[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.53' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 485.563828][ T6568] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 485.563837][ T20] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 485.579113][ T6567] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 485.586722][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 485.594552][ T6563] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 485.602096][ T1001] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 485.803695][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 485.853711][ T6567] usb 6-1: Using ep0 maxpacket: 16 [ 485.859144][ T6568] usb 1-1: Using ep0 maxpacket: 16 [ 485.864668][ T6563] usb 4-1: Using ep0 maxpacket: 16 [ 485.869925][ T1001] usb 2-1: Using ep0 maxpacket: 16 [ 485.875297][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 485.923860][ T20] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 485.933746][ T20] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 485.943387][ T20] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 485.953167][ T20] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 485.963090][ T20] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 485.972206][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.983791][ T6567] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 485.993554][ T6567] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 486.003485][ T6567] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 486.013341][ T6567] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 486.023230][ T6567] usb 6-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 486.032380][ T6567] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.046147][ T20] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 486.064548][ T6563] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 486.074436][ T6563] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 486.084288][ T6563] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 486.094209][ T6563] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 486.104065][ T6563] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 486.113117][ T6563] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.122106][ T1001] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 486.131879][ T1001] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 486.141686][ T1001] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 486.151515][ T1001] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 486.161333][ T1001] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 486.170549][ T1001] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.179338][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 486.189201][ T7] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 486.199038][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 486.208846][ T7] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 486.218656][ T7] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 486.227799][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.236434][ T6568] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 486.246214][ T6568] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 486.255946][ T6568] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 486.265772][ T6568] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 486.275694][ T6568] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 486.284826][ T6568] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.295497][ T6567] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 486.355498][ T7] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 486.363472][ T1001] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 486.372249][ T6568] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 486.388645][ T6563] ums-sddr09 4-1:1.0: USB Mass Storage device detected executing program [ 486.464758][ T6556] udc-core: couldn't find an available UDC or it's busy [ 486.471728][ T6556] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 executing program [ 486.550797][ T20] ums-sddr09: probe of 5-1:1.0 failed with error -5 [ 486.561047][ T6559] udc-core: couldn't find an available UDC or it's busy [ 486.568113][ T6559] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 486.589277][ T20] usb 5-1: USB disconnect, device number 2 [ 486.668654][ T6567] ums-sddr09: probe of 6-1:1.0 failed with error -5 [ 486.679354][ T6567] usb 6-1: USB disconnect, device number 2 [ 486.776942][ T6550] udc-core: couldn't find an available UDC or it's busy [ 486.784065][ T6550] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 486.791789][ T6555] udc-core: couldn't find an available UDC or it's busy [ 486.794025][ T6557] udc-core: couldn't find an available UDC or it's busy [ 486.798829][ T6555] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 486.805702][ T6557] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 executing program [ 486.824088][ T6558] udc-core: couldn't find an available UDC or it's busy [ 486.831063][ T6558] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 executing program executing program executing program [ 486.868498][ T6568] ums-sddr09: probe of 1-1:1.0 failed with error -5 [ 486.897790][ T6568] usb 1-1: USB disconnect, device number 2 [ 486.933402][ T6563] ums-sddr09: probe of 4-1:1.0 failed with error -5 [ 486.952540][ T6563] usb 4-1: USB disconnect, device number 2 [ 486.975718][ T1001] ums-sddr09: probe of 2-1:1.0 failed with error -5 [ 486.983960][ T20] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 486.984630][ T7] ums-sddr09: probe of 3-1:1.0 failed with error -5 [ 487.006198][ T1001] usb 2-1: USB disconnect, device number 2 [ 487.036025][ T7] usb 3-1: USB disconnect, device number 2 [ 487.093850][ T6567] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 487.223505][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 487.343581][ T6567] usb 6-1: Using ep0 maxpacket: 16 [ 487.343817][ T20] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 487.358438][ T20] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 487.368143][ T20] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 487.377944][ T20] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 487.387771][ T20] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 487.396876][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.423537][ T6563] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 487.431295][ T1001] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 487.443738][ T6568] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 487.444717][ T20] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 487.493962][ T6567] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 487.503888][ T6567] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 487.513597][ T6567] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 