audit: backlog limit exceeded
audit: audit_backlog=65 > audit_backlog_limit=64
audit: audit_lost=6491 audit_rate_limit=0 audit_backlog_limit=64
audit: backlog limit exceeded
audit: audit_backlog=65 > audit_backlog_limit=64
INFO: task init:16395 blocked for more than 140 seconds.
      Not tainted 4.14.81+ #6
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
init            D29032 16395      1 0x00000000
Call Trace:
 schedule+0x7f/0x1b0 kernel/sched/core.c:3490
 schedule_timeout+0x710/0xe60 kernel/time/timer.c:1721
 __down_common kernel/locking/semaphore.c:221 [inline]
 __down+0x180/0x2a0 kernel/locking/semaphore.c:238
 down+0x58/0x70 kernel/locking/semaphore.c:62
 console_lock+0x24/0x70 kernel/printk/printk.c:2061
 console_device+0x17/0xb0 kernel/printk/printk.c:2348
 tty_lookup_driver+0x17a/0x210 drivers/tty/tty_io.c:1833
 tty_open_by_driver drivers/tty/tty_io.c:1928 [inline]
 tty_open+0x3b9/0x980 drivers/tty/tty_io.c:2011
 chrdev_open+0x20d/0x570 fs/char_dev.c:417
 do_dentry_open+0x426/0xda0 fs/open.c:764
 vfs_open+0x11c/0x210 fs/open.c:878
 do_last fs/namei.c:3408 [inline]
 path_openat+0x4eb/0x23a0 fs/namei.c:3550
 do_filp_open+0x197/0x270 fs/namei.c:3584
 do_sys_open+0x2ef/0x580 fs/open.c:1071
 do_syscall_64+0x19b/0x4b0 arch/x86/entry/common.c:289
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x7f7ff2710120
RSP: 002b:00007fffcda28cf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 000000000092f1b0 RCX: 00007f7ff2710120
RDX: 0000000000000010 RSI: 0000000000000902 RDI: 00000000004072c8
RBP: 0000000000000000 R08: 0000000000407370 R09: 0000000000000001
R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000902
R13: 0000000000000102 R14: 00007fffcda28e70 R15: 000000000092f1b8

Showing all locks held in the system:
1 lock held by khungtaskd/23:
 #0:  (tasklist_lock){.+.+}, at: [<ffffffff95e023b7>] debug_show_all_locks+0x74/0x20f kernel/locking/lockdep.c:4541
1 lock held by rsyslogd/1632:
 #0:  (&f->f_pos_lock){+.+.}, at: [<ffffffff961bdcf2>] __fdget_pos+0xa2/0xc0 fs/file.c:768
2 locks held by getty/1760:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
1 lock held by syz-fuzzer/5728:
 #0:  (&ei->i_mmap_sem){++++}, at: [<ffffffff96361635>] ext4_filemap_fault+0x75/0xb0 fs/ext4/inode.c:6177
2 locks held by syz-executor2/6964:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/12401:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/12478:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/12684:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/12737:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/12789:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/12910:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/13007:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/13115:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/13161:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/13507:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/13557:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/13614:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/13646:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/13765:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/13887:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/13940:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/13990:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/14559:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/14594:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/14635:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/14676:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/14983:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/15160:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/15287:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/15341:