BUG: sleeping function called from invalid context at kernel/locking/mutex.c:908 in_atomic(): 1, irqs_disabled(): 0, pid: 2905, name: syz-executor2 2 locks held by syz-executor2/2905: #0: 00000000f09255f0 (&dev->mutex#4){+.+.}, at: vhost_process_iotlb_msg drivers/vhost/vhost.c:981 [inline] #0: 00000000f09255f0 (&dev->mutex#4){+.+.}, at: vhost_chr_write_iter+0x1f1/0x1170 drivers/vhost/vhost.c:1049 #1: 00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: spin_lock include/linux/spinlock.h:329 [inline] #1: 00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: vhost_iotlb_notify_vq drivers/vhost/vhost.c:940 [inline] #1: 00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline] #1: 00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: vhost_chr_write_iter+0x96b/0x1170 drivers/vhost/vhost.c:1049 Preemption disabled at: [] spin_lock include/linux/spinlock.h:329 [inline] [] vhost_iotlb_notify_vq drivers/vhost/vhost.c:940 [inline] [] vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline] [] vhost_chr_write_iter+0x96b/0x1170 drivers/vhost/vhost.c:1049 CPU: 0 PID: 2905 Comm: syz-executor2 Not tainted 4.20.0-rc1+ #322 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x244/0x39d lib/dump_stack.c:113 ___might_sleep.cold.86+0x221/0x254 kernel/sched/core.c:6142 __might_sleep+0x95/0x190 kernel/sched/core.c:6095 __mutex_lock_common kernel/locking/mutex.c:908 [inline] __mutex_lock+0x138/0x16f0 kernel/locking/mutex.c:1072 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087 vhost_iotlb_notify_vq drivers/vhost/vhost.c:947 [inline] vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline] vhost_chr_write_iter+0xc76/0x1170 drivers/vhost/vhost.c:1049 vhost_net_chr_write_iter+0x59/0x70 drivers/vhost/net.c:1737 call_write_iter include/linux/fs.h:1857 [inline] new_sync_write fs/read_write.c:474 [inline] __vfs_write+0x6b8/0x9f0 fs/read_write.c:487 vfs_write+0x1fc/0x560 fs/read_write.c:549 ksys_write+0x101/0x260 fs/read_write.c:598 __do_sys_write fs/read_write.c:610 [inline] __se_sys_write fs/read_write.c:607 [inline] __x64_sys_write+0x73/0xb0 fs/read_write.c:607 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457569 Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fd5d22a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 RDX: 0000000000000068 RSI: 0000000020000480 RDI: 0000000000000003 RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd5d22a36d4 R13: 00000000004c5939 R14: 00000000004d9580 R15: 00000000ffffffff ====================================================== WARNING: possible circular locking dependency detected 4.20.0-rc1+ #322 Tainted: G W ------------------------------------------------------ syz-executor2/2905 is trying to acquire lock: 000000001f929b3f (&vq->mutex){+.+.}, at: vhost_iotlb_notify_vq drivers/vhost/vhost.c:947 [inline] 000000001f929b3f (&vq->mutex){+.+.}, at: vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline] 000000001f929b3f (&vq->mutex){+.+.}, at: vhost_chr_write_iter+0xc76/0x1170 drivers/vhost/vhost.c:1049 but task is already holding lock: 00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: spin_lock include/linux/spinlock.h:329 [inline] 00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: vhost_iotlb_notify_vq drivers/vhost/vhost.c:940 [inline] 00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline] 00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: vhost_chr_write_iter+0x96b/0x1170 drivers/vhost/vhost.c:1049 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #1 (&(&dev->iotlb_lock)->rlock){+.+.}: kobject: 'loop5' (000000005725632e): kobject_uevent_env __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2d/0x40 kernel/locking/spinlock.c:144 spin_lock include/linux/spinlock.h:329 [inline] vhost_enqueue_msg+0x90/0x260 drivers/vhost/vhost.c:2394 vhost_iotlb_miss+0x156/0x1e0 drivers/vhost/vhost.c:1165 translate_desc+0x338/0x680 drivers/vhost/vhost.c:1868 __vhost_get_user_slow.isra.26+0x3d/0x170 drivers/vhost/vhost.c:820 kobject: 'loop5' (000000005725632e): fill_kobj_path: path = '/devices/virtual/block/loop5' __vhost_get_user drivers/vhost/vhost.c:854 [inline] vhost_update_used_flags+0x24e/0x4a0 drivers/vhost/vhost.c:1754 vhost_vq_init_access+0x117/0x590 drivers/vhost/vhost.c:1802 vhost_net_set_backend drivers/vhost/net.c:1501 [inline] vhost_net_ioctl+0x653/0x1bf0 drivers/vhost/net.c:1673 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:509 [inline] do_vfs_ioctl+0x1de/0x1790 fs/ioctl.c:696 ksys_ioctl+0xa9/0xd0 fs/ioctl.c:713 __do_sys_ioctl fs/ioctl.c:720 [inline] __se_sys_ioctl fs/ioctl.c:718 [inline] __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:718 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe -> #0 (&vq->mutex){+.+.}: lock_acquire+0x1ed/0x520 kernel/locking/lockdep.c:3844 __mutex_lock_common kernel/locking/mutex.c:925 [inline] __mutex_lock+0x166/0x16f0 kernel/locking/mutex.c:1072 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087 vhost_iotlb_notify_vq drivers/vhost/vhost.c:947 [inline] vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline] vhost_chr_write_iter+0xc76/0x1170 drivers/vhost/vhost.c:1049 vhost_net_chr_write_iter+0x59/0x70 drivers/vhost/net.c:1737 call_write_iter include/linux/fs.h:1857 [inline] new_sync_write fs/read_write.c:474 [inline] __vfs_write+0x6b8/0x9f0 fs/read_write.c:487 vfs_write+0x1fc/0x560 fs/read_write.c:549 ksys_write+0x101/0x260 fs/read_write.c:598 __do_sys_write fs/read_write.c:610 [inline] __se_sys_write fs/read_write.c:607 [inline] __x64_sys_write+0x73/0xb0 fs/read_write.c:607 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe other info that might help us debug this: Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&(&dev->iotlb_lock)->rlock); lock(&vq->mutex); lock(&(&dev->iotlb_lock)->rlock); lock(&vq->mutex); *** DEADLOCK *** 2 locks held by syz-executor2/2905: #0: 00000000f09255f0 (&dev->mutex#4){+.+.}, at: vhost_process_iotlb_msg drivers/vhost/vhost.c:981 [inline] #0: 00000000f09255f0 (&dev->mutex#4){+.+.