[....] Starting enhanced syslogd: rsyslogd[ 14.718527] audit: type=1400 audit(1521591513.842:4): avc: denied { syslog } for pid=3652 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.57' (ECDSA) to the list of known hosts. 2018/03/21 00:18:44 fuzzer started 2018/03/21 00:18:45 dialing manager at 10.128.0.26:33031 2018/03/21 00:18:49 kcov=true, comps=false 2018/03/21 00:18:50 executing program 0: setitimer(0x1, &(0x7f0000000040), 0x0) 2018/03/21 00:18:50 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000500)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x98) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000001c0)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d0ff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/03/21 00:18:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000013001100000000000000000000000000", @ANYBLOB="0000000000000000ff7f00000000000074756e0000000000000000000c0016000800010004000000"], 0x2}, 0x1}, 0x0) 2018/03/21 00:18:50 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf, 0xd, "6df1733d7a8a242fd899e0633f5fcea8fb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e7ea6697b93d32112b2bc83d72a", [0x7, 0x9]}) 2018/03/21 00:18:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e00000027ff877dd5e4c14928586c174"], 0x1) 2018/03/21 00:18:50 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) ppoll(&(0x7f0000000040)=[{r0}, {}], 0x2, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000100), 0x8) 2018/03/21 00:18:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f000002c000)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000271000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fdatasync(r0) 2018/03/21 00:18:50 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'syzkaller0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000001c0)={@mcast2={0xff, 0x2, [], 0x1}}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r1 = syz_open_dev$urandom(&(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x9) sendfile(r1, r0, &(0x7f0000fd9ff8), 0x100000001) syzkaller login: [ 31.739235] random: crng init done [ 31.764408] audit: type=1400 audit(1521591530.882:5): avc: denied { sys_admin } for pid=3860 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 31.799494] IPVS: Creating netns size=2536 id=1 [ 31.809678] audit: type=1400 audit(1521591530.932:6): avc: denied { net_admin } for pid=3862 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 31.864292] IPVS: Creating netns size=2536 id=2 [ 31.900695] IPVS: Creating netns size=2536 id=3 [ 31.940062] IPVS: Creating netns size=2536 id=4 [ 31.981040] IPVS: Creating netns size=2536 id=5 [ 32.033730] IPVS: Creating netns size=2536 id=6 [ 32.087851] IPVS: Creating netns size=2536 id=7 [ 32.143797] IPVS: Creating netns size=2536 id=8 [ 34.178401] audit: type=1400 audit(1521591533.302:7): avc: denied { sys_chroot } for pid=3862 comm="syz-executor3" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/03/21 00:18:53 executing program 0: r0 = socket(0x10, 0x802, 0x0) perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 2018/03/21 00:18:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002a40)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000002a00)={&(0x7f0000000640)=ANY=[@ANYBLOB="4000000013001100000000000000000000000000", @ANYBLOB="00000000000000001400030073797a5f74756e0000000000000000000c0016000004000000000000"], 0x2}, 0x1}, 0x0) 2018/03/21 00:18:53 executing program 4: mq_open(&(0x7f00000001c0)='-$\x00', 0x83f, 0x0, &(0x7f0000000240)) 2018/03/21 00:18:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000013000101000000000000000000000000", @ANYBLOB="0000000000000000140014006272696467653000000000000000000018001600140001001000000000000000000000000000000078ccc3e61c69eb6dbdafb003cc9323ec1b14360192371ae9d3176528c454bc765312d6bfc469f3bce9ca97baf851e611aa7c0556a9542eadd75e091a87d81b458a00c0dd217ba1fb57090cbb6752bc83bf6200d97f0b253b6ead2d"], 0x2}, 0x1}, 0x0) 2018/03/21 00:18:53 executing program 