[ 50.549955] audit: type=1800 audit(1548655293.567:30): pid=8327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 55.750038] kauditd_printk_skb: 4 callbacks suppressed [ 55.750053] audit: type=1400 audit(1548655298.797:35): avc: denied { map } for pid=8502 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.154' (ECDSA) to the list of known hosts. [ 254.228400] audit: type=1400 audit(1548655497.277:36): avc: denied { map } for pid=8514 comm="syz-executor895" path="/root/syz-executor895306502" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 254.266092] IPVS: ftp: loaded support on port[0] = 21 [ 254.325509] chnl_net:caif_netlink_parms(): no params data found [ 254.355951] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.362964] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.370381] device bridge_slave_0 entered promiscuous mode [ 254.377853] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.384350] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.391363] device bridge_slave_1 entered promiscuous mode [ 254.409397] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 254.419063] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 254.437898] team0: Port device team_slave_0 added [ 254.444472] team0: Port device team_slave_1 added [ 254.522310] device hsr_slave_0 entered promiscuous mode [ 254.600615] device hsr_slave_1 entered promiscuous mode [ 254.659362] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.665933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.673118] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.679642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.716126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.727102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.736899] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.745215] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.752446] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 254.764281] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.773202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.781747] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.788091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.813678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.823134] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.829620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.837429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.846577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.854586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready executing program [ 254.862128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.871101] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.879529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.897544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.990652] protocol 88fb is buggy, dev hsr_slave_0 [ 254.995904] protocol 88fb is buggy, dev hsr_slave_1 [ 255.110375] protocol 88fb is buggy, dev hsr_slave_0 [ 255.115586] protocol 88fb is buggy, dev hsr_slave_1 [ 255.240328] protocol 88fb is buggy, dev hsr_slave_0 [ 255.245446] protocol 88fb is buggy, dev hsr_slave_1 [ 255.370362] protocol 88fb is buggy, dev hsr_slave_0 [ 255.375467] protocol 88fb is buggy, dev hsr_slave_1 [ 257.410304] protocol 88fb is buggy, dev hsr_slave_0 [ 257.415467] protocol 88fb is buggy, dev hsr_slave_1 [ 261.570327] net_ratelimit: 2 callbacks