[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 30.982209] kauditd_printk_skb: 7 callbacks suppressed [ 30.982222] audit: type=1800 audit(1565959988.894:29): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 31.016152] audit: type=1800 audit(1565959988.894:30): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 41.576709] IPVS: ftp: loaded support on port[0] = 21 [ 71.315845] can: request_module (can-proto-0) failed. [ 71.326919] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.0.139' (ECDSA) to the list of known hosts. 2019/08/16 12:53:58 parsed 1 programs 2019/08/16 12:53:59 executed programs: 0 [ 81.678920] IPVS: ftp: loaded support on port[0] = 21 [ 81.683268] IPVS: ftp: loaded support on port[0] = 21 [ 81.705841] IPVS: ftp: loaded support on port[0] = 21 [ 81.713640] IPVS: ftp: loaded support on port[0] = 21 [ 81.716847] IPVS: ftp: loaded support on port[0] = 21 [ 81.734778] IPVS: ftp: loaded support on port[0] = 21 [ 83.115590] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.124682] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.139673] device bridge_slave_0 entered promiscuous mode [ 83.165274] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.177152] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.185409] device bridge_slave_0 entered promiscuous mode [ 83.194596] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.201642] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.209908] device bridge_slave_0 entered promiscuous mode [ 83.242199] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.253044] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.263918] device bridge_slave_1 entered promiscuous mode [ 83.272872] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.280770] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.288690] device bridge_slave_0 entered promiscuous mode [ 83.298735] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.305205] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.315451] device bridge_slave_0 entered promiscuous mode [ 83.325295] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.333737] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.345324] device bridge_slave_0 entered promiscuous mode [ 83.353378] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.360455] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.368020] device bridge_slave_1 entered promiscuous mode [ 83.375205] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.381883] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.389753] device bridge_slave_1 entered promiscuous mode [ 83.404830] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.418057] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.427720] device bridge_slave_1 entered promiscuous mode [ 83.437765] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.445330] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.453195] device bridge_slave_1 entered promiscuous mode [ 83.469460] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.475877] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.494407] device bridge_slave_1 entered promiscuous mode [ 83.714739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.766968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.790061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.814442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.829365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.845738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.884906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.902884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.918999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.940289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.969742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.988035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.001859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.018164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.029935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.061276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.082040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.102961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.152768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.235747] team0: Port device team_slave_0 added [ 84.311561] team0: Port device team_slave_1 added [ 84.327893] team0: Port device team_slave_0 added [ 84.373052] team0: Port device team_slave_0 added [ 84.391282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.425796] team0: Port device team_slave_1 added [ 84.447624] team0: Port device team_slave_1 added [ 84.461032] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.472759] team0: Port device team_slave_0 added [ 84.481640] team0: Port device team_slave_0 added [ 84.509820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.531589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.559383] team0: Port device team_slave_1 added [ 84.565782] team0: Port device team_slave_0 added [ 84.579712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.593321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.602129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.611253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.647417] team0: Port device team_slave_1 added [ 84.667389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.678682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.693927] team0: Port device team_slave_1 added [ 84.724765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.736854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.756839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.765540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.773825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.781759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.804859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.819202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.842367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.854929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.862865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.871195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.878871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.886645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.898421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.907494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.946314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.983711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.992111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.000101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.008007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.016055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.024171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.032191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.055613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.070739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.098998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.107847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.121344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.129923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.191904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.233913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.661024] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.667602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.675051] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.681585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.708897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.852710] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.859177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.865915] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.872372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.891203] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.897607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.904382] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.910825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.995025] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.001492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.008357] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.014748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.032924] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.039382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.046103] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.052565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.197124] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.203608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.210379] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.216790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.724272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.732528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.753325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.761447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.768821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.549238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.849709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.954491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.970108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.042033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.117273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.128284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.277151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.395207] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.422608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.436353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.551054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.574863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.587110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.594616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.618348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.625632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.757232] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.820375] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.853247] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.903492] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.943577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.956686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.248148] 8021q: adding VLAN 0 to HW filter on device team0 2019/08/16 12:54:09 executed programs: 6 [ 91.442341] vivid-000: kernel_thread() failed [ 91.710672] vivid-000: kernel_thread() failed [ 92.177690] vivid-000: kernel_thread() failed [ 92.298275] vivid-000: kernel_thread() failed [ 92.530752] vivid-000: kernel_thread() failed [ 92.575877] vivid-000: kernel_thread() failed [ 92.889605] vivid-000: kernel_thread() failed [ 93.330547] vivid-000: kernel_thread() failed [ 93.543149] vivid-000: kernel_thread() failed [ 93.576473] vivid-000: kernel_thread() failed [ 93.670900] vivid-000: kernel_thread() failed [ 94.360545] vivid-000: kernel_thread() failed [ 94.376742] vivid-000: kernel_thread() failed [ 94.487097] vivid-000: kernel_thread() failed [ 94.605493] vivid-000: kernel_thread() failed [ 94.729270] vivid-000: kernel_thread() failed [ 94.881452] vivid-000: kernel_thread() failed [ 95.088076] vivid-000: kernel_thread() failed [ 95.361538] vivid-000: kernel_thread() failed [ 95.444426] vivid-000: kernel_thread() failed [ 95.500496] vivid-000: kernel_thread() failed [ 95.839545] vivid-000: kernel_thread() failed [ 95.935112] vivid-000: kernel_thread() failed [ 96.270367] vivid-000: kernel_thread() failed [ 96.324009] vivid-000: kernel_thread() failed 2019/08/16 12:54:14 executed programs: 233 [ 96.517383] vivid-000: kernel_thread() failed [ 96.730151] vivid-000: kernel_thread() failed [ 96.943899] vivid-000: kernel_thread() failed [ 97.314908] vivid-000: kernel_thread() failed [ 97.471313] vivid-000: kernel_thread() failed [ 97.634646] vivid-000: kernel_thread() failed [ 97.960381] vivid-000: kernel_thread() failed [ 97.980054] vivid-000: kernel_thread() failed [ 97.988921] vivid-000: kernel_thread() failed [ 98.103303] vivid-000: kernel_thread() failed [ 98.148126] vivid-000: kernel_thread() failed [ 98.177652] vivid-000: kernel_thread() failed [ 98.606965] vivid-000: kernel_thread() failed [ 98.744074] vivid-000: kernel_thread() failed [ 98.857911] vivid-000: kernel_thread() failed [ 99.113756] vivid-000: kernel_thread() failed [ 99.880672] vivid-000: kernel_thread() failed [ 99.909279] vivid-000: kernel_thread() failed [ 100.080497] vivid-000: kernel_thread() failed [ 100.311180] vivid-000: kernel_thread() failed [ 252.238388] INFO: task syz-executor0:9092 blocked for more than 143 seconds. [ 252.245821] Not tainted 5.3.0-rc4+ #1 [ 252.251204] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 252.259372] syz-executor0 D28672 9092 6191 0x00004006 [ 252.265040] Call Trace: [ 252.267712] __schedule+0x75b/0x15a0 [ 252.271691] ? __sched_text_start+0x8/0x8 [ 252.275902] ? __kasan_check_read+0x11/0x20 [ 252.280344] ? __lock_acquire+0x1702/0x4c30 [ 252.284750] schedule+0xa8/0x270 [ 252.288242] schedule_timeout+0x717/0xc50 [ 252.292520] ? __kasan_check_read+0x11/0x20 [ 252.296874] ? usleep_range+0x170/0x170 [ 252.300914] ? mark_held_locks+0xa4/0xf0 [ 252.304966] ? _raw_spin_unlock_irq+0x28/0x90 [ 252.309565] ? wait_for_completion+0x294/0x440 [ 252.314152] ? _raw_spin_unlock_irq+0x28/0x90 [ 252.318770] ? lockdep_hardirqs_on+0x418/0x5d0 [ 252.323409] ? trace_hardirqs_on+0x67/0x240 [ 252.327796] ? __kasan_check_read+0x11/0x20 [ 252.332299] wait_for_completion+0x29c/0x440 [ 252.336768] ? try_to_wake_up+0xfd/0x1a80 [ 252.341077] ? wait_for_completion_interruptible+0x470/0x470 [ 252.346966] ? wake_up_q+0xf0/0xf0 [ 252.350638] kthread_stop+0x131/0x720 [ 252.354559] vivid_stop_generating_vid_cap+0x1ff/0x783 [ 252.360017] vid_cap_stop_streaming+0x8a/0xe0 [ 252.364517] ? vid_cap_buf_queue+0x280/0x280 [ 252.369000] __vb2_queue_cancel+0xc6/0xab0 [ 252.373417] ? refcount_dec_and_test_checked+0x1b/0x20 [ 252.379310] vb2_core_streamoff+0x60/0x150 [ 252.383616] __vb2_cleanup_fileio+0x78/0x170 [ 252.388021] vb2_core_queue_release+0x20/0x80 [ 252.392585] _vb2_fop_release+0x1cf/0x2a0 [ 252.396827] vb2_fop_release+0x75/0xc0 [ 252.400823] vivid_fop_release+0x18e/0x450 [ 252.405112] ? vivid_req_validate+0xc0/0xc0 [ 252.409641] v4l2_release+0x224/0x3a0 [ 252.413588] __fput+0x302/0x890 [ 252.416875] ? dev_debug_store+0x110/0x110 [ 252.421311] ____fput+0x16/0x20 [ 252.424608] task_work_run+0x14a/0x1c0 [ 252.428664] get_signal+0x207c/0x2500 [ 252.432481] ? mutex_unlock+0xd/0x10 [ 252.436330] ? vb2_fop_read+0x1b7/0x410 [ 252.440466] do_signal+0x87/0x1700 [ 252.444128] ? kick_process+0xef/0x180 [ 252.448013] ? task_work_add+0x9c/0x120 [ 252.452189] ? setup_sigcontext+0x7d0/0x7d0 [ 252.456763] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.462402] ? fput_many+0x12c/0x1a0 [ 252.466118] ? fput+0x1b/0x20 [ 252.469277] ? ksys_pread64+0x121/0x1c0 [ 252.473654] ? exit_to_usermode_loop+0x43/0x2d0 [ 252.478450] ? do_syscall_64+0x5af/0x6a0 [ 252.482534] ? exit_to_usermode_loop+0x43/0x2d0 [ 252.487269] ? lockdep_hardirqs_on+0x418/0x5d0 [ 252.491929] ? trace_hardirqs_on+0x67/0x240 [ 252.496257] exit_to_usermode_loop+0x251/0x2d0 [ 252.500910] do_syscall_64+0x5af/0x6a0 [ 252.504844] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.510653] RIP: 0033:0x4576b9 [ 252.513852] Code: cc 48 8d 05 99 c2 ff ff ff e0 cc cc cc cc cc cc cc 8b 7c 24 08 b8 e7 00 00 00 0f 05 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 <8b> 54 24 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 76 05 b8 ff ff [ 252.533024] RSP: 002b:00007f1be3372c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 252.541019] RAX: fffffffffffffe00 RBX: 0000000000000004 RCX: 00000000004576b9 [ 252.548593] RDX: 00000000000000d6 RSI: 0000000020000140 RDI: 0000000000000004 [ 252.556052] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 252.564091] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1be33736d4 [ 252.571568] R13: 00000000004c3377 R14: 00000000004d4f98 