}, at: vhost_chr_write_iter+0x1f1/0x1170 drivers/vhost/vhost.c:1049 #1: 00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: spin_lock include/linux/spinlock.h:329 [inline] #1: 00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: vhost_iotlb_notify_vq drivers/vhost/vhost.c:940 [inline] #1: 00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline] #1: 00000000b559ec12 (&(&dev->iotlb_lock)->rlock){+.+.}, at: vhost_chr_write_iter+0x96b/0x1170 drivers/vhost/vhost.c:1049 stack backtrace: CPU: 0 PID: 2905 Comm: syz-executor2 Tainted: G W 4.20.0-rc1+ #322 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x244/0x39d lib/dump_stack.c:113 print_circular_bug.isra.35.cold.54+0x1bd/0x27d kernel/locking/lockdep.c:1221 check_prev_add kernel/locking/lockdep.c:1863 [inline] check_prevs_add kernel/locking/lockdep.c:1976 [inline] validate_chain kernel/locking/lockdep.c:2347 [inline] __lock_acquire+0x3399/0x4c20 kernel/locking/lockdep.c:3341 lock_acquire+0x1ed/0x520 kernel/locking/lockdep.c:3844 __mutex_lock_common kernel/locking/mutex.c:925 [inline] __mutex_lock+0x166/0x16f0 kernel/locking/mutex.c:1072 kobject: 'nullb0' (000000002e6b2c2c): kobject_uevent_env mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087 vhost_iotlb_notify_vq drivers/vhost/vhost.c:947 [inline] vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline] vhost_chr_write_iter+0xc76/0x1170 drivers/vhost/vhost.c:1049 vhost_net_chr_write_iter+0x59/0x70 drivers/vhost/net.c:1737 call_write_iter include/linux/fs.h:1857 [inline] new_sync_write fs/read_write.c:474 [inline] __vfs_write+0x6b8/0x9f0 fs/read_write.c:487 vfs_write+0x1fc/0x560 fs/read_write.c:549 ksys_write+0x101/0x260 fs/read_write.c:598 __do_sys_write fs/read_write.c:610 [inline] __se_sys_write fs/read_write.c:607 [inline] __x64_sys_write+0x73/0xb0 fs/read_write.c:607 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457569 Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fd5d22a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 RDX: 0000000000000068 RSI: 0000000020000480 RDI: 0000000000000003 RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd5d22a36d4 R13: 00000000004c5939 R14: 00000000004d9580 R15: 00000000ffffffff kobject: 'ip6gre0' (00000000ecc56ef6): kobject_cleanup, parent (null) kobject: 'nullb0' (000000002e6b2c2c): fill_kobj_path: path = '/devices/virtual/block/nullb0' kobject: 'ip6gre0' (00000000ecc56ef6): auto cleanup 'remove' event kobject: 'ip6gre0' (00000000ecc56ef6): kobject_uevent_env kobject: 'loop4' (0000000034c947df): kobject_uevent_env kobject: 'loop4' (0000000034c947df): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'ip6gre0' (00000000ecc56ef6): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'loop5' (000000005725632e): kobject_uevent_env kobject: 'loop5' (000000005725632e): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop3' (000000008ab183b8): kobject_uevent_env kobject: 'ip6gre0' (00000000ecc56ef6): calling ktype release kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'ip6gre0': free name kobject: 'loop0' (00000000224a0b64): kobject_uevent_env kobject: 'rx-0' (000000006b688778): kobject_cleanup, parent 00000000cc55abcb kobject: 'rx-0' (000000006b688778): auto cleanup 'remove' event kobject: 'loop0' (00000000224a0b64): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'rx-0' (000000006b688778): kobject_uevent_env kobject: 'loop3' (000000008ab183b8): kobject_uevent_env kobject: 'rx-0' (000000006b688778): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'rx-0' (000000006b688778): auto cleanup kobject_del kobject: 'loop2' (0000000087c7399c): kobject_uevent_env kobject: 'rx-0' (000000006b688778): calling ktype release kobject: 'loop2' (0000000087c7399c): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'rx-0': free name kobject: 'tx-0' (00000000f533e933): kobject_cleanup, parent 00000000cc55abcb BUG: sleeping function called from invalid context at kernel/locking/mutex.c:908 in_atomic(): 1, irqs_disabled(): 0, pid: 2959, name: syz-executor2 kobject: 'loop3' (000000008ab183b8): kobject_uevent_env INFO: lockdep is turned off. Preemption disabled at: [] spin_lock include/linux/spinlock.h:329 [inline] [] vhost_iotlb_notify_vq drivers/vhost/vhost.c:940 [inline] [] vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline] [] vhost_chr_write_iter+0x96b/0x1170 drivers/vhost/vhost.c:1049 CPU: 1 PID: 2959 Comm: syz-executor2 Tainted: G W 4.20.0-rc1+ #322 kobject: 'tx-0' (00000000f533e933): auto cleanup 'remove' event Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 kobject: 'tx-0' (00000000f533e933): kobject_uevent_env Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x244/0x39d lib/dump_stack.c:113 kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3' ___might_sleep.cold.86+0x221/0x254 kernel/sched/core.c:6142 kobject: 'tx-0' (00000000f533e933): kobject_uevent_env: uevent_suppress caused the event to drop! __might_sleep+0x95/0x190 kernel/sched/core.c:6095 kobject: 'tx-0' (00000000f533e933): auto cleanup kobject_del __mutex_lock_common kernel/locking/mutex.c:908 [inline] __mutex_lock+0x138/0x16f0 kernel/locking/mutex.c:1072 kobject: 'tx-0' (00000000f533e933): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (00000000cc55abcb): kobject_cleanup, parent (null) kobject: 'queues' (00000000cc55abcb): calling ktype release kobject: 'queues' (00000000cc55abcb): kset_release kobject: 'queues': free name kobject: 'ip6tnl0' (000000004e91445f): kobject_uevent_env kobject: 'ip6tnl0' (000000004e91445f): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'loop0' (00000000224a0b64): kobject_uevent_env kobject: 'loop0' (00000000224a0b64): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop3' (000000008ab183b8): kobject_uevent_env mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087 kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3' vhost_iotlb_notify_vq drivers/vhost/vhost.c:947 [inline] vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline] vhost_chr_write_iter+0xc76/0x1170 drivers/vhost/vhost.c:1049 vhost_net_chr_write_iter+0x59/0x70 drivers/vhost/net.c:1737 call_write_iter include/linux/fs.h:1857 [inline] new_sync_write fs/read_write.c:474 [inline] __vfs_write+0x6b8/0x9f0 fs/read_write.c:487 