suppressed [ 261.570338] protocol 88fb is buggy, dev hsr_slave_0 [ 261.580372] protocol 88fb is buggy, dev hsr_slave_1 [ 263.650375] protocol 88fb is buggy, dev hsr_slave_0 [ 263.655644] protocol 88fb is buggy, dev hsr_slave_1 [ 265.730374] protocol 88fb is buggy, dev hsr_slave_0 [ 265.735557] protocol 88fb is buggy, dev hsr_slave_1 [ 267.810373] protocol 88fb is buggy, dev hsr_slave_0 [ 267.815575] protocol 88fb is buggy, dev hsr_slave_1 [ 269.890348] protocol 88fb is buggy, dev hsr_slave_0 [ 269.895510] protocol 88fb is buggy, dev hsr_slave_1 [ 271.970366] protocol 88fb is buggy, dev hsr_slave_0 [ 271.975542] protocol 88fb is buggy, dev hsr_slave_1 [ 274.050354] protocol 88fb is buggy, dev hsr_slave_0 [ 274.055545] protocol 88fb is buggy, dev hsr_slave_1 [ 276.130354] protocol 88fb is buggy, dev hsr_slave_0 [ 276.135540] protocol 88fb is buggy, dev hsr_slave_1 [ 278.210359] protocol 88fb is buggy, dev hsr_slave_0 [ 278.215515] protocol 88fb is buggy, dev hsr_slave_1 [ 280.290343] protocol 88fb is buggy, dev hsr_slave_0 [ 280.295659] protocol 88fb is buggy, dev hsr_slave_1 [ 282.370343] protocol 88fb is buggy, dev hsr_slave_0 [ 282.375526] protocol 88fb is buggy, dev hsr_slave_1 [ 284.450352] protocol 88fb is buggy, dev hsr_slave_0 [ 284.455540] protocol 88fb is buggy, dev hsr_slave_1 [ 286.530351] protocol 88fb is buggy, dev hsr_slave_0 [ 286.535663] protocol 88fb is buggy, dev hsr_slave_1 [ 288.610343] protocol 88fb is buggy, dev hsr_slave_0 [ 288.615533] protocol 88fb is buggy, dev hsr_slave_1 [ 290.690340] protocol 88fb is buggy, dev hsr_slave_0 [ 290.695521] protocol 88fb is buggy, dev hsr_slave_1 [ 292.770331] protocol 88fb is buggy, dev hsr_slave_0 [ 292.775483] protocol 88fb is buggy, dev hsr_slave_1 [ 294.850325] protocol 88fb is buggy, dev hsr_slave_0 [ 294.855466] protocol 88fb is buggy, dev hsr_slave_1 [ 296.930326] protocol 88fb is buggy, dev hsr_slave_0 [ 296.935490] protocol 88fb is buggy, dev hsr_slave_1 [ 299.010315] protocol 88fb is buggy, dev hsr_slave_0 [ 299.015495] protocol 88fb is buggy, dev hsr_slave_1 [ 301.090307] protocol 88fb is buggy, dev hsr_slave_0 [ 301.095468] protocol 88fb is buggy, dev hsr_slave_1 [ 303.170312] protocol 88fb is buggy, dev hsr_slave_0 [ 303.175438] protocol 88fb is buggy, dev hsr_slave_1 [ 305.250346] protocol 88fb is buggy, dev hsr_slave_0 [ 305.255531] protocol 88fb is buggy, dev hsr_slave_1 [ 307.330366] protocol 88fb is buggy, dev hsr_slave_0 [ 307.335523] protocol 88fb is buggy, dev hsr_slave_1 [ 309.410305] protocol 88fb is buggy, dev hsr_slave_0 [ 309.415579] protocol 88fb is buggy, dev hsr_slave_1 [ 311.490305] protocol 88fb is buggy, dev hsr_slave_0 [ 311.495431] protocol 88fb is buggy, dev hsr_slave_1 [ 313.570306] protocol 88fb is buggy, dev hsr_slave_0 [ 313.575458] protocol 88fb is buggy, dev hsr_slave_1 [ 315.650377] protocol 88fb is buggy, dev hsr_slave_0 [ 315.655577] protocol 88fb is buggy, dev hsr_slave_1 [ 317.730341] protocol 88fb is buggy, dev hsr_slave_0 [ 317.735493] protocol 88fb is buggy, dev hsr_slave_1 [ 319.810320] protocol 88fb is buggy, dev hsr_slave_0 [ 319.815490] protocol 88fb is buggy, dev hsr_slave_1 [ 321.890334] protocol 88fb is buggy, dev hsr_slave_0 [ 321.895477] protocol 88fb is buggy, dev hsr_slave_1 [ 323.970310] protocol 88fb is buggy, dev hsr_slave_0 [ 323.975439] protocol 88fb is buggy, dev hsr_slave_1 [ 326.050304] protocol 88fb is