R15: 00000000ffffffff [ 252.578920] INFO: task syz-executor4:9091 blocked for more than 143 seconds. [ 252.586104] Not tainted 5.3.0-rc4+ #1 [ 252.590643] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 252.598765] syz-executor4 D28160 9091 6198 0x00004004 [ 252.604506] Call Trace: [ 252.607095] __schedule+0x75b/0x15a0 [ 252.610982] ? __sched_text_start+0x8/0x8 [ 252.615161] ? lock_downgrade+0x920/0x920 [ 252.619398] ? rwlock_bug.part.0+0x90/0x90 [ 252.623652] schedule+0xa8/0x270 [ 252.627022] schedule_preempt_disabled+0x13/0x20 [ 252.631913] __mutex_lock+0x7b0/0x13c0 [ 252.635822] ? v4l2_release+0x1d7/0x3a0 [ 252.640620] ? mutex_lock_io_nested+0x1260/0x1260 [ 252.645486] ? __lock_acquire+0x1702/0x4c30 [ 252.649942] ? vfs_lock_file+0xf0/0xf0 [ 252.653873] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.659607] ? fsnotify+0x811/0xbc0 [ 252.663262] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 252.668953] ? locks_remove_file+0x32f/0x600 [ 252.673391] ? vivid_req_validate+0xc0/0xc0 [ 252.677715] mutex_lock_nested+0x16/0x20 [ 252.681866] ? mutex_lock_nested+0x16/0x20 [ 252.686110] v4l2_release+0x1d7/0x3a0 [ 252.689997] __fput+0x302/0x890 [ 252.693291] ? dev_debug_store+0x110/0x110 [ 252.697580] ____fput+0x16/0x20 [ 252.700951] task_work_run+0x14a/0x1c0 [ 252.704975] exit_to_usermode_loop+0x280/0x2d0 [ 252.709663] do_syscall_64+0x5af/0x6a0 [ 252.713680] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.718940] RIP: 0033:0x411021 [ 252.722271] Code: cc cc cc cc cc cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 b1 00 00 00 48 83 ec 30 48 89 6c 24 28 48 8d 6c 24 28 <48> 8b 44 24 38 84 00 48 8b 4c 24 40 48 2b 0d 54 09 c4 00 48 c1 e9 [ 252.741305] RSP: 002b:00007ffd67cc5620 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 252.749114] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000411021 [ 252.756436] RDX: 0000000000000000 RSI: 0000000000730128 RDI: 0000000000000003 [ 252.763997] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.771841] R10: 00007ffd67cc5540 R11: 0000000000000293 R12: 0000000000000000 [ 252.779289] R13: 0000000000000001 R14: 0000000000000044 R15: 0000000000000004 [ 252.786672] INFO: task syz-executor1:9099 blocked for more than 143 seconds. [ 252.793978] Not tainted 5.3.0-rc4+ #1 [ 252.798395] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 252.806366] syz-executor1 D28160 9099 6195 0x00000004 [ 252.812117] Call Trace: [ 252.814766] __schedule+0x75b/0x15a0 [ 252.818585] ? __sched_text_start+0x8/0x8 [ 252.822762] ? lock_downgrade+0x920/0x920 [ 252.826955] ? rwlock_bug.part.0+0x90/0x90 [ 252.831383] schedule+0xa8/0x270 [ 252.834813] schedule_preempt_disabled+0x13/0x20 [ 252.839706] __mutex_lock+0x7b0/0x13c0 [ 252.843616] ? v4l2_release+0x1d7/0x3a0 [ 252.847596] ? mutex_lock_io_nested+0x1260/0x1260 [ 252.852552] ? __lock_acquire+0x1702/0x4c30 [ 252.856884] ? vfs_lock_file+0xf0/0xf0 [ 252.860990] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.866758] ? fsnotify+0x811/0xbc0 [ 252.870497] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 252.876438] ? locks_remove_file+0x32f/0x600 [ 252.881074] ? vivid_req_validate+0xc0/0xc0 [ 252.885486] mutex_lock_nested+0x16/0x20 [ 252.889637] ? mutex_lock_nested+0x16/0x20 [ 252.894111] v4l2_release+0x1d7/0x3a0 [ 252.897915] __fput+0x302/0x890 [ 252.902023] ? dev_debug_store+0x110/0x110 [ 252.906259] ____fput+0x16/0x20 [ 252.909603] task_work_run+0x14a/0x1c0 [ 252.913516] exit_to_usermode_loop+0x280/0x2d0 [ 252.918266] do_syscall_64+0x5af/0x6a0 [ 252.922172] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.927375] RIP: 0033:0x411021 [ 252.930672] Code: cc cc cc cc cc cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 b1 00 00 00 48 83 ec 30 48 89 6c 24 28 48 8d 6c 24 28 <48> 8b 44 24 38 84 00 48 8b 4c 24 40 48 2b 0d 54 09 c4 00 48 c1 e9 [ 252.949767] RSP: 002b:00007fff725cf870 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 252.957620] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000411021 [ 252.964997] RDX: 0000000000000000 RSI: 0000000000730128 RDI: 0000000000000004 [ 252.972339] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.979914] R10: 00007fff725cf790 R11: 0000000000000293 R12: 0000000000000000 [ 252.987238] R13: 0000000000000001 R14: 0000000000000045 R15: 0000000000000001 [ 252.994826] INFO: task syz-executor1:9105 blocked for more than 144 seconds. [ 253.002099] Not tainted 5.3.0-rc4+ #1 [ 253.006484] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 253.014815] syz-executor1 D29136 9105 6195 0x00004006 [ 253.020518] Call Trace: [ 253.023174] __schedule+0x75b/0x15a0 [ 253.026968] ? __sched_text_start+0x8/0x8 [ 253.031972] ? lock_downgrade+0x920/0x920 [ 253.036176] ? rwlock_bug.part.0+0x90/0x90 [ 253.040512] schedule+0xa8/0x270 [ 253.043899] schedule_preempt_disabled+0x13/0x20 [ 253.048810] __mutex_lock+0x7b0/0x13c0 [ 253.052726] ? v4l2_release+0x1d7/0x3a0 [ 253.056896] ? mutex_lock_io_nested+0x1260/0x1260 [ 253.061860] ? __lock_acquire+0x1702/0x4c30 [ 253.066201] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.071838] ? fsnotify+0x811/0xbc0 [ 253.075492] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 253.081129] ? locks_remove_file+0x32f/0x600 [ 253.085564] ? vivid_req_validate+0xc0/0xc0 [ 253.089980] mutex_lock_nested+0x16/0x20 [ 253.094049] ? mutex_lock_nested+0x16/0x20 [ 253.098452] v4l2_release+0x1d7/0x3a0 [ 253.102268] __fput+0x302/0x890 [ 253.105547] ? dev_debug_store+0x110/0x110 [ 