[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 40.025362][ T27] audit: type=1800 audit(1557689992.472:25): pid=7827 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 40.046501][ T27] audit: type=1800 audit(1557689992.482:26): pid=7827 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 40.082504][ T27] audit: type=1800 audit(1557689992.482:27): pid=7827 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.162' (ECDSA) to the list of known hosts. 2019/05/12 19:40:27 parsed 1 programs 2019/05/12 19:40:30 executed programs: 0 syzkaller login: [ 77.789096][ T8002] IPVS: ftp: loaded support on port[0] = 21 [ 77.796401][ T8000] IPVS: ftp: loaded support on port[0] = 21 [ 77.811986][ T8004] IPVS: ftp: loaded support on port[0] = 21 [ 77.819748][ T8007] IPVS: ftp: loaded support on port[0] = 21 [ 77.847972][ T8006] IPVS: ftp: loaded support on port[0] = 21 [ 77.850976][ T7999] IPVS: ftp: loaded support on port[0] = 21 [ 78.121205][ T8002] chnl_net:caif_netlink_parms(): no params data found [ 78.239678][ T8007] chnl_net:caif_netlink_parms(): no params data found [ 78.295357][ T8000] chnl_net:caif_netlink_parms(): no params data found [ 78.321131][ T8004] chnl_net:caif_netlink_parms(): no params data found [ 78.360773][ T8002] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.368950][ T8002] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.377494][ T8002] device bridge_slave_0 entered promiscuous mode [ 78.416477][ T8002] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.424399][ T8002] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.432596][ T8002] device bridge_slave_1 entered promiscuous mode [ 78.453790][ T8007] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.460961][ T8007] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.468811][ T8007] device bridge_slave_0 entered promiscuous mode [ 78.476261][ T8006] chnl_net:caif_netlink_parms(): no params data found [ 78.485930][ T8007] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.493082][ T8007] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.501022][ T8007] device bridge_slave_1 entered promiscuous mode [ 78.565549][ T8002] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.594902][ T8000] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.602174][ T8000] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.610392][ T8000] device bridge_slave_0 entered promiscuous mode [ 78.633827][ T8002] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.648758][ T8004] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.655851][ T8004] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.664900][ T8004] device bridge_slave_0 entered promiscuous mode [ 78.674149][ T8007] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.683619][ T8000] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.690828][ T8000] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.698749][ T8000] device bridge_slave_1 entered promiscuous mode [ 78.730392][ T8004] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.739090][ T8004] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.747626][ T8004] device bridge_slave_1 entered promiscuous mode [ 78.756734][ T8007] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.770639][ T8002] team0: Port device team_slave_0 added [ 78.784047][ T8000] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.809709][ T7999] chnl_net:caif_netlink_parms(): no params data found [ 78.833949][ T8002] team0: Port device team_slave_1 added [ 78.846024][ T8000] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.868140][ T8004] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.888213][ T8006] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.895332][ T8006] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.911224][ T8006] device bridge_slave_0 entered promiscuous mode [ 78.935211][ T8004] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.947317][ T8007] team0: Port device team_slave_0 added [ 78.961694][ T8006] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.970822][ T8006] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.980278][ T8006] device bridge_slave_1 entered promiscuous mode [ 79.006898][ T8007] team0: Port device team_slave_1 added [ 79.026676][ T8000] team0: Port device team_slave_0 added [ 79.048517][ T8004] team0: Port device team_slave_0 added [ 79.099529][ T8002] device hsr_slave_0 entered promiscuous mode [ 79.136608][ T8002] device hsr_slave_1 entered promiscuous mode [ 79.179546][ T8006] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.189618][ T8000] team0: Port device team_slave_1 added [ 79.196926][ T8006] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.213440][ T8004] team0: Port device team_slave_1 added [ 79.278695][ T7999] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.285810][ T7999] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.293876][ T7999] device bridge_slave_0 entered promiscuous mode [ 79.369544][ T8007] device hsr_slave_0 entered promiscuous mode [ 79.406673][ T8007] device hsr_slave_1 entered promiscuous mode [ 79.470025][ T8006] team0: Port device team_slave_0 added [ 79.484798][ T8006] team0: Port device team_slave_1 added [ 79.491561][ T7999] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.499159][ T7999] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.507421][ T7999] device bridge_slave_1 entered promiscuous mode [ 79.568103][ T8000] device hsr_slave_0 entered promiscuous mode [ 79.616800][ T8000] device hsr_slave_1 entered promiscuous mode [ 79.719447][ T8004] device hsr_slave_0 entered promiscuous mode [ 79.776546][ T8004] device hsr_slave_1 entered promiscuous mode [ 79.844038][ T7999] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.919520][ T8006] device hsr_slave_0 entered promiscuous mode [ 79.956687][ T8006] device hsr_slave_1 entered promiscuous mode [ 80.006849][ T7999] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 80.051760][ T7999] team0: Port device team_slave_0 added [ 80.067640][ T7999] team0: Port device team_slave_1 added [ 80.127281][ T8002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.189737][ T7999] device hsr_slave_0 entered promiscuous mode [ 80.246834][ T7999] device hsr_slave_1 entered promiscuous mode [ 80.293543][ T8002] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.325847][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.334836][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.366059][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.375688][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.384815][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.392096][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.400070][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.409354][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.418024][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.425784][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.469320][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.480501][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.489387][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.499126][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.509108][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.519881][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.565336][ T8007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.583431][ T8000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.593763][ T8006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.609756][ T8007] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.629067][ T8004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.635911][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.645285][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.654032][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.662139][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.670088][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.678837][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.688656][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.697852][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.720930][ T8000] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.744363][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.752577][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.761204][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.769115][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.777018][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.785547][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.794225][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.801336][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.809053][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.818047][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.826545][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.833621][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.841305][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.849666][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.857609][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.866623][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.877765][ T8006] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.888380][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.898524][ T8004] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.916248][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.924909][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.933843][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.941056][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.949510][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.958238][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.966975][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.974060][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.981833][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.991020][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.000311][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.029882][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.038738][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.048220][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.057334][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.065917][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.075445][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.082602][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.090244][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.099062][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.107530][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.114571][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.122496][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.131041][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.139628][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.147681][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.159848][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.184016][ T8007] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.196350][ T8007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.220604][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.231896][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.240856][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.249704][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.258461][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.267002][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.275192][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.283663][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.292026][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.300554][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.308841][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.318341][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.327032][ T8015] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.334072][ T8015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.344820][ T8000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.356897][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.367827][ T8002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.406876][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.415110][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.423788][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.432137][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.440918][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.449345][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.458229][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.467217][ T8015] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.474288][ T8015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.482023][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.491238][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.499930][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.508885][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.517990][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.526882][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.535409][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.545490][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.553757][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.565229][ T7999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.578580][ T8007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.595777][ T8000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.636304][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.645137][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.662660][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.671286][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.679834][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.698405][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.707176][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.714878][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.732667][ T8004] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.744066][ T8004] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.759772][ T7999] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.780845][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.818224][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.827949][ T8031] BUG: assuming atomic context at net/core/flow_dissector.c:737 [ 81.829392][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.845141][ T8031] in_atomic(): 0, irqs_disabled(): 0, pid: 8031, name: syz-executor.4 [ 81.853777][ T8031] 2 locks held by syz-executor.4/8031: [ 81.855681][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.867532][ T8031] #0: 0000000074a3b4bc (&tfile->napi_mutex){+.