BUG: sleeping function called from invalid context at kernel/locking/mutex.c:908 in_atomic(): 1, irqs_disabled(): 0, pid: 8115, name: sshd 2 locks held by sshd/8115: #0: 000000001ffc85fa (sk_lock-AF_INET){+.+.}, at: lock_sock include/net/sock.h:1506 [inline] #0: 000000001ffc85fa (sk_lock-AF_INET){+.+.}, at: tcp_recvmsg+0x1dc/0x29a0 net/ipv4/tcp.c:1953 #1: 00000000f49c6ab5 ((&sp->resync_t)){+.-.}, at: lockdep_copy_map include/linux/lockdep.h:168 [inline] #1: 00000000f49c6ab5 ((&sp->resync_t)){+.-.}, at: call_timer_fn+0xda/0x720 kernel/time/timer.c:1316 Preemption disabled at: [] spin_lock_bh include/linux/spinlock.h:334 [inline] [] lock_sock_nested+0x41/0x120 net/core/sock.c:2838 CPU: 1 PID: 8115 Comm: sshd Not tainted 4.19.100-syzkaller #0 FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x197/0x210 lib/dump_stack.c:118 FAT-fs (loop0): Filesystem has been set read-only ___might_sleep.cold+0x1bd/0x1f6 kernel/sched/core.c:6192 __might_sleep+0x95/0x190 kernel/sched/core.c:6145 __mutex_lock_common kernel/locking/mutex.c:908 [inline] __mutex_lock+0xc8/0x1300 kernel/locking/mutex.c:1072 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087 tpk_write+0x5d/0x340 drivers/char/ttyprintk.c:123 resync_tnc+0x1b6/0x320 drivers/net/hamradio/6pack.c:522 call_timer_fn+0x18d/0x720 kernel/time/timer.c:1326 expire_timers kernel/time/timer.c:1363 [inline] __run_timers kernel/time/timer.c:1684 [inline] __run_timers kernel/time/timer.c:1652 [inline] run_timer_softirq+0x64f/0x16a0 kernel/time/timer.c:1697 __do_softirq+0x25c/0x921 kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1091 do_softirq.part.0+0x11a/0x170 kernel/softirq.c:336 do_softirq kernel/softirq.c:328 [inline] __local_bh_enable_ip+0x211/0x270 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] lock_sock_nested+0xe2/0x120 net/core/sock.c:2847 lock_sock include/net/sock.h:1506 [inline] tcp_recvmsg+0x1dc/0x29a0 net/ipv4/tcp.c:1953 inet_recvmsg+0x136/0x5f0 net/ipv4/af_inet.c:830 sock_recvmsg_nosec net/socket.c:795 [inline] sock_recvmsg net/socket.c:802 [inline] sock_recvmsg+0xce/0x110 net/socket.c:798 sock_read_iter+0x2f8/0x420 net/socket.c:879 call_read_iter include/linux/fs.h:1814 [inline] new_sync_read fs/read_write.c:406 [inline] __vfs_read+0x584/0x800 fs/read_write.c:418 vfs_read+0x194/0x3d0 fs/read_write.c:452 ksys_read+0x14f/0x2d0 fs/read_write.c:579 __do_sys_read fs/read_write.c:589 [inline] __se_sys_read fs/read_write.c:587 [inline] __x64_sys_read+0x73/0xb0 fs/read_write.c:587 do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f5f10b17310 Code: 73 01 c3 48 8b 0d 28 4b 2b 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 83 3d e5 a2 2b 00 00 75 10 b8 00 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e 8a 01 00 48 89 04 24 RSP: 002b:00007ffda75a5338 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 00005642d4706ba0 RCX: 00007f5f10b17310 RDX: 0000000000004000 RSI: 00007ffda75a5370 RDI: 0000000000000003 RBP: 0000000000000003 R08: 00007ffda75a9350 R09: 0101010101010101 R10: 0000000000000008 R11: 0000000000000246 R12: 00007ffda75a536c R13: 00005642d3ad1fb4 R14: 0000000000000028 R15: 00005642d3ad3ca0 ================================ WARNING: inconsistent lock state 4.19.100-syzkaller #0 Tainted: G W -------------------------------- inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. sshd/8115 [HC0[0]:SC1[1]:HE1:SE0] takes: 0000000011da74d4 (&tpk_port.port_write_mutex){+.?.