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/15412:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/15455:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/15566:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/15801:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/15898:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/16359:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/16560:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/16729:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/16845:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/16893:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/17150:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/17206:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor3/17253:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff9693cf30>] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff969384af>] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142
1 lock held by udevd/953:
 #0:  (sb_writers#3){.+.+}, at: [<ffffffff9615c6e7>] file_start_write include/linux/fs.h:2724 [inline]
 #0:  (sb_writers#3){.+.+}, at: [<ffffffff9615c6e7>] vfs_write+0x3d7/0x4d0 fs/read_write.c:545
1 lock held by init/16395:
 #0:  (tty_mutex){+.+.}, at: [<ffffffff9692c928>] tty_open_by_driver drivers/tty/tty_io.c:1927 [inline]
 #0:  (tty_mutex){+.+.}, at: [<ffffffff9692c928>] tty_open+0x3a8/0x980 drivers/tty/tty_io.c:2011
1 lock held by init/17472:
 #0:  (tty_mutex){+.+.}, at: [<ffffffff9692c928>] tty_open_by_driver drivers/tty/tty_io.c:1927 [inline]
 #0:  (tty_mutex){+.+.}, at: [<ffffffff9692c928>] tty_open+0x3a8/0x980 drivers/tty/tty_io.c:2011
1 lock held by init/17473:
 #0:  (tty_mutex){+.+.}, at: [<ffffffff9692c928>] tty_open_by_driver drivers/tty/tty_io.c:1927 [inline]
 #0:  (tty_mutex){+.+.}, at: [<ffffffff9692c928>] tty_open+0x3a8/0x980 drivers/tty/tty_io.c:2011
1 lock held by init/17474:
 #0:  (tty_mutex){+.+.}, at: [<ffffffff9692c928>] tty_open_by_driver drivers/tty/tty_io.c:1927 [inline]
 #0:  (tty_mutex){+.+.}, at: [<ffffffff9692c928>] tty_open+0x3a8/0x980 drivers/tty/tty_io.c:2011
1 lock held by init/17475:
 #0:  (tty_mutex){+.+.}, at: [<ffffffff9692c928>] tty_open_by_driver drivers/tty/tty_io.c:1927 [inline]
 #0:  (tty_mutex){+.+.}, at: [<ffffffff9692c928>] tty_open+0x3a8/0x980 drivers/tty/tty_io.c:2011
1 lock held by syz-executor0/18164:
 #0:  (&mm->mmap_sem){++++}, at: [<ffffffff95cb3fed>] __do_page_fault+0x26d/0xb60 arch/x86/mm/fault.c:1354
1 lock held by syz-executor0/18168:
 #0:  (&ei->i_mmap_sem){++++}, at: [<ffffffff96361635>] ext4_filemap_fault+0x75/0xb0 fs/ext4/inode.c:6177
1 lock held by syz-executor3/18171:
 #0:  (&mm->mmap_sem){++++}, at: [<ffffffff960912cf>] vm_mmap_pgoff+0x14f/0x1d0 mm/util.c:331
1 lock held by syz-executor3/18173:
 #0:  (&mm->mmap_sem){++++}, at: [<ffffffff960c22f6>] __mm_populate+0x206/0x300 mm/gup.c:1247
1 lock held by blkid/18174:
 #0:  (&mm->mmap_sem){++++}, at: [<ffffffff95cb45e8>] __do_page_fault+0x868/0xb60 arch/x86/mm/fault.c:1361
1 lock held by syz-executor5/18177:
 #0:  (&mm->mmap_sem){++++}, at: [<ffffffff95cb45e8>] __do_page_fault+0x868/0xb60 arch/x86/mm/fault.c:1361
1 lock held by syz-executor5/18179:
 #0:  (&mm->mmap_sem){++++}, at: [<ffffffff95cb45e8>] __do_page_fault+0x868/0xb60 arch/x86/mm/fault.c:1361
3 locks held by syz-executor5/18180:
 #0:  (&dup_mmap_sem){.+.+}, at: [<ffffffff95cd03d9>] dup_mmap kernel/fork.c:609 [inline]
 #0:  (&dup_mmap_sem){.+.+}, at: [<ffffffff95cd03d9>] dup_mm kernel/fork.c:1202 [inline]
 #0:  (&dup_mmap_sem){.+.+}, at: [<ffffffff95cd03d9>] copy_mm kernel/fork.c:1256 [inline]
 #0:  (&dup_mmap_sem){.+.+}, at: [<ffffffff95cd03d9>] copy_process.part.6+0x3989/0x6530 kernel/fork.c:1762
 #1:  (&mm->mmap_sem){++++}, at: [<ffffffff95cd03f5>] dup_mmap kernel/fork.c:610 [inline]