487.523323][ T6567] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 487.533102][ T6567] usb 6-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 487.542214][ T6567] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.550918][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 487.594600][ T6567] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 487.703471][ T6563] usb 4-1: Using ep0 maxpacket: 16 [ 487.764237][ T1001] usb 2-1: Using ep0 maxpacket: 16 [ 487.769500][ T6568] usb 1-1: Using ep0 maxpacket: 16 [ 487.824588][ T7] usb 3-1: Using ep0 maxpacket: 16 executing program [ 487.854211][ T6619] udc-core: couldn't find an available UDC or it's busy [ 487.861249][ T6619] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 487.883649][ T6563] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 487.893514][ T6563] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 487.903259][ T6563] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 487.913120][ T6563] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 487.922943][ T6563] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 487.932128][ T6563] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.978080][ T20] ums-sddr09: probe of 5-1:1.0 failed with error -5 [ 487.988814][ T20] usb 5-1: USB disconnect, device number 3 [ 487.994870][ T1001] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 488.005008][ T1001] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 488.014777][ T1001] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 488.024079][ T6629] udc-core: couldn't find an available UDC or it's busy [ 488.024605][ T1001] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 488.031462][ T6629] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 488.041173][ T1001] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 488.057770][ T1001] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.066180][ T6568] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 488.076004][ T6568] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 488.085849][ T6568] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 488.095689][ T6568] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 488.105496][ T6568] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 488.114626][ T6568] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 executing program [ 488.125271][ T6563] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 488.132990][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 488.142780][ T7] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 488.152498][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 488.162344][ T7] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 488.172215][ T7] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 488.181360][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.225050][ T6568] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 488.235441][ T1001] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 488.245051][ T7] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 488.256860][ T6567] ums-sddr09: probe of 6-1:1.0 failed with error -5 [ 488.288113][ T6567] usb 6-1: USB disconnect, device number 3 [ 488.353464][ T20] usb 5-1: new high-speed USB device number 4 using dummy_hcd executing program [ 488.444030][ T6645] udc-core: couldn't find an available UDC or it's busy [ 488.450983][ T6645] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 488.537748][ T6563] ums-sddr09: probe of 4-1:1.0 failed with error -5 [ 488.547134][ T6563] usb 4-1: USB disconnect, device number 3 [ 488.593349][ T20] usb 5-1: Using ep0 maxpacket: 16 executing program [ 488.633923][ T6650] udc-core: couldn't find an available UDC or it's busy [ 488.640917][ T6650] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 488.666589][ T6654] udc-core: couldn't find an available UDC or it's busy [ 488.666617][ T6648] udc-core: couldn't find an available UDC or it's busy [ 488.673693][ T6654] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 488.680598][ T6648] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 488.700608][ T6568] ums-sddr09: probe of 1-1:1.0 failed with error -5 [ 488.714276][ T6568] usb 1-1: USB disconnect, device number 3 [ 488.723900][ T6567] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 488.733577][ T20] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 488.743340][ T20] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 488.752997][ T20] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 488.762821][ T20] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 488.772727][ T20] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 executing program executing program [ 488.781841][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.823031][ T7] ums-sddr09: probe of 3-1:1.0 failed with error -5 [ 488.834820][ T20] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 488.847907][ T7] usb 3-1: USB disconnect, device number 3 [ 488.860791][ T1001] ums-sddr09: probe of 2-1:1.0 failed with error -5 [ 488.874038][ T1001] usb 2-1: USB disconnect, device number 3 [ 488.934086][ T6563] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 488.983315][ T6567] usb 6-1: Using ep0 maxpacket: 16 [ 489.113646][ T6567] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 489.123468][ T6567] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 489.133286][ T6567] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 489.143010][ T6567] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 489.152857][ T6567] usb 6-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 489.162029][ T6567] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.170976][ T6568] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 489.214471][ T6567] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 489.221628][ T6563] usb 4-1: Using ep0 maxpacket: 16 [ 489.343322][ T6563] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 489.353015][ T6563] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 489.362768][ T6563] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 489.372672][ T6563] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 489.382509][ T6563] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 489.391639][ T6563] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.434200][ T6563] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 489.447142][ T6568] usb 1-1: Using ep0 maxpacket: 16 [ 489.563334][ T6568] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 489.572993][ T6568] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 489.582829][ T6568] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 489.592656][ T6568] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 489.602545][ T6568] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 489.611825][ T6568] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.654599][ T6568] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 716.222229][ T27] INFO: task syz-executor170:6699 can't die for more than 143 seconds. [ 716.230740][ T27] task:syz-executor170 state:D stack:28144 pid: 6699 ppid: 6553 flags:0x00000004 [ 716.240036][ T27] Call Trace: [ 716.243374][ T27] [ 716.246323][ T27] __schedule+0x940/0x26f0 [ 716.250864][ T27] ? io_schedule_timeout+0x140/0x140 [ 716.256237][ T27] schedule+0xd3/0x270 [ 716.260315][ T27] schedule_preempt_disabled+0xf/0x20 [ 716.265743][ T27] __mutex_lock+0xa34/0x12f0 [ 716.270342][ T27] ? misc_open+0x55/0x4a0 [ 716.274812][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 716.280366][ T27] ? find_held_lock+0x2d/0x110 [ 716.285240][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 716.290144][ T27] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 716.296494][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 716.302805][ T27] ? kobject_get_unless_zero+0x15a/0x1e0 [ 716.308481][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 716.313502][ T27] misc_open+0x55/0x4a0 [ 716.317663][ T27] ? misc_devnode+0x120/0x120 [ 716.322389][ T27] chrdev_open+0x266/0x770 [ 716.326908][ T27] ? cdev_device_add+0x210/0x210 [ 716.331837][ T27] ? fsnotify_perm.part.0+0x22d/0x620 [ 716.337334][ T27] do_dentry_open+0x4c8/0x11d0 [ 716.342172][ T27] ? cdev_device_add+0x210/0x210 [ 716.347111][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 716.353429][ T27] ? may_open+0x1f6/0x420 [ 716.357781][ T27] path_openat+0x1c9a/0x2740 [ 716.362516][ T27] ? path_lookupat+0x860/0x860 [ 716.367292][ T27] ? mark_lock+0xef/0x17b0 [ 716.371702][ T27] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 716.377774][ T27] do_filp_open+0x1aa/0x400 [ 716.382345][ T27] ? may_open_dev+0xf0/0xf0 [ 716.386899][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 716.391826][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 716.398155][ T27] ? _find_next_bit+0x1e3/0x260 [ 716.403176][ T27] ? _raw_spin_unlock+0x24/0x40 [ 716.408033][ T27] ? alloc_fd+0x2f0/0x670 [ 716.412459][ T27] do_sys_openat2+0x16d/0x4d0 [ 716.417141][ T27] ? build_open_flags+0x6f0/0x6f0 [ 716.422235][ T27] ? __context_tracking_exit+0xb8/0xe0 [ 716.427765][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 716.432777][ T27] __x64_sys_openat+0x13f/0x1f0 [ 716.437639][ T27] ? __ia32_sys_open+0x1c0/0x1c0 [ 716.442636][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 716.448545][ T27] do_syscall_64+0x35/0xb0 [ 716.453025][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 716.458937][ T27] RIP: 0033:0x7f5a55548347 [ 716.463409][ T27] RSP: 002b:00007ffe561d3160 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 716.471838][ T27] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f5a55548347 [ 716.479896][ T27] RDX: 0000000000000002 RSI: 00007f5a555ce03b RDI: 00000000ffffff9c [ 716.487953][ T27] RBP: 00007f5a555ce03b R08: 0000000000000000 R09: 0000000000000000 [ 716.496012][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 716.504034][ T27] R13: 00007ffe561d528c R14: 0000000000000076 R15: 00007ffe561d5290 [ 716.512186][ T27] [ 716.515210][ T27] INFO: task syz-executor170:6699 blocked for more than 143 seconds. [ 716.523330][ T27] Not tainted 5.15.0-rc3-next-20210930-syzkaller #0 [ 716.530429][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 716.539155][ T27] task:syz-executor170 state:D stack:28144 pid: 6699 ppid: 6553 flags:0x00000004 [ 716.548428][ T27] Call Trace: [ 716.551707][ T27] [ 716.554704][ T27] __schedule+0x940/0x26f0 [ 716.559128][ T27] ? io_schedule_timeout+0x140/0x140 [ 716.564474][ T27] schedule+0xd3/0x270 [ 716.568555][ T27] schedule_preempt_disabled+0xf/0x20 [ 716.574015][ T27] __mutex_lock+0xa34/0x12f0 [ 716.578617][ T27] ? misc_open+0x55/0x4a0 [ 716.583009][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 716.588559][ T27] ? find_held_lock+0x2d/0x110 [ 716.593412][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 716.598278][ T27] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 716.604590][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 716.610845][ T27] ? kobject_get_unless_zero+0x15a/0x1e0 [ 716.616576][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 716.621538][ T27] misc_open+0x55/0x4a0 [ 716.625833][ T27] ? misc_devnode+0x120/0x120 [ 716.630782][ T27] chrdev_open+0x266/0x770 [ 716.635274][ T27] ? cdev_device_add+0x210/0x210 [ 716.640213][ T27] ? fsnotify_perm.part.0+0x22d/0x620 [ 716.645657][ T27] do_dentry_open+0x4c8/0x11d0 [ 716.650423][ T27] ? cdev_device_add+0x210/0x210 [ 716.655425][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 716.661675][ T27] ? may_open+0x1f6/0x420 [ 716.666059][ T27] path_openat+0x1c9a/0x2740 [ 716.670660][ T27] ? path_lookupat+0x860/0x860 [ 716.675487][ T27] ? mark_lock+0xef/0x17b0 [ 716.679908][ T27] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 716.685975][ T27] do_filp_open+0x1aa/0x400 [ 716.690482][ T27] ? may_open_dev+0xf0/0xf0 [ 716.695073][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 716.700014][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 716.706307][ T27] ? _find_next_bit+0x1e3/0x260 [ 716.711165][ T27] ? _raw_spin_unlock+0x24/0x40 [ 716.716093][ T27] ? alloc_fd+0x2f0/0x670 [ 716.720452][ T27] do_sys_openat2+0x16d/0x4d0 [ 716.725214][ T27] ? build_open_flags+0x6f0/0x6f0 [ 716.730247][ T27] ? __context_tracking_exit+0xb8/0xe0 [ 716.735776][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 716.740633][ T27] __x64_sys_openat+0x13f/0x1f0 [ 716.745533][ T27] ? __ia32_sys_open+0x1c0/0x1c0 [ 716.750680][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 716.756682][ T27] do_syscall_64+0x35/0xb0 [ 716.761102][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 716.767056][ T27] RIP: 0033:0x7f5a55548347 [ 716.771469][ T27] RSP: 002b:00007ffe561d3160 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 716.780074][ T27] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f5a55548347 [ 716.788141][ T27] RDX: 0000000000000002 RSI: 00007f5a555ce03b RDI: 00000000ffffff9c [ 716.796211][ T27] RBP: 00007f5a555ce03b R08: 0000000000000000 R09: 0000000000000000 [ 716.804248][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 716.812306][ T27] R13: 00007ffe561d528c R14: 0000000000000076 R15: 00007ffe561d5290 [ 716.820293][ T27] [ 716.823523][ T27] INFO: task syz-executor170:6714 can't die for more than 143 seconds. [ 716.831757][ T27] task:syz-executor170 state:D stack:28144 pid: 6714 ppid: 6554 flags:0x00000004 [ 716.841071][ T27] Call Trace: [ 716.844429][ T27] [ 716.847397][ T27] __schedule+0x940/0x26f0 [ 716.851816][ T27] ? io_schedule_timeout+0x140/0x140 [ 716.857186][ T27] schedule+0xd3/0x270 [ 716.861264][ T27] schedule_preempt_disabled+0xf/0x20 [ 716.866773][ T27] __mutex_lock+0xa34/0x12f0 [ 716.871372][ T27] ? misc_open+0x55/0x4a0 [ 716.875795][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 