vfs_write+0x1fc/0x560 fs/read_write.c:549 ksys_write+0x101/0x260 fs/read_write.c:598 __do_sys_write fs/read_write.c:610 [inline] __se_sys_write fs/read_write.c:607 [inline] __x64_sys_write+0x73/0xb0 fs/read_write.c:607 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457569 Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fd5d22a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 RDX: 0000000000000068 RSI: 0000000020000480 RDI: 0000000000000003 RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd5d22a36d4 R13: 00000000004c5939 R14: 00000000004d9580 R15: 00000000ffffffff kobject: 'ip6tnl0' (000000004e91445f): kobject_cleanup, parent (null) kobject: 'ip6tnl0' (000000004e91445f): auto cleanup 'remove' event kobject: 'ip6tnl0' (000000004e91445f): kobject_uevent_env kobject: 'loop5' (000000005725632e): kobject_uevent_env kobject: 'ip6tnl0' (000000004e91445f): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'loop5' (000000005725632e): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'ip6tnl0' (000000004e91445f): calling ktype release kobject: 'ip6tnl0': free name kobject: 'rx-0' (00000000308c042d): kobject_cleanup, parent 000000001c721b28 kobject: 'rx-0' (00000000308c042d): auto cleanup 'remove' event kobject: 'rx-0' (00000000308c042d): kobject_uevent_env kobject: 'loop2' (0000000087c7399c): kobject_uevent_env kobject: 'rx-0' (00000000308c042d): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'loop2' (0000000087c7399c): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'rx-0' (00000000308c042d): auto cleanup kobject_del kobject: 'rx-0' (00000000308c042d): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (00000000c0210dea): kobject_cleanup, parent 000000001c721b28 kobject: 'tx-0' (00000000c0210dea): auto cleanup 'remove' event kobject: 'tx-0' (00000000c0210dea): kobject_uevent_env kobject: 'tx-0' (00000000c0210dea): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tx-0' (00000000c0210dea): auto cleanup kobject_del kobject: 'tx-0' (00000000c0210dea): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (000000001c721b28): kobject_cleanup, parent (null) kobject: 'queues' (000000001c721b28): calling ktype release kobject: 'queues' (000000001c721b28): kset_release kobject: 'queues': free name kobject: 'sit0' (00000000d1c55715): kobject_uevent_env kobject: 'sit0' (00000000d1c55715): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'sit0' (00000000d1c55715): kobject_cleanup, parent (null) kobject: 'sit0' (00000000d1c55715): auto cleanup 'remove' event kobject: 'sit0' (00000000d1c55715): kobject_uevent_env kobject: 'sit0' (00000000d1c55715): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'sit0' (00000000d1c55715): calling ktype release kobject: 'sit0': free name kobject: 'rx-0' (00000000bf203603): kobject_cleanup, parent 000000000b42d1ac kobject: 'rx-0' (00000000bf203603): auto cleanup 'remove' event kobject: 'rx-0' (00000000bf203603): kobject_uevent_env kobject: 'rx-0' (00000000bf203603): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'rx-0' (00000000bf203603): auto cleanup kobject_del kobject: 'rx-0' (00000000bf203603): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (000000007e84d02c): kobject_cleanup, parent 000000000b42d1ac kobject: 'tx-0' (000000007e84d02c): auto cleanup 'remove' event kobject: 'tx-0' (000000007e84d02c): kobject_uevent_env kobject: 'tx-0' (000000007e84d02c): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tx-0' (000000007e84d02c): auto cleanup kobject_del kobject: 'tx-0' (000000007e84d02c): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (000000000b42d1ac): kobject_cleanup, parent (null) kobject: 'queues' (000000000b42d1ac): calling ktype release kobject: 'queues' (000000000b42d1ac): kset_release kobject: 'queues': free name kobject: 'ip6_vti0' (00000000691bb581): kobject_uevent_env kobject: 'ip6_vti0' (00000000691bb581): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'ip6_vti0' (00000000691bb581): kobject_cleanup, parent (null) kobject: 'ip6_vti0' (00000000691bb581): auto cleanup 'remove' event kobject: 'ip6_vti0' (00000000691bb581): kobject_uevent_env kobject: 'ip6_vti0' (00000000691bb581): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'ip6_vti0' (00000000691bb581): calling ktype release kobject: 'ip6_vti0': free name kobject: 'rx-0' (00000000a7f0a4cb): kobject_cleanup, parent 000000002b2ac70e kobject: 'rx-0' (00000000a7f0a4cb): auto cleanup 'remove' event kobject: 'rx-0' (00000000a7f0a4cb): kobject_uevent_env kobject: 'rx-0' (00000000a7f0a4cb): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'rx-0' (00000000a7f0a4cb): auto cleanup kobject_del kobject: 'rx-0' (00000000a7f0a4cb): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (00000000eebfd5e8): kobject_cleanup, parent 000000002b2ac70e kobject: 'tx-0' (00000000eebfd5e8): auto cleanup 'remove' event kobject: 'tx-0' (00000000eebfd5e8): kobject_uevent_env kobject: 'tx-0' (00000000eebfd5e8): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tx-0' (00000000eebfd5e8): auto cleanup kobject_del kobject: 'tx-0' (00000000eebfd5e8): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (000000002b2ac70e): kobject_cleanup, parent (null) kobject: 'queues' (000000002b2ac70e): calling ktype release kobject: 'queues' (000000002b2ac70e): kset_release kobject: 'queues': free name kobject: 'ip_vti0' (000000008b868768): kobject_uevent_env kobject: 'ip_vti0' (000000008b868768): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'ip_vti0' (000000008b868768): kobject_cleanup, parent (null) kobject: 'ip_vti0' (000000008b868768): auto cleanup 'remove' event kobject: 'ip_vti0' (000000008b868768): kobject_uevent_env kobject: 'ip_vti0' (000000008b868768): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'ip_vti0' (000000008b868768): calling ktype release kobject: 'ip_vti0': free name kobject: 'rx-0' (00000000fec3b200): kobject_cleanup, parent 00000000f235e4df kobject: 'rx-0' (00000000fec3b200): auto cleanup 'remove' event kobject: 'rx-0' (00000000fec3b200): kobject_uevent_env kobject: 'rx-0' (00000000fec3b200): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'rx-0' (00000000fec3b200): auto