 #1:  (&mm->mmap_sem){++++}, at: [<ffffffff95cd03f5>] dup_mm kernel/fork.c:1202 [inline]
 #1:  (&mm->mmap_sem){++++}, at: [<ffffffff95cd03f5>] copy_mm kernel/fork.c:1256 [inline]
 #1:  (&mm->mmap_sem){++++}, at: [<ffffffff95cd03f5>] copy_process.part.6+0x39a5/0x6530 kernel/fork.c:1762
 #2:  (&mm->mmap_sem/1){+.+.}, at: [<ffffffff95cd043d>] dup_mmap kernel/fork.c:619 [inline]
 #2:  (&mm->mmap_sem/1){+.+.}, at: [<ffffffff95cd043d>] dup_mm kernel/fork.c:1202 [inline]
 #2:  (&mm->mmap_sem/1){+.+.}, at: [<ffffffff95cd043d>] copy_mm kernel/fork.c:1256 [inline]
 #2:  (&mm->mmap_sem/1){+.+.}, at: [<ffffffff95cd043d>] copy_process.part.6+0x39ed/0x6530 kernel/fork.c:1762
1 lock held by udevd/18181:
 #0:  (&mm->mmap_sem){++++}, at: [<ffffffff95cb3fed>] __do_page_fault+0x26d/0xb60 arch/x86/mm/fault.c:1354

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 23 Comm: khungtaskd Not tainted 4.14.81+ #6
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0xb9/0x11b lib/dump_stack.c:53
 nmi_cpu_backtrace.cold.0+0x47/0x85 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x121/0x146 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:138 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:196 [inline]
 watchdog+0x574/0xa70 kernel/hung_task.c:252
 kthread+0x348/0x420 kernel/kthread.c:232
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:402
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 1850 Comm: syz-executor2 Not tainted 4.14.81+ #6
task: ffff8801cb1daf00 task.stack: ffff8801a3068000
RIP: 0010:__lock_acquire+0x2ab/0x4320 kernel/locking/lockdep.c:3428
RSP: 0018:ffff8801a306f690 EFLAGS: 00000002
RAX: ffff8801cb1db7a0 RBX: 0000000000000023 RCX: 0000000000000002
RDX: 0000000000000001 RSI: 0000000000000023 RDI: ffff8801cb1db778
RBP: ffff8801a306f880 R08: 0000000000000000 R09: 0000000000000001
R10: ffff8801cb1db780 R11: 1ffff1003963b6ef R12: 0000000000000002
R13: ffffffff980ceb60 R14: 0000000000000000 R15: ffff8801cb1daf00
FS:  0000000001bb1940(0000) GS:ffff8801dba00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000dd3978 CR3: 00000001a305c005 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 lock_acquire+0x10f/0x380 kernel/locking/lockdep.c:3991
 rcu_lock_acquire include/linux/rcupdate.h:244 [inline]
 rcu_read_lock include/linux/rcupdate.h:631 [inline]
 avc_reclaim_node security/selinux/avc.c:527 [inline]
 avc_alloc_node+0x228/0x3b0 security/selinux/avc.c:557
 avc_insert security/selinux/avc.c:668 [inline]
 avc_compute_av+0x175/0x570 security/selinux/avc.c:974
 avc_has_perm_noaudit+0x2a7/0x300 security/selinux/avc.c:1110
 cred_has_capability+0x123/0x260 security/selinux/hooks.c:1743
 security_capable+0x81/0xc0 security/security.c:280
 ns_capable_common+0xcf/0x150 kernel/capability.c:375
 do_arpt_get_ctl+0xd7/0x690 net/ipv4/netfilter/arp_tables.c:1474
 nf_sockopt net/netfilter/nf_sockopt.c:104 [inline]
 nf_getsockopt+0x68/0xd0 net/netfilter/nf_sockopt.c:122
 ip_getsockopt+0x118/0x160 net/ipv4/ip_sockglue.c:1568
 tcp_getsockopt+0x80/0xc0 net/ipv4/tcp.c:3240
 SYSC_getsockopt net/socket.c:1895 [inline]
 SyS_getsockopt+0x126/0x200 net/socket.c:1877
 do_syscall_64+0x19b/0x4b0 arch/x86/entry/common.c:289
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45a09a
RSP: 002b:00007ffda2c30c18 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
RAX: ffffffffffffffda RBX: 00007ffda2c30c30 RCX: 000000000045a09a
RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 0000000000000003 R08: 00007ffda2c30c2c R09: 000000000000000a
R10: 00007ffda2c30c30 R11: 0000000000000246 R12: 0000000000000000
R13: 00000000001c63b8 R14: 0000000000000742 R15: 0000000000000002
Code: e6 ff 1f 00 00 39 de 75 0f 48 83 bc 24 98 00 00 00 00 0f 85 38 08 00 00 4c 03 94 24 88 00 00 00 89 de 66 81 e6 ff 1f 49 8d 42 20 <48> 89 c2 48 89 44 24 78 48 b8 00 00 00 00 00 fc ff df 48 c1 ea