716.881351][ T27] ? find_held_lock+0x2d/0x110 [ 716.886208][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 716.891152][ T27] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 716.897495][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 716.903817][ T27] ? kobject_get_unless_zero+0x15a/0x1e0 [ 716.909468][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 716.914651][ T27] misc_open+0x55/0x4a0 [ 716.918819][ T27] ? misc_devnode+0x120/0x120 [ 716.923563][ T27] chrdev_open+0x266/0x770 [ 716.927990][ T27] ? cdev_device_add+0x210/0x210 [ 716.933005][ T27] ? fsnotify_perm.part.0+0x22d/0x620 [ 716.938392][ T27] do_dentry_open+0x4c8/0x11d0 [ 716.943351][ T27] ? cdev_device_add+0x210/0x210 [ 716.948315][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 716.954674][ T27] ? may_open+0x1f6/0x420 [ 716.959204][ T27] path_openat+0x1c9a/0x2740 [ 716.963884][ T27] ? path_lookupat+0x860/0x860 [ 716.968691][ T27] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 716.974769][ T27] do_filp_open+0x1aa/0x400 [ 716.979279][ T27] ? may_open_dev+0xf0/0xf0 [ 716.983847][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 716.988809][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 716.995174][ T27] ? _find_next_bit+0x1e3/0x260 [ 717.000037][ T27] ? _raw_spin_unlock+0x24/0x40 [ 717.005022][ T27] ? alloc_fd+0x2f0/0x670 [ 717.009373][ T27] do_sys_openat2+0x16d/0x4d0 [ 717.014143][ T27] ? build_open_flags+0x6f0/0x6f0 [ 717.019289][ T27] ? __context_tracking_exit+0xb8/0xe0 [ 717.024898][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 717.029993][ T27] __x64_sys_openat+0x13f/0x1f0 [ 717.034977][ T27] ? __ia32_sys_open+0x1c0/0x1c0 [ 717.040232][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 717.046344][ T27] do_syscall_64+0x35/0xb0 [ 717.050783][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 717.056789][ T27] RIP: 0033:0x7f5a55548347 [ 717.061214][ T27] RSP: 002b:00007ffe561d3160 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 717.069751][ T27] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f5a55548347 [ 717.077835][ T27] RDX: 0000000000000002 RSI: 00007f5a555ce03b RDI: 00000000ffffff9c [ 717.085893][ T27] RBP: 00007f5a555ce03b R08: 0000000000000000 R09: 0000000000000000 [ 717.093958][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 717.101985][ T27] R13: 00007ffe561d528c R14: 0000000000000076 R15: 00007ffe561d5290 [ 717.110060][ T27] [ 717.113194][ T27] INFO: task syz-executor170:6714 blocked for more than 144 seconds. [ 717.121257][ T27] Not tainted 5.15.0-rc3-next-20210930-syzkaller #0 [ 717.128438][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 717.137220][ T27] task:syz-executor170 state:D stack:28144 pid: 6714 ppid: 6554 flags:0x00000004 [ 717.146496][ T27] Call Trace: [ 717.149784][ T27] [ 717.152786][ T27] __schedule+0x940/0x26f0 [ 717.157211][ T27] ? io_schedule_timeout+0x140/0x140 [ 717.162566][ T27] schedule+0xd3/0x270 [ 717.166639][ T27] schedule_preempt_disabled+0xf/0x20 [ 717.172173][ T27] __mutex_lock+0xa34/0x12f0 [ 717.176791][ T27] ? misc_open+0x55/0x4a0 [ 717.181115][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 717.186726][ T27] ? find_held_lock+0x2d/0x110 [ 717.191502][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 717.196447][ T27] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 717.202790][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 717.209050][ T27] ? kobject_get_unless_zero+0x15a/0x1e0 [ 717.214785][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 717.219732][ T27] misc_open+0x55/0x4a0 [ 717.223947][ T27] ? misc_devnode+0x120/0x120 [ 717.228628][ T27] chrdev_open+0x266/0x770 [ 717.233147][ T27] ? cdev_device_add+0x210/0x210 [ 717.238122][ T27] ? fsnotify_perm.part.0+0x22d/0x620 [ 717.243593][ T27] do_dentry_open+0x4c8/0x11d0 [ 717.248374][ T27] ? cdev_device_add+0x210/0x210 [ 717.253392][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 717.259659][ T27] ? may_open+0x1f6/0x420 [ 717.264078][ T27] path_openat+0x1c9a/0x2740 [ 717.268689][ T27] ? path_lookupat+0x860/0x860 [ 717.273539][ T27] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 717.279598][ T27] do_filp_open+0x1aa/0x400 [ 717.284180][ T27] ? may_open_dev+0xf0/0xf0 [ 717.288697][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 717.293723][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 717.299968][ T27] ? _find_next_bit+0x1e3/0x260 [ 717.304891][ T27] ? _raw_spin_unlock+0x24/0x40 [ 717.309752][ T27] ? alloc_fd+0x2f0/0x670 [ 717.314196][ T27] do_sys_openat2+0x16d/0x4d0 [ 717.318916][ T27] ? build_open_flags+0x6f0/0x6f0 [ 717.324035][ T27] ? __context_tracking_exit+0xb8/0xe0 [ 717.329512][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 717.334447][ T27] __x64_sys_openat+0x13f/0x1f0 [ 717.339308][ T27] ? __ia32_sys_open+0x1c0/0x1c0 [ 717.344308][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 717.350213][ T27] do_syscall_64+0x35/0xb0 [ 717.354702][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 717.360606][ T27] RIP: 0033:0x7f5a55548347 [ 717.365259][ T27] RSP: 002b:00007ffe561d3160 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 717.373857][ T27] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f5a55548347 [ 717.381925][ T27] RDX: 0000000000000002 RSI: 00007f5a555ce03b RDI: 00000000ffffff9c [ 717.389907][ T27] RBP: 00007f5a555ce03b R08: 0000000000000000 R09: 0000000000000000 [ 717.397960][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 717.406000][ T27] R13: 00007ffe561d528c R14: 0000000000000076 R15: 00007ffe561d5290 [ 717.414072][ T27] [ 717.417269][ T27] INFO: task syz-executor170:6750 can't die for more than 144 seconds. [ 717.425692][ T27] task:syz-executor170 state:D stack:28144 pid: 6750 ppid: 6552 flags:0x00000004 [ 717.435021][ T27] Call Trace: [ 717.438319][ T27] [ 717.441270][ T27] __schedule+0x940/0x26f0 [ 717.445777][ T27] ? io_schedule_timeout+0x140/0x140 [ 717.451086][ T27] schedule+0xd3/0x270 [ 717.455359][ T27] schedule_preempt_disabled+0xf/0x20 [ 717.460740][ T27] __mutex_lock+0xa34/0x12f0 [ 717.465388][ T27] ? misc_open+0x55/0x4a0 [ 717.469730][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 717.475344][ T27] ? find_held_lock+0x2d/0x110 [ 717.480121][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 717.485035][ T27] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 717.491282][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 717.497622][ T27] ? kobject_get_unless_zero+0x15a/0x1e0 [ 717.503529][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 717.508652][ T27] misc_open+0x55/0x4a0 [ 717.512958][ T27] ? misc_devnode+0x120/0x120 [ 717.517637][ T27] chrdev_open+0x266/0x770 [ 717.522119][ T27] ? cdev_device_add+0x210/0x210 [ 717.527175][ T27] ? fsnotify_perm.part.0+0x22d/0x620 [ 717.532715][ T27] do_dentry_open+0x4c8/0x11d0 [ 717.537482][ T27] ? cdev_device_add+0x210/0x210 [ 