253.109879] ____fput+0x16/0x20 [ 253.113181] task_work_run+0x14a/0x1c0 [ 253.117067] get_signal+0x207c/0x2500 [ 253.120959] ? mutex_lock_interruptible_nested+0x16/0x20 [ 253.126461] ? video_devdata+0xd/0xa0 [ 253.130452] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.136010] ? vb2_fop_read+0x1b7/0x410 [ 253.140209] do_signal+0x87/0x1700 [ 253.143765] ? kick_process+0xef/0x180 [ 253.147652] ? task_work_add+0x9c/0x120 [ 253.151870] ? setup_sigcontext+0x7d0/0x7d0 [ 253.156211] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.162607] ? fput_many+0x12c/0x1a0 [ 253.166327] ? fput+0x1b/0x20 [ 253.169501] ? ksys_pread64+0x121/0x1c0 [ 253.173504] ? exit_to_usermode_loop+0x43/0x2d0 [ 253.178256] ? do_syscall_64+0x5af/0x6a0 [ 253.182381] ? exit_to_usermode_loop+0x43/0x2d0 [ 253.187157] ? lockdep_hardirqs_on+0x418/0x5d0 [ 253.191908] ? trace_hardirqs_on+0x67/0x240 [ 253.196306] exit_to_usermode_loop+0x251/0x2d0 [ 253.200995] do_syscall_64+0x5af/0x6a0 [ 253.204902] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.210224] RIP: 0033:0x4576b9 [ 253.213683] Code: cc 48 8d 05 99 c2 ff ff ff e0 cc cc cc cc cc cc cc 8b 7c 24 08 b8 e7 00 00 00 0f 05 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 <8b> 54 24 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 76 05 b8 ff ff [ 253.232890] RSP: 002b:00007f281e103c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 253.240803] RAX: fffffffffffffe00 RBX: 0000000000000004 RCX: 00000000004576b9 [ 253.248394] RDX: 00000000000000d6 RSI: 0000000020000140 RDI: 0000000000000003 [ 253.255949] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 253.263406] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f281e1046d4 [ 253.270853] R13: 00000000004c3377 R14: 00000000004d4f98 R15: 00000000ffffffff [ 253.278396] INFO: task syz-executor5:9100 blocked for more than 144 seconds. [ 253.285627] Not tainted 5.3.0-rc4+ #1 [ 253.290463] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 253.298766] syz-executor5 D28160 9100 6193 0x00000004 [ 253.304492] Call Trace: [ 253.307111] __schedule+0x75b/0x15a0 [ 253.310963] ? __sched_text_start+0x8/0x8 [ 253.315180] ? lock_downgrade+0x920/0x920 [ 253.319504] ? rwlock_bug.part.0+0x90/0x90 [ 253.323770] schedule+0xa8/0x270 [ 253.327301] schedule_preempt_disabled+0x13/0x20 [ 253.332317] __mutex_lock+0x7b0/0x13c0 [ 253.336225] ? v4l2_release+0x1d7/0x3a0 [ 253.340306] ? mutex_lock_io_nested+0x1260/0x1260 [ 253.345178] ? __lock_acquire+0x1702/0x4c30 [ 253.349726] ? vfs_lock_file+0xf0/0xf0 [ 253.353633] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.359322] ? fsnotify+0x811/0xbc0 [ 253.362973] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 253.368600] ? locks_remove_file+0x32f/0x600 [ 253.373040] ? vivid_req_validate+0xc0/0xc0 [ 253.377356] mutex_lock_nested+0x16/0x20 [ 253.381536] ? mutex_lock_nested+0x16/0x20 [ 253.385782] v4l2_release+0x1d7/0x3a0 [ 253.389791] __fput+0x302/0x890 [ 253.393189] ? dev_debug_store+0x110/0x110 [ 253.397499] ____fput+0x16/0x20 [ 253.400924] task_work_run+0x14a/0x1c0 [ 253.404834] exit_to_usermode_loop+0x280/0x2d0 [ 253.409590] do_syscall_64+0x5af/0x6a0 [ 253.413596] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.419008] RIP: 0033:0x411021 [ 253.422214] Code: 4c 89 f6 48 89 c7 48 89 ca 48 89 4c 24 10 4c 89 54 24 08 e8 b1 a3 ff ff 48 8b 4c 24 10 41 c6 04 0f 00 4c 8b 7c 24 28 4c 8b 54 <24> 08 45 0f b6 37 e9 db fc ff ff 0f 1f 40 00 41 80 f8 29 74 7f ba [ 253.441391] RSP: 002b:00007ffd6a7db7d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 253.449342] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000411021 [ 253.456663] RDX: 0000000000000000 RSI: 0000000000730128 RDI: 0000000000000004 [ 253.464045] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 253.471392] R10: 00007ffd6a7db6f0 R11: 0000000000000293 R12: 0000000000000000 [ 253.478808] R13: 0000000000000001 R14: 0000000000000048 R15: 0000000000000005 [ 253.486120] INFO: task syz-executor5:9101 blocked for more than 144 seconds. [ 253.493414] Not tainted 5.3.0-rc4+ #1 [ 253.497740] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 253.505809] syz-executor5 D29136 9101 6193 0x00004006 [ 253.511633] Call Trace: [ 253.514240] __schedule+0x75b/0x15a0 [ 253.517960] ? __sched_text_start+0x8/0x8 [ 253.522221] ? lock_downgrade+0x920/0x920 [ 253.526446] ? rwlock_bug.part.0+0x90/0x90 [ 253.530796] schedule+0xa8/0x270 [ 253.534176] schedule_preempt_disabled+0x13/0x20 [ 253.539008] __mutex_lock+0x7b0/0x13c0 [ 253.542907] ? v4l2_release+0x1d7/0x3a0 [ 253.546882] ? mutex_lock_io_nested+0x1260/0x1260 [ 253.552102] ? __lock_acquire+0x1702/0x4c30 [ 253.556440] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.562064] ? fsnotify+0x811/0xbc0 [ 253.565730] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 253.571343] ? locks_remove_file+0x32f/0x600 [ 253.575882] ? vivid_req_validate+0xc0/0xc0 [ 253.580327] mutex_lock_nested+0x16/0x20 [ 253.584397] ? mutex_lock_nested+0x16/0x20 [ 253.588754] v4l2_release+0x1d7/0x3a0 [ 253.592575] __fput+0x302/0x890 [ 253.595846] ? dev_debug_store+0x110/0x110 [ 253.600365] ____fput+0x16/0x20 [ 253.603657] task_work_run+0x14a/0x1c0 [ 253.607596] get_signal+0x207c/0x2500 [ 253.611728] ? mutex_lock_interruptible_nested+0x16/0x20 [ 253.617204] ? video_devdata+0xd/0xa0 [ 253.621201] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.627039] ? vb2_fop_read+0x1b7/0x410 [ 253.631106] do_signal+0x87/0x1700 [ 253.634661] ? kick_process+0xef/0x180 [ 