Warning: Permanently added '10.128.0.191' (ECDSA) to the list of known hosts. [ 37.652840] random: sshd: uninitialized urandom read (32 bytes read) 2019/09/23 02:44:09 fuzzer started [ 37.848612] audit: type=1400 audit(1569206649.787:36): avc: denied { map } for pid=6882 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 38.280771] random: cc1: uninitialized urandom read (8 bytes read) 2019/09/23 02:44:10 dialing manager at 10.128.0.105:42531 2019/09/23 02:44:10 syscalls: 2472 2019/09/23 02:44:10 code coverage: enabled 2019/09/23 02:44:10 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/09/23 02:44:10 extra coverage: extra coverage is not supported by the kernel 2019/09/23 02:44:10 setuid sandbox: enabled 2019/09/23 02:44:10 namespace sandbox: enabled 2019/09/23 02:44:10 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/23 02:44:10 fault injection: enabled 2019/09/23 02:44:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/23 02:44:10 net packet injection: enabled 2019/09/23 02:44:10 net device setup: enabled [ 39.808072] random: crng init done 02:46:07 executing program 0: r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x0, 0x8000, 0x6df3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x3c) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0xffffff96}}], 0x1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = openat$cgroup_subtree(r1, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) writev(r2, &(0x7f00000000c0), 0x20000000000001d2) openat$cgroup_ro(r1, &(0x7f0000000100)='memory.events\x00', 0x0, 0x0) socket$inet(0x10, 0x0, 0xeb5f) r3 = open(0x0, 0x141042, 0x0) close(r3) perf_event_open(&(0x7f0000000140)={0x59fa6dd93490abb7, 0x70, 0x7, 0xff, 0xbc0, 0x100000001, 0x0, 0x0, 0x1080, 0xa, 0x7, 0x0, 0x0, 0x0, 0x200, 0x5, 0x4, 0xfff, 0x100, 0x0, 0xfffffffffffffffc, 0x2, 0x5, 0x71, 0x101, 0x0, 0x80000000, 0xa7fc, 0x0, 0x0, 0x0, 0x800, 0xbce, 0x7, 0x0, 0x7, 0x100000001, 0x80000000, 0x0, 0x8001, 0x1, @perf_config_ext={0x9, 0x3}, 0x4020, 0x684, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x211f31531b3ed0cd}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0xa8126e388bd72b80) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) 02:46:07 executing program 1: setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, 0x0, 0x800000bf) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000200)={0x5f, "88bc149712b343013063e2410a20fd1d09b373b24c65b8fb9e5d893dc0db0c00b399f186c0a59777708bd160a69e3c6b9c4379dda7b934e27c8c2c3b5cbc15a0ad4178caa09fcedfa9e8976c9e97f63a06226d9e122ab7fd6091bb20f7ed7c"}) gettid() r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) [ 155.683921] audit: type=1400 audit(1569206767.627:37): avc: denied { map } for pid=6882 comm="syz-fuzzer" path="/root/syzkaller-shm965941744" dev="sda1" ino=16494 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 02:46:07 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() pselect6(0x6029, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x3b) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x2, 0x0, 0x1f}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x0, 0x0) 02:46:07 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000000)) 02:46:07 executing program 4: gettid() r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") timer_create(0x0, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000400)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb1}, 0x8, 0x0) read(r1, &(0x7f0000000080)=""/128, 0x88308aa) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 02:46:07 executing program 5: futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000000000031, 0xffffffffffffffff, 0x0) r0 = gettid() tkill(r0, 0x1000000000016) [ 155.715403] audit: type=1400 audit(1569206767.647:38): avc: denied { map } for pid=6900 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13803 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 156.121288] IPVS: ftp: loaded support on port[0] = 21 [ 156.939318] chnl_net:caif_netlink_parms(): no params data found [ 156.941214] IPVS: ftp: loaded support on port[0] = 21 [ 156.996187] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.002894] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.009857] device bridge_slave_0 entered promiscuous mode [ 157.018468] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.024909] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.031979] device bridge_slave_1 entered promiscuous mode [ 157.043229] IPVS: ftp: loaded support on port[0] = 21 [ 157.066794] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.077266] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.101323] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 157.108464] team0: Port device team_slave_0 added [ 157.122879] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 157.129886] team0: Port device team_slave_1 added [ 157.150207] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 157.174141] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 157.181257] chnl_net:caif_netlink_parms(): no params data found [ 157.205064] IPVS: ftp: loaded support on port[0] = 21 [ 157.262128] device hsr_slave_0 entered promiscuous mode [ 157.300348] device hsr_slave_1 entered promiscuous mode [ 157.363935] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 157.383035] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 157.429458] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.436771] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.443921] device bridge_slave_0 entered promiscuous mode [ 157.450669] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.457002] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.464584] device bridge_slave_1 entered promiscuous mode [ 157.476659] chnl_net:caif_netlink_parms(): no params data found [ 157.504473] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.515840] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.544305] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.550772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.558220] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.564602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.575998] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 157.583611] team0: Port device team_slave_0 added [ 157.606617] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 157.614054] team0: Port device team_slave_1 added [ 157.622219] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 157.629561] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.637595] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.644557] device bridge_slave_0 entered promiscuous mode [ 157.656252] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 157.702242] IPVS: ftp: loaded support on port[0] = 21 [ 157.713588] device hsr_slave_0 entered promiscuous mode [ 157.750437] device hsr_slave_1 entered promiscuous mode [ 157.820455] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.826822] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.834555] device bridge_slave_1 entered promiscuous mode [ 157.851778] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 157.858728] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 157.875814] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.886820] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.919882] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 157.927455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.951506] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 157.958588] team0: Port device team_slave_0 added [ 157.966692] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 157.982780] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 157.989860] team0: Port device team_slave_1 added [ 158.026010] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 158.032508] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.039420] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 158.047172] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 