7: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) bind$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) unshare(0x20000000) clone(0x0, &(0x7f00000000c0), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) clone(0x2004100, &(0x7f0000000380), &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000340)) 2018/03/21 00:18:53 executing program 6: seccomp(0x200000000000001, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) eventfd2(0x0, 0x0) 2018/03/21 00:18:53 executing program 2: mkdir(&(0x7f0000632000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) 2018/03/21 00:18:53 executing program 1: keyctl$get_security(0x11, 0x0, &(0x7f0000000680)=""/87, 0x57) 2018/03/21 00:18:53 executing program 1: memfd_create(&(0x7f0000000100)='queue1\x00', 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) mmap(&(0x7f0000864000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) [ 34.585808] audit: type=1400 audit(1521591533.702:8): avc: denied { dac_override } for pid=5216 comm="syz-executor2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/03/21 00:18:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000233fe4)={0xa}, 0x1c) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1e7000)=nil, 0x1e7000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f00005a2ffc), &(0x7f00000000c0)=0x2c5) 2018/03/21 00:18:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x203, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0}) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x2}, {r0}], 0x2, &(0x7f0000000180)={r1}, &(0x7f00000001c0), 0x8) poll(&(0x7f0000000200)=[{}, {}, {0xffffffffffffffff, 0x400}, {r0, 0x8}], 0x4, 0x0) 2018/03/21 00:18:53 executing program 6: r0 = open(&(0x7f0000085000)='./control\x00', 0x28042, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000273ff6)='./control\x00', 0x80000c12) readv(r1, &(0x7f0000b25000)=[{&(0x7f0000fb2000)=""/128, 0x80}], 0x1) write$evdev(r0, &(0x7f0000000200)=[{}], 0x18) 2018/03/21 00:18:53 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00002e8f1e)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d6696b208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8040705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x0, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r0, &(0x7f0000000000)="96f75620042ede5ddc9094f5eebea9a7006d5f3e6f6c8ef83ff6b026dece2f8587317353c557b655db9e5c98f48c9afb1c1362e0824dcad5bc9a80a1a032e0a434ce71ab095f7472860c6c7b68776e00aeb45d8053eb90c25d83e3839aeb28342ef5b3649d09888f1ffcca37546df2a68bfaefcbaa0074b597cb39532744f85915163a9259c7194c0a941873f0d06ed4f546aa532df4effe46ce3d280e85e19785e0c5cdd23210c31ac85c41e58b20c2ea3aca59b24f697e7c83906f0eec7f641ef2f3d87d9297f03408e915ee9ad177ab6e0d485812a2308fd7b1d00a8577ed", 0xe0, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000386fa0)="000e", 0x2, 0x1, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)="1e", 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000266ffc), 0x4) sendto$inet(r1, &(0x7f00002bff1e)="f9", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) 2018/03/21 00:18:53 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) 2018/03/21 00:18:53 executing program 3: seccomp(0x200000000000001, 0x0, &(0x7f00008ff000)={0x1, &(0x7f0000002ff8)=[{0xa}]}) 2018/03/21 00:18:53 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0xa) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x80000000004) write(r1, &(0x7f0000000000)="29000000140007b7ffffffffff0860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "afff979e8b573af8663e77a7e884de03befbbc8c751d5a5fe82ab6a77f8e835be05ab367bfd8841cef50df3e9d132539879dc45643ed3e1ba6480b4ad92039"}, 0x60, &(0x7f0000000280), 0x0, &(0x7f00000002c0)={0x10}, 0x10}, 0x0) [ 34.667203] netlink: 188 bytes leftover after parsing attributes in process `syz-executor0'. [ 34.679632] netlink: 188 bytes leftover after parsing attributes in process `syz-executor0'. 