cleanup kobject_del kobject: 'rx-0' (00000000fec3b200): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (0000000029ccadff): kobject_cleanup, parent 00000000f235e4df kobject: 'tx-0' (0000000029ccadff): auto cleanup 'remove' event kobject: 'tx-0' (0000000029ccadff): kobject_uevent_env kobject: 'tx-0' (0000000029ccadff): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tx-0' (0000000029ccadff): auto cleanup kobject_del kobject: 'tx-0' (0000000029ccadff): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (00000000f235e4df): kobject_cleanup, parent (null) kobject: 'queues' (00000000f235e4df): calling ktype release kobject: 'queues' (00000000f235e4df): kset_release kobject: 'queues': free name kobject: 'erspan0' (00000000f374d2ee): kobject_uevent_env kobject: 'erspan0' (00000000f374d2ee): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'erspan0' (00000000f374d2ee): kobject_cleanup, parent (null) kobject: 'erspan0' (00000000f374d2ee): auto cleanup 'remove' event kobject: 'erspan0' (00000000f374d2ee): kobject_uevent_env kobject: 'erspan0' (00000000f374d2ee): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'erspan0' (00000000f374d2ee): calling ktype release kobject: 'erspan0': free name kobject: 'rx-0' (000000009ef0bde7): kobject_cleanup, parent 00000000175004c9 kobject: 'rx-0' (000000009ef0bde7): auto cleanup 'remove' event kobject: 'rx-0' (000000009ef0bde7): kobject_uevent_env kobject: 'rx-0' (000000009ef0bde7): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'rx-0' (000000009ef0bde7): auto cleanup kobject_del kobject: 'rx-0' (000000009ef0bde7): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (000000000005f8fa): kobject_cleanup, parent 00000000175004c9 kobject: 'tx-0' (000000000005f8fa): auto cleanup 'remove' event kobject: 'tx-0' (000000000005f8fa): kobject_uevent_env kobject: 'tx-0' (000000000005f8fa): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tx-0' (000000000005f8fa): auto cleanup kobject_del kobject: 'tx-0' (000000000005f8fa): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (00000000175004c9): kobject_cleanup, parent (null) kobject: 'queues' (00000000175004c9): calling ktype release kobject: 'queues' (00000000175004c9): kset_release kobject: 'queues': free name kobject: 'gretap0' (00000000210f16b3): kobject_uevent_env kobject: 'gretap0' (00000000210f16b3): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'gretap0' (00000000210f16b3): kobject_cleanup, parent (null) kobject: 'gretap0' (00000000210f16b3): auto cleanup 'remove' event kobject: 'gretap0' (00000000210f16b3): kobject_uevent_env kobject: 'gretap0' (00000000210f16b3): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'gretap0' (00000000210f16b3): calling ktype release kobject: 'gretap0': free name kobject: 'rx-0' (000000007231300a): kobject_cleanup, parent 00000000641ec801 kobject: 'rx-0' (000000007231300a): auto cleanup 'remove' event kobject: 'rx-0' (000000007231300a): kobject_uevent_env kobject: 'rx-0' (000000007231300a): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'rx-0' (000000007231300a): auto cleanup kobject_del kobject: 'rx-0' (000000007231300a): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (00000000b69e4498): kobject_cleanup, parent 00000000641ec801 kobject: 'tx-0' (00000000b69e4498): auto cleanup 'remove' event kobject: 'tx-0' (00000000b69e4498): kobject_uevent_env kobject: 'tx-0' (00000000b69e4498): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tx-0' (00000000b69e4498): auto cleanup kobject_del kobject: 'tx-0' (00000000b69e4498): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (00000000641ec801): kobject_cleanup, parent (null) kobject: 'queues' (00000000641ec801): calling ktype release kobject: 'queues' (00000000641ec801): kset_release kobject: 'queues': free name kobject: 'gre0' (00000000aa8c081b): kobject_uevent_env kobject: 'gre0' (00000000aa8c081b): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'gre0' (00000000aa8c081b): kobject_cleanup, parent (null) kobject: 'gre0' (00000000aa8c081b): auto cleanup 'remove' event kobject: 'gre0' (00000000aa8c081b): kobject_uevent_env kobject: 'gre0' (00000000aa8c081b): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'gre0' (00000000aa8c081b): calling ktype release kobject: 'gre0': free name kobject: 'rx-0' (000000004ec3023d): kobject_cleanup, parent 00000000a16ddd9e kobject: 'rx-0' (000000004ec3023d): auto cleanup 'remove' event kobject: 'rx-0' (000000004ec3023d): kobject_uevent_env kobject: 'rx-0' (000000004ec3023d): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'rx-0' (000000004ec3023d): auto cleanup kobject_del kobject: 'rx-0' (000000004ec3023d): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (00000000a8f827a8): kobject_cleanup, parent 00000000a16ddd9e kobject: 'tx-0' (00000000a8f827a8): auto cleanup 'remove' event kobject: 'tx-0' (00000000a8f827a8): kobject_uevent_env kobject: 'tx-0' (00000000a8f827a8): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tx-0' (00000000a8f827a8): auto cleanup kobject_del kobject: 'tx-0' (00000000a8f827a8): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (00000000a16ddd9e): kobject_cleanup, parent (null) kobject: 'queues' (00000000a16ddd9e): calling ktype release kobject: 'queues' (00000000a16ddd9e): kset_release kobject: 'queues': free name kobject: 'tunl0' (00000000eaf3d8ce): kobject_uevent_env kobject: 'tunl0' (00000000eaf3d8ce): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tunl0' (00000000eaf3d8ce): kobject_cleanup, parent (null) kobject: 'tunl0' (00000000eaf3d8ce): auto cleanup 'remove' event kobject: 'tunl0' (00000000eaf3d8ce): kobject_uevent_env kobject: 'tunl0' (00000000eaf3d8ce): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tunl0' (00000000eaf3d8ce): calling ktype release kobject: 'tunl0': free name kobject: 'rx-0' (00000000128a4e0a): kobject_cleanup, parent 000000003bec5810 kobject: 'rx-0' (00000000128a4e0a): auto cleanup 'remove' event kobject: 'rx-0' (00000000128a4e0a): kobject_uevent_env kobject: 'rx-0' (00000000128a4e0a): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'rx-0' (00000000128a4e0a): auto