158.054424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.063256] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.080526] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.087539] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 158.098036] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 158.116201] IPVS: ftp: loaded support on port[0] = 21 [ 158.139214] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 158.149630] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 158.158205] chnl_net:caif_netlink_parms(): no params data found [ 158.174664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.182510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.189990] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.196382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.203330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.212263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.219790] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.226190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.303389] device hsr_slave_0 entered promiscuous mode [ 158.340361] device hsr_slave_1 entered promiscuous mode [ 158.380810] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 158.388294] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 158.409862] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 158.431063] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 158.437717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.463210] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 158.486819] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.494197] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.501895] device bridge_slave_0 entered promiscuous mode [ 158.508100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.531535] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 158.557066] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.564725] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.571681] device bridge_slave_1 entered promiscuous mode [ 158.580900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.588790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.596639] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.606556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 158.624125] chnl_net:caif_netlink_parms(): no params data found [ 158.652479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.660183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.669964] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 158.702685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.712588] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 158.722614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.730171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.739352] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 158.754064] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.761086] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.767987] device bridge_slave_0 entered promiscuous mode [ 158.775119] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.781570] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.788423] device bridge_slave_1 entered promiscuous mode [ 158.805218] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 158.823699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.831576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.841121] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 158.847780] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 158.854304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.862948] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 158.873998] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 158.896226] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.903758] team0: Port device team_slave_0 added [ 158.911239] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 158.919907] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 158.926616] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.946592] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.954275] team0: Port device team_slave_1 added [ 158.959382] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.967495] team0: Port device team_slave_0 added [ 158.973879] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.981072] team0: Port device team_slave_1 added [ 158.986611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.993533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.005625] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 159.027119] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 159.035559] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 159.042867] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 159.053506] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 159.061534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.069277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.077016] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.083379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.092343] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 159.117971] chnl_net:caif_netlink_parms(): no params data found [ 159.139138] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 159.152634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.159643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.167640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.175351] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.181736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.190864] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 159.252443] device hsr_slave_0 entered promiscuous mode [ 159.290388] device hsr_slave_1 entered promiscuous mode [ 159.330920] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 159.338074] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 159.353312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.362944] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 159.423477] device hsr_slave_0 entered promiscuous mode [ 159.470484] device hsr_slave_1 entered promiscuous mode [ 159.510435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.520183] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 159.546399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.554887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.563203] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 159.569697] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 159.577506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.589652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.598374] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.605902] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.612884] device bridge_slave_0 entered promiscuous mode [ 159.619561] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.626425] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.633645] device bridge_slave_1 entered promiscuous mode [ 159.647110] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 159.655409] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 159.662510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.669404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.677598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.688597] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 159.708502] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 159.722615] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 159.733228] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 159.745238] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 159.766898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.774362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.782448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.789208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.799375] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 159.809549] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.817259] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 159.824867] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 159.832842] team0: Port device team_slave_0 added [ 159.839225] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 159.846850] team0: Port device team_slave_1 added [ 159.855305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.866987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.877177] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 159.891101] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 159.897706] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 159.905576] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 159.921977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.929805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.937620] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.944092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.954144] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 159.962244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.970036] hrtimer: interrupt took 35361 ns [ 159.984580] audit: type=1400 audit(1569206771.917:39): avc: denied { create } for pid=6934 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 160.019692] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 160.036152] audit: type=1400 audit(1569206771.927:40): avc: denied { write } for pid=6934 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 02:46:12 executing program 0: mkdir(&(0x7f0000000540)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='tmpfs\x00\x80\n\x0f\xa0\'\x87\x9e\xee\xde.$^\x19\x15\xb8.\x19\x1c\xae\xf6\xbf\x9c\xda~\xf7\xb4lE\x82j\x00\x88\xfb_\xab\xf8\x9c\x1f\xc59\xd4\xb5\xd9\x19', 0x0, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000500)='.\x00', &(0x7f00000004c0)='./file0\x00') ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) getpgrp(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) getegid() getresgid(0x0, 0x0, 0x0) setfsgid(0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 160.065032] audit: type=1400 audit(1569206771.927:41): avc: denied { read } for pid=6934 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 160.089710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.097028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.104837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.114990] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.121386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.133442] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 160.148684] relay: one or more items not logged [item size (56) > sub-buffer size (9)] [ 160.151872] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 02:46:12 executing program 0: r0 = getpid() syz_open_procfs(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000000000)) [ 160.179115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.194723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.203156] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 160.252385] device hsr_slave_0 entered promiscuous mode [ 160.290571] device hsr_slave_1 entered promiscuous mode [ 160.338773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.348894] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 160.361709] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 160.372362] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 02:46:12 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c1e0307004000a000", 0x33a) [ 160.384887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.394598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.402451] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.424307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.434879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 160.448967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.458642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.468393] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 160.482107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.497555] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 160.511174] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 160.522841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.533815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.543878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.550062] audit: type=1400 audit(1569206772.487:42): avc: denied { map } for pid=6956 comm="syz-executor.1" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=25509 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 [ 160.552973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.593566] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 160.597054] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 160.604977] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 160.627097] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 160.635382] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready 02:46:12 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b1a, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) [ 160.642788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 02:46:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001900010100000000000000001d0100001800020000000000000000000d8fb65cfd6ec5f70300000008000e00", @ANYRES32=0x0, @ANYBLOB="cb8ae7e7400000"], 0x3c}}, 0x0) [ 160.675833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.684182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.695741] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 160.705482] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.719132] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 160.728597] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 160.737836] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.747319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.754591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.763788] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 02:46:12 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000180)=@buf={0x0, &(0x7f0000000100)}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000}, 0x1c) socket$inet6(0xa, 0x1000000000002, 0x0) r2 = socket$inet6(0xa, 0x3, 0x84) pipe(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x2000, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000003, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x1) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0x1, 0x100000001, 0x0, 0xa00}) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffedd, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) [ 160.772480] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.789821] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 160.798622] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 02:46:12 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x11, 0x2, r0, 0x0) [ 160.891200] protocol 88fb is buggy, dev hsr_slave_0 [ 160.897118] protocol 88fb is buggy, dev hsr_slave_1 [ 160.917118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.928481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.944121] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.950532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.972218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.982739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.992714] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.999101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.010088] protocol 88fb is buggy, dev hsr_slave_0 [ 161.011142] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 161.015158] protocol 88fb is buggy, dev hsr_slave_1 [ 161.028846] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 161.037143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.048713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.056007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.067785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.075607] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.081986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.089426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.097215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.104813] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.111189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.121086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.128145] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 