253.638707] ? task_work_add+0x9c/0x120 [ 253.642716] ? setup_sigcontext+0x7d0/0x7d0 [ 253.647027] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.652652] ? fput_many+0x12c/0x1a0 [ 253.656383] ? fput+0x1b/0x20 [ 253.659560] ? ksys_pread64+0x121/0x1c0 [ 253.663696] ? exit_to_usermode_loop+0x43/0x2d0 [ 253.668446] ? do_syscall_64+0x5af/0x6a0 [ 253.672511] ? exit_to_usermode_loop+0x43/0x2d0 [ 253.677173] ? lockdep_hardirqs_on+0x418/0x5d0 [ 253.681845] ? trace_hardirqs_on+0x67/0x240 [ 253.686296] exit_to_usermode_loop+0x251/0x2d0 [ 253.690969] do_syscall_64+0x5af/0x6a0 [ 253.694978] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.700252] RIP: 0033:0x4576b9 [ 253.703466] Code: Bad RIP value. [ 253.706817] RSP: 002b:00007f49c7154c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 253.714607] RAX: fffffffffffffe00 RBX: 0000000000000004 RCX: 00000000004576b9 [ 253.722025] RDX: 00000000000000d6 RSI: 0000000020000140 RDI: 0000000000000003 [ 253.729381] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 253.736663] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49c71556d4 [ 253.744337] R13: 00000000004c3377 R14: 00000000004d4f98 R15: 00000000ffffffff [ 253.751756] INFO: task syz-executor3:9102 blocked for more than 144 seconds. [ 253.759216] Not tainted 5.3.0-rc4+ #1 [ 253.763556] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 253.772005] syz-executor3 D28160 9102 6189 0x00000004 [ 253.777822] Call Trace: [ 253.780561] __schedule+0x75b/0x15a0 [ 253.784368] ? __sched_text_start+0x8/0x8 [ 253.788817] ? lock_downgrade+0x920/0x920 [ 253.792992] ? rwlock_bug.part.0+0x90/0x90 [ 253.797349] schedule+0xa8/0x270 [ 253.800872] schedule_preempt_disabled+0x13/0x20 [ 253.805735] __mutex_lock+0x7b0/0x13c0 [ 253.809748] ? v4l2_release+0x1d7/0x3a0 [ 253.813846] ? mutex_lock_io_nested+0x1260/0x1260 [ 253.818803] ? __lock_acquire+0x1702/0x4c30 [ 253.823190] ? vfs_lock_file+0xf0/0xf0 [ 253.827195] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.832827] ? fsnotify+0x811/0xbc0 [ 253.836472] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 253.842110] ? locks_remove_file+0x32f/0x600 [ 253.846546] ? vivid_req_validate+0xc0/0xc0 [ 253.850976] mutex_lock_nested+0x16/0x20 [ 253.855047] ? mutex_lock_nested+0x16/0x20 [ 253.859359] v4l2_release+0x1d7/0x3a0 [ 253.863282] __fput+0x302/0x890 [ 253.866558] ? dev_debug_store+0x110/0x110 [ 253.870925] ____fput+0x16/0x20 [ 253.874259] task_work_run+0x14a/0x1c0 [ 253.878415] exit_to_usermode_loop+0x280/0x2d0 [ 253.883208] do_syscall_64+0x5af/0x6a0 [ 253.887366] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.892702] RIP: 0033:0x411021 [ 253.895909] Code: 4c 89 f6 48 89 c7 48 89 ca 48 89 4c 24 10 4c 89 54 24 08 e8 b1 a3 ff ff 48 8b 4c 24 10 41 c6 04 0f 00 4c 8b 7c 24 28 4c 8b 54 <24> 08 45 0f b6 37 e9 db fc ff ff 0f 1f 40 00 41 80 f8 29 74 7f ba [ 253.915565] RSP: 002b:00007ffe43dc9720 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 253.923434] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000411021 [ 253.930892] RDX: 0000000000000000 RSI: 0000000000730128 RDI: 0000000000000004 [ 253.938375] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 253.945979] R10: 00007ffe43dc9640 R11: 0000000000000293 R12: 0000000000000000 [ 253.953689] R13: 0000000000000001 R14: 0000000000000044 R15: 0000000000000003 [ 253.961112] INFO: task syz-executor3:9104 blocked for more than 145 seconds. [ 253.968684] Not tainted 5.3.0-rc4+ #1 [ 253.973022] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 253.981108] syz-executor3 D29136 9104 6189 0x00004006 [ 253.986775] Call Trace: [ 253.989464] __schedule+0x75b/0x15a0 [ 253.993291] ? __sched_text_start+0x8/0x8 [ 253.997665] ? lock_downgrade+0x920/0x920 [ 254.002109] ? rwlock_bug.part.0+0x90/0x90 [ 254.006377] schedule+0xa8/0x270 [ 254.009839] schedule_preempt_disabled+0x13/0x20 [ 254.014814] __mutex_lock+0x7b0/0x13c0 [ 254.018790] ? v4l2_release+0x1d7/0x3a0 [ 254.022778] ? mutex_lock_io_nested+0x1260/0x1260 [ 254.027690] ? __lock_acquire+0x1702/0x4c30 [ 254.032117] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.037670] ? fsnotify+0x811/0xbc0 [ 254.041420] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 254.046981] ? locks_remove_file+0x32f/0x600 [ 254.051482] ? vivid_req_validate+0xc0/0xc0 [ 254.055813] mutex_lock_nested+0x16/0x20 [ 254.059930] ? mutex_lock_nested+0x16/0x20 [ 254.064180] v4l2_release+0x1d7/0x3a0 [ 254.067976] __fput+0x302/0x890 [ 254.071408] ? dev_debug_store+0x110/0x110 [ 254.075664] ____fput+0x16/0x20 [ 254.079023] task_work_run+0x14a/0x1c0 [ 254.082923] get_signal+0x207c/0x2500 [ 254.086856] ? mutex_lock_interruptible_nested+0x16/0x20 [ 254.092423] ? video_devdata+0xd/0xa0 [ 254.096362] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.101989] ? vb2_fop_read+0x1b7/0x410 [ 254.105979] do_signal+0x87/0x1700 [ 254.109667] ? kick_process+0xef/0x180 [ 254.113646] ? task_work_add+0x9c/0x120 [ 254.117748] ? setup_sigcontext+0x7d0/0x7d0 [ 254.122187] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.127783] ? fput_many+0x12c/0x1a0 [ 254.131676] ? fput+0x1b/0x20 [ 254.134800] ? ksys_pread64+0x121/0x1c0 [ 254.138839] ? exit_to_usermode_loop+0x43/0x2d0 [ 254.143520] ? do_syscall_64+0x5af/0x6a0 [ 254.147678] ? exit_to_usermode_loop+0x43/0x2d0 [ 254.152450] ? lockdep_hardirqs_on+0x418/0x5d0 [ 254.157058] ? trace_hardirqs_on+0x67/0x240 [ 254.161490] exit_to_usermode_loop+0x251/0x2d0 [ 254.166165] do_syscall_64+0x5af/0x6a0 [ 