cleanup kobject_del kobject: 'rx-0' (00000000128a4e0a): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (00000000c494bb0d): kobject_cleanup, parent 000000003bec5810 kobject: 'tx-0' (00000000c494bb0d): auto cleanup 'remove' event kobject: 'tx-0' (00000000c494bb0d): kobject_uevent_env kobject: 'tx-0' (00000000c494bb0d): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tx-0' (00000000c494bb0d): auto cleanup kobject_del kobject: 'tx-0' (00000000c494bb0d): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (000000003bec5810): kobject_cleanup, parent (null) kobject: 'queues' (000000003bec5810): calling ktype release kobject: 'queues' (000000003bec5810): kset_release kobject: 'queues': free name kobject: 'lo' (00000000ad8b9bd0): kobject_uevent_env kobject: 'lo' (00000000ad8b9bd0): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'lo' (00000000ad8b9bd0): kobject_cleanup, parent (null) kobject: 'lo' (00000000ad8b9bd0): auto cleanup 'remove' event kobject: 'lo' (00000000ad8b9bd0): kobject_uevent_env kobject: 'lo' (00000000ad8b9bd0): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'lo' (00000000ad8b9bd0): calling ktype release kobject: 'lo': free name kobject: 'loop4' (0000000034c947df): kobject_uevent_env kobject: 'loop4' (0000000034c947df): fill_kobj_path: path = '/devices/virtual/block/loop4' TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. kobject: 'loop3' (000000008ab183b8): kobject_uevent_env kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3' BUG: sleeping function called from invalid context at kernel/locking/mutex.c:908 in_atomic(): 1, irqs_disabled(): 0, pid: 2992, name: syz-executor2 INFO: lockdep is turned off. Preemption disabled at: [] spin_lock include/linux/spinlock.h:329 [inline] [] vhost_iotlb_notify_vq drivers/vhost/vhost.c:940 [inline] [] vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline] [] vhost_chr_write_iter+0x96b/0x1170 drivers/vhost/vhost.c:1049 CPU: 0 PID: 2992 Comm: syz-executor2 Tainted: G W 4.20.0-rc1+ #322 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x244/0x39d lib/dump_stack.c:113 ___might_sleep.cold.86+0x221/0x254 kernel/sched/core.c:6142 __might_sleep+0x95/0x190 kernel/sched/core.c:6095 __mutex_lock_common kernel/locking/mutex.c:908 [inline] __mutex_lock+0x138/0x16f0 kernel/locking/mutex.c:1072 kobject: 'loop3' (000000008ab183b8): kobject_uevent_env kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop3' (000000008ab183b8): kobject_uevent_env mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087 kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3' vhost_iotlb_notify_vq drivers/vhost/vhost.c:947 [inline] vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline] vhost_chr_write_iter+0xc76/0x1170 drivers/vhost/vhost.c:1049 vhost_net_chr_write_iter+0x59/0x70 drivers/vhost/net.c:1737 call_write_iter include/linux/fs.h:1857 [inline] new_sync_write fs/read_write.c:474 [inline] __vfs_write+0x6b8/0x9f0 fs/read_write.c:487 kobject: 'loop5' (000000005725632e): kobject_uevent_env vfs_write+0x1fc/0x560 fs/read_write.c:549 kobject: 'loop5' (000000005725632e): fill_kobj_path: path = '/devices/virtual/block/loop5' ksys_write+0x101/0x260 fs/read_write.c:598 __do_sys_write fs/read_write.c:610 [inline] __se_sys_write fs/read_write.c:607 [inline] __x64_sys_write+0x73/0xb0 fs/read_write.c:607 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457569 Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fd5d22a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 RDX: 0000000000000068 RSI: 0000000020000480 RDI: 0000000000000003 RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd5d22a36d4 R13: 00000000004c5939 R14: 00000000004d9580 R15: 00000000ffffffff kobject: 'loop2' (0000000087c7399c): kobject_uevent_env kobject: 'loop2' (0000000087c7399c): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'rx-0' (00000000483f9ebd): kobject_cleanup, parent 00000000acc73935 kobject: 'rx-0' (00000000483f9ebd): auto cleanup 'remove' event kobject: 'rx-0' (00000000483f9ebd): kobject_uevent_env kobject: 'rx-0' (00000000483f9ebd): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'rx-0' (00000000483f9ebd): auto cleanup kobject_del kobject: 'rx-0' (00000000483f9ebd): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (00000000c73568f0): kobject_cleanup, parent 00000000acc73935 kobject: 'tx-0' (00000000c73568f0): auto cleanup 'remove' event kobject: 'tx-0' (00000000c73568f0): kobject_uevent_env kobject: 'tx-0' (00000000c73568f0): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tx-0' (00000000c73568f0): auto cleanup kobject_del kobject: 'tx-0' (00000000c73568f0): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (00000000acc73935): kobject_cleanup, parent (null) kobject: 'queues' (00000000acc73935): calling ktype release kobject: 'queues' (00000000acc73935): kset_release kobject: 'queues': free name kobject: 'ip6gre0' (00000000d5c67627): kobject_uevent_env kobject: 'ip6gre0' (00000000d5c67627): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'ip6gre0' (00000000d5c67627): kobject_cleanup, parent (null) kobject: 'ip6gre0' (00000000d5c67627): auto cleanup 'remove' event kobject: 'ip6gre0' (00000000d5c67627): kobject_uevent_env kobject: 'ip6gre0' (00000000d5c67627): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'ip6gre0' (00000000d5c67627): calling ktype release kobject: 'ip6gre0': free name kobject: 'rx-0' (000000002491970b): kobject_cleanup, parent 00000000dda49fa6 kobject: 'rx-0' (000000002491970b): auto cleanup 'remove' event kobject: 'rx-0' (000000002491970b): kobject_uevent_env kobject: 'rx-0' (000000002491970b): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'rx-0' (000000002491970b): auto cleanup kobject_del kobject: 'rx-0' (000000002491970b): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (0000000027e9661a): kobject_cleanup, parent 00000000dda49fa6 kobject: 'loop0' (00000000224a0b64): kobject_uevent_env kobject: 'tx-0' (0000000027e9661a): auto cleanup 'remove' event kobject: 'loop0' (00000000224a0b64): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'tx-0' (0000000027e9661a): kobject_uevent_env