buggy, dev hsr_slave_0 [ 326.055441] protocol 88fb is buggy, dev hsr_slave_1 [ 328.130317] protocol 88fb is buggy, dev hsr_slave_0 [ 328.135460] protocol 88fb is buggy, dev hsr_slave_1 [ 330.210338] protocol 88fb is buggy, dev hsr_slave_0 [ 330.215495] protocol 88fb is buggy, dev hsr_slave_1 [ 332.290331] protocol 88fb is buggy, dev hsr_slave_0 [ 332.295560] protocol 88fb is buggy, dev hsr_slave_1 [ 334.370347] protocol 88fb is buggy, dev hsr_slave_0 [ 334.375501] protocol 88fb is buggy, dev hsr_slave_1 [ 336.450311] protocol 88fb is buggy, dev hsr_slave_0 [ 336.455446] protocol 88fb is buggy, dev hsr_slave_1 [ 338.530337] protocol 88fb is buggy, dev hsr_slave_0 [ 338.535503] protocol 88fb is buggy, dev hsr_slave_1 [ 340.610320] protocol 88fb is buggy, dev hsr_slave_0 [ 340.615475] protocol 88fb is buggy, dev hsr_slave_1 [ 342.690299] protocol 88fb is buggy, dev hsr_slave_0 [ 342.695415] protocol 88fb is buggy, dev hsr_slave_1 [ 344.770325] protocol 88fb is buggy, dev hsr_slave_0 [ 344.775486] protocol 88fb is buggy, dev hsr_slave_1 [ 346.850343] protocol 88fb is buggy, dev hsr_slave_0 [ 346.855504] protocol 88fb is buggy, dev hsr_slave_1 [ 348.930346] protocol 88fb is buggy, dev hsr_slave_0 [ 348.935470] protocol 88fb is buggy, dev hsr_slave_1 [ 351.010346] protocol 88fb is buggy, dev hsr_slave_0 [ 351.015556] protocol 88fb is buggy, dev hsr_slave_1 [ 353.090329] protocol 88fb is buggy, dev hsr_slave_0 [ 353.095436] protocol 88fb is buggy, dev hsr_slave_1 [ 355.170354] protocol 88fb is buggy, dev hsr_slave_0 [ 355.175462] protocol 88fb is buggy, dev hsr_slave_1 [ 357.250330] protocol 88fb is buggy, dev hsr_slave_0 [ 357.255458] protocol 88fb is buggy, dev hsr_slave_1 [ 359.330380] protocol 88fb is buggy, dev hsr_slave_0 [ 359.335531] protocol 88fb is buggy, dev hsr_slave_1 [ 361.410337] protocol 88fb is buggy, dev hsr_slave_0 [ 361.415486] protocol 88fb is buggy, dev hsr_slave_1 [ 363.490317] protocol 88fb is buggy, dev hsr_slave_0 [ 363.495528] protocol 88fb is buggy, dev hsr_slave_1 [ 365.570315] protocol 88fb is buggy, dev hsr_slave_0 [ 365.575415] protocol 88fb is buggy, dev hsr_slave_1 [ 367.650339] protocol 88fb is buggy, dev hsr_slave_0 [ 367.655515] protocol 88fb is buggy, dev hsr_slave_1 [ 369.730343] protocol 88fb is buggy, dev hsr_slave_0 [ 369.735541] protocol 88fb is buggy, dev hsr_slave_1 [ 371.810323] protocol 88fb is buggy, dev hsr_slave_0 [ 371.815469] protocol 88fb is buggy, dev hsr_slave_1 [ 373.890337] protocol 88fb is buggy, dev hsr_slave_0 [ 373.895502] protocol 88fb is buggy, dev hsr_slave_1 [ 375.970316] protocol 88fb is buggy, dev hsr_slave_0 [ 375.975506] protocol 88fb is buggy, dev hsr_slave_1 [ 378.050312] protocol 88fb is buggy, dev hsr_slave_0 [ 378.055445] protocol 88fb is buggy, dev hsr_slave_1 [ 380.130333] protocol 88fb is buggy, dev hsr_slave_0 [ 380.135518] protocol 88fb is buggy, dev hsr_slave_1 [ 382.210353] protocol 88fb is buggy, dev hsr_slave_0 [ 382.215531] protocol 88fb is buggy, dev hsr_slave_1 [ 384.290354] protocol 88fb is buggy, dev hsr_slave_0 [ 384.295493] protocol 88fb is buggy, dev hsr_slave_1 [ 386.370349] protocol 88fb is buggy, dev hsr_slave_0 [ 386.375504] protocol 88fb is buggy, dev hsr_slave_1 [ 388.450333] protocol 88fb is buggy, dev hsr_slave_0 [ 388.455506] protocol 88fb is buggy, dev hsr_slave_1 [ 390.530309] protocol 88fb is buggy, dev hsr_slave_0 [ 390.535437] protocol 88fb