}, at: tpk_write+0x5d/0x340 drivers/char/ttyprintk.c:123 {SOFTIRQ-ON-W} state was registered at: lock_acquire+0x16f/0x3f0 kernel/locking/lockdep.c:3903 __mutex_lock_common kernel/locking/mutex.c:925 [inline] __mutex_lock+0xf7/0x1300 kernel/locking/mutex.c:1072 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087 tpk_close+0x50/0x95 drivers/char/ttyprintk.c:104 tty_release+0x3ba/0xe90 drivers/tty/tty_io.c:1678 __fput+0x2dd/0x8b0 fs/file_table.c:278 ____fput+0x16/0x20 fs/file_table.c:309 task_work_run+0x145/0x1c0 kernel/task_work.c:113 exit_task_work include/linux/task_work.h:22 [inline] do_exit+0xc1f/0x30d0 kernel/exit.c:880 do_group_exit+0x135/0x370 kernel/exit.c:983 get_signal+0x3ec/0x1fc0 kernel/signal.c:2583 do_signal+0x95/0x1960 arch/x86/kernel/signal.c:821 exit_to_usermode_loop+0x244/0x2c0 arch/x86/entry/common.c:163 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x53d/0x620 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe irq event stamp: 445956 hardirqs last enabled at (445956): [] trace_hardirqs_on_thunk+0x1a/0x1c hardirqs last disabled at (445955): [] trace_hardirqs_off_thunk+0x1a/0x1c softirqs last enabled at (445864): [] lock_sock_nested+0x9a/0x120 net/core/sock.c:2841 softirqs last disabled at (445865): [] do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1091 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&tpk_port.port_write_mutex); lock(&tpk_port.port_write_mutex); *** DEADLOCK *** 2 locks held by sshd/8115: #0: 000000001ffc85fa (sk_lock-AF_INET){+.+.}, at: lock_sock include/net/sock.h:1506 [inline] #0: 000000001ffc85fa (sk_lock-AF_INET){+.+.}, at: tcp_recvmsg+0x1dc/0x29a0 net/ipv4/tcp.c:1953 #1: 00000000f49c6ab5 ((&sp->resync_t)){+.-.}, at: lockdep_copy_map include/linux/lockdep.h:168 [inline] #1: 00000000f49c6ab5 ((&sp->resync_t)){+.-.}, at: call_timer_fn+0xda/0x720 kernel/time/timer.c:1316 stack backtrace: CPU: 1 PID: 8115 Comm: sshd Tainted: G W 4.19.100-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x197/0x210 lib/dump_stack.c:118 print_usage_bug.cold+0x330/0x42a kernel/locking/lockdep.c:2540 valid_state kernel/locking/lockdep.c:2553 [inline] mark_lock_irq kernel/locking/lockdep.c:2747 [inline] mark_lock+0xd1b/0x1370 kernel/locking/lockdep.c:3127 mark_irqflags kernel/locking/lockdep.c:3005 [inline] __lock_acquire+0xc62/0x49c0 kernel/locking/lockdep.c:3368 lock_acquire+0x16f/0x3f0 kernel/locking/lockdep.c:3903 __mutex_lock_common kernel/locking/mutex.c:925 [inline] __mutex_lock+0xf7/0x1300 kernel/locking/mutex.c:1072 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087 tpk_write+0x5d/0x340 drivers/char/ttyprintk.c:123 resync_tnc+0x1b6/0x320 drivers/net/hamradio/6pack.c:522 call_timer_fn+0x18d/0x720 kernel/time/timer.c:1326 expire_timers kernel/time/timer.c:1363 [inline] __run_timers kernel/time/timer.c:1684 [inline] __run_timers kernel/time/timer.c:1652 [inline] run_timer_softirq+0x64f/0x16a0 kernel/time/timer.c:1697 __do_softirq+0x25c/0x921 kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1091 do_softirq.part.0+0x11a/0x170 kernel/softirq.c:336 do_softirq kernel/softirq.c:328 [inline] __local_bh_enable_ip+0x211/0x270 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] lock_sock_nested+0xe2/0x120 net/core/sock.c:2847 lock_sock include/net/sock.h:1506 [inline] tcp_recvmsg+0x1dc/0x29a0 net/ipv4/tcp.c:1953 inet_recvmsg+0x136/0x5f0 net/ipv4/af_inet.c:830 sock_recvmsg_nosec net/socket.c:795 [inline] sock_recvmsg net/socket.c:802 [inline] sock_recvmsg+0xce/0x110 net/socket.c:798 sock_read_iter+0x2f8/0x420 net/socket.c:879 call_read_iter include/linux/fs.h:1814 [inline] new_sync_read fs/read_write.c:406 [inline] __vfs_read+0x584/0x800 fs/read_write.c:418 vfs_read+0x194/0x3d0 fs/read_write.c:452 ksys_read+0x14f/0x2d0 fs/read_write.c:579 __do_sys_read fs/read_write.c:589 [inline] __se_sys_read fs/read_write.c:587 [inline] __x64_sys_read+0x73/0xb0 fs/read_write.c:587 do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f5f10b17310 Code: 73 01 c3 48 8b 0d 28 4b 2b 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 83 3d e5 a2 2b 00 00 75 10 b8 00 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e 8a 01 00 48 89 