kobject: 'tx-0' (0000000027e9661a): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tx-0' (0000000027e9661a): auto cleanup kobject_del kobject: 'tx-0' (0000000027e9661a): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (00000000dda49fa6): kobject_cleanup, parent (null) kobject: 'queues' (00000000dda49fa6): calling ktype release kobject: 'queues' (00000000dda49fa6): kset_release kobject: 'queues': free name kobject: 'ip6tnl0' (00000000099276f7): kobject_uevent_env kobject: 'ip6tnl0' (00000000099276f7): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'ip6tnl0' (00000000099276f7): kobject_cleanup, parent (null) kobject: 'ip6tnl0' (00000000099276f7): auto cleanup 'remove' event kobject: 'ip6tnl0' (00000000099276f7): kobject_uevent_env kobject: 'ip6tnl0' (00000000099276f7): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'ip6tnl0' (00000000099276f7): calling ktype release kobject: 'ip6tnl0': free name kobject: 'rx-0' (00000000b11cae38): kobject_cleanup, parent 00000000853dcc37 kobject: 'rx-0' (00000000b11cae38): auto cleanup 'remove' event kobject: 'rx-0' (00000000b11cae38): kobject_uevent_env kobject: 'rx-0' (00000000b11cae38): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'rx-0' (00000000b11cae38): auto cleanup kobject_del kobject: 'rx-0' (00000000b11cae38): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (000000005d4feba6): kobject_cleanup, parent 00000000853dcc37 kobject: 'tx-0' (000000005d4feba6): auto cleanup 'remove' event kobject: 'tx-0' (000000005d4feba6): kobject_uevent_env kobject: 'tx-0' (000000005d4feba6): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tx-0' (000000005d4feba6): auto cleanup kobject_del kobject: 'tx-0' (000000005d4feba6): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (00000000853dcc37): kobject_cleanup, parent (null) kobject: 'queues' (00000000853dcc37): calling ktype release kobject: 'queues' (00000000853dcc37): kset_release kobject: 'queues': free name kobject: 'sit0' (000000002063d58a): kobject_uevent_env kobject: 'sit0' (000000002063d58a): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'sit0' (000000002063d58a): kobject_cleanup, parent (null) kobject: 'sit0' (000000002063d58a): auto cleanup 'remove' event kobject: 'sit0' (000000002063d58a): kobject_uevent_env kobject: 'sit0' (000000002063d58a): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'sit0' (000000002063d58a): calling ktype release kobject: 'sit0': free name kobject: 'rx-0' (0000000077830bf8): kobject_cleanup, parent 000000001976ee75 kobject: 'rx-0' (0000000077830bf8): auto cleanup 'remove' event kobject: 'rx-0' (0000000077830bf8): kobject_uevent_env kobject: 'rx-0' (0000000077830bf8): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'rx-0' (0000000077830bf8): auto cleanup kobject_del kobject: 'rx-0' (0000000077830bf8): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (0000000049d7df06): kobject_cleanup, parent 000000001976ee75 kobject: 'tx-0' (0000000049d7df06): auto cleanup 'remove' event kobject: 'tx-0' (0000000049d7df06): kobject_uevent_env kobject: 'tx-0' (0000000049d7df06): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tx-0' (0000000049d7df06): auto cleanup kobject_del kobject: 'tx-0' (0000000049d7df06): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (000000001976ee75): kobject_cleanup, parent (null) kobject: 'queues' (000000001976ee75): calling ktype release kobject: 'queues' (000000001976ee75): kset_release kobject: 'queues': free name kobject: 'ip6_vti0' (000000003cc3a313): kobject_uevent_env kobject: 'ip6_vti0' (000000003cc3a313): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'ip6_vti0' (000000003cc3a313): kobject_cleanup, parent (null) kobject: 'ip6_vti0' (000000003cc3a313): auto cleanup 'remove' event kobject: 'ip6_vti0' (000000003cc3a313): kobject_uevent_env kobject: 'ip6_vti0' (000000003cc3a313): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'ip6_vti0' (000000003cc3a313): calling ktype release kobject: 'ip6_vti0': free name kobject: 'rx-0' (0000000023e990be): kobject_cleanup, parent 000000002a0142f9 kobject: 'rx-0' (0000000023e990be): auto cleanup 'remove' event kobject: 'rx-0' (0000000023e990be): kobject_uevent_env kobject: 'rx-0' (0000000023e990be): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'rx-0' (0000000023e990be): auto cleanup kobject_del kobject: 'rx-0' (0000000023e990be): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (000000000d4ba0a1): kobject_cleanup, parent 000000002a0142f9 kobject: 'tx-0' (000000000d4ba0a1): auto cleanup 'remove' event kobject: 'tx-0' (000000000d4ba0a1): kobject_uevent_env kobject: 'tx-0' (000000000d4ba0a1): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tx-0' (000000000d4ba0a1): auto cleanup kobject_del kobject: 'tx-0' (000000000d4ba0a1): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (000000002a0142f9): kobject_cleanup, parent (null) kobject: 'queues' (000000002a0142f9): calling ktype release kobject: 'queues' (000000002a0142f9): kset_release kobject: 'queues': free name kobject: 'ip_vti0' (000000006829aeb5): kobject_uevent_env kobject: 'ip_vti0' (000000006829aeb5): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'ip_vti0' (000000006829aeb5): kobject_cleanup, parent (null) kobject: 'ip_vti0' (000000006829aeb5): auto cleanup 'remove' event kobject: 'ip_vti0' (000000006829aeb5): kobject_uevent_env kobject: 'ip_vti0' (000000006829aeb5): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'ip_vti0' (000000006829aeb5): calling ktype release kobject: 'ip_vti0': free name kobject: 'rx-0' (000000003b232512): kobject_cleanup, parent 00000000777a2568 kobject: 'rx-0' (000000003b232512): auto cleanup 'remove' event kobject: 'rx-0' (000000003b232512): kobject_uevent_env kobject: 'rx-0' (000000003b232512): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'rx-0' (000000003b232512): auto cleanup kobject_del kobject: 'rx-0' (000000003b232512): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (0000000044dce8a8): kobject_cleanup, parent 00000000777a2568 kobject: 'tx-0' (0000000044dce8a8): auto cleanup 