+.}, at: tun_get_user+0x168e/0x3ff0 [ 81.868765][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.877685][ T8031] #1: 00000000fe42106b (rcu_read_lock){....}, at: __skb_flow_dissect+0x1e1/0x4bb0 [ 81.891167][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.894752][ T8031] CPU: 0 PID: 8031 Comm: syz-executor.4 Not tainted 5.1.0+ #5 [ 81.903749][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.909310][ T8031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.909317][ T8031] Call Trace: [ 81.909341][ T8031] dump_stack+0x172/0x1f0 [ 81.909362][ T8031] __cant_sleep.cold+0xa3/0xbb [ 81.909375][ T8031] ? memset+0x32/0x40 [ 81.909398][ T8031] bpf_flow_dissect+0xfe/0x390 [ 81.919056][ T8006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.926609][ T8031] __skb_flow_dissect+0x362/0x4bb0 [ 81.926628][ T8031] ? add_lock_to_list.isra.0+0x18f/0x320 [ 81.926648][ T8031] ? kmem_cache_alloc_node_trace+0x650/0x720 [ 81.926664][ T8031] ? bpf_flow_dissect+0x390/0x390 [ 81.926690][ T8031] ? mark_held_locks+0xf0/0xf0 [ 81.981317][ T8031] ? __might_fault+0x12b/0x1e0 [ 81.986077][ T8031] ? find_held_lock+0x35/0x130 [ 81.990847][ T8031] ? __might_fault+0x12b/0x1e0 [ 81.995630][ T8031] ? ___might_sleep+0x163/0x280 [ 82.000489][ T8031] ? kasan_check_write+0x14/0x20 [ 82.005424][ T8031] ? copyin+0xb5/0x100 [ 82.009487][ T8031] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 82.015211][ T8031] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.021448][ T8031] ? skb_copy_datagram_from_iter+0x435/0x660 [ 82.027426][ T8031] tun_get_user+0x2cfe/0x3ff0 [ 82.032104][ T8031] ? tun_get_user+0x2cfe/0x3ff0 [ 82.036981][ T8031] ? tun_device_event+0xee0/0xee0 [ 82.041998][ T8031] ? tun_get+0x171/0x290 [ 82.046257][ T8031] ? lock_downgrade+0x880/0x880 [ 82.051106][ T8031] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.057349][ T8031] ? kasan_check_read+0x11/0x20 [ 82.062213][ T8031] tun_chr_write_iter+0xbd/0x156 [ 82.067163][ T8031] do_iter_readv_writev+0x5fd/0x900 [ 82.072360][ T8031] ? no_seek_end_llseek_size+0x70/0x70 [ 82.077841][ T8031] ? apparmor_file_permission+0x25/0x30 [ 82.083402][ T8031] ? rw_verify_area+0x126/0x360 [ 82.088255][ T8031] do_iter_write+0x184/0x610 [ 82.092841][ T8031] ? dup_iter+0x260/0x260 [ 82.097170][ T8031] vfs_writev+0x1b3/0x2f0 [ 82.101581][ T8031] ? vfs_iter_write+0xb0/0xb0 [ 82.106256][ T8031] ? kasan_check_read+0x11/0x20 [ 82.111104][ T8031] ? ksys_dup3+0x3e0/0x3e0 [ 82.115512][ T8031] ? kasan_check_read+0x11/0x20 [ 82.120449][ T8031] ? __fget_light+0x1a9/0x230 [ 82.125211][ T8031] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.131449][ T8031] do_writev+0x15b/0x330 [ 82.135684][ T8031] ? vfs_writev+0x2f0/0x2f0 [ 82.140182][ T8031] ? do_syscall_64+0x26/0x670 [ 82.144861][ T8031] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 82.150919][ T8031] ? do_syscall_64+0x26/0x670 [ 82.155600][ T8031] __x64_sys_writev+0x75/0xb0 [ 82.160355][ T8031] do_syscall_64+0x103/0x670 [ 82.164943][ T8031] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 82.170819][ T8031] RIP: 0033:0x458c61 [ 82.174702][ T8031] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b9 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 82.194300][ T8031] RSP: 002b:00007fb88fa77ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 82.202702][ T8031] RAX: ffffffffffffffda RBX: 000000002000002a RCX: 0000000000458c61 [ 82.210664][ T8031] RDX: 0000000000000002 RSI: 00007fb88fa77c00 RDI: 00000000000000f0 [ 82.218624][ T8031] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 82.226583][ T8031] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fb88fa786d4 [ 82.234553][ T8031] R13: 00000000004c77d2 R14: 00000000004dd9d0 R15: 00000000ffffffff [ 82.323925][ T8004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.362869][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.389249][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.444420][ T8010] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.451577][ T8010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.525832][ T8006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.608806][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.635086][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.662024][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.671019][ T8010] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.678167][ T8010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.686800][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.695396][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.704160][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.712708][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.721407][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.730022][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.738700][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.747331][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.760490][ T7999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.772625][ T7999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.780990][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.789454][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.798468][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.821776][ T7999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.863382][ T8082] BUG: assuming atomic context at net/core/flow_dissector.c:737 [ 82.882537][ T8082] in_atomic(): 0, irqs_disabled(): 0, pid: 8082, name: syz-executor.2 [ 82.926152][ T8082] 2 locks held by syz-executor.2/8082: [ 82.931837][ T8082] #0: 00000000addd9dbe (&tfile->napi_mutex){+.+.}, at: tun_get_user+0x168e/0x3ff0 [ 82.955645][ T8082] #1: 00000000fe42106b (rcu_read_lock){....