04 24 RSP: 002b:00007ffda75a5338 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 00005642d4706ba0 RCX: 00007f5f10b17310 RDX: 0000000000004000 RSI: 00007ffda75a5370 RDI: 0000000000000003 RBP: 0000000000000003 R08: 00007ffda75a9350 R09: 0101010101010101 R10: 0000000000000008 R11: 0000000000000246 R12: 00007ffda75a536c R13: 00005642d3ad1fb4 R14: 0000000000000028 R15: 00005642d3ad3ca0 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:908 in_atomic(): 1, irqs_disabled(): 0, pid: 8115, name: sshd INFO: lockdep is turned off. Preemption disabled at: [] spin_lock_bh include/linux/spinlock.h:334 [inline] [] lock_sock_nested+0x41/0x120 net/core/sock.c:2838 CPU: 1 PID: 8115 Comm: sshd Tainted: G W 4.19.100-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x197/0x210 lib/dump_stack.c:118 ___might_sleep.cold+0x1bd/0x1f6 kernel/sched/core.c:6192 __might_sleep+0x95/0x190 kernel/sched/core.c:6145 __mutex_lock_common kernel/locking/mutex.c:908 [inline] __mutex_lock+0xc8/0x1300 kernel/locking/mutex.c:1072 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087 tpk_write+0x5d/0x340 drivers/char/ttyprintk.c:123 resync_tnc+0x22e/0x320 drivers/net/hamradio/6pack.c:523 call_timer_fn+0x18d/0x720 kernel/time/timer.c:1326 expire_timers kernel/time/timer.c:1363 [inline] __run_timers kernel/time/timer.c:1684 [inline] __run_timers kernel/time/timer.c:1652 [inline] run_timer_softirq+0x64f/0x16a0 kernel/time/timer.c:1697 __do_softirq+0x25c/0x921 kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1091 do_softirq.part.0+0x11a/0x170 kernel/softirq.c:336 do_softirq kernel/softirq.c:328 [inline] __local_bh_enable_ip+0x211/0x270 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] lock_sock_nested+0xe2/0x120 net/core/sock.c:2847 lock_sock include/net/sock.h:1506 [inline] tcp_recvmsg+0x1dc/0x29a0 net/ipv4/tcp.c:1953 inet_recvmsg+0x136/0x5f0 net/ipv4/af_inet.c:830 sock_recvmsg_nosec net/socket.c:795 [inline] sock_recvmsg net/socket.c:802 [inline] sock_recvmsg+0xce/0x110 net/socket.c:798 sock_read_iter+0x2f8/0x420 net/socket.c:879 call_read_iter include/linux/fs.h:1814 [inline] new_sync_read fs/read_write.c:406 [inline] __vfs_read+0x584/0x800 fs/read_write.c:418 vfs_read+0x194/0x3d0 fs/read_write.c:452 ksys_read+0x14f/0x2d0 fs/read_write.c:579 __do_sys_read fs/read_write.c:589 [inline] __se_sys_read fs/read_write.c:587 [inline] __x64_sys_read+0x73/0xb0 fs/read_write.c:587 do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f5f10b17310 Code: 73 01 c3 48 8b 0d 28 4b 2b 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 83 3d e5 a2 2b 00 00 75 10 b8 00 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e 8a 01 00 48 89 04 24 RSP: 002b:00007ffda75a5338 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 00005642d4706ba0 RCX: 00007f5f10b17310 RDX: 0000000000004000 RSI: 00007ffda75a5370 RDI: 0000000000000003 RBP: 0000000000000003 R08: 00007ffda75a9350 R09: 0101010101010101 R10: 0000000000000008 R11: 0000000000000246 R12: 00007ffda75a536c R13: 00005642d3ad1fb4 R14: 0000000000000028 R15: 00005642d3ad3ca0 selinux_nlmsg_perm: 12 callbacks suppressed SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17227 sclass=netlink_route_socket pig=20729 comm=syz-executor.1 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17227 sclass=netlink_route_socket pig=20741 comm=syz-executor.5 audit: type=1800 audit(1580490745.808:4662): pid=20742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=407 res=0 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29545 sclass=netlink_route_socket pig=20742 comm=syz-executor.0 netlink: 'memory.current': attribute type 10 has an invalid length. SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pig=20756 comm=syz-executor.3 FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' FAT-fs (loop0): Filesystem has been set read-only SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29545 sclass=netlink_route_socket pig=20755 comm=syz-executor.0 netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. netlink: 'memory.current': attribute type 10 has an invalid length. ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pig=20751 comm=syz-executor.3 netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17227 sclass=netlink_route_socket pig=20785 comm=syz-executor.1 FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF FAT-fs (loop0): Filesystem has been set read-only SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pig=20799 comm=syz-executor.3 netlink: 'memory.current': attribute type 10 has an invalid length. netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17227 sclass=netlink_route_socket pig=20800 comm=syz-executor.5 ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' kauditd_printk_skb: 3 callbacks suppressed audit: type=1800 audit(1580490746.828:4666): pid=20808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=409 res=0 audit: type=1804 audit(1580490746.848:4667): pid=20808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir601959932/syzkaller.4mh7H1/262/file0/file0" dev="loop0" ino=409 res=1 audit: type=1800 audit(1580490747.018:4668): pid=20818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=410 res=0 audit: type=1804 audit(1580490747.068:4669): pid=20818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir518171939/syzkaller.1NqUdL/337/file0/file0" dev="loop3" ino=410 res=1 audit: type=1800 audit(1580490747.178:4670): pid=20829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=411 res=0 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17227 sclass=netlink_route_socket pig=20833 comm=syz-executor.1 audit: type=1804 audit(1580490747.228:4671): pid=20829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir601959932/syzkaller.4mh7H1/263/file0/file0" dev="loop0" ino=411 res=1 FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 17) FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) netlink: 'memory.current': attribute type 10 has an invalid length. FAT-fs (loop0): Filesystem has been set read-only FAT-fs (loop3): Filesystem has been set read-only ieee80211 phy11: Selected rate control algorithm 'minstrel_ht' audit: type=1800 audit(1580490747.668:4672): pid=20861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=412 res=0 FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) FAT-fs (loop0): Filesystem has been set read-only audit: type=1804 audit(1580490747.668:4673): pid=20861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir601959932/syzkaller.4mh7H1/264/file0/file0" dev="loop0" ino=412 res=1 audit: type=1800 audit(1580490747.748:4674): pid=20865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=413 res=0 audit: type=1804 audit(1580490747.768:4675): pid=20865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir518171939/syzkaller.1NqUdL/338/file0/file0" dev="loop3" ino=413 res=1 netlink: 'memory.current': attribute type 10 has an invalid length. FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 17) FAT-fs (loop3): Filesystem has been set read-only ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF FAT-fs (loop0): Filesystem has been set read-only netlink: 'memory.current': attribute type 10 has an invalid length. FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF FAT-fs (loop0): Filesystem has been set read-only ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 17) FAT-fs (loop3): Filesystem has been set read-only netlink: 'memory.current': attribute type 10 has an invalid length. ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' netlink: 'memory.current': attribute type 10 has an invalid length. ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) FAT-fs (loop0): Filesystem has been set read-only netlink: 'memory.current': attribute type 10 has an invalid length. ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' BUG: sleeping function called from invalid context at kernel/locking/mutex.c:908 in_atomic(): 1, irqs_disabled(): 0, pid: 21038, name: syz-executor.0 INFO: lockdep is turned off. Preemption disabled at: [] __do_softirq+0xf3/0x921 kernel/softirq.c:269 CPU: 1 PID: 21038 Comm: syz-executor.0 Tainted: G W 4.19.100-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x197/0x210 lib/dump_stack.c:118 ___might_sleep.cold+0x1bd/0x1f6 kernel/sched/core.c:6192 __might_sleep+0x95/0x190 kernel/sched/core.c:6145 __mutex_lock_common kernel/locking/mutex.c:908 [inline] __mutex_lock+0xc8/0x1300 kernel/locking/mutex.c:1072 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087 tpk_write+0x5d/0x340 drivers/char/ttyprintk.c:123 resync_tnc+0x1b6/0x320 drivers/net/hamradio/6pack.c:522 call_timer_fn+0x18d/0x720 kernel/time/timer.c:1326 expire_timers kernel/time/timer.c:1363 [inline] __run_timers kernel/time/timer.c:1684 [inline] __run_timers kernel/time/timer.c:1652 [inline] run_timer_softirq+0x64f/0x16a0 kernel/time/timer.c:1697 __do_softirq+0x25c/0x921 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x180/0x1d0 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x13b/0x550 arch/x86/kernel/apic/apic.c:1094 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:893 RIP: 0010:__filemap_fdatawait_range+0x367/0x520 mm/filemap.c:521 Code: 42 b1 87 e8 2b 6c c4 ff 48 8b 9d f8 fe ff ff 4c 8b b5 a8 fe ff ff 48 89 df 4c 89 f6 e8 72 3c e6 ff 4c 39 f3 0f 86 71 fd ff ff 44 3b e6 ff 48 b8 00 00 00 00 00 fc ff df 48 03 85 a0 fe ff ff RSP: 0018:ffff888052a97420 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffffffff8184c6f5 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 RBP: ffff888052a97580 R08: ffff88804fd1e2c0 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: dffffc0000000000 R14: 0000000000000001 R15: 000000000000106a filemap_fdatawait_range mm/filemap.c:560 [inline] filemap_write_and_wait_range mm/filemap.c:683 [inline] filemap_write_and_wait_range+0x73/0xd0 mm/filemap.c:673 generic_file_direct_write+0x39d/0x4b0 mm/filemap.c:3041 __generic_file_write_iter+0x2ee/0x630 mm/filemap.c:3244 generic_file_write_iter+0x383/0x72f mm/filemap.c:3315 call_write_iter include/linux/fs.h:1820 [inline] new_sync_write fs/read_write.c:474 [inline] __vfs_write+0x587/0x810 fs/read_write.c:487 __kernel_write+0x110/0x390 fs/read_write.c:506 write_pipe_buf+0x15d/0x1f0 fs/splice.c:798 splice_from_pipe_feed fs/splice.c:503 [inline] __splice_from_pipe+0x391/0x7d0 fs/splice.c:627 splice_from_pipe+0x108/0x170 fs/splice.c:662 default_file_splice_write+0x3c/0x90 fs/splice.c:810 do_splice_from fs/splice.c:852 [inline] direct_splice_actor+0x123/0x190 fs/splice.c:1025 splice_direct_to_actor+0x367/0x970 fs/splice.c:980 do_splice_direct+0x1da/0x2a0 fs/splice.c:1068 do_sendfile+0x597/0xce0 fs/read_write.c:1447 __do_sys_sendfile64 fs/read_write.c:1508 [inline] __se_sys_sendfile64 fs/read_write.c:1494 [inline] __x64_sys_sendfile64+0x1dd/0x220 fs/read_write.c:1494 do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45b349 Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fd894164c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007fd8941656d4 RCX: 000000000045b349 RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 R10: 000000007fffffa7 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000000008c9 R14: 00000000004ca1ed R15: 000000000075bf2c FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF FAT-fs (loop0): Filesystem has been set read-only selinux_nlmsg_perm: 25 callbacks suppressed SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17227 