161.140313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 02:46:13 executing program 0: [ 161.154796] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 161.197037] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 161.207457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.219421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.258157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 161.267928] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 161.280726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.288481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.320730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.328702] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.338136] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 161.347477] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 161.357258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.365102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.373997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.382669] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.394447] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.407336] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 161.417590] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 161.429059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.438134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.446294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.454276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.463690] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 161.476301] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 161.484110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.493857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.503099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.511268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.524771] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 161.536148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.544310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.554783] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 161.561390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.569264] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 161.582538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.596356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.614941] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 161.623193] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 161.634559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.646091] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 161.659659] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 161.667058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.678226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.687982] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 161.694894] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.705551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.719684] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 161.727312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.739903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.747966] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.754483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.762963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.774423] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 161.785771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.794928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.803721] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.810110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.820545] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 161.829485] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 161.842775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.858632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.880782] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 161.890948] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 161.898230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.907097] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.924792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.936102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.945083] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.956316] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 161.964688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.972997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.984474] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 02:46:13 executing program 3: [ 161.999167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.013838] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 162.027530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.040570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.052971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.068841] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 162.083205] 8021q: adding VLAN 0 to HW filter on device batadv0 02:46:14 executing program 2: 02:46:14 executing program 0: [ 162.520919] syz-executor.2 (6987) used greatest stack depth: 23792 bytes left 02:46:15 executing program 5: 02:46:15 executing program 1: 02:46:15 executing program 4: 02:46:15 executing program 3: 02:46:15 executing program 0: 02:46:15 executing program 2: 02:46:15 executing program 4: 02:46:15 executing program 1: 02:46:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[]}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:46:15 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) 02:46:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000100)=""/253, &(0x7f0000000040)=0xfd) 02:46:15 executing program 2: 02:46:15 executing program 4: 02:46:15 executing program 2: 02:46:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "cefe24f0008811e5", "f24de75896d57ddbdd08a80b00f90922", "cd1ca972", "a8eee00b4406195b"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 02:46:15 executing program 1: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') setns(r0, 0x0) 02:46:15 executing program 0: syz_read_part_table(0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x0) 02:46:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) 02:46:15 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x10062, 0x4) 02:46:15 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) socket(0xd, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioperm(0x2594, 0x3, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') close(0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040), 0x0) getgroups(0xffffffffffffff7b, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mount(&(0x7f0000000180)=@sr0='/dev/sr0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='omfs\x00', 0x210070, &(0x7f00000003c0)='IPVS\x00') setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x1) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000340)={0x0, 0x0, 0x9}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000280)=""/121, 0x200002f9) [ 163.638465] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:46:15 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:46:15 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x0, 0x1}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={r1}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000240)='./file0/file0\x00', r2}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0/file0\x00', 0x0, 0x8}, 0x10) 02:46:15 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) pipe(&(0x7f00000001c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x81c6}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x9, 0x0, 0x5, 0x3, 0x0, 0x3, 0x6, 0x0, &(0x7f0000000780)=""/4096, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:46:15 