717.542671][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 717.548933][ T27] ? may_open+0x1f6/0x420 [ 717.553373][ T27] path_openat+0x1c9a/0x2740 [ 717.557982][ T27] ? path_lookupat+0x860/0x860 [ 717.562803][ T27] ? mark_lock+0xef/0x17b0 [ 717.567224][ T27] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 717.573284][ T27] do_filp_open+0x1aa/0x400 [ 717.577786][ T27] ? may_open_dev+0xf0/0xf0 [ 717.582348][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 717.587291][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 717.593603][ T27] ? _find_next_bit+0x1e3/0x260 [ 717.598457][ T27] ? _raw_spin_unlock+0x24/0x40 [ 717.603372][ T27] ? alloc_fd+0x2f0/0x670 [ 717.607813][ T27] do_sys_openat2+0x16d/0x4d0 [ 717.612581][ T27] ? build_open_flags+0x6f0/0x6f0 [ 717.617735][ T27] ? __context_tracking_exit+0xb8/0xe0 [ 717.623298][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 717.628166][ T27] __x64_sys_openat+0x13f/0x1f0 [ 717.633094][ T27] ? __ia32_sys_open+0x1c0/0x1c0 [ 717.638038][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 717.644095][ T27] do_syscall_64+0x35/0xb0 [ 717.648516][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 717.654487][ T27] RIP: 0033:0x7f5a55548347 [ 717.659082][ T27] RSP: 002b:00007ffe561d3160 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 717.667673][ T27] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f5a55548347 [ 717.675795][ T27] RDX: 0000000000000002 RSI: 00007f5a555ce03b RDI: 00000000ffffff9c [ 717.683993][ T27] RBP: 00007f5a555ce03b R08: 0000000000000000 R09: 0000000000000000 [ 717.692075][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 717.700072][ T27] R13: 00007ffe561d528c R14: 0000000000000076 R15: 00007ffe561d5290 [ 717.708322][ T27] [ 717.711345][ T27] INFO: task syz-executor170:6750 blocked for more than 144 seconds. [ 717.719554][ T27] Not tainted 5.15.0-rc3-next-20210930-syzkaller #0 [ 717.726849][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 717.735601][ T27] task:syz-executor170 state:D stack:28144 pid: 6750 ppid: 6552 flags:0x00000004 [ 717.744886][ T27] Call Trace: [ 717.748186][ T27] [ 717.751140][ T27] __schedule+0x940/0x26f0 [ 717.755740][ T27] ? io_schedule_timeout+0x140/0x140 [ 717.761040][ T27] schedule+0xd3/0x270 [ 717.765173][ T27] schedule_preempt_disabled+0xf/0x20 [ 717.770554][ T27] __mutex_lock+0xa34/0x12f0 [ 717.775226][ T27] ? misc_open+0x55/0x4a0 [ 717.779563][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 717.785186][ T27] ? find_held_lock+0x2d/0x110 [ 717.789977][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 717.794936][ T27] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 717.801370][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 717.807671][ T27] ? kobject_get_unless_zero+0x15a/0x1e0 [ 717.813392][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 717.818335][ T27] misc_open+0x55/0x4a0 [ 717.822539][ T27] ? misc_devnode+0x120/0x120 [ 717.827221][ T27] chrdev_open+0x266/0x770 [ 717.831747][ T27] ? cdev_device_add+0x210/0x210 [ 717.836759][ T27] ? fsnotify_perm.part.0+0x22d/0x620 [ 717.842209][ T27] do_dentry_open+0x4c8/0x11d0 [ 717.846997][ T27] ? cdev_device_add+0x210/0x210 [ 717.852002][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 717.858253][ T27] ? may_open+0x1f6/0x420 [ 717.862747][ T27] path_openat+0x1c9a/0x2740 [ 717.867352][ T27] ? path_lookupat+0x860/0x860 [ 717.872190][ T27] ? mark_lock+0xef/0x17b0 [ 717.876663][ T27] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 717.882704][ T27] do_filp_open+0x1aa/0x400 [ 717.887206][ T27] ? may_open_dev+0xf0/0xf0 [ 717.891703][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 717.896723][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 717.903145][ T27] ? _find_next_bit+0x1e3/0x260 [ 717.908018][ T27] ? _raw_spin_unlock+0x24/0x40 [ 717.912959][ T27] ? alloc_fd+0x2f0/0x670 [ 717.917301][ T27] do_sys_openat2+0x16d/0x4d0 [ 717.922038][ T27] ? build_open_flags+0x6f0/0x6f0 [ 717.927265][ T27] ? __context_tracking_exit+0xb8/0xe0 [ 717.932820][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 717.937697][ T27] __x64_sys_openat+0x13f/0x1f0 [ 717.942613][ T27] ? __ia32_sys_open+0x1c0/0x1c0 [ 717.947561][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 717.953633][ T27] do_syscall_64+0x35/0xb0 [ 717.958067][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 717.964028][ T27] RIP: 0033:0x7f5a55548347 [ 717.968448][ T27] RSP: 002b:00007ffe561d3160 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 717.976945][ T27] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f5a55548347 [ 717.985103][ T27] RDX: 0000000000000002 RSI: 00007f5a555ce03b RDI: 00000000ffffff9c [ 717.993149][ T27] RBP: 00007f5a555ce03b R08: 0000000000000000 R09: 0000000000000000 [ 718.001117][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 718.009138][ T27] R13: 00007ffe561d528c R14: 0000000000000076 R15: 00007ffe561d5290 [ 718.017203][ T27] [ 718.020337][ T27] INFO: task syz-executor170:6761 can't die for more than 145 seconds. [ 718.028661][ T27] task:syz-executor170 state:D stack:28144 pid: 6761 ppid: 6548 flags:0x00000004 [ 718.037973][ T27] Call Trace: [ 718.041257][ T27] [ 718.044279][ T27] __schedule+0x940/0x26f0 [ 718.048726][ T27] ? io_schedule_timeout+0x140/0x140 [ 718.054087][ T27] schedule+0xd3/0x270 [ 718.058770][ T27] schedule_preempt_disabled+0xf/0x20 [ 718.064247][ T27] __mutex_lock+0xa34/0x12f0 [ 718.068946][ T27] ? misc_open+0x55/0x4a0 [ 718.073392][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 718.078950][ T27] ? find_held_lock+0x2d/0x110 [ 718.083785][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 718.088638][ T27] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 718.094952][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 718.101200][ T27] ? kobject_get_unless_zero+0x15a/0x1e0 [ 718.106891][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 718.127659][ T27] misc_open+0x55/0x4a0 [ 718.131884][ T27] ? misc_devnode+0x120/0x120 [ 718.136564][ T27] chrdev_open+0x266/0x770 [ 718.140973][ T27] ? cdev_device_add+0x210/0x210 [ 718.146043][ T27] ? fsnotify_perm.part.0+0x22d/0x620 [ 718.151441][ T27] do_dentry_open+0x4c8/0x11d0 [ 718.156287][ T27] ? cdev_device_add+0x210/0x210 [ 718.161230][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 718.167554][ T27] ? may_open+0x1f6/0x420 [ 718.171962][ T27] path_openat+0x1c9a/0x2740 [ 718.176568][ T27] ? path_lookupat+0x860/0x860 [ 718.181320][ T27] ? mark_lock+0xef/0x17b0 [ 718.185794][ T27] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 718.191915][ T27] do_filp_open+0x1aa/0x400 [ 718.196435][ T27] ? may_open_dev+0xf0/0xf0 [ 718.200943][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 718.205961][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 718.212270][ T27] ? _find_next_bit+0x1e3/0x260 [ 718.217129][ T27] ? _raw_spin_unlock+0x24/0x40 [ 718.222036][ T27] ? alloc_fd+0x2f0/0x670 [ 718.226381][ T27] do_sys_openat2+0x16d/0x4d0 [ 718.231051][ T27] ? build_open_flags+0x6f0/0x6f0 [ 718.236127][ T27] ? __context_tracking_exit+0xb8/0xe0 [ 718.241593][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 718.246517][ T27] __x64_sys_openat+0x13f/0x1f0 [ 718.251369][ T27] ? __ia32_sys_open+0x1c0/0x1c0 [ 718.256454][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 718.262492][ T27] do_syscall_64+0x35/0xb0 [ 718.266925][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 718.272893][ T27] RIP: 0033:0x7f5a55548347 [ 718.277311][ T27] RSP: 002b:00007ffe561d3160 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 718.285796][ T27] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f5a55548347 [ 718.293827][ T27] RDX: 0000000000000002 RSI: 00007f5a555ce03b RDI: 00000000ffffff9c [ 718.301858][ T27] RBP: 00007f5a555ce03b R08: 0000000000000000 R09: 0000000000000000 [ 718.309837][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 718.317879][ T27] R13: 00007ffe561d528c R14: 0000000000000076 R15: 00007ffe561d5290 [ 718.325940][ T27] [ 718.328961][ T27] INFO: task syz-executor170:6761 blocked for more than 145 seconds. [ 718.337072][ T27] Not tainted 5.15.0-rc3-next-20210930-syzkaller #0 [ 718.344234][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 718.352968][ T27] task:syz-executor170 state:D stack:28144 pid: 6761 ppid: 6548 flags:0x00000004 [ 718.362236][ T27] Call Trace: [ 718.365514][ T27] [ 718.368434][ T27] __schedule+0x940/0x26f0 [ 718.372918][ T27] ? io_schedule_timeout+0x140/0x140 [ 718.378215][ T27] schedule+0xd3/0x270 [ 718.382365][ T27] schedule_preempt_disabled+0xf/0x20 [ 718.387754][ T27] __mutex_lock+0xa34/0x12f0 [ 718.392440][ T27] ? misc_open+0x55/0x4a0 [ 718.396835][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 718.402427][ T27] ? find_held_lock+0x2d/0x110 [ 718.407223][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 718.412144][ T27] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 718.418530][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 718.424938][ T27] ? kobject_get_unless_zero+0x15a/0x1e0 [ 718.430607][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 718.435665][ T27] misc_open+0x55/0x4a0 [ 718.439837][ T27] ? misc_devnode+0x120/0x120 [ 718.444607][ T27] chrdev_open+0x266/0x770 [ 718.449032][ T27] ? cdev_device_add+0x210/0x210 [ 718.454044][ T27] ? fsnotify_perm.part.0+0x22d/0x620 [ 718.459429][ T27] do_dentry_open+0x4c8/0x11d0 [ 718.464288][ T27] ? cdev_device_add+0x210/0x210 [ 718.469261][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 718.475584][ T27] ? may_open+0x1f6/0x420 [ 718.479924][ T27] path_openat+0x1c9a/0x2740 [ 718.484583][ T27] ? path_lookupat+0x860/0x860 [ 718.489357][ T27] ? mark_lock+0xef/0x17b0 [ 718.493841][ T27] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 718.499834][ T27] do_filp_open+0x1aa/0x400 [ 718.504412][ T27] ? may_open_dev+0xf0/0xf0 [ 718.509301][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 718.514320][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 718.520585][ T27] ? _find_next_bit+0x1e3/0x260 [ 718.525529][ T27] ? _raw_spin_unlock+0x24/0x40 [ 718.530406][ T27] ? alloc_fd+0x2f0/0x670 [ 718.534813][ T27] do_sys_openat2+0x16d/0x4d0 [ 718.539496][ T27] ? build_open_flags+0x6f0/0x6f0 [ 718.544579][ T27] ? __context_tracking_exit+0xb8/0xe0 [ 718.550044][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 718.554970][ T27] __x64_sys_openat+0x13f/0x1f0 [ 718.559827][ T27] ? __ia32_sys_open+0x1c0/0x1c0 [ 718.564835][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 718.570738][ T27] do_syscall_64+0x35/0xb0 [ 718.575231][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 718.581234][ T27] RIP: 0033:0x7f5a55548347 [ 718.585699][ T27] RSP: 002b:00007ffe561d3160 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 718.594208][ T27] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f5a55548347 [ 718.602848][ T27] RDX: 0000000000000002 RSI: 00007f5a555ce03b RDI: 00000000ffffff9c [ 718.610819][ T27] RBP: 00007f5a555ce03b R08: 0000000000000000 R09: 0000000000000000 [ 718.618862][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 718.626930][ T27] R13: 00007ffe561d528c R14: 0000000000000076 R15: 00007ffe561d5290 [ 718.635037][ T27] [ 718.638191][ T27] INFO: task syz-executor170:6774 can't die for more than 145 seconds. [ 718.646487][ T27] task:syz-executor170 state:D stack:28144 pid: 6774 ppid: 6549 flags:0x00000004 [ 718.655856][ T27] Call Trace: [ 718.659135][ T27] [ 718.662108][ T27] __schedule+0x940/0x26f0 [ 718.666626][ T27] ? io_schedule_timeout+0x140/0x140 [ 718.672044][ T27] schedule+0xd3/0x270 [ 718.676130][ T27] schedule_preempt_disabled+0xf/0x20 [ 718.681502][ T27] __mutex_lock+0xa34/0x12f0 [ 718.686179][ T27] ? misc_open+0x55/0x4a0 [ 718.690530][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 718.696247][ T27] ? find_held_lock+0x2d/0x110 [ 718.701110][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 718.706108][ T27] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 718.712440][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 718.718689][ T27] ? kobject_get_unless_zero+0x15a/0x1e0 [ 718.724493][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 718.729467][ T27] misc_open+0x55/0x4a0 [ 718.733785][ T27] ? misc_devnode+0x120/0x120 [ 718.738464][ T27] chrdev_open+0x266/0x770 [ 718.742972][ T27] ? cdev_device_add+0x210/0x210 [ 718.748034][ T27] ? fsnotify_perm.part.0+0x22d/0x620 [ 718.753509][ T27] do_dentry_open+0x4c8/0x11d0 [ 718.758284][ T27] ? cdev_device_add+0x210/0x210 [ 718.763300][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 718.769548][ T27] ? may_open+0x1f6/0x420 [ 718.774040][ T27] path_openat+0x1c9a/0x2740 [ 718.778667][ T27] ? path_lookupat+0x860/0x860 [ 718.783582][ T27] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 718.789576][ T27] do_filp_open+0x1aa/0x400 [ 718.794143][ T27] ? may_open_dev+0xf0/0xf0 [ 718.798652][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 718.803654][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 718.809900][ T27] ? _find_next_bit+0x1e3/0x260 [ 718.814820][ T27] ? _raw_spin_unlock+0x24/0x40 [ 718.819676][ T27] ? alloc_fd+0x2f0/0x670 [ 718.824061][ T27] do_sys_openat2+0x16d/0x4d0 [ 718.828739][ T27] ? build_open_flags+0x6f0/0x6f0 [ 718.833829][ T27] ? __context_tracking_exit+0xb8/0xe0 [ 718.839292][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 718.844189][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 718.849042][ T27] __x64_sys_openat+0x13f/0x1f0 [ 718.853957][ T27] ? __ia32_sys_open+0x1c0/0x1c0 [ 718.858913][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 718.864894][ T27] do_syscall_64+0x35/0xb0 [ 718.869323][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 718.875310][ T27] RIP: 0033:0x7f5a5558a579 [ 718.879812][ T27] RSP: 002b:00007ffe561d5278 