8d bb 7c 08 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 10 [ 430.725362] Kernel panic - not syncing: hung_task: blocked tasks [ 430.894528] CPU: 0 PID: 1008 Comm: khungtaskd Not tainted 4.14.114 #4 [ 430.901120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.910462] Call Trace: [ 430.913059] dump_stack+0x138/0x19c [ 430.916686] panic+0x1f2/0x438 [ 430.919856] ? add_taint.cold+0x16/0x16 [ 430.923834] ? ___preempt_schedule+0x16/0x18 [ 430.928234] watchdog+0x5f8/0xb90 [ 430.931674] kthread+0x31c/0x430 [ 430.935020] ? hungtask_pm_notify+0x60/0x60 [ 430.939326] ? kthread_create_on_node+0xd0/0xd0 [ 430.943986] ret_from_fork+0x3a/0x50 [ 430.948877] Kernel Offset: disabled [ 430.952525] Rebooting in 86400 seconds..