is buggy, dev hsr_slave_1 [ 392.610351] protocol 88fb is buggy, dev hsr_slave_0 [ 392.615538] protocol 88fb is buggy, dev hsr_slave_1 [ 394.690341] protocol 88fb is buggy, dev hsr_slave_0 [ 394.695499] protocol 88fb is buggy, dev hsr_slave_1 [ 396.770306] protocol 88fb is buggy, dev hsr_slave_0 [ 396.775450] protocol 88fb is buggy, dev hsr_slave_1 [ 398.850303] protocol 88fb is buggy, dev hsr_slave_0 [ 398.855431] protocol 88fb is buggy, dev hsr_slave_1 [ 400.930310] protocol 88fb is buggy, dev hsr_slave_0 [ 400.935396] protocol 88fb is buggy, dev hsr_slave_1 [ 403.010300] protocol 88fb is buggy, dev hsr_slave_0 [ 403.015453] protocol 88fb is buggy, dev hsr_slave_1 [ 405.090312] protocol 88fb is buggy, dev hsr_slave_0 [ 405.095458] protocol 88fb is buggy, dev hsr_slave_1 [ 407.170317] protocol 88fb is buggy, dev hsr_slave_0 [ 407.175512] protocol 88fb is buggy, dev hsr_slave_1 [ 409.250306] protocol 88fb is buggy, dev hsr_slave_0 [ 409.255439] protocol 88fb is buggy, dev hsr_slave_1 [ 411.330328] protocol 88fb is buggy, dev hsr_slave_0 [ 411.335450] protocol 88fb is buggy, dev hsr_slave_1 [ 413.410307] protocol 88fb is buggy, dev hsr_slave_0 [ 413.415447] protocol 88fb is buggy, dev hsr_slave_1 [ 414.770454] INFO: task syz-executor895:8515 blocked for more than 140 seconds. [ 414.778064] Not tainted 5.0.0-rc3+ #48 [ 414.784516] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.792906] syz-executor895 D19704 8515 8514 0x80000002 [ 414.798573] Call Trace: [ 414.808014] __schedule+0x897/0x1e60 [ 414.812155] ? pci_mmcfg_check_reserved+0x170/0x170 [ 414.817186] ? lock_downgrade+0x910/0x910 [ 414.822948] ? kasan_check_read+0x11/0x20 [ 414.827129] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 414.832897] ? __mutex_lock+0xa36/0x1670 [ 414.837008] ? find_held_lock+0x35/0x120 [ 414.842804] schedule+0xfe/0x350 [ 414.846188] ? __schedule+0x1e60/0x1e60 [ 414.850163] ? __mutex_add_waiter+0x1e3/0x290 [ 414.856097] ? do_raw_spin_trylock+0x270/0x270 [ 414.862188] ? mutex_destroy+0x200/0x200 [ 414.866280] schedule_preempt_disabled+0x13/0x20 [ 414.871481] __mutex_lock+0xa3b/0x1670 [ 414.875376] ? vhost_net_stop_vq+0x2d/0x120 [ 414.879710] ? mutex_trylock+0x2d0/0x2d0 [ 414.885553] ? lock_downgrade+0x910/0x910 [ 414.889723] ? lockdep_hardirqs_on+0x415/0x5d0 [ 414.894759] ? trace_hardirqs_on+0xbd/0x310 [ 414.899102] ? trace_hardirqs_off_caller+0x300/0x300 [ 414.905753] ? do_raw_spin_trylock+0x270/0x270 [ 414.910731] ? kasan_check_write+0x14/0x20 [ 414.914989] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 414.920106] ? wait_for_completion+0x810/0x810 [ 414.926253] ? locks_remove_file+0x3d5/0x5c0 [ 414.931039] ? handle_tx_kick+0x50/0x50 [ 414.935036] mutex_lock_nested+0x16/0x20 [ 414.939103] ? mutex_lock_nested+0x16/0x20 [ 414.944879] vhost_net_stop_vq+0x2d/0x120 [ 414.949047] vhost_net_release+0x5d/0x260 [ 414.953624] __fput+0x3c5/0xb10 [ 414.956923] ? handle_rx_kick+0x50/0x50 [ 414.962411] ? get_max_files+0x20/0x20 [ 414.966330] ? ___might_sleep+0x1e7/0x310 [ 414.970843] ? arch_local_save_flags+0x50/0x50 [ 414.975453] ____fput+0x16/0x20 [ 414.978753] task_work_run+0x1f4/0x2b0 [ 414.985342] ? task_work_cancel+0x2c0/0x2c0 [ 414.989713] ? switch_task_namespaces+0xb8/0xd0 [ 414.994831] do_exit+0xad7/0x26e0 [ 414.998308] ? mm_update_next_owner+0x970/0x970 [ 415.004713] ? add_lock_to_list.isra.0+0x450/0x450 [ 415.009666] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 