IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 8021q: adding VLAN 0 to HW filter on device team0 INFO: task syz-executor3:2491 blocked for more than 140 seconds. Not tainted 4.20.0-rc5+ #266 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor3 D25120 2491 6132 0x20020004 Call Trace: context_switch kernel/sched/core.c:2831 [inline] __schedule+0x8cf/0x21d0 kernel/sched/core.c:3472 schedule+0xfe/0x460 kernel/sched/core.c:3516 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3574 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0xaff/0x16f0 kernel/locking/mutex.c:1072 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087 blk_trace_ioctl+0xeb/0x2f0 kernel/trace/blktrace.c:711 compat_blkdev_ioctl+0x99f/0x1b30 block/compat_ioctl.c:402 __do_compat_sys_ioctl fs/compat_ioctl.c:1052 [inline] __se_compat_sys_ioctl fs/compat_ioctl.c:998 [inline] __ia32_compat_sys_ioctl+0x20e/0x630 fs/compat_ioctl.c:998 do_syscall_32_irqs_on arch/x86/entry/common.c:326 [inline] do_fast_syscall_32+0x34d/0xfb2 arch/x86/entry/common.c:397 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 RIP: 0023:0xf7effa29 Code: Bad RIP value. RSP: 002b:00000000f5eda0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0401273 RDX: 0000000020000280 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 Showing all locks held in the system: 1 lock held by khungtaskd/1018: #0: 00000000da65ca8e (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x424 kernel/locking/lockdep.c:4379 1 lock held by rsyslogd/5942: #0: 00000000bc2d59a0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 fs/file.c:766 2 locks held by getty/6032: #0: 0000000095b97436 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353 #1: 0000000060fb84c4 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 drivers/tty/n_tty.c:2154 2 locks held by getty/6033: #0: 00000000e473d174 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353 #1: 0000000009b948f8 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 drivers/tty/n_tty.c:2154 2 locks held by getty/6034: #0: 00000000cd347643 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353 #1: 00000000e4ab0220 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 drivers/tty/n_tty.c:2154 2 locks held by getty/6035: #0: 0000000024bd9ebb (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353 #1: 000000005ef81860 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 drivers/tty/n_tty.c:2154 2 locks held by getty/6036: #0: 000000004470e0b2 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353 #1: 000000005eacb4f1 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 drivers/tty/n_tty.c:2154 2 locks held by getty/6037: #0: 00000000182c1d48 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353 #1: 00000000e22da3d1 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 drivers/tty/n_tty.c:2154 2 locks held by getty/6038: #0: 000000000f01d233 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353 #1: 000000006938c4d4 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 drivers/tty/n_tty.c:2154 1 lock held by syz-executor2/16293: #0: 000000001f95c958 (&sig->cred_guard_mutex){+.+.}, at: prepare_bprm_creds+0x53/0x120 fs/exec.c:1404 2 locks held by syz-executor5/2456: 1 lock held by syz-executor3/2491: #0: 0000000064ab92b1 (&q->blk_trace_mutex){+.+.}, at: blk_trace_ioctl+0xeb/0x2f0 kernel/trace/blktrace.c:711 1 lock held by syz-executor1/2775: #0: 0000000064ab92b1 (&q->blk_trace_mutex){+.+.}, at: blk_trace_ioctl+0xeb/0x2f0 kernel/trace/blktrace.c:711 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 1018 Comm: khungtaskd Not tainted 4.20.0-rc5+ #266 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x244/0x39d lib/dump_stack.c:113 nmi_cpu_backtrace.cold.2+0x5c/0xa1 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1e8/0x22a lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:205 [inline] watchdog+0xb51/0x1060 kernel/hung_task.c:289 kthread+0x35a/0x440 kernel/kthread.c:246 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 2456 Comm: syz-executor5 Not tainted 4.20.0-rc5+ #266 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:mark_held_locks+0x85/0x130 kernel/locking/lockdep.c:2725 Code: 31 db 49 bf 00 00 00 00 00 fc ff df 41 8d 44 24 02 89 45 d4 41 8d 44 24 03 89 45 d0 4d 8d a6 80 08 00 00 49 c1 ed 03 4d 01 fd <48> 63 c3 48 8d 04 80 49 8d 34 c4 48 8d 7e 22 48 89 f8 48 89 fa 48 RSP: 0018:ffff88818c4574f0 EFLAGS: 00000002 RAX: 0000000000000000 RBX: 0000000000000001 RCX: 1ffff11031c6b92c RDX: 1ffffffff158c6d6 RSI: 0000000000000000 RDI: ffffffff8ac636b0 RBP: ffff88818c457530 R08: ffff88818e35c960 R09: 0000000000000006 R10: 0000000000000000 R11: ffff88818e35c0c0 R12: ffff88818e35c940 R13: ffffed1031c6b927 R14: ffff88818e35c0c0 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8881daf00000(0063) knlGS:00000000f5f16b40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: 000000c42d4bf000 CR3: 000000019ac1d000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __trace_hardirqs_on_caller kernel/locking/lockdep.c:2766 [inline] lockdep_hardirqs_on+0x3bb/0x5b0 kernel/locking/lockdep.c:2811 trace_hardirqs_on+0xbd/0x310 kernel/trace/trace_preemptirq.c:30 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] _raw_spin_unlock_irqrestore+0x82/0xd0 kernel/locking/spinlock.c:184 __debug_check_no_obj_freed lib/debugobjects.c:798 [inline] debug_check_no_obj_freed+0x305/0x58d lib/debugobjects.c:817 __vunmap+0x1a3/0x460 mm/vmalloc.c:1516 vunmap+0x55/0x70 mm/vmalloc.c:1615 relay_destroy_buf+0x77/0x360 kernel/relay.c:213 relay_open_buf.part.10+0x81c/0xb20 kernel/relay.c:479 relay_open_buf kernel/relay.c:447 [inline] relay_open+0x5e5/0xac0 kernel/relay.c:597 do_blk_trace_setup+0x4fe/0xdb0 kernel/trace/blktrace.c:532 compat_blk_trace_setup+0x3d3/0x710 kernel/trace/blktrace.c:623 blk_trace_ioctl+0x298/0x2f0 kernel/trace/blktrace.c:721 compat_blkdev_ioctl+0x99f/0x1b30 block/compat_ioctl.c:402 __do_compat_sys_ioctl fs/compat_ioctl.c:1052 [inline] __se_compat_sys_ioctl fs/compat_ioctl.c:998 [inline] __ia32_compat_sys_ioctl+0x20e/0x630 fs/compat_ioctl.c:998 do_syscall_32_irqs_on arch/x86/entry/common.c:326 [inline] do_fast_syscall_32+0x34d/0xfb2 arch/x86/entry/common.c:397 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 RIP: 0023:0xf7f3ba29 Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 RSP: 002b:00000000f5f160cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0401273 RDX: 0000000020000280 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000