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 718.888312][ T27] RAX: ffffffffffffffda RBX: 00000000000f4240 RCX: 00007f5a5558a579 [ 718.896358][ T27] RDX: 0000000000020601 RSI: 00000000200003c0 RDI: ffffffffffffff9c [ 718.904380][ T27] RBP: 0000000000000000 R08: 00007ffe561d4cf0 R09: 0000000000000001 [ 718.912437][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000076e18 [ 718.920406][ T27] R13: 00007ffe561d528c R14: 00007ffe561d52a0 R15: 00007ffe561d5290 [ 718.928545][ T27] [ 718.931563][ T27] INFO: task syz-executor170:6774 blocked for more than 146 seconds. [ 718.939697][ T27] Not tainted 5.15.0-rc3-next-20210930-syzkaller #0 [ 718.946947][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 718.955681][ T27] task:syz-executor170 state:D stack:28144 pid: 6774 ppid: 6549 flags:0x00000004 [ 718.964946][ T27] Call Trace: [ 718.968223][ T27] [ 718.971154][ T27] __schedule+0x940/0x26f0 [ 718.975648][ T27] ? io_schedule_timeout+0x140/0x140 [ 718.981043][ T27] schedule+0xd3/0x270 [ 718.985287][ T27] schedule_preempt_disabled+0xf/0x20 [ 718.990679][ T27] __mutex_lock+0xa34/0x12f0 [ 718.995389][ T27] ? misc_open+0x55/0x4a0 [ 718.999739][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 719.005344][ T27] ? find_held_lock+0x2d/0x110 [ 719.010126][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 719.015045][ T27] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 719.021296][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 719.027616][ T27] ? kobject_get_unless_zero+0x15a/0x1e0 [ 719.033361][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 719.038410][ T27] misc_open+0x55/0x4a0 [ 719.042634][ T27] ? misc_devnode+0x120/0x120 [ 719.047318][ T27] chrdev_open+0x266/0x770 [ 719.051821][ T27] ? cdev_device_add+0x210/0x210 [ 719.056770][ T27] ? fsnotify_perm.part.0+0x22d/0x620 [ 719.062231][ T27] do_dentry_open+0x4c8/0x11d0 [ 719.067006][ T27] ? cdev_device_add+0x210/0x210 [ 719.072017][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 719.078440][ T27] ? may_open+0x1f6/0x420 [ 719.082842][ T27] path_openat+0x1c9a/0x2740 [ 719.087580][ T27] ? path_lookupat+0x860/0x860 [ 719.092458][ T27] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 719.098475][ T27] do_filp_open+0x1aa/0x400 [ 719.103094][ T27] ? may_open_dev+0xf0/0xf0 [ 719.107626][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 719.112636][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 719.118897][ T27] ? _find_next_bit+0x1e3/0x260 [ 719.123856][ T27] ? _raw_spin_unlock+0x24/0x40 [ 719.128721][ T27] ? alloc_fd+0x2f0/0x670 [ 719.133110][ T27] do_sys_openat2+0x16d/0x4d0 [ 719.137791][ T27] ? build_open_flags+0x6f0/0x6f0 [ 719.142890][ T27] ? __context_tracking_exit+0xb8/0xe0 [ 719.148369][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 719.153264][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 719.158124][ T27] __x64_sys_openat+0x13f/0x1f0 [ 719.163061][ T27] ? __ia32_sys_open+0x1c0/0x1c0 [ 719.168099][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 719.174071][ T27] do_syscall_64+0x35/0xb0 [ 719.178492][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 719.184458][ T27] RIP: 0033:0x7f5a5558a579 [ 719.188881][ T27] RSP: 002b:00007ffe561d5278 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 719.197399][ T27] RAX: ffffffffffffffda RBX: 00000000000f4240 RCX: 00007f5a5558a579 [ 719.205715][ T27] RDX: 0000000000020601 RSI: 00000000200003c0 RDI: ffffffffffffff9c [ 719.213749][ T27] RBP: 0000000000000000 R08: 00007ffe561d4cf0 R09: 0000000000000001 [ 719.221957][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000076e18 [ 719.230822][ T27] R13: 00007ffe561d528c R14: 00007ffe561d52a0 R15: 00007ffe561d5290 [ 719.238910][ T27] [ 719.242159][ T27] [ 719.242159][ T27] Showing all locks held in the system: [ 719.249897][ T27] 5 locks held by kworker/1:0/20: [ 719.255115][ T27] #0: ffff888141f9d938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 [ 719.265970][ T27] #1: ffffc90000da7db0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 [ 719.277416][ T27] #2: ffff88823bc4aa20 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4330 [ 719.286761][ T27] #3: ffff88814a972220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7a/0x4a0 [ 719.296166][ T27] #4: ffff8881427df1a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7a/0x4a0 [ 719.305525][ T27] 1 lock held by khungtaskd/27: [ 719.310380][ T27] #0: ffffffff8b9807e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 719.320361][ T27] 5 locks held by kworker/0:0/6563: [ 719.325636][ T27] #0: ffff888141f9d938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 [ 719.336480][ T27] #1: ffffc90002c8fdb0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 [ 719.347810][ T27] #2: ffff888147b2a220 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4330 [ 719.356892][ T27] #3: ffff888146d98220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7a/0x4a0 [ 719.366428][ T27] #4: ffff8881471df1a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7a/0x4a0 [ 719.375758][ T27] 5 locks held by kworker/0:3/6567: [ 719.380960][ T27] #0: ffff888141f9d938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 [ 719.391761][ T27] #1: ffffc90002c6fdb0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 [ 719.403228][ T27] #2: ffff88801d479220 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4330 [ 719.412211][ T27] #3: ffff8881471a1220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7a/0x4a0 [ 719.421584][ T27] #4: ffff888146d9f1a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7a/0x4a0 [ 719.430898][ T27] 5 locks held by kworker/0:4/6568: [ 719.436177][ T27] #0: ffff888141f9d938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 [ 719.446974][ T27] #1: ffffc90002c5fdb0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 [ 719.458386][ T27] #2: ffff888147a9b220 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4330 [ 719.467422][ T27] #3: ffff888146d9e220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7a/0x4a0 [ 719.476734][ T27] #4: ffff8881471db1a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7a/0x4a0 [ 719.486046][ T27] 1 lock held by syz-executor170/6699: [ 719.491504][ T27] #0: ffffffff8c3c6348 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x55/0x4a0 [ 719.500030][ T27] 1 lock held by syz-executor170/6714: [ 719.505560][ T27] #0: ffffffff8c3c6348 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x55/0x4a0 [ 719.514120][ T27] 1 lock held by syz-executor170/6750: [ 719.519582][ T27] #0: ffffffff8c3c6348 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x55/0x4a0 [ 719.528366][ T27] 1 lock held by syz-executor170/6761: [ 719.533985][ T27] #0: ffffffff8c3c6348 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x55/0x4a0 [ 719.542632][ T27] 2 locks held by syz-executor170/6772: [ 719.548176][ T27] #0: ffffffff8c3c6348 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x55/0x4a0 [ 719.556731][ T27] #1: ffffffff8b8501c8 (system_transition_mutex){+.