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f0000000340)="2600000022004701050000000000000005006d20002b5fee839cd53400b017ca5b0000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000b4bffc)=0x4, 0x282) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000004340)={0x0, @dev, 0x4e22, 0x0, 'sed\x00'}, 0x2c) [ 163.836765] audit: type=1400 audit(1569206775.777:43): avc: denied { associate } for pid=7089 comm="syz-executor.2" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 02:46:15 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xda\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5\xed\xc8RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/307) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r10, 0x0, r9, 0x0, 0x1000000000000003, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0x400c6615, &(0x7f0000000180)={0x0, @adiantum}) splice(r7, 0x0, r6, 0x0, 0x1000000000000003, 0x0) fallocate(r8, 0x3f, 0xc7, 0x10000) fcntl$setpipe(r5, 0x407, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x0, 0x0) write(r5, &(0x7f0000000580)="f948fac3e8138e6575ad4edf55ecc0fc2be24af7f0bbe4289ca12c041c5e5856280efc44d5bb9c5a41bacafaf22dd25d7d23f58bcab29ed095cbf2113045a5b08f42be8197d3c0670157f1a056eab215ec89e88d398a687986cbb714000001000000000054be58d73020f2f6af2b0f314f17ea", 0xffffffe4) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x2b, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r11+30000000}, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f00000002c0)) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) personality(0x0) 02:46:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "e30600", 0x18, 0x40000000003a, 0x43ff, @remote, @mcast2, {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x0, [], @local}}}}}}, 0x0) 02:46:15 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) socket(0xd, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioperm(0x2594, 0x3, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') close(0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040), 0x0) getgroups(0xffffffffffffff7b, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mount(&(0x7f0000000180)=@sr0='/dev/sr0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='omfs\x00', 0x210070, &(0x7f00000003c0)='IPVS\x00') setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x1) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000340)={0x0, 0x0, 0x9}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000280)=""/121, 0x200002f9) [ 163.910313] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:46:15 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)) 02:46:16 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020f00001500000000000000000000000100180000000000080012000000030000000000004000000600000000000001000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xa8}}, 0x0) 02:46:16 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020f00001500000000000000000000000100180000000000080012000000030000000000004000000600000000000001000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xa8}}, 0x0) 02:46:16 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x2000000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWALK(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/432], 0x9) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000683ff4)={@loopback, @loopback}, 0x20f) setsockopt$inet_group_source_req(r4, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r6, 0x83, 0x1000, 0x64}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000140)=[@timestamp, @window={0x3, 0xdb8, 0x5}, @timestamp, @window={0x3, 0x250, 0xfffffffffffffff7}, @window={0x3, 0x8, 0x5}, @window={0x3, 0x3, 0x100000000}, @window={0x3, 0x9, 0x4}, @window={0x3, 0x7, 0x8}, @window={0x3, 0x1ff, 0x7}, @window={0x3, 0x200, 0x1}], 0xa) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) ftruncate(r3, 0x10099b7) sendfile(r1, r3, 0x0, 0x88000fc000000) 02:46:16 executing program 5: bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x2007, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003300050ad25a80648c6394fb0124fc0010000b400c000200053582c137153e370900018004081700d1bd", 0x2e}], 0x1}, 0x0) [ 427.991372] INFO: task syz-executor.0:6903 blocked for more than 140 seconds. [ 427.998882] Not tainted 4.14.146 #0 [ 428.003825] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.011965] syz-executor.0 D24624 6903 1 0x00000004 [ 428.017615] Call Trace: [ 428.022721] __schedule+0x7b8/0x1cd0 [ 428.026518] ? __mutex_lock+0x737/0x1470 [ 428.030633] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.035646] schedule+0x92/0x1c0 [ 428.038993] schedule_preempt_disabled+0x13/0x20 [ 428.046069] __mutex_lock+0x73c/0x1470 [ 428.050157] ? blkdev_reread_part+0x1f/0x40 [ 428.054471] ? mutex_trylock+0x1c0/0x1c0 [ 428.058563] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 428.066014] ? __wake_up_common_lock+0xe3/0x160 [ 428.070820] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 428.075915] mutex_lock_nested+0x16/0x20 [ 428.079954] ? mutex_lock_nested+0x16/0x20 [ 428.086518] blkdev_reread_part+0x1f/0x40 [ 428.090692] loop_reread_partitions+0x7c/0x90 [ 428.095165] loop_clr_fd+0x844/0xae0 [ 428.098877] lo_ioctl+0x8ea/0x1ce0 [ 428.104748] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 428.109756] ? retint_kernel+0x2d/0x2d [ 428.113744] ? loop_probe+0x160/0x160 [ 428.117534] blkdev_ioctl+0x96b/0x1860 [ 428.123837] ? blkpg_ioctl+0x980/0x980 [ 428.127719] ? __might_sleep+0x93/0xb0 [ 428.131652] block_ioctl+0xde/0x120 [ 428.135276] ? blkdev_fallocate+0x3b0/0x3b0 [ 428.139578] do_vfs_ioctl+0x7ae/0x1060 [ 428.145950] ? selinux_file_mprotect+0x5d0/0x5d0 [ 428.150740] ? ioctl_preallocate+0x1c0/0x1c0 [ 428.155128] ? putname+0xe0/0x120 [ 428.158568] ? do_sys_open+0x221/0x430 [ 428.164795] ? security_file_ioctl+0x7d/0xb0 [ 428.169193] ? security_file_ioctl+0x89/0xb0 [ 428.173634] SyS_ioctl+0x8f/0xc0 [ 428.177010] ? do_vfs_ioctl+0x1060/0x1060 [ 428.183561] do_syscall_64+0x1e8/0x640 [ 428.187562] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.192438] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.197620] RIP: 0033:0x459877 [ 428.203122] RSP: 002b:00007fff7ec40f88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.210854] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459877 [ 428.218102] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 428.227704] RBP: 000000000000001a R08: 0000000000000000 R09: 000000000000000a [ 428.235097] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 428.244714] R13: 00007fff7ec40fc0 R14: 0000000000027ee6 R15: 00007fff7ec40fd0 [ 428.252052] INFO: task syz-executor.2:6908 blocked for more than 140 seconds. [ 428.259311] Not tainted 4.14.146 #0 [ 428.265986] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.273991] syz-executor.2 D24992 6908 1 0x00000004 [ 428.279619] Call Trace: [ 428.284529] __schedule+0x7b8/0x1cd0 [ 428.288272] ? __mutex_lock+0x737/0x1470 [ 428.292367] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.297388] schedule+0x92/0x1c0 [ 428.303065] schedule_preempt_disabled+0x13/0x20 [ 428.307823] __mutex_lock+0x73c/0x1470 [ 428.311744] ? __mutex_unlock_slowpath+0x71/0x800 [ 428.316579] ? __blkdev_get+0x145/0x1120 [ 428.322946] ? mutex_trylock+0x1c0/0x1c0 [ 428.327001] ? exact_match+0xd/0x20 [ 428.330686] ? kobj_lookup+0x314/0x400 [ 428.334593] ? blkdev_ioctl+0x1860/0x1860 [ 428.338732] mutex_lock_nested+0x16/0x20 [ 428.345431] ? mutex_lock_nested+0x16/0x20 [ 428.349687] __blkdev_get+0x145/0x1120 [ 428.353645] ? __blkdev_put+0x7f0/0x7f0 [ 428.357651] ? bd_acquire+0x178/0x2c0 [ 428.364240] ? find_held_lock+0x35/0x130 [ 428.368306] blkdev_get+0xa8/0x8e0 [ 428.371893] ? bd_may_claim+0xd0/0xd0 [ 428.375704] ? _raw_spin_unlock+0x2d/0x50 [ 428.379839] blkdev_open+0x1d1/0x260 [ 428.386403] ? security_file_open+0x89/0x190 [ 428.390882] do_dentry_open+0x73b/0xeb0 [ 428.394860] ? bd_acquire+0x2c0/0x2c0 [ 428.398648] vfs_open+0x105/0x220 [ 428.402186] path_openat+0x8bd/0x3f70 [ 428.406009] ? trace_hardirqs_on+0x10/0x10 [ 428.410333] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 