sclass=netlink_route_socket pig=21062 comm=syz-executor.5 netlink: 'memory.current': attribute type 10 has an invalid length. SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29545 sclass=netlink_route_socket pig=21073 comm=syz-executor.0 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17227 sclass=netlink_route_socket pig=21084 comm=syz-executor.5 ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29545 sclass=netlink_route_socket pig=21093 comm=syz-executor.1 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17227 sclass=netlink_route_socket pig=21093 comm=syz-executor.1 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29545 sclass=netlink_route_socket pig=21073 comm=syz-executor.0 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16279 sclass=netlink_route_socket pig=21073 comm=syz-executor.0 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17227 sclass=netlink_route_socket pig=21102 comm=syz-executor.5 netlink: 'memory.current': attribute type 10 has an invalid length. ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' kauditd_printk_skb: 25 callbacks suppressed audit: type=1800 audit(1580490751.878:4701): pid=21120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=425 res=0 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29545 sclass=netlink_route_socket pig=21120 comm=syz-executor.0 audit: type=1804 audit(1580490751.888:4702): pid=21120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir601959932/syzkaller.4mh7H1/272/file0/file0" dev="loop0" ino=425 res=1 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17227 sclass=netlink_route_socket pig=21129 comm=syz-executor.3 netlink: 'memory.current': attribute type 10 has an invalid length. FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF FAT-fs (loop0): Filesystem has been set read-only ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' audit: type=1800 audit(1580490752.348:4703): pid=21146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=426 res=0 netlink: 'memory.current': attribute type 10 has an invalid length. audit: type=1804 audit(1580490752.398:4704): pid=21146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir601959932/syzkaller.4mh7H1/273/file0/file0" dev="loop0" ino=426 res=1 FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF FAT-fs (loop0): Filesystem has been set read-only ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' audit: type=1800 audit(1580490752.548:4705): pid=21159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=427 res=0 audit: type=1804 audit(1580490752.568:4706): pid=21159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir518171939/syzkaller.1NqUdL/346/file0/file0" dev="loop3" ino=427 res=1 netlink: 'memory.current': attribute type 10 has an invalid length. audit: type=1800 audit(1580490752.938:4707): pid=21188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=428 res=0 ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' audit: type=1804 audit(1580490752.968:4708): pid=21188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir518171939/syzkaller.1NqUdL/347/file0/file0" dev="loop3" ino=428 res=1 FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) audit: type=1800 audit(1580490752.988:4709): pid=21193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=429 res=0 FAT-fs (loop0): Filesystem has been set read-only audit: type=1804 audit(1580490752.998:4710): pid=21193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir601959932/syzkaller.4mh7H1/274/file0/file0" dev="loop0" ino=429 res=1 netlink: 'memory.current': attribute type 10 has an invalid length. FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) FAT-fs (loop0): Filesystem has been set read-only ieee80211 phy22: Selected rate control algorithm 'minstrel_ht'