'remove' event kobject: 'tx-0' (0000000044dce8a8): kobject_uevent_env kobject: 'tx-0' (0000000044dce8a8): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tx-0' (0000000044dce8a8): auto cleanup kobject_del kobject: 'tx-0' (0000000044dce8a8): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (00000000777a2568): kobject_cleanup, parent (null) kobject: 'queues' (00000000777a2568): calling ktype release kobject: 'queues' (00000000777a2568): kset_release kobject: 'queues': free name kobject: 'erspan0' (00000000484778ad): kobject_uevent_env kobject: 'erspan0' (00000000484778ad): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'erspan0' (00000000484778ad): kobject_cleanup, parent (null) kobject: 'erspan0' (00000000484778ad): auto cleanup 'remove' event kobject: 'erspan0' (00000000484778ad): kobject_uevent_env kobject: 'erspan0' (00000000484778ad): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'erspan0' (00000000484778ad): calling ktype release kobject: 'erspan0': free name kobject: 'rx-0' (00000000cff4faed): kobject_cleanup, parent 000000001c03678c kobject: 'rx-0' (00000000cff4faed): auto cleanup 'remove' event kobject: 'rx-0' (00000000cff4faed): kobject_uevent_env kobject: 'rx-0' (00000000cff4faed): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'rx-0' (00000000cff4faed): auto cleanup kobject_del kobject: 'rx-0' (00000000cff4faed): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (00000000ce57ca36): kobject_cleanup, parent 000000001c03678c kobject: 'tx-0' (00000000ce57ca36): auto cleanup 'remove' event kobject: 'tx-0' (00000000ce57ca36): kobject_uevent_env kobject: 'tx-0' (00000000ce57ca36): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tx-0' (00000000ce57ca36): auto cleanup kobject_del kobject: 'tx-0' (00000000ce57ca36): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (000000001c03678c): kobject_cleanup, parent (null) kobject: 'queues' (000000001c03678c): calling ktype release kobject: 'queues' (000000001c03678c): kset_release kobject: 'queues': free name kobject: 'gretap0' (0000000099c28359): kobject_uevent_env kobject: 'gretap0' (0000000099c28359): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'gretap0' (0000000099c28359): kobject_cleanup, parent (null) kobject: 'gretap0' (0000000099c28359): auto cleanup 'remove' event kobject: 'gretap0' (0000000099c28359): kobject_uevent_env kobject: 'gretap0' (0000000099c28359): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'gretap0' (0000000099c28359): calling ktype release kobject: 'gretap0': free name kobject: 'rx-0' (000000009d212ba4): kobject_cleanup, parent 0000000072e9e86f kobject: 'rx-0' (000000009d212ba4): auto cleanup 'remove' event kobject: 'rx-0' (000000009d212ba4): kobject_uevent_env kobject: 'rx-0' (000000009d212ba4): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'rx-0' (000000009d212ba4): auto cleanup kobject_del kobject: 'rx-0' (000000009d212ba4): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (00000000547a6237): kobject_cleanup, parent 0000000072e9e86f kobject: 'tx-0' (00000000547a6237): auto cleanup 'remove' event kobject: 'tx-0' (00000000547a6237): kobject_uevent_env kobject: 'tx-0' (00000000547a6237): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tx-0' (00000000547a6237): auto cleanup kobject_del kobject: 'tx-0' (00000000547a6237): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (0000000072e9e86f): kobject_cleanup, parent (null) kobject: 'queues' (0000000072e9e86f): calling ktype release kobject: 'queues' (0000000072e9e86f): kset_release kobject: 'queues': free name kobject: 'gre0' (00000000bbb7936c): kobject_uevent_env kobject: 'gre0' (00000000bbb7936c): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'gre0' (00000000bbb7936c): kobject_cleanup, parent (null) kobject: 'gre0' (00000000bbb7936c): auto cleanup 'remove' event kobject: 'gre0' (00000000bbb7936c): kobject_uevent_env kobject: 'gre0' (00000000bbb7936c): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'gre0' (00000000bbb7936c): calling ktype release kobject: 'gre0': free name kobject: 'rx-0' (0000000024922f5a): kobject_cleanup, parent 0000000085bc18cd kobject: 'rx-0' (0000000024922f5a): auto cleanup 'remove' event kobject: 'rx-0' (0000000024922f5a): kobject_uevent_env kobject: 'rx-0' (0000000024922f5a): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'rx-0' (0000000024922f5a): auto cleanup kobject_del kobject: 'rx-0' (0000000024922f5a): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (000000009fe46ae2): kobject_cleanup, parent 0000000085bc18cd kobject: 'tx-0' (000000009fe46ae2): auto cleanup 'remove' event kobject: 'tx-0' (000000009fe46ae2): kobject_uevent_env kobject: 'tx-0' (000000009fe46ae2): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tx-0' (000000009fe46ae2): auto cleanup kobject_del kobject: 'tx-0' (000000009fe46ae2): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (0000000085bc18cd): kobject_cleanup, parent (null) kobject: 'queues' (0000000085bc18cd): calling ktype release kobject: 'queues' (0000000085bc18cd): kset_release kobject: 'queues': free name kobject: 'tunl0' (00000000c81e7011): kobject_uevent_env kobject: 'tunl0' (00000000c81e7011): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tunl0' (00000000c81e7011): kobject_cleanup, parent (null) kobject: 'tunl0' (00000000c81e7011): auto cleanup 'remove' event kobject: 'tunl0' (00000000c81e7011): kobject_uevent_env kobject: 'tunl0' (00000000c81e7011): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tunl0' (00000000c81e7011): calling ktype release kobject: 'tunl0': free name kobject: 'rx-0' (00000000c5cacde2): kobject_cleanup, parent 000000004083c6ed kobject: 'rx-0' (00000000c5cacde2): auto cleanup 'remove' event kobject: 'rx-0' (00000000c5cacde2): kobject_uevent_env kobject: 'rx-0' (00000000c5cacde2): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'rx-0' (00000000c5cacde2): auto cleanup kobject_del kobject: 'rx-0' (00000000c5cacde2): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (00000000b15d0c5d): kobject_cleanup, parent 000000004083c6ed kobject: 'tx-0' (00000000b15d0c5d): auto cleanup 'remove' event