428.415006] ? find_held_lock+0x35/0x130 [ 428.419056] ? __alloc_fd+0x1d4/0x4a0 [ 428.422944] do_filp_open+0x18e/0x250 [ 428.426749] ? may_open_dev+0xe0/0xe0 [ 428.430615] ? _raw_spin_unlock+0x2d/0x50 [ 428.434760] ? __alloc_fd+0x1d4/0x4a0 [ 428.438576] do_sys_open+0x2c5/0x430 [ 428.442353] ? filp_open+0x70/0x70 [ 428.445902] SyS_open+0x2d/0x40 [ 428.449164] ? do_sys_open+0x430/0x430 [ 428.453095] do_syscall_64+0x1e8/0x640 [ 428.456996] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.461915] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.467110] RIP: 0033:0x4138d0 [ 428.470414] RSP: 002b:00007ffcd9d47318 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 428.478153] RAX: ffffffffffffffda RBX: 0000000000027ffd RCX: 00000000004138d0 [ 428.485464] RDX: 00007ffcd9d473aa RSI: 0000000000000002 RDI: 00007ffcd9d473a0 [ 428.492774] RBP: 000000000000000c R08: 0000000000000000 R09: 000000000000000a [ 428.500100] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 428.507376] R13: 00007ffcd9d47350 R14: 0000000000027fc5 R15: 00007ffcd9d47360 [ 428.514749] INFO: task syz-executor.3:6909 blocked for more than 140 seconds. [ 428.522064] Not tainted 4.14.146 #0 [ 428.526208] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.534250] syz-executor.3 D24992 6909 1 0x00000004 [ 428.539890] Call Trace: [ 428.542529] __schedule+0x7b8/0x1cd0 [ 428.546260] ? __mutex_lock+0x737/0x1470 [ 428.550428] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.555468] schedule+0x92/0x1c0 [ 428.558840] schedule_preempt_disabled+0x13/0x20 [ 428.563661] __mutex_lock+0x73c/0x1470 [ 428.567556] ? trace_hardirqs_on+0x10/0x10 [ 428.571845] ? lo_open+0x1d/0xb0 [ 428.575239] ? refcount_add+0x10/0x50 [ 428.579026] ? mutex_trylock+0x1c0/0x1c0 [ 428.583142] ? find_held_lock+0x35/0x130 [ 428.587198] ? disk_get_part+0x9c/0x140 [ 428.591245] ? lock_downgrade+0x6e0/0x6e0 [ 428.595404] ? loop_unregister_transfer+0x90/0x90 [ 428.600287] mutex_lock_nested+0x16/0x20 [ 428.604340] ? mutex_lock_nested+0x16/0x20 [ 428.608556] lo_open+0x1d/0xb0 [ 428.611776] __blkdev_get+0x2c7/0x1120 [ 428.615657] ? __blkdev_put+0x7f0/0x7f0 [ 428.619622] ? bd_acquire+0x178/0x2c0 [ 428.623477] ? find_held_lock+0x35/0x130 [ 428.627550] blkdev_get+0xa8/0x8e0 [ 428.631207] ? bd_may_claim+0xd0/0xd0 [ 428.635031] ? _raw_spin_unlock+0x2d/0x50 [ 428.639161] blkdev_open+0x1d1/0x260 [ 428.642908] ? security_file_open+0x89/0x190 [ 428.647311] do_dentry_open+0x73b/0xeb0 [ 428.651310] ? bd_acquire+0x2c0/0x2c0 [ 428.655104] vfs_open+0x105/0x220 [ 428.658538] path_openat+0x8bd/0x3f70 [ 428.662384] ? trace_hardirqs_on+0x10/0x10 [ 428.666612] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 428.671321] ? find_held_lock+0x35/0x130 [ 428.675379] ? __alloc_fd+0x1d4/0x4a0 [ 428.679161] do_filp_open+0x18e/0x250 [ 428.682989] ? may_open_dev+0xe0/0xe0 [ 428.686787] ? _raw_spin_unlock+0x2d/0x50 [ 428.690970] ? __alloc_fd+0x1d4/0x4a0 [ 428.694770] do_sys_open+0x2c5/0x430 [ 428.698463] ? filp_open+0x70/0x70 [ 428.702031] SyS_open+0x2d/0x40 [ 428.705299] ? do_sys_open+0x430/0x430 [ 428.709167] do_syscall_64+0x1e8/0x640 [ 428.713278] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.718118] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.723338] RIP: 0033:0x4138d0 [ 428.726519] RSP: 002b:00007ffee1da2328 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 428.734275] RAX: ffffffffffffffda RBX: 0000000000028039 RCX: 00000000004138d0 [ 428.741581] RDX: 00007ffee1da23ba RSI: 0000000000000002 RDI: 00007ffee1da23b0 [ 428.748852] RBP: 000000000000000b R08: 0000000000000000 R09: 000000000000000a [ 428.756156] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 428.764417] R13: 00007ffee1da2360 R14: 0000000000027eea R15: 00007ffee1da2370 [ 428.771748] INFO: task syz-executor.4:6910 blocked for more than 140 seconds. [ 428.779016] Not tainted 4.14.146 #0 [ 428.783194] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.791202] syz-executor.4 D25168 6910 1 0x00000004 [ 428.796828] Call Trace: [ 428.799397] __schedule+0x7b8/0x1cd0 [ 428.803136] ? __mutex_lock+0x737/0x1470 [ 428.807192] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.812246] schedule+0x92/0x1c0 [ 428.815606] schedule_preempt_disabled+0x13/0x20 [ 428.820393] __mutex_lock+0x73c/0x1470 [ 428.827577] ? trace_hardirqs_on+0x10/0x10 [ 428.831847] ? lo_open+0x1d/0xb0 [ 428.835244] ? refcount_add+0x10/0x50 [ 428.839026] ? mutex_trylock+0x1c0/0x1c0 [ 428.843117] ? find_held_lock+0x35/0x130 [ 428.847196] ? disk_get_part+0x9c/0x140 [ 428.851288] ? lock_downgrade+0x6e0/0x6e0 [ 428.855449] ? loop_unregister_transfer+0x90/0x90 [ 428.860346] mutex_lock_nested+0x16/0x20 [ 428.864410] ? mutex_lock_nested+0x16/0x20 [ 428.868641] lo_open+0x1d/0xb0 [ 428.871962] __blkdev_get+0x2c7/0x1120 [ 428.875857] ? __blkdev_put+0x7f0/0x7f0 [ 428.879812] ? bd_acquire+0x178/0x2c0 [ 428.883661] ? find_held_lock+0x35/0x130 [ 428.887723] blkdev_get+0xa8/0x8e0 [ 428.891349] ? bd_may_claim+0xd0/0xd0 [ 428.895163] ? _raw_spin_unlock+0x2d/0x50 [ 428.899300] blkdev_open+0x1d1/0x260 [ 428.903079] ? security_file_open+0x89/0x190 [ 428.907489] do_dentry_open+0x73b/0xeb0 [ 428.911608] ? bd_acquire+0x2c0/0x2c0 [ 428.915407] vfs_open+0x105/0x220 [ 428.918846] path_openat+0x8bd/0x3f70 [ 428.922715] ? trace_hardirqs_on+0x10/0x10 [ 428.926957] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 428.931663] ? find_held_lock+0x35/0x130 [ 428.935724] ? __alloc_fd+0x1d4/0x4a0 [ 428.939525] do_filp_open+0x18e/0x250 [ 428.943369] ? may_open_dev+0xe0/0xe0 [ 428.947185] ? _raw_spin_unlock+0x2d/0x50 [ 428.951414] ? __alloc_fd+0x1d4/0x4a0 [ 428.955228] do_sys_open+0x2c5/0x430 [ 428.958932] ? filp_open+0x70/0x70 [ 428.962519] SyS_open+0x2d/0x40 [ 428.965803] ? do_sys_open+0x430/0x430 [ 428.969692] do_syscall_64+0x1e8/0x640 [ 428.973627] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.978478] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.983729] RIP: 0033:0x4138d0 [ 428.986913] RSP: 002b:00007ffe51030298 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 428.994666] RAX: ffffffffffffffda RBX: 0000000000027fd9 RCX: 00000000004138d0 [ 429.001983] RDX: 00007ffe5103032a RSI: 0000000000000002 RDI: 00007ffe51030320 [ 429.009254] RBP: 0000000000000009 R08: 0000000000000000 R09: 000000000000000a [ 429.016584] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 429.023884] R13: 00007ffe510302d0 R14: 0000000000027f3a R15: 00007ffe510302e0 [ 429.031260] INFO: task blkid:7085 blocked for more than 140 seconds. [ 429.037773] Not tainted 4.14.146 #0 [ 429.041983] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.049954] blkid D29040 7085 7041 0x00000004 [ 429.055655] Call Trace: [ 429.058250] __schedule+0x7b8/0x1cd0 [ 429.062025] ? __mutex_lock+0x737/0x1470 [ 429.066093] ? pci_mmcfg_check_reserved+0x150/0x150 [ 429.071171] schedule+0x92/0x1c0 [ 429.074536] schedule_preempt_disabled+0x13/0x20 [ 429.079279] __mutex_lock+0x73c/0x1470 [ 429.083256] ? trace_hardirqs_on+0x10/0x10 [ 429.087518] ? lo_open+0x1d/0xb0 [ 429.090994] ? refcount_add+0x10/0x50 [ 429.094808] ? mutex_trylock+0x1c0/0x1c0 [ 429.098857] ? find_held_lock+0x35/0x130 [ 429.102962] ? disk_get_part+0x9c/0x140 [ 429.106942] ? lock_downgrade+0x6e0/0x6e0 [ 429.111684] ? loop_unregister_transfer+0x90/0x90 [ 429.116542] mutex_lock_nested+0x16/0x20 [ 429.120659] ? mutex_lock_nested+0x16/0x20 [ 429.124890] lo_open+0x1d/0xb0 [ 429.128071] __blkdev_get+0x2c7/0x1120 [ 429.132031] ? __blkdev_put+0x7f0/0x7f0 [ 429.136129] ? bd_acquire+0x178/0x2c0 [ 429.139931] ? find_held_lock+0x35/0x130 [ 429.144048] blkdev_get+0xa8/0x8e0 [ 429.147593] ? bd_may_claim+0xd0/0xd0 [ 429.151444] ? _raw_spin_unlock+0x2d/0x50 [ 429.155587] blkdev_open+0x1d1/0x260 [ 429.159284] ? security_file_open+0x89/0x190 [ 429.163726] do_dentry_open+0x73b/0xeb0 [ 429.167692] ? bd_acquire+0x2c0/0x2c0 [ 429.171519] vfs_open+0x105/0x220 [ 429.174963] path_openat+0x8bd/0x3f70 [ 429.179371] ? trace_hardirqs_on+0x10/0x10 [ 429.183635] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 429.188308] ? find_held_lock+0x35/0x130 [ 