415.014886] ? check_preemption_disabled+0x48/0x290 [ 415.019934] ? __do_page_fault+0x610/0xd60 [ 415.025655] ? find_held_lock+0x35/0x120 [ 415.029735] ? __do_page_fault+0x610/0xd60 [ 415.034376] ? lock_downgrade+0x910/0x910 [ 415.038549] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 415.045456] ? rcu_read_unlock_special+0x380/0x380 [ 415.050797] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 415.056367] ? check_preemption_disabled+0x48/0x290 [ 415.063038] ? kasan_check_write+0x14/0x20 [ 415.067330] ? up_read+0x212/0x2b0 [ 415.071317] ? up_read_non_owner+0x100/0x100 [ 415.075769] do_group_exit+0x177/0x430 [ 415.079661] ? trace_hardirqs_on+0xbd/0x310 [ 415.085757] ? __ia32_sys_exit+0x50/0x50 [ 415.089837] ? trace_hardirqs_off_caller+0x300/0x300 [ 415.095399] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 415.100189] __x64_sys_exit_group+0x44/0x50 [ 415.105882] do_syscall_64+0x1a3/0x800 [ 415.109775] ? syscall_return_slowpath+0x5f0/0x5f0 [ 415.116124] ? prepare_exit_to_usermode+0x232/0x3b0 [ 415.122616] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 415.127501] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 415.133253] RIP: 0033:0x4405d8 [ 415.136466] Code: 2a 2a 0a 00 00 00 00 00 00 00 53 77 69 74 63 68 69 6e 67 20 64 65 62 75 67 67 69 6e 67 5f 6f 6e 20 74 6f 20 74 72 75 65 20 61 <74> 20 25 32 2e 32 64 3a 25 32 2e 32 64 3a 25 32 2e 32 64 0a 00 00 [ 415.157054] RSP: 002b:00007ffe805fb1c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 415.165195] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000004405d8 [ 415.173882] RDX: 0000000000000001 RSI: 000000000000003c RDI: 0000000000000001 [ 415.181582] RBP: 00000000004c69f0 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 415.188865] R10: 0000000001bbbbbb R11: 0000000000000246 R12: 0000000000000001 [ 415.197985] R13: 00000000006d95e0 R14: 0000000000000000 R15: 0000000000000000 [ 415.205726] [ 415.205726] Showing all locks held in the system: [ 415.213564] 1 lock held by khungtaskd/1040: [ 415.217891] #0: 00000000ca4748c8 (rcu_read_lock){....}, at: debug_show_all_locks+0xc6/0x41d [ 415.226970] 1 lock held by rsyslogd/8365: [ 415.232442] #0: 000000004834a5e6 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1b3/0x1f0 [ 415.241649] 2 locks held by getty/8487: [ 415.245622] #0: 00000000f0da31e0 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 415.255279] #1: 0000000048e8e5df (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 [ 415.264533] 2 locks held by getty/8488: [ 415.268510] #0: 000000007e78e51c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 415.278436] #1: 0000000059399ca2 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 [ 415.287746] 2 locks held by getty/8489: [ 415.293299] #0: 00000000477a8ed2 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 415.301984] #1: 000000000d031a19 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 [ 415.312491] 2 locks held by getty/8490: [ 415.316473] #0: 0000000065c0fc71 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 415.325198] #1: 000000003bd85ad2 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 [ 415.335572] 2 locks held by getty/8491: [ 415.339552] #0: 000000004fae7936 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 415.348264] #1: 00000000510789d7 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 [ 415.358670] 2 locks held by getty/8492: [ 415.362985] #0: 0000000012274aab (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 415.373695] #1: 00000000baaf8640 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 [ 415.382959] 2 locks held by getty/8493: [ 415.386935] #0: 000000007002eb22 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 415.396822] #1: 00000000d9a26124 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 [ 415.406141] 1 lock held by syz-executor895/8515: [ 415.412442] #0: 00000000c11bbb81 (&vq->mutex){+.