}, at: __skb_flow_dissect+0x1e1/0x4bb0 [ 82.969853][ T8082] CPU: 0 PID: 8082 Comm: syz-executor.2 Tainted: G W 5.1.0+ #5 [ 82.978996][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.989066][ T8082] Call Trace: [ 82.992378][ T8082] dump_stack+0x172/0x1f0 [ 82.996734][ T8082] __cant_sleep.cold+0xa3/0xbb [ 83.001527][ T8082] ? memset+0x32/0x40 [ 83.005628][ T8082] bpf_flow_dissect+0xfe/0x390 [ 83.010430][ T8082] __skb_flow_dissect+0x362/0x4bb0 [ 83.015576][ T8082] ? bpf_flow_dissect+0x390/0x390 [ 83.020645][ T8082] ? tun_chr_write_iter+0xbd/0x156 [ 83.025781][ T8082] ? do_iter_readv_writev+0x5fd/0x900 [ 83.031159][ T8082] ? do_iter_write+0x184/0x610 [ 83.035929][ T8082] ? vfs_writev+0x1b3/0x2f0 [ 83.040443][ T8082] ? do_writev+0x15b/0x330 [ 83.044872][ T8082] ? do_writev+0x1d0/0x330 [ 83.049353][ T8082] ? mark_held_locks+0xf0/0xf0 [ 83.054148][ T8082] ? __might_fault+0x12b/0x1e0 [ 83.058926][ T8082] ? find_held_lock+0x35/0x130 [ 83.063710][ T8082] ? __might_fault+0x12b/0x1e0 [ 83.068507][ T8082] ? ___might_sleep+0x163/0x280 [ 83.073373][ T8082] ? kasan_check_write+0x14/0x20 [ 83.078317][ T8082] ? copyin+0xb5/0x100 [ 83.082406][ T8082] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 83.088153][ T8082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 83.094515][ T8082] ? skb_copy_datagram_from_iter+0x435/0x660 [ 83.100534][ T8082] tun_get_user+0x2cfe/0x3ff0 [ 83.105232][ T8082] ? tun_get_user+0x2cfe/0x3ff0 [ 83.110120][ T8082] ? tun_device_event+0xee0/0xee0 [ 83.115179][ T8082] ? tun_get+0x171/0x290 [ 83.119439][ T8082] ? lock_downgrade+0x880/0x880 [ 83.124302][ T8082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 83.130557][ T8082] ? kasan_check_read+0x11/0x20 [ 83.135436][ T8082] tun_chr_write_iter+0xbd/0x156 [ 83.140396][ T8082] do_iter_readv_writev+0x5fd/0x900 [ 83.145621][ T8082] ? no_seek_end_llseek_size+0x70/0x70 [ 83.151094][ T8082] ? apparmor_file_permission+0x25/0x30 [ 83.156675][ T8082] ? rw_verify_area+0x126/0x360 [ 83.161538][ T8082] do_iter_write+0x184/0x610 [ 83.166126][ T8082] ? dup_iter+0x260/0x260 [ 83.170485][ T8082] vfs_writev+0x1b3/0x2f0 [ 83.174827][ T8082] ? vfs_iter_write+0xb0/0xb0 [ 83.179505][ T8082] ? kasan_check_read+0x11/0x20 [ 83.184376][ T8082] ? ksys_dup3+0x3e0/0x3e0 [ 83.188795][ T8082] ? kasan_check_read+0x11/0x20 [ 83.193661][ T8082] ? __fget_light+0x1a9/0x230 [ 83.198344][ T8082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 83.204607][ T8082] do_writev+0x15b/0x330 [ 83.208860][ T8082] ? vfs_writev+0x2f0/0x2f0 [ 83.213376][ T8082] ? do_syscall_64+0x26/0x670 [ 83.218061][ T8082] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 83.224139][ T8082] ? do_syscall_64+0x26/0x670 [ 83.228835][ T8082] __x64_sys_writev+0x75/0xb0 [ 83.233517][ T8082] do_syscall_64+0x103/0x670 [ 83.238136][ T8082] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 83.244035][ T8082] RIP: 0033:0x458c61 [ 83.247938][ T8082] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b9 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 83.267565][ T8082] RSP: 002b:00007f1408c14ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 2019/05/12 19:40:35 executed programs: 16 [ 83.276001][ T8082] RAX: ffffffffffffffda RBX: 000000002000002a RCX: 0000000000458c61 [ 83.283984][ T8082] RDX: 0000000000000002 RSI: 00007f1408c14c00 RDI: 00000000000000f0 [ 83.291971][ T8082] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 83.299961][ T8082] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f1408c156d4 [ 83.307948][ T8082] R13: 00000000004c77d2 R14: 00000000004dd9d0 R15: 00000000ffffffff [ 83.878012][ T8199] BUG: assuming atomic context at net/core/flow_dissector.c:737 [ 83.910114][ T8199] in_atomic(): 0, irqs_disabled(): 0, pid: 8199, name: syz-executor.2 [ 83.975500][ T8199] 2 locks held by syz-executor.2/8199: [ 83.993820][ T8199] #0: 00000000addd9dbe (&tfile->napi_mutex){+.+.}, at: tun_get_user+0x168e/0x3ff0 [ 84.153017][ T8199] #1: 00000000fe42106b (rcu_read_lock){....}, at: __skb_flow_dissect+0x1e1/0x4bb0 [ 84.163095][ T8199] CPU: 1 PID: 8199 Comm: syz-executor.2 Tainted: G W 5.1.0+ #5 [ 84.171960][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.182028][ T8199] Call Trace: [ 84.185348][ T8199] dump_stack+0x172/0x1f0 [ 84.189701][ T8199] __cant_sleep.cold+0xa3/0xbb [ 84.194484][ T8199] ? memset+0x32/0x40 [ 84.198511][ T8199] bpf_flow_dissect+0xfe/0x390 [ 84.203360][ T8199] __skb_flow_dissect+0x362/0x4bb0 [ 84.208482][ T8199] ? bpf_flow_dissect+0x390/0x390 [ 84.213582][ T8199] ? tun_chr_write_iter+0xbd/0x156 [ 84.218690][ T8199] ? do_iter_readv_writev+0x5fd/0x900 [ 84.224063][ T8199] ? do_iter_write+0x184/0x610 [ 84.228814][ T8199] ? vfs_writev+0x1b3/0x2f0 [ 84.233303][ T8199] ? do_writev+0x15b/0x330 [ 84.237703][ T8199] ? do_writev+0x1d0/0x330 [ 84.242110][ T8199] ? mark_held_locks+0xf0/0xf0 [ 84.246866][ T8199] ? __might_fault+0x12b/0x1e0 [ 84.251707][ T8199] ? find_held_lock+0x35/0x130 [ 84.256466][ T8199] ? __might_fault+0x12b/0x1e0 [ 84.261228][ T8199] ? ___might_sleep+0x163/0x280 [ 84.266070][ T8199] ? kasan_check_write+0x14/0x20 [ 84.271008][ T8199] ? copyin+0xb5/0x100 [ 84.275069][ T8199] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 84.280780][ T8199] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 84.287013][ T8199] ? skb_copy_datagram_from_iter+0x435/0x660 [ 84.293010][ T8199] tun_get_user+0x2cfe/0x3ff0 [ 84.297695][ T8199] ? tun_get_user+0x2cfe/0x3ff0 [ 84.302569][ T8199] ? tun_device_event+0xee0/0xee0 [ 84.307617][ T8199] ? tun_get+0x171/0x290 [ 84.311887][ T8199] ? lock_downgrade+0x880/0x880 [ 84.316727][ T8199] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 84.322963][ T8199] ? kasan_check_read+0x11/0x20 [ 84.328099][ T8199] tun_chr_write_iter+0xbd/0x156 [ 84.333039][ T8199] do_iter_readv_writev+0x5fd/0x900 [ 84.338231][ T8199] ? no_seek_end_llseek_size+0x70/0x70 [ 84.349662][ T8199] ? apparmor_file_permission+0x25/0x30 [ 84.355834][ T8199] ? rw_verify_area+0x126/0x360 [ 84.360680][ T8199] do_iter_write+0x184/0x610 [ 84.365258][ T8199] ? dup_iter+0x260/0x260 [ 84.369591][ T8199] vfs_writev+0x1b3/0x2f0 [ 84.373914][ T8199] ? vfs_iter_write+0xb0/0xb0 [ 84.378579][ T8199] ? kasan_check_read+0x11/0x20 [ 84.383460][ T8199] ? ksys_dup3+0x3e0/0x3e0 [ 84.387886][ T8199] ? kasan_check_read+0x11/0x20 [ 84.392748][ T8199] ? __fget_light+0x1a9/0x230 [ 84.397414][ T8199] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 84.403663][ T8199] do_writev+0x15b/0x330 [ 84.407908][ T8199] ? vfs_writev+0x2f0/0x2f0 [ 84.412412][ T8199] ? do_syscall_64+0x26/0x670 [ 84.417094][ T8199] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 84.423180][ T8199] ? do_syscall_64+0x26/0x670 [ 84.427867][ T8199] __x64_sys_writev+0x75/0xb0 [ 84.433044][ T8199] do_syscall_64+0x103/0x670 [ 84.437668][ T8199] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 84.443600][ T8199] RIP: 0033:0x458c61 [ 84.447491][ T8199] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b9 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 84.467101][ T8199] RSP: 002b:00007f1408c14ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 84.475532][ T8199] RAX: ffffffffffffffda RBX: 000000002000002a RCX: 0000000000458c61 [ 84.483528][ T8199] RDX: 0000000000000002 RSI: 00007f1408c14c00 RDI: 00000000000000f0 [ 84.491511][ T8199] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 84.499475][ T8199] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f1408c156d4 [ 84.507448][ T8199] R13: 00000000004c77d2 R14: 00000000004dd9d0 R15: 00000000ffffffff [ 84.893206][ T8321] BUG: assuming atomic context at net/core/flow_dissector.c:737 [ 84.944527][ T8321] in_atomic(): 0, irqs_disabled(): 0, pid: 8321, name: syz-executor.4 [ 84.953367][ T8321] 2 locks held by syz-executor.4/8321: [ 84.965557][ T8321] #0: 0000000074a3b4bc (&tfile->napi_mutex){+.