429.192393] ? __alloc_fd+0x1d4/0x4a0 [ 429.196185] do_filp_open+0x18e/0x250 [ 429.199963] ? may_open_dev+0xe0/0xe0 [ 429.203816] ? _raw_spin_unlock+0x2d/0x50 [ 429.207957] ? __alloc_fd+0x1d4/0x4a0 [ 429.211788] do_sys_open+0x2c5/0x430 [ 429.215498] ? filp_open+0x70/0x70 [ 429.219020] SyS_open+0x2d/0x40 [ 429.222328] ? do_sys_open+0x430/0x430 [ 429.226213] do_syscall_64+0x1e8/0x640 [ 429.230132] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.234983] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.240210] RIP: 0033:0x7feb42b3c120 [ 429.243909] RSP: 002b:00007fff03cbef68 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 429.251636] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007feb42b3c120 [ 429.258896] RDX: 00007fff03cbff34 RSI: 0000000000000000 RDI: 00007fff03cbff34 [ 429.266191] RBP: 0000000000000000 R08: 0000000000000078 R09: 0000000000000000 [ 429.273501] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000024d5030 [ 429.280976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005 [ 429.288281] INFO: task syz-executor.1:7090 blocked for more than 140 seconds. [ 429.295607] Not tainted 4.14.146 #0 [ 429.299744] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.307738] syz-executor.1 D29728 7090 6907 0x00000004 [ 429.313403] Call Trace: [ 429.316010] __schedule+0x7b8/0x1cd0 [ 429.319703] ? __mutex_lock+0x737/0x1470 [ 429.323794] ? pci_mmcfg_check_reserved+0x150/0x150 [ 429.328808] schedule+0x92/0x1c0 [ 429.332216] schedule_preempt_disabled+0x13/0x20 [ 429.336963] __mutex_lock+0x73c/0x1470 [ 429.340884] ? loop_control_ioctl+0x153/0x2f0 [ 429.345369] ? mutex_trylock+0x1c0/0x1c0 [ 429.349411] ? trace_hardirqs_on+0x10/0x10 [ 429.353750] ? __radix_tree_lookup+0x1b3/0x2f0 [ 429.358361] mutex_lock_nested+0x16/0x20 [ 429.362455] ? mutex_lock_nested+0x16/0x20 [ 429.366682] loop_control_ioctl+0x153/0x2f0 [ 429.371040] ? loop_add+0x850/0x850 [ 429.374657] ? loop_add+0x850/0x850 [ 429.378265] do_vfs_ioctl+0x7ae/0x1060 [ 429.382183] ? selinux_file_mprotect+0x5d0/0x5d0 [ 429.386929] ? lock_downgrade+0x6e0/0x6e0 [ 429.391111] ? ioctl_preallocate+0x1c0/0x1c0 [ 429.395509] ? __fget+0x237/0x370 [ 429.398945] ? security_file_ioctl+0x89/0xb0 [ 429.403381] SyS_ioctl+0x8f/0xc0 [ 429.406743] ? do_vfs_ioctl+0x1060/0x1060 [ 429.410914] do_syscall_64+0x1e8/0x640 [ 429.414791] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.419618] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.424831] RIP: 0033:0x459a09 [ 429.428017] RSP: 002b:00007f91b94d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.435921] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a09 [ 429.443243] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 [ 429.450545] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 429.457808] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f91b94d86d4 [ 429.465109] R13: 00000000004c3143 R14: 00000000004d6a28 R15: 00000000ffffffff [ 429.472407] INFO: task syz-executor.1:7117 blocked for more than 140 seconds. [ 429.479696] Not tainted 4.14.146 #0 [ 429.483865] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.491859] syz-executor.1 D29824 7117 6907 0x00000004 [ 429.497488] Call Trace: [ 429.500110] __schedule+0x7b8/0x1cd0 [ 429.503825] ? __mutex_lock+0x737/0x1470 [ 429.507866] ? pci_mmcfg_check_reserved+0x150/0x150 [ 429.512995] schedule+0x92/0x1c0 [ 429.516355] schedule_preempt_disabled+0x13/0x20 [ 429.521145] __mutex_lock+0x73c/0x1470 [ 429.525026] ? loop_control_ioctl+0x65/0x2f0 [ 429.529412] ? mutex_trylock+0x1c0/0x1c0 [ 429.533497] ? trace_hardirqs_on+0x10/0x10 [ 429.538021] ? __might_fault+0x110/0x1d0 [ 429.542117] mutex_lock_nested+0x16/0x20 [ 429.546177] ? mutex_lock_nested+0x16/0x20 [ 429.550445] loop_control_ioctl+0x65/0x2f0 [ 429.554675] ? loop_add+0x850/0x850 [ 429.558291] ? loop_add+0x850/0x850 [ 429.561954] do_vfs_ioctl+0x7ae/0x1060 [ 429.565833] ? selinux_file_mprotect+0x5d0/0x5d0 [ 429.570620] ? lock_downgrade+0x6e0/0x6e0 [ 429.574758] ? ioctl_preallocate+0x1c0/0x1c0 [ 429.579146] ? __fget+0x237/0x370 [ 429.582641] ? security_file_ioctl+0x89/0xb0 [ 429.587041] SyS_ioctl+0x8f/0xc0 [ 429.590429] ? do_vfs_ioctl+0x1060/0x1060 [ 429.594567] do_syscall_64+0x1e8/0x640 [ 429.598439] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.603340] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.608527] RIP: 0033:0x459a09 [ 429.611737] RSP: 002b:00007f91b9495c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.619435] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a09 [ 429.626752] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 [ 429.634051] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 429.641359] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f91b94966d4 [ 429.648656] R13: 00000000004c3143 R14: 00000000004d6a28 R15: 00000000ffffffff [ 429.655985] INFO: task blkid:7088 blocked for more than 140 seconds. [ 429.662492] Not tainted 4.14.146 #0 [ 429.666615] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.674679] blkid D29040 7088 7045 0x00000004 [ 429.680346] Call Trace: [ 429.682951] __schedule+0x7b8/0x1cd0 [ 429.686642] ? __mutex_lock+0x737/0x1470 [ 429.690741] ? pci_mmcfg_check_reserved+0x150/0x150 [ 429.695768] schedule+0x92/0x1c0 [ 429.699198] schedule_preempt_disabled+0x13/0x20 [ 429.703979] __mutex_lock+0x73c/0x1470 [ 429.707861] ? trace_hardirqs_on+0x10/0x10 [ 429.712122] ? lo_open+0x1d/0xb0 [ 429.715498] ? refcount_add+0x10/0x50 [ 429.719278] ? mutex_trylock+0x1c0/0x1c0 [ 429.723373] ? find_held_lock+0x35/0x130 [ 429.727428] ? disk_get_part+0x9c/0x140 [ 429.731430] ? lock_downgrade+0x6e0/0x6e0 [ 429.735580] ? loop_unregister_transfer+0x90/0x90 [ 429.740457] mutex_lock_nested+0x16/0x20 [ 429.744507] ? mutex_lock_nested+0x16/0x20 [ 429.748721] lo_open+0x1d/0xb0 [ 429.751932] __blkdev_get+0x2c7/0x1120 [ 429.755841] ? __blkdev_put+0x7f0/0x7f0 [ 429.759790] ? bd_acquire+0x178/0x2c0 [ 429.763625] ? find_held_lock+0x35/0x130 [ 429.767674] blkdev_get+0xa8/0x8e0 [ 429.771248] ? bd_may_claim+0xd0/0xd0 [ 429.775045] ? _raw_spin_unlock+0x2d/0x50 [ 429.779196] blkdev_open+0x1d1/0x260 [ 429.782935] ? security_file_open+0x89/0x190 [ 429.787361] do_dentry_open+0x73b/0xeb0 [ 429.791371] ? bd_acquire+0x2c0/0x2c0 [ 429.795178] vfs_open+0x105/0x220 [ 429.798620] path_openat+0x8bd/0x3f70 [ 429.802463] ? trace_hardirqs_on+0x10/0x10 [ 429.806692] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 429.811392] ? find_held_lock+0x35/0x130 [ 429.815443] ? __alloc_fd+0x1d4/0x4a0 [ 429.819221] do_filp_open+0x18e/0x250 [ 429.823046] ? may_open_dev+0xe0/0xe0 [ 429.826857] ? _raw_spin_unlock+0x2d/0x50 [ 429.831055] ? __alloc_fd+0x1d4/0x4a0 [ 429.834858] do_sys_open+0x2c5/0x430 [ 429.838549] ? filp_open+0x70/0x70 [ 429.842141] SyS_open+0x2d/0x40 [ 429.845493] ? do_sys_open+0x430/0x430 [ 429.849368] do_syscall_64+0x1e8/0x640 [ 429.853292] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.858136] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.863360] RIP: 0033:0x7f9658bbf120 [ 429.867059] RSP: 002b:00007ffdfa3bb9c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 429.874847] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9658bbf120 [ 429.882149] RDX: 00007ffdfa3bcf34 RSI: 0000000000000000 RDI: 00007ffdfa3bcf34 [ 429.889406] RBP: 0000000000000000 R08: 0000000000000078 R09: 0000000000000000 [ 429.896712] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000017a5030 [ 429.903997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005 [ 429.911318] INFO: task blkid:7096 blocked for more than 140 seconds. [ 429.917852] Not tainted 4.14.146 #0 [ 429.922023] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.929977] blkid D29040 7096 6867 0x00000004 [ 429.935645] Call Trace: [ 429.938231] __schedule+0x7b8/0x1cd0 [ 429.941971] ? __mutex_lock+0x737/0x1470 [ 429.946026] ? pci_mmcfg_check_reserved+0x150/0x150 [ 429.951067] schedule+0x92/0x1c0 [ 429.954440] schedule_preempt_disabled+0x13/0x20 [ 429.959173] __mutex_lock+0x73c/0x1470 [ 429.963092] ? lo_open+0x1d/0xb0 [ 429.966451] ? refcount_add+0x10/0x50 [ 429.970292] ? mutex_trylock+0x1c0/0x1c0 [ 