kobject: 'tx-0' (00000000b15d0c5d): kobject_uevent_env kobject: 'tx-0' (00000000b15d0c5d): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tx-0' (00000000b15d0c5d): auto cleanup kobject_del kobject: 'tx-0' (00000000b15d0c5d): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (000000004083c6ed): kobject_cleanup, parent (null) kobject: 'queues' (000000004083c6ed): calling ktype release kobject: 'queues' (000000004083c6ed): kset_release kobject: 'queues': free name kobject: 'lo' (000000008b7a3c27): kobject_uevent_env kobject: 'lo' (000000008b7a3c27): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'lo' (000000008b7a3c27): kobject_cleanup, parent (null) kobject: 'lo' (000000008b7a3c27): auto cleanup 'remove' event kobject: 'lo' (000000008b7a3c27): kobject_uevent_env kobject: 'lo' (000000008b7a3c27): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'lo' (000000008b7a3c27): calling ktype release kobject: 'lo': free name kobject: 'loop4' (0000000034c947df): kobject_uevent_env kobject: 'loop4' (0000000034c947df): fill_kobj_path: path = '/devices/virtual/block/loop4' TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. BUG: sleeping function called from invalid context at kernel/locking/mutex.c:908 in_atomic(): 1, irqs_disabled(): 0, pid: 3043, name: syz-executor2 kobject: 'loop3' (000000008ab183b8): kobject_uevent_env INFO: lockdep is turned off. Preemption disabled at: [] spin_lock include/linux/spinlock.h:329 [inline] [] vhost_iotlb_notify_vq drivers/vhost/vhost.c:940 [inline] [] vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline] [] vhost_chr_write_iter+0x96b/0x1170 drivers/vhost/vhost.c:1049 kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3' CPU: 1 PID: 3043 Comm: syz-executor2 Tainted: G W 4.20.0-rc1+ #322 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x244/0x39d lib/dump_stack.c:113 ___might_sleep.cold.86+0x221/0x254 kernel/sched/core.c:6142 __might_sleep+0x95/0x190 kernel/sched/core.c:6095 __mutex_lock_common kernel/locking/mutex.c:908 [inline] __mutex_lock+0x138/0x16f0 kernel/locking/mutex.c:1072 kobject: 'loop5' (000000005725632e): kobject_uevent_env kobject: 'loop5' (000000005725632e): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop3' (000000008ab183b8): kobject_uevent_env kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop0' (00000000224a0b64): kobject_uevent_env mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087 vhost_iotlb_notify_vq drivers/vhost/vhost.c:947 [inline] vhost_process_iotlb_msg drivers/vhost/vhost.c:999 [inline] vhost_chr_write_iter+0xc76/0x1170 drivers/vhost/vhost.c:1049 kobject: 'loop0' (00000000224a0b64): fill_kobj_path: path = '/devices/virtual/block/loop0' vhost_net_chr_write_iter+0x59/0x70 drivers/vhost/net.c:1737 call_write_iter include/linux/fs.h:1857 [inline] new_sync_write fs/read_write.c:474 [inline] __vfs_write+0x6b8/0x9f0 fs/read_write.c:487 vfs_write+0x1fc/0x560 fs/read_write.c:549 ksys_write+0x101/0x260 fs/read_write.c:598 __do_sys_write fs/read_write.c:610 [inline] __se_sys_write fs/read_write.c:607 [inline] __x64_sys_write+0x73/0xb0 fs/read_write.c:607 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe kobject: 'loop5' (000000005725632e): kobject_uevent_env RIP: 0033:0x457569 Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fd5d22a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 RDX: 0000000000000068 RSI: 0000000020000480 RDI: 0000000000000003 kobject: 'loop5' (000000005725632e): fill_kobj_path: path = '/devices/virtual/block/loop5' RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd5d22a36d4 R13: 00000000004c5939 R14: 00000000004d9580 R15: 00000000ffffffff TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. kobject: 'loop4' (0000000034c947df): kobject_uevent_env kobject: 'loop4' (0000000034c947df): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop4' (0000000034c947df): kobject_uevent_env kobject: 'loop4' (0000000034c947df): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop0' (00000000224a0b64): kobject_uevent_env kobject: 'loop0' (00000000224a0b64): fill_kobj_path: path = '/devices/virtual/block/loop0' TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. kobject: 'loop5' (000000005725632e): kobject_uevent_env kobject: 'loop5' (000000005725632e): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop2' (0000000087c7399c): kobject_uevent_env kobject: 'loop2' (0000000087c7399c): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop4' (0000000034c947df): kobject_uevent_env kobject: 'loop4' (0000000034c947df): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop3' (000000008ab183b8): kobject_uevent_env kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop4' (0000000034c947df): kobject_uevent_env kobject: 'loop4' (0000000034c947df): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop3' (000000008ab183b8): kobject_uevent_env kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop5' (000000005725632e): kobject_uevent_env kobject: 'loop5' (000000005725632e): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop3' (000000008ab183b8): kobject_uevent_env kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop0' (00000000224a0b64): kobject_uevent_env kobject: 'loop0' (00000000224a0b64): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop2' (0000000087c7399c): kobject_uevent_env TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. kobject: 'loop2' (0000000087c7399c): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop3' (000000008ab183b8): kobject_uevent_env kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop4' (0000000034c947df): kobject_uevent_env kobject: 'loop4' (0000000034c947df): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop3' (000000008ab183b8): kobject_uevent_env kobject: 'loop3' (000000008ab183b8): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop4' (0000000034c947df): kobject_uevent_env kobject: 'loop4' (0000000034c947df): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop5' (000000005725632e): kobject_uevent_env kobject: 'loop5' (000000005725632e): fill_kobj_path: path = '/devices/virtual/block/loop5'