+.}, at: tun_get_user+0x168e/0x3ff0 [ 84.994422][ T8321] #1: 00000000fe42106b (rcu_read_lock){....}, at: __skb_flow_dissect+0x1e1/0x4bb0 [ 85.055296][ T8321] CPU: 0 PID: 8321 Comm: syz-executor.4 Tainted: G W 5.1.0+ #5 [ 85.064196][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.074264][ T8321] Call Trace: [ 85.077576][ T8321] dump_stack+0x172/0x1f0 [ 85.081958][ T8321] __cant_sleep.cold+0xa3/0xbb [ 85.086731][ T8321] ? memset+0x32/0x40 [ 85.090728][ T8321] bpf_flow_dissect+0xfe/0x390 [ 85.095505][ T8321] __skb_flow_dissect+0x362/0x4bb0 [ 85.100651][ T8321] ? bpf_flow_dissect+0x390/0x390 [ 85.105684][ T8321] ? tun_chr_write_iter+0xbd/0x156 [ 85.110797][ T8321] ? do_iter_readv_writev+0x5fd/0x900 [ 85.116167][ T8321] ? do_iter_write+0x184/0x610 [ 85.120939][ T8321] ? vfs_writev+0x1b3/0x2f0 [ 85.125441][ T8321] ? do_writev+0x15b/0x330 [ 85.129863][ T8321] ? do_writev+0x1d0/0x330 [ 85.134296][ T8321] ? mark_held_locks+0xf0/0xf0 [ 85.139063][ T8321] ? __update_load_avg_se+0x575/0x9e0 [ 85.144446][ T8321] ? __might_fault+0x12b/0x1e0 [ 85.149221][ T8321] ? find_held_lock+0x35/0x130 [ 85.154003][ T8321] ? __might_fault+0x12b/0x1e0 [ 85.158791][ T8321] ? ___might_sleep+0x163/0x280 [ 85.163657][ T8321] ? kasan_check_write+0x14/0x20 [ 85.168606][ T8321] ? copyin+0xb5/0x100 [ 85.172693][ T8321] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 85.178439][ T8321] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 85.184712][ T8321] ? skb_copy_datagram_from_iter+0x435/0x660 [ 85.190712][ T8321] tun_get_user+0x2cfe/0x3ff0 [ 85.195387][ T8321] ? tun_get_user+0x2cfe/0x3ff0 [ 85.200273][ T8321] ? tun_device_event+0xee0/0xee0 [ 85.205322][ T8321] ? tun_get+0x171/0x290 [ 85.209594][ T8321] ? lock_downgrade+0x880/0x880 [ 85.214459][ T8321] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 85.224652][ T8321] ? kasan_check_read+0x11/0x20 [ 85.229541][ T8321] tun_chr_write_iter+0xbd/0x156 [ 85.234513][ T8321] do_iter_readv_writev+0x5fd/0x900 [ 85.239748][ T8321] ? no_seek_end_llseek_size+0x70/0x70 [ 85.245236][ T8321] ? apparmor_file_permission+0x25/0x30 [ 85.250817][ T8321] ? rw_verify_area+0x126/0x360 [ 85.255702][ T8321] do_iter_write+0x184/0x610 [ 85.260320][ T8321] ? dup_iter+0x260/0x260 [ 85.264682][ T8321] vfs_writev+0x1b3/0x2f0 [ 85.269037][ T8321] ? vfs_iter_write+0xb0/0xb0 [ 85.273731][ T8321] ? kasan_check_read+0x11/0x20 [ 85.278621][ T8321] ? ksys_dup3+0x3e0/0x3e0 [ 85.283062][ T8321] ? kasan_check_read+0x11/0x20 [ 85.287939][ T8321] ? __fget_light+0x1a9/0x230 [ 85.292638][ T8321] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 85.298900][ T8321] do_writev+0x15b/0x330 [ 85.303173][ T8321] ? vfs_writev+0x2f0/0x2f0 [ 85.307693][ T8321] ? do_syscall_64+0x26/0x670 [ 85.312387][ T8321] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 85.319720][ T8321] ? do_syscall_64+0x26/0x670 [ 85.324424][ T8321] __x64_sys_writev+0x75/0xb0 [ 85.329125][ T8321] do_syscall_64+0x103/0x670 [ 85.333730][ T8321] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 85.339640][ T8321] RIP: 0033:0x458c61 [ 85.343548][ T8321] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b9 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 85.363257][ T8321] RSP: 002b:00007fb88fa77ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 85.371680][ T8321] RAX: ffffffffffffffda RBX: 000000002000002a RCX: 0000000000458c61 [ 85.379659][ T8321] RDX: 0000000000000002 RSI: 00007fb88fa77c00 RDI: 00000000000000f0 [ 85.387638][ T8321] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 85.395630][ T8321] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fb88fa786d4 [ 85.403624][ T8321] R13: 00000000004c77d2 R14: 00000000004dd9d0 R15: 00000000ffffffff [ 85.900799][ T8454] BUG: assuming atomic context at net/core/flow_dissector.c:737 [ 85.956247][ T8454] in_atomic(): 0, irqs_disabled(): 0, pid: 8454, name: syz-executor.3 [ 86.053535][ T8454] 2 locks held by syz-executor.3/8454: [ 86.093302][ T8454] #0: 000000004d978f13 (&tfile->napi_mutex){+.+.}, at: tun_get_user+0x168e/0x3ff0 [ 86.108603][ T8454] #1: 00000000fe42106b (rcu_read_lock){....}, at: __skb_flow_dissect+0x1e1/0x4bb0 [ 86.133755][ T8454] CPU: 0 PID: 8454 Comm: syz-executor.3 Tainted: G W 5.1.0+ #5 [ 86.142653][ T8454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.152726][ T8454] Call Trace: [ 86.156045][ T8454] dump_stack+0x172/0x1f0 [ 86.160393][ T8454] __cant_sleep.cold+0xa3/0xbb [ 86.165165][ T8454] ? memset+0x32/0x40 [ 86.169159][ T8454] bpf_flow_dissect+0xfe/0x390 [ 86.173948][ T8454] __skb_flow_dissect+0x362/0x4bb0 [ 86.179085][ T8454] ? bpf_flow_dissect+0x390/0x390 [ 86.184110][ T8454] ? tun_chr_write_iter+0xbd/0x156 [ 86.189229][ T8454] ? do_iter_readv_writev+0x5fd/0x900 [ 86.194627][ T8454] ? do_iter_write+0x184/0x610 [ 86.199412][ T8454] ? vfs_writev+0x1b3/0x2f0 [ 86.203925][ T8454] ? do_writev+0x15b/0x330 [ 86.208450][ T8454] ? do_writev+0x1d0/0x330 [ 86.212894][ T8454] ? mark_held_locks+0xf0/0xf0 [ 86.217697][ T8454] ? __might_fault+0x12b/0x1e0 [ 86.222479][ T8454] ? find_held_lock+0x35/0x130 [ 86.227288][ T8454] ? __might_fault+0x12b/0x1e0 [ 86.232067][ T8454] ? ___might_sleep+0x163/0x280 [ 86.236921][ T8454] ? kasan_check_write+0x14/0x20 [ 86.241869][ T8454] ? copyin+0xb5/0x100 [ 86.245947][ T8454] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 86.251687][ T8454] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.257942][ T8454] ? skb_copy_datagram_from_iter+0x435/0x660 [ 86.263941][ T8454] tun_get_user+0x2cfe/0x3ff0 [ 86.268636][ T8454] ? tun_get_user+0x2cfe/0x3ff0 [ 86.273509][ T8454] ? tun_device_event+0xee0/0xee0 [ 86.278535][ T8454] ? tun_get+0x171/0x290 [ 86.282790][ T8454] ? lock_downgrade+0x880/0x880 [ 86.287647][ T8454] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.293909][ T8454] ? kasan_check_read+0x11/0x20 [ 86.298780][ T8454] tun_chr_write_iter+0xbd/0x156 [ 86.303732][ T8454] do_iter_readv_writev+0x5fd/0x900 [ 86.308954][ T8454] ? no_seek_end_llseek_size+0x70/0x70 [ 86.314425][ T8454] ? apparmor_file_permission+0x25/0x30 [ 86.320101][ T8454] ? rw_verify_area+0x126/0x360 [ 86.324970][ T8454] do_iter_write+0x184/0x610 [ 86.329660][ T8454] ? dup_iter+0x260/0x260 [ 86.334014][ T8454] vfs_writev+0x1b3/0x2f0 [ 86.338355][ T8454] ? vfs_iter_write+0xb0/0xb0 [ 86.343033][ T8454] ? kasan_check_read+0x11/0x20 [ 86.347938][ T8454] ? ksys_dup3+0x3e0/0x3e0 [ 86.352369][ T8454] ? kasan_check_read+0x11/0x20 [ 86.357232][ T8454] ? __fget_light+0x1a9/0x230 [ 86.361915][ T8454] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.368172][ T8454] do_writev+0x15b/0x330 [ 86.372447][ T8454] ? vfs_writev+0x2f0/0x2f0 [ 86.376969][ T8454] ? do_syscall_64+0x26/0x670 [ 86.381655][ T8454] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 86.387749][ T8454] ? do_syscall_64+0x26/0x670 [ 86.392458][ T8454] __x64_sys_writev+0x75/0xb0 [ 86.397418][ T8454] do_syscall_64+0x103/0x670 [ 86.402023][ T8454] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 86.407924][ T8454] RIP: 0033:0x458c61 [ 86.411840][ T8454] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b9 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 86.432094][ T8454] RSP: 002b:00007f3dfdd93ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 86.440530][ T8454] RAX: ffffffffffffffda RBX: 000000002000002a RCX: 0000000000458c61 [ 86.448512][ T8454] RDX: 0000000000000002 RSI: 00007f3dfdd93c00 RDI: 00000000000000f0 [ 86.456494][ T8454] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 86.464482][ T8454] R10: ffffffffffffffff R11: 0000000000000293 R12: 00007f3dfdd946d4 [ 86.472551][ T8454] R13: 00000000004c77d2 R14: 00000000004dd9d0 R15: 00000000ffffffff [ 86.896274][ T8575] BUG: assuming atomic context at net/core/flow_dissector.c:737 [ 86.936349][ T8575] in_atomic(): 0, irqs_disabled(): 0, pid: 8575, name: syz-executor.2 [ 86.996243][ T8575] 2 locks held by syz-executor.2/8575: [ 87.039858][ T8575] #0: 00000000addd9dbe (&tfile->napi_mutex){+.+.}, at: tun_get_user+0x168e/0x3ff0 [ 87.112580][ T8575] #1: 00000000fe42106b (rcu_read_lock){....}, at: __skb_flow_dissect+0x1e1/0x4bb0 [ 87.129385][ T8575] CPU: 1 PID: 8575 Comm: syz-executor.2 Tainted: G W 5.1.0+ #5 [ 87.138282][ T8575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.148349][ T8575] Call Trace: [ 87.151648][ T8575] dump_stack+0x172/0x1f0 [ 87.155990][ T8575] __cant_sleep.cold+0xa3/0xbb [ 87.160762][ T8575] ? memset+0x32/0x40 [ 87.164739][ T8575] bpf_flow_dissect+0xfe/0x390 [ 87.169528][ T8575] __skb_flow_dissect+0x362/0x4bb0 [ 87.174647][ T8575] ? mark_held_locks+0xf0/0xf0 [ 87.179423][ T8575] ? bpf_flow_dissect+0x390/0x390 [ 87.184463][ T8575] ? finish_task_switch+0x146/0x740 [ 87.189689][ T8575] ? mark_held_locks+0xf0/0xf0 [ 87.194454][ T8575] ? lockdep_hardirqs_on+0x418/0x5d0 [ 87.199742][ T8575] ? trace_hardirqs_on+0x67/0x230 [ 87.204775][ T8575] ? __might_fault+0x12b/0x1e0 [ 87.209555][ T8575] ? find_held_lock+0x35/0x130 [ 87.214339][ T8575] ? __might_fault+0x12b/0x1e0 [ 87.219123][ T8575] ? ___might_sleep+0x163/0x280 [ 87.223990][ T8575] ? kasan_check_write+0x14/0x20 [ 87.228916][ T8575] ? copyin+0xb5/0x100 [ 87.233010][ T8575] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 87.238763][ T8575] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 87.245012][ T8575] ? skb_copy_datagram_from_iter+0x435/0x660 [ 87.250991][ T8575] tun_get_user+0x2cfe/0x3ff0 [ 87.255664][ T8575] ? tun_get_user+0x2cfe/0x3ff0 [ 87.260555][ T8575] ? tun_device_event+0xee0/0xee0 [ 87.265578][ T8575] ? tun_get+0x171/0x290 [ 87.269848][ T8575] ? lock_downgrade+0x880/0x880 [ 87.274815][ T8575] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 87.281052][ T8575] ? kasan_check_read+0x11/0x20 [ 87.285908][ T8575] tun_chr_write_iter+0xbd/0x156 [ 87.290843][ T8575] do_iter_readv_writev+0x5fd/0x900 [ 87.296040][ T8575] ? no_seek_end_llseek_size+0x70/0x70 [ 87.301640][ T8575] ? apparmor_file_permission+0x25/0x30 [ 87.307206][ T8575] ? rw_verify_area+0x126/0x360 [ 87.312074][ T8575] do_iter_write+0x184/0x610 [ 87.317343][ T8575] ? dup_iter+0x260/0x260 [ 87.321680][ T8575] vfs_writev+0x1b3/0x2f0 [ 87.326018][ T8575] ? vfs_iter_write+0xb0/0xb0 [ 87.330699][ T8575] ? kasan_check_read+0x11/0x20 [ 87.335576][ T8575] ? ksys_dup3+0x3e0/0x3e0 [ 87.339998][ T8575] ? kasan_check_read+0x11/0x20 [ 87.344844][ T8575] ? __fget_light+0x1a9/0x230 [ 87.349525][ T8575] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 87.355791][ T8575] do_writev+0x15b/0x330 [ 87.360042][ T8575] ? vfs_writev+0x2f0/0x2f0 [ 87.364574][ T8575] ? do_syscall_64+0x26/0x670 [ 87.369247][ T8575] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 87.375329][ T8575] ? do_syscall_64+0x26/0x670 [ 87.380018][ T8575] __x64_sys_writev+0x75/0xb0 [ 87.384694][ T8575] do_syscall_64+0x103/0x670 [ 87.389279][ T8575] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 87.395164][ T8575] RIP: 0033:0x458c61 [ 87.399057][ T8575] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b9 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 87.418679][ T8575] RSP: 002b:00007f1408c14ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 87.427107][ T8575] RAX: ffffffffffffffda RBX: 000000002000002a RCX: 0000000000458c61 [ 87.435088][ T8575] RDX: 0000000000000002 RSI: 00007f1408c14c00 RDI: 00000000000000f0 [ 87.443088][ T8575] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 87.451059][ T8575] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f1408c156d4 [ 87.459038][ T8575] R13: 00000000004c77d2 R14: 00000000004dd9d0 R15: 00000000ffffffff [ 87.909155][ T8707] BUG: assuming atomic context at net/core/flow_dissector.c:737 [ 87.936258][ T8707] in_atomic(): 0, irqs_disabled(): 0, pid: 8707, name: syz-executor.2 [ 87.984192][ T8707] 2 locks held by syz-executor.2/8707: [ 88.020619][ T8707] #0: 00000000addd9dbe (&tfile->napi_mutex){+.+.}, at: tun_get_user+0x168e/0x3ff0 [ 88.040569][ T8707] #1: 00000000fe42106b (rcu_read_lock){....}, at: __skb_flow_dissect+0x1e1/0x4bb0 [ 88.054099][ T8707] CPU: 0 PID: 8707 Comm: syz-executor.2 Tainted: G W 5.1.0+ #5 [ 88.063074][ T8707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.073231][ T8707] Call Trace: [ 88.076535][ T8707] dump_stack+0x172/0x1f0 [ 88.080881][ T8707] __cant_sleep.cold+0xa3/0xbb [ 88.085656][ T8707] ? memset+0x32/0x40 [ 88.089744][ T8707] bpf_flow_dissect+0xfe/0x390 [ 88.094528][ T8707] __skb_flow_dissect+0x362/0x4bb0 [ 88.099672][ T8707] ? bpf_flow_dissect+0x390/0x390 [ 88.104718][ T8707] ? tun_chr_write_iter+0xbd/0x156 [ 88.109881][ T8707] ? do_iter_readv_writev+0x5fd/0x900 [ 88.115268][ T8707] ? do_iter_write+0x184/0x610 [ 88.120047][ T8707] ? vfs_writev+0x1b3/0x2f0 [ 88.124555][ T8707] ? do_writev+0x15b/0x330 [ 88.128983][ T8707] ? do_writev+0x1d0/0x330 [ 88.133413][ T8707] ? mark_held_locks+0xf0/0xf0 [ 88.138191][ T8707] ? __might_fault+0x12b/0x1e0 [ 88.142967][ T8707] ? find_held_lock+0x35/0x130 [ 88.147749][ T8707] ? __might_fault+0x12b/0x1e0 [ 88.152527][ T8707] ? ___might_sleep+0x163/0x280 [ 88.157406][ T8707] ? kasan_check_write+0x14/0x20 [ 88.162359][ T8707] ? copyin+0xb5/0x100 [ 88.166436][ T8707] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 88.172174][ T8707] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 88.178425][ T8707] ? skb_copy_datagram_from_iter+0x435/0x660 [ 88.184432][ T8707] tun_get_user+0x2cfe/0x3ff0 [ 88.189119][ T8707] ? tun_get_user+0x2cfe/0x3ff0 [ 88.193992][ T8707] ? tun_device_event+0xee0/0xee0 [ 88.199020][ T8707] ? tun_get+0x171/0x290 [ 88.203274][ T8707] ? lock_downgrade+0x880/0x880 [ 88.208128][ T8707] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 88.214386][ T8707] ? kasan_check_read+0x11/0x20 [ 88.219255][ T8707] tun_chr_write_iter+0xbd/0x156 [ 88.224224][ T8707] do_iter_readv_writev+0x5fd/0x900 [ 88.229438][ T8707] ? no_seek_end_llseek_size+0x70/0x70 [ 88.234908][ T8707] ? apparmor_file_permission+0x25/0x30 [ 88.240475][ T8707] ? rw_verify_area+0x126/0x360 [ 88.245426][ T8707] do_iter_write+0x184/0x610 [ 88.250029][ T8707] ? dup_iter+0x260/0x260 [ 88.254374][ T8707] vfs_writev+0x1b3/0x2f0 [ 88.258712][ T8707] ? vfs_iter_write+0xb0/0xb0 [ 88.263389][ T8707] ? kasan_check_read+0x11/0x20 [ 88.268260][ T8707] ? ksys_dup3+0x3e0/0x3e0 [ 88.272683][ T8707] ? kasan_check_read+0x11/0x20 [ 88.277565][ T8707] ? __fget_light+0x1a9/0x230 [ 88.282257][ T8707] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 88.288604][ T8707] do_writev+0x15b/0x330 [ 88.292859][ T8707] ? vfs_writev+0x2f0/0x2f0 [ 88.297368][ T8707] ? do_syscall_64+0x26/0x670 [ 88.302048][ T8707] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 88.308118][ T8707] ? do_syscall_64+0x26/0x670 [ 88.312804][ T8707] __x64_sys_writev+0x75/0xb0 [ 88.317494][ T8707] do_syscall_64+0x103/0x670 [ 88.322101][ T8707] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 88.327997][ T8707] RIP: 0033:0x458c61 [ 88.331897][ T8707] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b9 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 88.351511][ T8707] RSP: 002b:00007f1408c14ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 88.359942][ T8707] RAX: ffffffffffffffda RBX: 000000002000002a RCX: 0000000000458c61 [ 88.367949][ T8707] RDX: 0000000000000002 RSI: 00007f1408c14c00 RDI: 00000000000000f0 [ 88.375960][ T8707] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 88.383945][ T8707] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f1408c156d4 2019/05/12 19:40:40 executed programs: 184 [ 88.391926][ T8707] R13: 00000000004c77d2 R14: 00000000004dd9d0 R15: 00000000ffffffff [ 88.929239][ T8837] BUG: assuming atomic context at net/core/flow_dissector.c:737 [ 88.955289][ T8837] in_atomic(): 0, irqs_disabled(): 0, pid: 8837, name: syz-executor.4 [ 89.081444][ T8837] 2 locks held by syz-executor.4/8837: [ 89.118141][ T8837] #0: 0000000074a3b4bc (&tfile->napi_mutex){+.+.}, at: tun_get_user+0x168e/0x3ff0 [ 89.155211][ T8837] #1: 00000000fe42106b (rcu_read_lock){....}, at: __skb_flow_dissect+0x1e1/0x4bb0 [ 89.173010][ T8837] CPU: 0 PID: 8837 Comm: syz-executor.4 Tainted: G W 5.1.0+ #5 [ 89.181896][ T8837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.191971][ T8837] Call Trace: [ 89.195281][ T8837] dump_stack+0x172/0x1f0 [ 89.199630][ T8837] __cant_sleep.cold+0xa3/0xbb [ 89.204399][ T8837] ? memset+0x32/0x40 [ 89.208395][ T8837] bpf_flow_dissect+0xfe/0x390 [ 89.213168][ T8837] __skb_flow_dissect+0x362/0x4bb0 [ 89.218297][ T8837] ? bpf_flow_dissect+0x390/0x390 [ 89.223329][ T8837] ? tun_chr_write_iter+0xbd/0x156 [ 89.228448][ T8837] ? do_iter_readv_writev+0x5fd/0x900 [ 89.233836][ T8837] ? do_iter_write+0x184/0x610 [ 89.238609][ T8837] ? vfs_writev+0x1b3/0x2f0 [ 89.243118][ T8837] ? do_writev+0x15b/0x330 [ 89.247539][ T8837] ? do_writev+0x1d0/0x330 [ 89.251971][ T8837] ? mark_held_locks+0xf0/0xf0 [ 89.256748][ T8837] ? __might_fault+0x12b/0x1e0 [ 89.261524][ T8837] ? find_held_lock+0x35/0x130 [ 89.266295][ T8837] ? __might_fault+0x12b/0x1e0 [ 89.271078][ T8837] ? ___might_sleep+0x163/0x280 [ 89.275942][ T8837] ? kasan_check_write+0x14/0x20 [ 89.280901][ T8837] ? copyin+0xb5/0x100 [ 89.284994][ T8837] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 89.290751][ T8837] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 89.297004][ T8837] ? skb_copy_datagram_from_iter+0x435/0x660 [ 89.303009][ T8837] tun_get_user+0x2cfe/0x3ff0 [ 89.307698][ T8837] ? tun_get_user+0x2cfe/0x3ff0 [ 89.312575][ T8837] ? tun_device_event+0xee0/0xee0 [ 89.319112][ T8837] ? tun_get+0x171/0x290 [ 89.323393][ T8837] ? lock_downgrade+0x880/0x880 [ 89.328254][ T8837] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 89.334782][ T8837] ? kasan_check_read+0x11/0x20 [ 89.339664][ T8837] tun_chr_write_iter+0xbd/0x156 [ 89.344619][ T8837] do_iter_readv_writev+0x5fd/0x900 [ 89.350001][ T8837] ? no_seek_end_llseek_size+0x70/0x70 [ 89.355462][ T8837] ? apparmor_file_permission+0x25/0x30 [ 89.361023][ T8837] ? rw_verify_area+0x126/0x360 [ 89.365887][ T8837] do_iter_write+0x184/0x610 [ 89.370489][ T8837] ? dup_iter+0x260/0x260 [ 89.374836][ T8837] vfs_writev+0x1b3/0x2f0 [ 89.379173][ T8837] ? vfs_iter_write+0xb0/0xb0 [ 89.383852][ T8837] ? kasan_check_read+0x11/0x20 [ 89.388727][ T8837] ? ksys_dup3+0x3e0/0x3e0 [ 89.393150][ T8837] ? kasan_check_read+0x11/0x20 [ 89.398044][ T8837] ? __fget_light+0x1a9/0x230 [ 89.402733][ T8837] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 89.408990][ T8837] do_writev+0x15b/0x330 [ 89.413245][ T8837] ? vfs_writev+0x2f0/0x2f0 [ 89.417784][ T8837] ? do_syscall_64+0x26/0x670 [ 89.422470][ T8837] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 89.428544][ T8837] ? do_syscall_64+0x26/0x670 [ 89.433234][ T8837] __x64_sys_writev+0x75/0xb0 [ 89.437951][ T8837] do_syscall_64+0x103/0x670 [ 89.442556][ T8837] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 89.448460][ T8837] RIP: 0033:0x458c61 [ 89.453057][ T8837] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b9 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 89.472846][ T8837] RSP: 002b:00007fb88fa77ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 89.481266][ T8837] RAX: ffffffffffffffda RBX: 000000002000002a RCX: 0000000000458c61 [ 89.489248][ T8837] RDX: 0000000000000002 RSI: 00007fb88fa77c00 RDI: 00000000000000f0 [ 89.497225][ T8837] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 89.505312][ T8837] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fb88fa786d4 [ 89.513298][ T8837] R13: 00000000004c77d2 R14: 00000000004dd9d0 R15: 00000000ffffffff [ 89.926710][ T8956] BUG: assuming atomic context at net/core/flow_dissector.c:737 [ 90.006268][ T8956] in_atomic(): 0, irqs_disabled(): 0, pid: 8956, name: syz-executor.4 [ 90.036681][ T8956] 2 locks held by syz-executor.4/8956: [ 90.055939][ T8956] #0: 0000000074a3b4bc (&tfile->napi_mutex){+.+.}, at: tun_get_user+0x168e/0x3ff0 [ 90.070142][ T8956] #1: 00000000fe42106b (rcu_read_lock){....