429.974344] ? exact_match+0xd/0x20 [ 429.977965] ? kobj_lookup+0x314/0x400 [ 429.981906] ? loop_unregister_transfer+0x90/0x90 [ 429.986738] mutex_lock_nested+0x16/0x20 [ 429.990831] ? mutex_lock_nested+0x16/0x20 [ 429.995066] lo_open+0x1d/0xb0 [ 429.998238] __blkdev_get+0xaad/0x1120 [ 430.002164] ? __blkdev_put+0x7f0/0x7f0 [ 430.006126] ? bd_acquire+0x178/0x2c0 [ 430.009922] ? find_held_lock+0x35/0x130 [ 430.014006] blkdev_get+0xa8/0x8e0 [ 430.017537] ? bd_may_claim+0xd0/0xd0 [ 430.021387] ? _raw_spin_unlock+0x2d/0x50 [ 430.025534] blkdev_open+0x1d1/0x260 [ 430.029232] ? security_file_open+0x89/0x190 [ 430.033680] do_dentry_open+0x73b/0xeb0 [ 430.037643] ? bd_acquire+0x2c0/0x2c0 [ 430.041467] vfs_open+0x105/0x220 [ 430.044928] path_openat+0x8bd/0x3f70 [ 430.048717] ? trace_hardirqs_on+0x10/0x10 [ 430.052996] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 430.057654] ? find_held_lock+0x35/0x130 [ 430.061742] ? __alloc_fd+0x1d4/0x4a0 [ 430.065532] do_filp_open+0x18e/0x250 [ 430.069310] ? may_open_dev+0xe0/0xe0 [ 430.073235] ? _raw_spin_unlock+0x2d/0x50 [ 430.077553] ? __alloc_fd+0x1d4/0x4a0 [ 430.081396] do_sys_open+0x2c5/0x430 [ 430.085100] ? filp_open+0x70/0x70 [ 430.088622] SyS_open+0x2d/0x40 [ 430.091935] ? do_sys_open+0x430/0x430 [ 430.095840] do_syscall_64+0x1e8/0x640 [ 430.099706] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.104584] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 430.109760] RIP: 0033:0x7fb8e02a6120 [ 430.113489] RSP: 002b:00007ffd9eb4c3d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 430.121226] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb8e02a6120 [ 430.128483] RDX: 00007ffd9eb4cf41 RSI: 0000000000000000 RDI: 00007ffd9eb4cf41 [ 430.135775] RBP: 0000000000000000 R08: 0000000000000078 R09: 0000000000000000 [ 430.143057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000ed4030 [ 430.150445] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005 [ 430.157722] [ 430.157722] Showing all locks held in the system: [ 430.164073] 1 lock held by khungtaskd/1013: [ 430.168510] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f [ 430.177598] 2 locks held by getty/6859: [ 430.181592] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.190306] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.199602] 2 locks held by getty/6860: [ 430.203610] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.212326] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.221651] 2 locks held by getty/6861: [ 430.225608] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.234313] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.243633] 2 locks held by getty/6862: [ 430.247591] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.256331] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.265662] 2 locks held by getty/6863: [ 430.269620] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.278346] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.287691] 2 locks held by getty/6864: [ 430.291693] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.300415] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.309933] 2 locks held by getty/6865: [ 430.314104] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.322931] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.332274] 2 locks held by syz-executor.0/6903: [ 430.337016] #0: (&lo->lo_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x8f/0x1ce0 [ 430.346180] #1: (&bdev->bd_mutex){+.+.}, at: [] blkdev_reread_part+0x1f/0x40 [ 430.355147] 1 lock held by syz-executor.2/6908: [ 430.359845] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.368600] 2 locks held by syz-executor.3/6909: [ 430.373365] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.382072] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 430.390179] 2 locks held by syz-executor.4/6910: [ 430.394931] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.403635] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 430.411742] 2 locks held by blkid/7085: [ 430.415700] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.424400] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 430.432508] 2 locks held by syz-executor.1/7090: [ 430.437237] #0: (loop_index_mutex){+.+.}, at: [] loop_control_ioctl+0x65/0x2f0 [ 430.446872] #1: (&lo->lo_ctl_mutex#2){+.+.}, at: [] loop_control_ioctl+0x153/0x2f0 [ 430.456383] 1 lock held by syz-executor.1/7117: [ 430.461081] #0: (loop_index_mutex){+.+.}, at: [] loop_control_ioctl+0x65/0x2f0 [ 430.470286] 2 locks held by blkid/7088: [ 430.474275] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.482979] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 430.491088] 2 locks held by blkid/7096: [ 430.495044] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.503745] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 430.511833] [ 430.513439] ============================================= [ 430.513439] [ 430.520483] NMI backtrace for cpu 0 [ 430.524102] CPU: 0 PID: 1013 Comm: khungtaskd Not tainted 4.14.146 #0 [ 430.530663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.540001] Call Trace: [ 430.542589] dump_stack+0x138/0x197 [ 430.546207] nmi_cpu_backtrace.cold+0x57/0x94 [ 430.550694] ? irq_force_complete_move.cold+0x7d/0x7d [ 430.555862] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 430.561122] arch_trigger_cpumask_backtrace+0x14/0x20 [ 430.566309] watchdog+0x5e7/0xb90 [ 430.569747] kthread+0x319/0x430 [ 430.573092] ? hungtask_pm_notify+0x50/0x50 [ 430.577386] ? kthread_create_on_node+0xd0/0xd0 [ 430.582033] ret_from_fork+0x24/0x30 [ 430.585855] Sending NMI from CPU 0 to CPUs 1: [ 430.590666] NMI backtrace for cpu 1 [ 430.590670] CPU: 1 PID: 5 Comm: kworker/u4:0 Not tainted 4.14.146 #0 [ 430.590673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.590676] Workqueue: bat_events batadv_nc_worker [ 430.590680] task: ffff8880a9cc2140 task.stack: ffff8880a9cd0000 [ 430.590682] RIP: 0010:lock_release+0xfc/0x940 [ 430.590684] RSP: 0018:ffff8880a9cd7c48 EFLAGS: 00000086 [ 430.590689] RAX: 1ffffffff0ee2a82 RBX: 1ffff1101539af8f RCX: 1ffffffff0ea65a9 [ 430.590692] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8880a9cc29bc [ 430.590694] RBP: ffff8880a9cd7ce0 R08: 0000000000000000 R09: ffff8880a9cc2a30 [ 430.590697] R10: 0000000000000000 R11: ffff8880a9cc2140 R12: ffffffff8778f7a0 [ 430.590700] R13: ffffffff8604cbdd R14: ffff8880a9cc2140 R15: ffff8880a9cd7cb8 [ 430.590703] FS: 0000000000000000(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 430.590706] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.590708] CR2: 0000000001cd7000 CR3: 000000009aec5000 CR4: 00000000001406e0 [ 430.590711] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 430.590714] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.590716] Call Trace: [ 430.590718] ? lock_downgrade+0x6e0/0x6e0 [ 430.590720] batadv_nc_worker+0x1d8/0x6d0 [ 430.590722] process_one_work+0x863/0x1600 [ 430.590724] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 430.590726] worker_thread+0x5d9/0x1050 [ 430.590728] kthread+0x319/0x430 [ 430.590730] ? process_one_work+0x1600/0x1600 [ 430.590732] ? kthread_create_on_node+0xd0/0xd0 [ 430.590734] ret_from_fork+0x24/0x30 [ 430.590735] Code: fc ff df 48 89 45 88 48 c7 c0 10 54 71 87 48 c1 e8 03 80 3c 10 00 0f 85 58 06 00 00 48 83 3d 8b 1e 29 06 00 0f 84 09 05 00 00 fa <66> 0f 1f 44 00 00 65 4c 8b 34 25 40 ee 01 00 49 8d be 7c 08 00 [ 430.591428] Kernel panic - not syncing: hung_task: blocked tasks [ 430.768700] CPU: 0 PID: 1013 Comm: khungtaskd Not tainted 4.14.146 #0 [ 430.775263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.784606] Call Trace: [ 430.787182] dump_stack+0x138/0x197 [ 430.790791] panic+0x1f2/0x426 [ 430.793968] ? add_taint.cold+0x16/0x16 [ 430.797920] ? ___preempt_schedule+0x16/0x18 [ 430.802313] watchdog+0x5f8/0xb90 [ 430.805749] kthread+0x319/0x430 [ 430.809091] ? hungtask_pm_notify+0x50/0x50 [ 430.813388] ? kthread_create_on_node+0xd0/0xd0 [ 430.818152] ret_from_fork+0x24/0x30 [ 430.823608] Kernel Offset: disabled [ 430.827241] Rebooting in 86400 seconds..