254.170135] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 254.175377] RIP: 0033:0x4576b9 [ 254.178702] Code: Bad RIP value. [ 254.182081] RSP: 002b:00007fb123688c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 254.189883] RAX: fffffffffffffe00 RBX: 0000000000000004 RCX: 00000000004576b9 [ 254.197266] RDX: 00000000000000d6 RSI: 0000000020000140 RDI: 0000000000000003 [ 254.204632] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 254.211961] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1236896d4 [ 254.219311] R13: 00000000004c3377 R14: 00000000004d4f98 R15: 00000000ffffffff [ 254.226668] INFO: task syz-executor2:9106 blocked for more than 145 seconds. [ 254.233962] Not tainted 5.3.0-rc4+ #1 [ 254.238324] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 254.246294] syz-executor2 D28160 9106 6197 0x00000004 [ 254.252055] Call Trace: [ 254.254704] __schedule+0x75b/0x15a0 [ 254.258564] ? __sched_text_start+0x8/0x8 [ 254.262784] ? lock_downgrade+0x920/0x920 [ 254.266954] ? rwlock_bug.part.0+0x90/0x90 [ 254.271447] schedule+0xa8/0x270 [ 254.274881] schedule_preempt_disabled+0x13/0x20 [ 254.279747] __mutex_lock+0x7b0/0x13c0 [ 254.283774] ? v4l2_release+0x1d7/0x3a0 [ 254.287743] ? mutex_lock_io_nested+0x1260/0x1260 [ 254.292778] ? __lock_acquire+0x1702/0x4c30 [ 254.297110] ? vfs_lock_file+0xf0/0xf0 [ 254.301066] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.306614] ? fsnotify+0x811/0xbc0 [ 254.310338] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 254.315909] ? locks_remove_file+0x32f/0x600 [ 254.320553] ? vivid_req_validate+0xc0/0xc0 [ 254.324908] mutex_lock_nested+0x16/0x20 [ 254.329143] ? mutex_lock_nested+0x16/0x20 [ 254.333501] v4l2_release+0x1d7/0x3a0 [ 254.337307] __fput+0x302/0x890 [ 254.340694] ? dev_debug_store+0x110/0x110 [ 254.344943] ____fput+0x16/0x20 [ 254.348296] task_work_run+0x14a/0x1c0 [ 254.352297] exit_to_usermode_loop+0x280/0x2d0 [ 254.356884] do_syscall_64+0x5af/0x6a0 [ 254.360895] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 254.366100] RIP: 0033:0x411021 [ 254.369391] Code: 4c 89 f6 48 89 c7 48 89 ca 48 89 4c 24 10 4c 89 54 24 08 e8 b1 a3 ff ff 48 8b 4c 24 10 41 c6 04 0f 00 4c 8b 7c 24 28 4c 8b 54 <24> 08 45 0f b6 37 e9 db fc ff ff 0f 1f 40 00 41 80 f8 29 74 7f ba [ 254.388425] RSP: 002b:00007ffefb72afd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 254.396147] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000411021 [ 254.403512] RDX: 0000000000000000 RSI: 0000000000730128 RDI: 0000000000000004 [ 254.410858] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 254.418217] R10: 00007ffefb72aef0 R11: 0000000000000293 R12: 0000000000000000 [ 254.425511] R13: 0000000000000001 R14: 0000000000000044 R15: 0000000000000002 [ 254.433092] INFO: task syz-executor2:9107 blocked for more than 145 seconds. [ 254.440330] Not tainted 5.3.0-rc4+ #1 [ 254.444638] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 254.452871] syz-executor2 D29136 9107 6197 0x00004006 [ 254.458580] Call Trace: [ 254.461175] __schedule+0x75b/0x15a0 [ 254.464946] ? __sched_text_start+0x8/0x8 [ 254.469194] ? lock_downgrade+0x920/0x920 [ 254.473357] ? rwlock_bug.part.0+0x90/0x90 [ 254.477599] schedule+0xa8/0x270 [ 254.481079] schedule_preempt_disabled+0x13/0x20 [ 254.485986] __mutex_lock+0x7b0/0x13c0 [ 254.490066] ? v4l2_release+0x1d7/0x3a0 [ 254.494054] ? mutex_lock_io_nested+0x1260/0x1260 [ 254.499093] ? __lock_acquire+0x1702/0x4c30 [ 254.503432] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.509071] ? fsnotify+0x811/0xbc0 [ 254.512860] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 254.518584] ? locks_remove_file+0x32f/0x600 [ 254.523157] ? vivid_req_validate+0xc0/0xc0 [ 254.527639] mutex_lock_nested+0x16/0x20 [ 254.531813] ? mutex_lock_nested+0x16/0x20 [ 254.536132] v4l2_release+0x1d7/0x3a0 [ 254.540026] __fput+0x302/0x890 [ 254.543323] ? dev_debug_store+0x110/0x110 [ 254.547649] ____fput+0x16/0x20 [ 254.551108] task_work_run+0x14a/0x1c0 [ 254.555010] get_signal+0x207c/0x2500 [ 254.558890] ? mutex_lock_interruptible_nested+0x16/0x20 [ 254.564505] ? video_devdata+0xd/0xa0 [ 254.568388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.573951] ? vb2_fop_read+0x1b7/0x410 [ 254.577927] do_signal+0x87/0x1700 [ 254.581714] ? kick_process+0xef/0x180 [ 254.585620] ? task_work_add+0x9c/0x120 [ 254.589724] ? setup_sigcontext+0x7d0/0x7d0 [ 254.594105] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.599740] ? fput_many+0x12c/0x1a0 [ 254.603464] ? fput+0x1b/0x20 [ 254.606591] ? ksys_pread64+0x121/0x1c0 [ 254.610657] ? exit_to_usermode_loop+0x43/0x2d0 [ 254.615480] ? do_syscall_64+0x5af/0x6a0 [ 254.619661] ? exit_to_usermode_loop+0x43/0x2d0 [ 254.624435] ? lockdep_hardirqs_on+0x418/0x5d0 [ 254.629152] ? trace_hardirqs_on+0x67/0x240 [ 254.633552] exit_to_usermode_loop+0x251/0x2d0 [ 254.638703] do_syscall_64+0x5af/0x6a0 [ 254.642679] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 254.647869] RIP: 0033:0x4576b9 [ 254.651194] Code: Bad RIP value. [ 254.654604] RSP: 002b:00007f2f9a2efc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 254.662398] RAX: fffffffffffffe00 RBX: 0000000000000004 RCX: 00000000004576b9 [ 254.669717] RDX: 00000000000000d6 RSI: 0000000020000140 RDI: 0000000000000003 [ 254.677096] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 254.684455] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2f9a2f06d4 [ 254.691768] R13: 00000000004c3377 R14: 00000000004d4f98 R15: 00000000ffffffff [ 254.699117] [ 254.699117] Showing all locks held in the system: [ 254.705446] 1 lock held by khungtaskd/1026: [ 254.709866] #0: 00000000fb87f49e (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 254.718709] 1 lock held by rsyslogd/5949: [ 254.722858] #0: 000000003221ee43 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 254.730906] 2 locks held by getty/6039: [ 254.734997] #0: 000000001c9f216f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 254.743494] #1: 00000000bbf06483 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 254.752517] 2 locks held by getty/6040: [ 254.756626] #0: 00000000ae7d2b34 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 254.765112] #1: 00000000a035cbcf (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 254.774078] 2 locks held by getty/6041: [ 254.778204] #0: 000000008b4b243d (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 254.786474] #1: 00000000776ef706 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 254.804237] 2 locks held by getty/6042: [ 254.808256] #0: 0000000007f83e00 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 254.816501] #1: 00000000f5c035b3 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 254.825605] 2 locks held by getty/6043: [ 254.829624] #0: 0000000031819257 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 254.838236] #1: 0000000075a36e9e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 254.847280] 2 locks held by getty/6044: [ 254.851441] #0: 00000000bc3392d2 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 254.859780] #1: 0000000036d0f032 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 254.869300] 2 locks held by getty/6045: [ 254.873327] #0: 00000000d5c68ca5 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 254.881756] #1: 00000000f6d69caa (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 254.890748] 2 locks held by syz-executor0/9092: [ 254.895415] #0: 000000001cadffbc (&mdev->req_queue_mutex){+.+.}, at: v4l2_release+0x1d7/0x3a0 [ 254.904303] #1: 0000000077da9a44 (&dev->mutex#3){+.+.}, at: _vb2_fop_release+0x3f/0x2a0 [ 254.912762] 1 lock held by syz-executor4/9091: [ 254.917685] #0: 000000001cadffbc (&mdev->req_queue_mutex){+.+.}, at: v4l2_release+0x1d7/0x3a0 [ 254.926601] 1 lock held by syz-executor1/9099: [ 254.931224] #0: 000000001cadffbc (&mdev->req_queue_mutex){+.+.}, at: v4l2_release+0x1d7/0x3a0 [ 254.940206] 1 lock held by syz-executor1/9105: [ 254.944796] #0: 000000001cadffbc (&mdev->req_queue_mutex){+.+.}, at: v4l2_release+0x1d7/0x3a0 [ 254.953697] 1 lock held by syz-executor5/9100: [ 254.958332] #0: 000000001cadffbc (&mdev->req_queue_mutex){+.+.}, at: v4l2_release+0x1d7/0x3a0 [ 254.967107] 1 lock held by syz-executor5/9101: [ 254.971791] #0: 000000001cadffbc (&mdev->req_queue_mutex){+.+.}, at: v4l2_release+0x1d7/0x3a0 [ 254.980642] 1 lock held by syz-executor3/9102: [ 254.985247] #0: 000000001cadffbc (&mdev->req_queue_mutex){+.+.}, at: v4l2_release+0x1d7/0x3a0 [ 254.994221] 1 lock held by syz-executor3/9104: [ 254.998843] #0: 000000001cadffbc (&mdev->req_queue_mutex){+.+.}, at: v4l2_release+0x1d7/0x3a0 [ 255.007629] 1 lock held by vivid-000-vid-c/9103: [ 255.012469] #0: 0000000077da9a44 (&dev->mutex#3){+.+.}, at: vivid_thread_vid_cap+0x4af/0x2bf0 [ 255.021310] 1 lock held by syz-executor2/9106: [ 255.025882] #0: 000000001cadffbc (&mdev->req_queue_mutex){+.+.}, at: v4l2_release+0x1d7/0x3a0 [ 255.034726] 1 lock held by syz-executor2/9107: [ 255.039361] #0: 000000001cadffbc (&mdev->req_queue_mutex){+.+.}, at: v4l2_release+0x1d7/0x3a0 [ 255.048209] [ 255.049859] ============================================= [ 255.049859] [ 255.056879] NMI backtrace for cpu 0 [ 255.060587] CPU: 0 PID: 1026 Comm: khungtaskd Not tainted 5.3.0-rc4+ #1 [ 255.067344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.076687] Call Trace: [ 255.079267] dump_stack+0x172/0x1f0 [ 255.082887] nmi_cpu_backtrace.cold+0x70/0xb2 [ 255.087370] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.092966] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 255.097890] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 255.103173] arch_trigger_cpumask_backtrace+0x14/0x20 [ 255.108354] watchdog+0x9d0/0xef0 [ 255.111804] kthread+0x364/0x430 [ 255.115166] ? reset_hung_task_detector+0x30/0x30 [ 255.120016] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 255.125542] ret_from_fork+0x3a/0x50 [ 255.129338] Sending NMI from CPU 0 to CPUs 1: [ 255.133913] NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0xe/0x10 [ 255.134851] Kernel panic - not syncing: hung_task: blocked tasks [ 255.147625] CPU: 0 PID: 1026 Comm: khungtaskd Not tainted 5.3.0-rc4+ #1 [ 255.154362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.163725] Call Trace: [ 255.166335] dump_stack+0x172/0x1f0 [ 255.170024] panic+0x2dc/0x76b [ 255.173242] ? add_taint.cold+0x16/0x16 [ 255.177208] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 255.182281] ? printk_safe_flush+0xf2/0x140 [ 255.186606] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.192277] ? nmi_trigger_cpumask_backtrace+0x224/0x28b [ 255.197744] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 255.203196] watchdog+0x9e1/0xef0 [ 255.206657] kthread+0x364/0x430 [ 255.210013] ? reset_hung_task_detector+0x30/0x30 [ 255.214842] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 255.220373] ret_from_fork+0x3a/0x50 [ 255.225296] Kernel Offset: disabled [ 255.228941] Rebooting in 86400 seconds..