2018/03/21 00:18:53 executing program 1: pause() getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00005d3000)={@loopback}, &(0x7f0000170000)=0x14) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000002300), 0x4) memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100), &(0x7f0000000140)=0x8) 2018/03/21 00:18:53 executing program 7: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'teql0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={"6f956500020000e0d02005000100", 0x1d}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) close(r0) 2018/03/21 00:18:53 executing program 0: perf_event_open(&(0x7f0000bba000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000023f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000911eb4)=@getspdinfo={0x14, 0x25, 0x1}, 0x14}, 0x1}, 0x0) 2018/03/21 00:18:53 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="020800003e000000000000000000000002001000000004d4000004d6000000001e00090028070000793286c9591ae3242a23b5c8ed3b6e6c7c452b87dfd89512d56096c2e198e45ff6efbb39cff9d8d0ec4fda7ce574478ae2bee3efcbde65e387631f94d99c959752d9d0aa6a804557427481986171205b2378d10ffd2cffbd6551e1ae26abbb6781a4b9f5011694885dadddd52641e719116d58f0d090319d6c529c9db2fd2db96e2c7fea23bf5abb6de88b20660c0b14d060ca88b992f747ec972d5656ac60406236f10e51a9ff04f2ded1ff36a89192dacdd76a92e09f0a8acae8ef24f6e1ba6da1f002127bcfa03a2a34ad77b114bad9127c99e5eeb14d71d176f993f6f7600aec33cb840000000800120002000700b26b6e0019b200000600330008060000020000000000000000000000000000000000000000000000ff207892d77b51a64900000000000001050007002ba000000a004e2100000000ff010000000000000000000000000001060000000000000005000500ff2000000a004e2305000000fe80000000000000000000000000001107000000000000000800120002000300bb6b6e00ff00000006000000b200000004000000000000000001000000000000000000000000003ddd80000000000000000000000000000c020013001200000028bd7000ff340000"], 0x1f0}, 0x1}, 0x0) 2018/03/21 00:18:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x4, 0x398, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, '\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'yam0\x00', @empty, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0x70, 0xa0}}, @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x1f, 0x21, 0x0, 'vlan0\x00', 'erspan0\x00', 'vcan0\x00', 'gretap0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff], 0x108, 0x180, 0x1c8, [@physdev={'physdev\x00', 0x70, {{'ipddp0\x00', {}, 'bcsh0\x00'}}}]}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x0, 0x1, 0x0, "241320225387cef4f2dac0828f150d26e6bbbff899dc7a22b7767377da81dc0039ec6952af701b8529fa813d932c2b0a8c618a3661625755e413830ad83350d1"}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"4636b0ea5c40eb21c12ac5d9486d15f7e1527b508058f1382d47a24adef8"}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{{{0xb, 0x4, 0x86dd, 'ipddp0\x00', 'syz_tun\x00', 'bcsf0\x00', 'sit0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0xff, 0x0, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x3}}}}]}]}, 0x3c4) 2018/03/21 00:18:53 executing program 6: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @random="fbaaf4c417c5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff89, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 2018/03/21 00:18:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00006a9ff8)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000039fff)=""/1, 0x1) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000280), 0x0) 2018/03/21 00:18:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) 2018/03/21 00:18:53 executing program 6: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000080)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000266ffc), 0x4) sendto$inet(r0, &(0x7f0000000700)="16", 0x1, 0x0, 0x0, 0x0) shutdown(r1, 0x1) clock_gettime(0x0, &(0x7f0000001080)) recvmmsg(r0, &(0x7f0000000fc0)=[{{&(0x7f0000000d80)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e80)=""/57, 0x39}], 0x1, &(0x7f0000000f00)=""/170, 0xaa}}], 0x1, 0x0, &(0x7f00000010c0)) 2018/03/21 00:18:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) connect$inet(r0, &(0x7f000058eff0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/03/21 00:18:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) connect$inet(r0, &(0x7f000058eff0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/03/21 00:18:53 