+.}, at: vhost_net_stop_vq+0x2d/0x120 [ 415.421037] 1 lock held by vhost-8515/8522: [ 415.425367] [ 415.426989] ============================================= [ 415.426989] [ 415.435554] NMI backtrace for cpu 1 [ 415.439199] CPU: 1 PID: 1040 Comm: khungtaskd Not tainted 5.0.0-rc3+ #48 [ 415.446034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.455402] Call Trace: [ 415.458007] dump_stack+0x1db/0x2d0 [ 415.461661] ? dump_stack_print_info.cold+0x20/0x20 [ 415.466688] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 415.472253] nmi_cpu_backtrace.cold+0x63/0xa4 [ 415.476760] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 415.481696] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 415.486984] arch_trigger_cpumask_backtrace+0x14/0x20 [ 415.492181] watchdog+0xbbb/0x1170 [ 415.495758] ? reset_hung_task_detector+0xd0/0xd0 [ 415.500634] ? lockdep_hardirqs_on+0x415/0x5d0 [ 415.505218] ? trace_hardirqs_on+0xbd/0x310 [ 415.509542] ? kasan_check_read+0x11/0x20 [ 415.513955] ? __kthread_parkme+0xc3/0x1b0 [ 415.518193] ? trace_hardirqs_off_caller+0x300/0x300 [ 415.523314] ? do_raw_spin_trylock+0x270/0x270 [ 415.527901] ? schedule+0x108/0x350 [ 415.531533] ? do_raw_spin_trylock+0x270/0x270 [ 415.536124] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 415.541230] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 415.546772] ? __kthread_parkme+0xfb/0x1b0 [ 415.551013] kthread+0x357/0x430 [ 415.554385] ? reset_hung_task_detector+0xd0/0xd0 [ 415.559235] ? kthread_stop+0x920/0x920 [ 415.563234] ret_from_fork+0x3a/0x50 [ 415.567226] protocol 88fb is buggy, dev hsr_slave_0 [ 415.572398] protocol 88fb is buggy, dev hsr_slave_1 [ 415.577580] Sending NMI from CPU 1 to CPUs 0: [ 415.582746] NMI backtrace for cpu 0 [ 415.582753] CPU: 0 PID: 8522 Comm: vhost-8515 Not tainted 5.0.0-rc3+ #48 [ 415.582760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.582765] RIP: 0010:write_comp_data+0x9/0x70 [ 415.582777] Code: 12 00 00 8b 80 dc 12 00 00 48 8b 11 48 83 c2 01 48 39 d0 76 07 48 89 34 d1 48 89 11 5d c3 0f 1f 00 65 4c 8b 04 25 40 ee 01 00 <65> 8b 05 20 ec 7f 7e a9 00 01 1f 00 75 51 41 8b 80 d8 12 00 00 83 [ 415.582782] RSP: 0018:ffff88809929fa40 EFLAGS: 00000293 [ 415.582791] RAX: ffff8880a802a580 RBX: ffff888098dbb100 RCX: ffffffff85e37c68 [ 415.582797] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 415.582803] RBP: ffff88809929fa48 R08: ffff8880a802a580 R09: ffffed101165c07f [ 415.582809] R10: ffff88809929fb18 R11: ffff88808b2e03f3 R12: 0000000000000000 [ 415.582815] R13: 0000000000000000 R14: ffffffffffffffff R15: dffffc0000000000 [ 415.582821] FS: 0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 415.582826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.582832] CR2: ffffffffff600400 CR3: 00000000a5fe2000 CR4: 00000000001406f0 [ 415.582837] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 