+.}-{3:3}, at: snapshot_open+0x3b/0x2a0 [ 719.566918][ T27] 1 lock held by syz-executor170/6774: [ 719.572484][ T27] #0: ffffffff8c3c6348 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x55/0x4a0 [ 719.580951][ T27] [ 719.583326][ T27] ============================================= [ 719.583326][ T27] [ 719.591807][ T27] NMI backtrace for cpu 0 [ 719.596130][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc3-next-20210930-syzkaller #0 [ 719.605481][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 719.615571][ T27] Call Trace: [ 719.618841][ T27] [ 719.621759][ T27] dump_stack_lvl+0xcd/0x134 [ 719.626429][ T27] nmi_cpu_backtrace.cold+0x47/0x144 [ 719.631754][ T27] ? lapic_can_unplug_cpu+0x80/0x80 [ 719.636979][ T27] nmi_trigger_cpumask_backtrace+0x1ae/0x220 [ 719.642978][ T27] watchdog+0xcb7/0xed0 [ 719.647257][ T27] ? trace_sched_process_hang+0x280/0x280 [ 719.653007][ T27] kthread+0x405/0x4f0 [ 719.657140][ T27] ? set_kthread_struct+0x130/0x130 [ 719.662363][ T27] ret_from_fork+0x1f/0x30 [ 719.667060][ T27] [ 719.670141][ T27] Sending NMI from CPU 0 to CPUs 1: [ 719.675740][ C1] NMI backtrace for cpu 1 [ 719.675751][ C1] CPU: 1 PID: 2965 Comm: systemd-journal Not tainted 5.15.0-rc3-next-20210930-syzkaller #0 [ 719.675774][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 719.675785][ C1] RIP: 0010:kasan_check_range+0x12c/0x180 [ 719.675855][ C1] Code: 00 74 ef 49 8d 04 2c 48 85 d2 75 0b 48 89 da 48 29 c2 e9 55 ff ff ff 49 39 d2 75 17 49 0f be 02 41 83 e1 07 49 39 c1 7d 0a 5b 01 00 00 00 5d 41 5c c3 44 89 c2 e8 53 ef ff ff 5b 83 f0 01 5d [ 719.675874][ C1] RSP: 0018:ffffc9000295f700 EFLAGS: 00000046 [ 719.675891][ C1] RAX: fffffbfff1fa2b29 RBX: ffffffff8b9807e0 RCX: ffffffff815b235c [ 719.675906][ C1] RDX: fffffbfff1fa2b29 RSI: 0000000000000008 RDI: ffffffff8fd15940 [ 719.675920][ C1] RBP: fffffbfff1fa2b28 R08: 0000000000000000 R09: ffffffff8fd15947 [ 719.675933][ C1] R10: fffffbfff1fa2b28 R11: 0000000000086089 R12: ffff88807a8cc468 [ 719.675947][ C1] R13: ffff88807a8cba00 R14: 0000000000020000 R15: 0000000000000002 [ 719.675960][ C1] FS: 00007ff108a628c0(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 719.675982][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 719.675996][ C1] CR2: 00007ff105e79000 CR3: 000000007f7cf000 CR4: 00000000003506e0 [ 719.676010][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 719.676022][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 719.676035][ C1] Call Trace: [ 719.676040][ C1] [ 719.676046][ C1] __lock_acquire+0x47c/0x54a0 [ 719.676073][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 719.676099][ C1] lock_acquire+0x1ab/0x510 [ 719.676118][ C1] ? __bpf_address_lookup+0x2a0/0x2a0 [ 719.676162][ C1] ? lock_release+0x720/0x720 [ 719.676181][ C1] ? arch_stack_walk+0x5c/0xe0 [ 719.676211][ C1] ? unwind_next_frame+0xec8/0x1ce0 [ 719.676242][ C1] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 719.676272][ C1] is_bpf_text_address+0x36/0x170 [ 719.676292][ C1] ? __bpf_address_lookup+0x2a0/0x2a0 [ 719.676314][ C1] kernel_text_address+0xbd/0xf0 [ 719.676335][ C1] __kernel_text_address+0x9/0x30 [ 719.676356][ C1] unwind_get_return_address+0x51/0x90 [ 719.676383][ C1] ? create_prof_cpu_mask+0x20/0x20 [ 719.676422][ C1] arch_stack_walk+0x93/0xe0 [ 719.676451][ C1] stack_trace_save+0x8c/0xc0 [ 719.676472][ C1] ? filter_irq_stacks+0x90/0x90 [ 719.676496][ C1] kasan_save_stack+0x1e/0x50 [ 719.676515][ C1] ? kasan_save_stack+0x1e/0x50 [ 719.676535][ C1] ? __kasan_slab_alloc+0x90/0xc0 [ 719.676555][ C1] ? kmem_cache_alloc+0x209/0x390 [ 719.676573][ C1] ? getname_flags.part.0+0x50/0x4f0 [ 719.676599][ C1] ? getname+0x8e/0xd0 [ 719.676621][ C1] ? do_sys_openat2+0xf5/0x4d0 [ 719.676642][ C1] ? __x64_sys_open+0x119/0x1c0 [ 719.676661][ C1] ? do_syscall_64+0x35/0xb0 [ 719.676680][ C1] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 719.676706][ C1] ? local_lock_release+0x1d/0x60 [ 719.676747][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 719.676770][ C1] ? ___slab_alloc+0xcac/0x1040 [ 719.676794][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 719.676818][ C1] ? getname_flags.part.0+0x50/0x4f0 [ 719.676845][ C1] ? kmem_cache_alloc+0x46/0x390 [ 719.676866][ C1] ? getname_flags.part.0+0x50/0x4f0 [ 719.676891][ C1] ? kasan_unpoison+0x40/0x70 [ 719.676913][ C1] __kasan_slab_alloc+0x90/0xc0 [ 719.676934][ C1] kmem_cache_alloc+0x209/0x390 [ 719.676954][ C1] getname_flags.part.0+0x50/0x4f0 [ 719.676979][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 719.677003][ C1] getname+0x8e/0xd0 [ 719.677026][ C1] do_sys_openat2+0xf5/0x4d0 [ 719.677047][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 719.677072][ C1] ? build_open_flags+0x6f0/0x6f0 [ 719.677094][ C1] ? seccomp_notify_ioctl+0xdc0/0xdc0 [ 719.677147][ C1] __x64_sys_open+0x119/0x1c0 [ 719.677168][ C1] ? do_sys_open+0x140/0x140 [ 719.677189][ C1] ? __secure_computing+0x104/0x360 [ 719.677215][ C1] do_syscall_64+0x35/0xb0 [ 719.677233][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 719.677259][ C1] RIP: 0033:0x7ff107ff1840 [ 719.677274][ C1] Code: 73 01 c3 48 8b 0d 68 77 20 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 89 bb 20 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 1e f6 ff ff 48 89 04 24 [ 719.677294][ C1] RSP: 002b:00007ffdffdc39f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 719.677312][ C1] RAX: ffffffffffffffda RBX: 00007ffdffdc3d00 RCX: 00007ff107ff1840 [ 719.677326][ C1] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 0000556e35a514f0 [ 719.677340][ C1] RBP: 000000000000000d R08: 000000000000ffc0 R09: 00000000ffffffff [ 719.677352][ C1] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 719.677365][ C1] R13: 0000556e35a44040 R14: 00007ffdffdc3cc0 R15: 0000556e35a51850 [ 719.677384][ C1] [ 719.677391][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.650 msecs [ 719.677736][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 720.156071][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc3-next-20210930-syzkaller #0 [ 720.165423][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 720.175495][ T27] Call Trace: [ 720.178822][ T27] [ 720.181753][ T27] dump_stack_lvl+0xcd/0x134 [ 720.186366][ T27] panic+0x2b0/0x6dd [ 720.190311][ T27] ? __warn_printk+0xf3/0xf3 [ 720.194946][ T27] ? lapic_can_unplug_cpu+0x80/0x80 [ 720.200182][ T27] ? _flat_send_IPI_mask+0x53/0x60 [ 720.205287][ T27] ? watchdog.cold+0x1b9/0x1de [ 720.210061][ T27] watchdog.cold+0x1ca/0x1de [ 720.214640][ T27] ? trace_sched_process_hang+0x280/0x280 [ 720.220351][ T27] kthread+0x405/0x4f0 [ 720.224409][ T27] ? set_kthread_struct+0x130/0x130 [ 720.229592][ T27] ret_from_fork+0x1f/0x30 [ 720.233998][ T27] [ 720.237352][ T27] Kernel Offset: disabled [ 720.241783][ T27] Rebooting in 86400 seconds..