executing program 4: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff01808200000086dd6006f540000811000000000000000000000000000000f5fffe020010000000000000004e2200089078ffa633ca4187468eb8f9ae21777106051c9631850d28cb13b9e027c5144e6c1d7d0a681458f1fd7d8480e8ef55e282dce3bd37e1bfb6a2d1ac3cfff6f51910a077f8e1247028bd7eecb8f95ec3789d6cb126ca75caa75b09c1e0dcac294c48d0215922411a0a14e34a5742217139f62b5853d414d939ca0000000000000cd093b6991300000000000000"], &(0x7f0000775000)={0x0, 0x0, [0x73f]}) 2018/03/21 00:18:53 executing program 0: time(&(0x7f0000000280)) 2018/03/21 00:18:53 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00004e2000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{0x0, 0x1}, {0xf}}) 2018/03/21 00:18:53 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f00002eb000), 0x0) 2018/03/21 00:18:53 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f000033c000)=ANY=[@ANYBLOB="020f00001000000000000000000000000300060000000000020000007f00000100000000000000000300050000000000020000000000000000000000000000000800120000000100000000000000000006000000000000000000000000000000ff01000000000000000000000000000100000000080000000000ffffe0000001"], 0x80}, 0x1}, 0x0) [ 34.774045] audit: type=1400 audit(1521591533.892:9): avc: denied { net_raw } for pid=5278 comm="syz-executor6" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 37.909644] IPVS: Creating netns size=2536 id=9 2018/03/21 00:18:57 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x80000000000008, &(0x7f00008c3000)=0x6, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00004e8000), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) close(r0) 2018/03/21 00:18:57 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e7ff00ffe90009149b00f99b", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004c80)=[{{&(0x7f0000001380)=@nfc, 0x80, &(0x7f0000001200)=[{&(0x7f0000001400)=""/244, 0xf4}, {&(0x7f0000004e80)=""/141, 0x8d}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x3, &(0x7f0000002680)=""/70, 0x46}}, {{0x0, 0x0, &(0x7f0000002900), 0x0, &(0x7f0000002940)=""/195, 0xc3}}], 0x2, 0x0, 0x0) write(r0, &(0x7f0000000000)="22000000120007d30e000000000002000c158009000007190000000004000806da06", 0x22) 2018/03/21 00:18:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x203, 0x0) flock(r0, 0x1) fcntl$setflags(r0, 0x2, 0x0) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) clock_gettime(0x0, &(0x7f0000000140)={0x0}) ppoll(&(0x7f0000000100)=[{}, {r0}], 0x2, &(0x7f0000000180)={r3}, &(0x7f00000001c0)={0x5}, 0x8) poll(&(0x7f0000000200)=[{}, {r0, 0x8}, {}], 0x3, 0x0) 2018/03/21 00:18:57 executing program 5: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="aa", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd, "6df1733d7a8a242fd899e0633f5fcea8fb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e7ea6697b93d32112b2bc83d72a", [0x7, 0x9]}) 2018/03/21 00:18:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0xa000}, 0xc) 2018/03/21 00:18:57 executing program 3: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x1, 0xf, 0xd, "6df1733d7a8a242fd899e0633f5fcea8fb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e7ea6697b93d32112b2bc83d72a", [0x7, 0x9]}) 2018/03/21 00:18:57 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000016c0)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) sendmmsg(r0, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)="a7", 0x1}], 0x1, &(0x7f0000000400)=ANY=[]}}], 0x1, 0x4c040) 2018/03/21 00:18:57 executing program 4: unshare(0x8000400) mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0xfffffffffffffffe, 0x0, &(0x7f000004b000)={0x3, 0x7, 0x3}) unshare(0xc000000) setfsgid(0x0) 2018/03/21 00:18:57 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000734ffc)=0xc) 2018/03/21 00:18:57 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000b9efc8)={&(0x7f0000b9e000)=@rc, 0xa, &(0x7f0000000040), 0x100000000000003b, &(0x7f0000b9efdb)}, 0x0) 2018/03/21 00:18:57 executing program 6: [ 38.451338] netlink: 2 bytes leftover after parsing attributes in process `syz-executor2'. [ 38.457029] audit: type=1400 audit(1521591537.572:10): avc: denied { create } for pid=5479 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/03/21 00:18:57 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019ff8)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x8000000000000007, &(0x7f0000000000)) fcntl$lock(r1, 0x26, &(0x7f000001d000)={0x8000000000000001}) dup3(r0, r1, 0x0) 2018/03/21 00:18:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000008ff8)=0x1) shutdown(r1, 0x2) 2018/03/21 00:18:57 executing program 7: r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000bfd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000011000)}) [ 38.458580] audit: type=1400 audit(1521591537.572:11): avc: denied { bind } for pid=5479 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 38.461752] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 38.527906] netlink: 2 bytes leftover after parsing attributes in process `syz-executor2'. 2018/03/21 00:18:57 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="020a000002000000c4d50c55000000c9"], 0x10}, 0x1}, 0x0) 2018/03/21 00:18:57 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019ff8)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x8000000000000007, &(0x7f0000000000)) fcntl$lock(r1, 0x26, &(0x7f000001d000)={0x8000000000000001}) dup3(r0, r1, 0x0) 2018/03/21 00:18:57 executing program 7: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) [ 38.549146] binder: 5523:5525 BC_DEAD_BINDER_DONE 0000000000000000 not found 2018/03/21 00:18:57 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes [ 244.857540] INFO: task syz-executor1:5493 blocked for more than 120 seconds. [ 244.864782] Not tainted 4.9.88-g71df7bb #8 [ 244.869603] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.877746] syz-executor1 D29824 5493 3876 0x20020004 [ 244.883469] ffff8801d8b51800 ffff8801b9f364c0 ffff8801cb18f480 ffff8801d8bb6000 [ 244.891581] ffff8801db221b98 ffff8801bcec7c98 ffffffff838a69cb 0000000000000001 [ 244.899596] 0000000000000007 00ff8801d8b51800 ffff8801db222468 ffff8801db222490 [ 244.907588] Call Trace: [ 244.910157] [] ? __schedule+0x67b/0x1ba0 [ 244.915837] [] schedule+0x7f/0x1b0 [ 244.921156] [] schedule_preempt_disabled+0x13/0x20 [ 244.927726] [] mutex_lock_nested+0x312/0x870 [ 244.933760] [] ? loop_control_ioctl+0x176/0x300 [ 244.940064] [] ? mutex_lock_killable_nested+0x960/0x960 [ 244.947051] [] ? SyS_dup3+0x351/0x360 [ 244.952492] [] loop_control_ioctl+0x176/0x300 [ 244.958614] [] ? loop_add+0x770/0x770 [ 244.964033] [] ? security_file_ioctl+0x89/0xb0 [ 244.970251] [] compat_SyS_ioctl+0x15f/0x2050 [ 244.976276] [] ? loop_add+0x770/0x770 [ 244.981743] [] ? do_ioctl+0x60/0x60 [ 244.986992] [] do_fast_syscall_32+0x2f5/0x870 [ 244.993133] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.999782] [] entry_SYSENTER_compat+0x90/0xa2 [ 245.005980] [ 245.005980] Showing all locks held in the system: [ 245.012296] 2 locks held by khungtaskd/514: [ 245.016581] #0: (rcu_read_lock){......}, at: [] watchdog+0x125/0xa70 [ 245.025273] #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x70/0x280 [ 245.034978] 1 lock held by rsyslogd/3655: [ 245.039126] #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0x9f/0xc0 [ 245.047995] 2 locks held by getty/3783: [ 245.051936] #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 [ 245.061315] #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x1f4/0x16c0 [ 245.071221] 2 locks held by syz-executor1/5493: [ 245.075857] #0: (loop_index_mutex){+.+.+.}, at: [] loop_control_ioctl+0x7a/0x300 [ 245.085590] #1: (&lo->lo_ctl_mutex#2){+.+...}, at: [] loop_control_ioctl+0x176/0x300 [ 245.095778] 1 lock held by syz-executor1/5520: [ 245.100347] #0: (loop_index_mutex){+.+.+.}, at: [] loop_control_ioctl+0x7a/0x300 [ 245.110075] 1 lock held by syz-executor1/5528: [ 245.114621] #0: (loop_index_mutex){+.+.+.}, at: [] loop_control_ioctl+0x7a/0x300 [ 245.124348] 1 lock held by syz-executor5/5491: [ 245.128911] #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_get+0x10c/0xd50 [ 245.138108] 1 lock held by syz-executor5/5502: [ 245.142654] #0: (&lo->lo_ctl_mutex/1){+.