415.582843] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 415.582847] Call Trace: [ 415.582851] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 415.582855] iotlb_access_ok+0x388/0x540 [ 415.582859] vq_iotlb_prefetch+0x114/0x230 [ 415.582863] handle_rx+0x251/0x1fa0 [ 415.582867] ? _raw_spin_unlock_irq+0x5e/0x90 [ 415.582872] ? finish_task_switch+0x1e9/0xac0 [ 415.582876] ? finish_task_switch+0x1a8/0xac0 [ 415.582880] ? __switch_to_asm+0x34/0x70 [ 415.582884] ? __switch_to_asm+0x40/0x70 [ 415.582888] ? __switch_to_asm+0x34/0x70 [ 415.582892] ? __switch_to_asm+0x40/0x70 [ 415.582897] ? preempt_notifier_register+0x200/0x200 [ 415.582901] ? __switch_to_asm+0x34/0x70 [ 415.582905] ? __switch_to_asm+0x40/0x70 [ 415.582909] ? __switch_to_asm+0x34/0x70 [ 415.582913] ? __switch_to_asm+0x34/0x70 [ 415.582917] ? __switch_to_asm+0x40/0x70 [ 415.582921] ? __switch_to_asm+0x40/0x70 [ 415.582925] ? __switch_to_asm+0x40/0x70 [ 415.582929] ? __schedule+0x89f/0x1e60 [ 415.582933] ? vhost_net_open+0x8e0/0x8e0 [ 415.582938] ? pci_mmcfg_check_reserved+0x170/0x170 [ 415.582941] ? complete+0x61/0x80 [ 415.582945] ? lock_acquire+0x1db/0x570 [ 415.582950] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 415.582954] ? lockdep_hardirqs_on+0x415/0x5d0 [ 415.582958] ? trace_hardirqs_on+0xbd/0x310 [ 415.582962] ? kasan_check_read+0x11/0x20 [ 415.582967] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 415.582971] handle_rx_net+0x19/0x20 [ 415.582975] vhost_worker+0x2a2/0x4a0 [ 415.582979] ? vhost_flush_work+0x20/0x20 [ 415.582984] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 415.582988] ? __kthread_parkme+0xfb/0x1b0 [ 415.582992] kthread+0x357/0x430 [ 415.582996] ? vhost_flush_work+0x20/0x20 [ 415.583000] ? kthread_stop+0x920/0x920 [ 415.583004] ret_from_fork+0x3a/0x50 [ 415.589377] Kernel panic - not syncing: hung_task: blocked tasks [ 415.873462] CPU: 1 PID: 1040 Comm: khungtaskd Not tainted 5.0.0-rc3+ #48 [ 415.880291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.889651] Call Trace: [ 415.892264] dump_stack+0x1db/0x2d0 [ 415.895897] ? dump_stack_print_info.cold+0x20/0x20 [ 415.900979] panic+0x2cb/0x65c [ 415.904196] ? add_taint.cold+0x16/0x16 [ 415.908171] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 415.913104] ? ___preempt_schedule+0x16/0x18 [ 415.917514] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 415.922986] ? nmi_trigger_cpumask_backtrace+0x1fa/0x236 [ 415.928442] ? nmi_trigger_cpumask_backtrace+0x204/0x236 [ 415.933898] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 415.939353] watchdog+0xbcc/0x1170 [ 415.942908] ? reset_hung_task_detector+0xd0/0xd0 [ 415.947751] ? lockdep_hardirqs_on+0x415/0x5d0 [ 415.952336] ? trace_hardirqs_on+0xbd/0x310 [ 415.956660] ? kasan_check_read+0x11/0x20 [ 415.960807] ? __kthread_parkme+0xc3/0x1b0 [ 415.965044] ? trace_hardirqs_off_caller+0x300/0x300 [ 415.970187] ? do_raw_spin_trylock+0x270/0x270 [ 415.974797] ? schedule+0x108/0x350 [ 415.978434] ? do_raw_spin_trylock+0x270/0x270 [ 415.983054] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 415.988153] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 415.993685] ? __kthread_parkme+0xfb/0x1b0 [ 415.997923] kthread+0x357/0x430 [ 416.001296] ? reset_hung_task_detector+0xd0/0xd0 [ 416.006132] ? kthread_stop+0x920/0x920 [ 416.010123] ret_from_fork+0x3a/0x50 [ 416.015091] Kernel Offset: disabled [ 416.018734] Rebooting in 86400 seconds..