}, at: __skb_flow_dissect+0x1e1/0x4bb0 [ 90.134386][ T8956] CPU: 1 PID: 8956 Comm: syz-executor.4 Tainted: G W 5.1.0+ #5 [ 90.143294][ T8956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.153366][ T8956] Call Trace: [ 90.156679][ T8956] dump_stack+0x172/0x1f0 [ 90.161037][ T8956] __cant_sleep.cold+0xa3/0xbb [ 90.165809][ T8956] ? memset+0x32/0x40 [ 90.169808][ T8956] bpf_flow_dissect+0xfe/0x390 [ 90.174593][ T8956] __skb_flow_dissect+0x362/0x4bb0 [ 90.179725][ T8956] ? bpf_flow_dissect+0x390/0x390 [ 90.184753][ T8956] ? tun_chr_write_iter+0xbd/0x156 [ 90.189867][ T8956] ? do_iter_readv_writev+0x5fd/0x900 [ 90.195415][ T8956] ? do_iter_write+0x184/0x610 [ 90.200185][ T8956] ? vfs_writev+0x1b3/0x2f0 [ 90.204686][ T8956] ? do_writev+0x15b/0x330 [ 90.209102][ T8956] ? do_writev+0x1d0/0x330 [ 90.213532][ T8956] ? mark_held_locks+0xf0/0xf0 [ 90.218305][ T8956] ? __might_fault+0x12b/0x1e0 [ 90.223071][ T8956] ? find_held_lock+0x35/0x130 [ 90.227844][ T8956] ? __might_fault+0x12b/0x1e0 [ 90.232635][ T8956] ? ___might_sleep+0x163/0x280 [ 90.237491][ T8956] ? kasan_check_write+0x14/0x20 [ 90.242430][ T8956] ? copyin+0xb5/0x100 [ 90.246534][ T8956] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 90.252267][ T8956] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 90.259059][ T8956] ? skb_copy_datagram_from_iter+0x435/0x660 [ 90.265056][ T8956] tun_get_user+0x2cfe/0x3ff0 [ 90.269757][ T8956] ? tun_get_user+0x2cfe/0x3ff0 [ 90.274636][ T8956] ? tun_device_event+0xee0/0xee0 [ 90.279688][ T8956] ? tun_get+0x171/0x290 [ 90.283948][ T8956] ? lock_downgrade+0x880/0x880 [ 90.288809][ T8956] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 90.295071][ T8956] ? kasan_check_read+0x11/0x20 [ 90.299946][ T8956] tun_chr_write_iter+0xbd/0x156 [ 90.304901][ T8956] do_iter_readv_writev+0x5fd/0x900 [ 90.310112][ T8956] ? no_seek_end_llseek_size+0x70/0x70 [ 90.315679][ T8956] ? apparmor_file_permission+0x25/0x30 [ 90.321246][ T8956] ? rw_verify_area+0x126/0x360 [ 90.326993][ T8956] do_iter_write+0x184/0x610 [ 90.331598][ T8956] ? dup_iter+0x260/0x260 [ 90.335946][ T8956] vfs_writev+0x1b3/0x2f0 [ 90.340293][ T8956] ? vfs_iter_write+0xb0/0xb0 [ 90.344972][ T8956] ? kasan_check_read+0x11/0x20 [ 90.349845][ T8956] ? ksys_dup3+0x3e0/0x3e0 [ 90.354292][ T8956] ? kasan_check_read+0x11/0x20 [ 90.359156][ T8956] ? __fget_light+0x1a9/0x230 [ 90.363843][ T8956] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 90.370098][ T8956] do_writev+0x15b/0x330 [ 90.374349][ T8956] ? vfs_writev+0x2f0/0x2f0 [ 90.378863][ T8956] ? do_syscall_64+0x26/0x670 [ 90.383563][ T8956] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 90.389644][ T8956] ? do_syscall_64+0x26/0x670 [ 90.394333][ T8956] __x64_sys_writev+0x75/0xb0 [ 90.399021][ T8956] do_syscall_64+0x103/0x670 [ 90.403634][ T8956] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 90.409536][ T8956] RIP: 0033:0x458c61 [ 90.413443][ T8956] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b9 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 90.433831][ T8956] RSP: 002b:00007fb88fa77ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 90.442256][ T8956] RAX: ffffffffffffffda RBX: 000000002000002a RCX: 0000000000458c61 [ 90.450248][ T8956] RDX: 0000000000000002 RSI: 00007fb88fa77c00 RDI: 00000000000000f0 [ 90.458798][ T8956] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 90.466772][ T8956] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fb88fa786d4 [ 90.474755][ T8956] R13: 00000000004c77d2 R14: 00000000004dd9d0 R15: 00000000ffffffff [ 90.931804][ T9095] BUG: assuming atomic context at net/core/flow_dissector.c:737 [ 91.068054][ T9095] in_atomic(): 0, irqs_disabled(): 0, pid: 9095, name: syz-executor.1 [ 91.168210][ T9095] 2 locks held by syz-executor.1/9095: [ 91.173717][ T9095] #0: 00000000c3a3ab62 (&tfile->napi_mutex){+.+.}, at: tun_get_user+0x168e/0x3ff0 [ 91.184990][ T9095] #1: 00000000fe42106b (rcu_read_lock){....}, at: __skb_flow_dissect+0x1e1/0x4bb0 [ 91.200581][ T9095] CPU: 0 PID: 9095 Comm: syz-executor.1 Tainted: G W 5.1.0+ #5 [ 91.209459][ T9095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.219503][ T9095] Call Trace: [ 91.222787][ T9095] dump_stack+0x172/0x1f0 [ 91.227107][ T9095] __cant_sleep.cold+0xa3/0xbb [ 91.231857][ T9095] ? memset+0x32/0x40 [ 91.235825][ T9095] bpf_flow_dissect+0xfe/0x390 [ 91.240577][ T9095] __skb_flow_dissect+0x362/0x4bb0 [ 91.245700][ T9095] ? bpf_flow_dissect+0x390/0x390 [ 91.250710][ T9095] ? tun_chr_write_iter+0xbd/0x156 [ 91.255806][ T9095] ? do_iter_readv_writev+0x5fd/0x900 [ 91.261164][ T9095] ? do_iter_write+0x184/0x610 [ 91.265909][ T9095] ? vfs_writev+0x1b3/0x2f0 [ 91.270409][ T9095] ? do_writev+0x15b/0x330 [ 91.274813][ T9095] ? do_writev+0x1d0/0x330 [ 91.279220][ T9095] ? mark_held_locks+0xf0/0xf0 [ 91.283971][ T9095] ? __might_fault+0x12b/0x1e0 [ 91.288720][ T9095] ? find_held_lock+0x35/0x130 [ 91.293491][ T9095] ? __might_fault+0x12b/0x1e0 [ 91.298253][ T9095] ? ___might_sleep+0x163/0x280 [ 91.303124][ T9095] ? kasan_check_write+0x14/0x20 [ 91.308132][ T9095] ? copyin+0xb5/0x100 [ 91.312190][ T9095] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 91.317902][ T9095] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.324134][ T9095] ? skb_copy_datagram_from_iter+0x435/0x660 [ 91.330107][ T9095] tun_get_user+0x2cfe/0x3ff0 [ 91.334798][ T9095] ? tun_get_user+0x2cfe/0x3ff0 [ 91.339663][ T9095] ? tun_device_event+0xee0/0xee0 [ 91.344674][ T9095] ? tun_get+0x171/0x290 [ 91.348907][ T9095] ? lock_downgrade+0x880/0x880 [ 91.353747][ T9095] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.359989][ T9095] ? kasan_check_read+0x11/0x20 [ 91.364829][ T9095] tun_chr_write_iter+0xbd/0x156 [ 91.369780][ T9095] do_iter_readv_writev+0x5fd/0x900 [ 91.374993][ T9095] ? no_seek_end_llseek_size+0x70/0x70 [ 91.380440][ T9095] ? apparmor_file_permission+0x25/0x30 [ 91.385974][ T9095] ? rw_verify_area+0x126/0x360 [ 91.390833][ T9095] do_iter_write+0x184/0x610 [ 91.395426][ T9095] ? dup_iter+0x260/0x260 [ 91.400017][ T9095] vfs_writev+0x1b3/0x2f0 [ 91.404338][ T9095] ? vfs_iter_write+0xb0/0xb0 [ 91.409005][ T9095] ? kasan_check_read+0x11/0x20 [ 91.413876][ T9095] ? ksys_dup3+0x3e0/0x3e0 [ 91.418305][ T9095] ? kasan_check_read+0x11/0x20 [ 91.423145][ T9095] ? __fget_light+0x1a9/0x230 [ 91.427807][ T9095] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.434032][ T9095] do_writev+0x15b/0x330 [ 91.438265][ T9095] ? vfs_writev+0x2f0/0x2f0 [ 91.442758][ T9095] ? do_syscall_64+0x26/0x670 [ 91.447442][ T9095] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 91.453497][ T9095] ? do_syscall_64+0x26/0x670 [ 91.458164][ T9095] __x64_sys_writev+0x75/0xb0 [ 91.462824][ T9095] do_syscall_64+0x103/0x670 [ 91.467402][ T9095] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 91.473274][ T9095] RIP: 0033:0x458c61 [ 91.477157][ T9095] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b9 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 91.496745][ T9095] RSP: 002b:00007fcedee32ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 91.505147][ T9095] RAX: ffffffffffffffda RBX: 000000002000002a RCX: 0000000000458c61 [ 91.513120][ T9095] RDX: 0000000000000002 RSI: 00007fcedee32c00 RDI: 00000000000000f0 [ 91.521079][ T9095] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 91.529033][ T9095] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fcedee336d4 [ 91.536988][ T9095] R13: 00000000004c77d2 R14: 00000000004dd9d0 R15: 00000000ffffffff