+.+.}, at: [] lo_ioctl+0x8f/0x1990 [ 245.151968] 1 lock held by syz-executor5/5516: [ 245.156514] #0: (&lo->lo_ctl_mutex/1){+.+.+.}, at: [] lo_ioctl+0x8f/0x1990 [ 245.165829] 1 lock held by syz-executor5/5527: [ 245.170729] #0: (&lo->lo_ctl_mutex/1){+.+.+.}, at: [] lo_ioctl+0x8f/0x1990 [ 245.180054] 2 locks held by syz-executor3/5483: [ 245.184689] #0: (&lo->lo_ctl_mutex/1){+.+.+.}, at: [] lo_ioctl+0x8f/0x1990 [ 245.194013] #1: (&bdev->bd_mutex){+.+.+.}, at: [] blkdev_reread_part+0x1e/0x40 [ 245.203571] 1 lock held by syz-executor3/5504: [ 245.208134] #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_get+0x10c/0xd50 [ 245.217322] 1 lock held by syz-executor3/5509: [ 245.221885] #0: (&lo->lo_ctl_mutex/1){+.+.+.}, at: [] lo_ioctl+0x8f/0x1990 [ 245.231200] 2 locks held by blkid/5495: [ 245.235140] #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_get+0x10c/0xd50 [ 245.244347] #1: (loop_index_mutex){+.+.+.}, at: [] lo_open+0x1b/0xa0 [ 245.253039] 1 lock held by syz-executor7/5535: [ 245.257610] #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_get+0x10c/0xd50 [ 245.266809] 1 lock held by syz-executor7/5539: [ 245.271371] #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_get+0x10c/0xd50 [ 245.280567] 1 lock held by syz-executor6/5542: [ 245.285111] #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_get+0x10c/0xd50 [ 245.294315] 1 lock held by syz-executor6/5543: [ 245.298878] #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_get+0x10c/0xd50 [ 245.308076] [ 245.309670] ============================================= [ 245.309670] [ 245.316724] NMI backtrace for cpu 1 [ 245.320400] CPU: 1 PID: 514 Comm: khungtaskd Not tainted 4.9.88-g71df7bb #8 [ 245.327469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.336794] ffff8801d89f7d00 ffffffff81d95f19 0000000000000000 0000000000000001 [ 245.344759] 0000000000000001 0000000000000001 ffffffff810bb450 ffff8801d89f7d38 [ 245.352720] ffffffff81da103d 0000000000000001 0000000000000000 ffff8801d93a6418 [ 245.360678] Call Trace: [ 245.363237] [] dump_stack+0xc1/0x128 [ 245.368570] [] ? irq_force_complete_move+0x390/0x390 [ 245.375289] [] nmi_cpu_backtrace+0xfd/0x120 [ 245.381226] [] ? irq_force_complete_move+0x390/0x390 [ 245.387943] [] nmi_trigger_cpumask_backtrace+0x117/0x190 [ 245.395011] [] arch_trigger_cpumask_backtrace+0x14/0x20 [ 245.401991] [] watchdog+0x6f0/0xa70 [ 245.407235] [] ? watchdog+0x125/0xa70 [ 245.412652] [] kthread+0x26d/0x300 [ 245.417808] [] ? reset_hung_task_detector+0x20/0x20 [ 245.424441] [] ? kthread_park+0xa0/0xa0 [ 245.430034] [] ? kthread_park+0xa0/0xa0 [ 245.435621] [] ? kthread_park+0xa0/0xa0 [ 245.441214] [] ret_from_fork+0x5c/0x70 [ 245.446855] Sending NMI from CPU 1 to CPUs 0: [ 245.451378] NMI backtrace for cpu 0 skipped: idling at pc 0xffffffff838b66b6 [ 245.458854] Kernel panic - not syncing: hung_task: blocked tasks [ 245.464974] CPU: 0 PID: 514 Comm: khungtaskd Not tainted 4.9.88-g71df7bb #8 [ 245.472047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.481370] ffff8801d89f7cb8 ffffffff81d95f19 ffffffff83a8b5a0 ffff8801d89f7d90 [ 245.489337] ffff8801d93a6400 dffffc0000000000 ffffffff84409000 ffff8801d89f7d80 [ 245.497308] ffffffff8142fa71 0000000041b58ab3 ffffffff8418bc48 ffffffff8142f8b5 [ 245.505271] Call Trace: [ 245.507836] [] dump_stack+0xc1/0x128 [ 245.513169] [] panic+0x1bc/0x3a8 [ 245.518152] [] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7 [ 245.526348] [] ? nmi_trigger_cpumask_backtrace+0x13b/0x190 [ 245.533590] [] ? nmi_trigger_cpumask_backtrace+0x145/0x190 [ 245.540834] [] watchdog+0x701/0xa70 [ 245.546075] [] ? watchdog+0x125/0xa70 [ 245.551494] [] kthread+0x26d/0x300 [ 245.556660] [] ? reset_hung_task_detector+0x20/0x20 [ 245.563294] [] ? kthread_park+0xa0/0xa0 [ 245.568886] [] ? kthread_park+0xa0/0xa0 [ 245.574478] [] ? kthread_park+0xa0/0xa0 [ 245.580070] [] ret_from_fork+0x5c/0x70 [ 245.586054] Dumping ftrace buffer: [ 245.589595] (ftrace buffer empty) [ 245.593276] Kernel Offset: disabled [ 245.596879] Rebooting in 86400 seconds..