batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active
netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
IPv6: ADDRCONF(NETDEV_UP): bridge3: link is not ready
INFO: task syz-executor.0:2749 blocked for more than 140 seconds.
Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.0 D28648 2749 8115 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
__rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:589 [inline]
rwsem_down_write_failed+0x3aa/0x760 kernel/locking/rwsem-xadd.c:618
call_rwsem_down_write_failed+0x13/0x20 arch/x86/lib/rwsem.S:117
__down_write arch/x86/include/asm/rwsem.h:142 [inline]
down_write+0x4f/0x90 kernel/locking/rwsem.c:72
inode_lock include/linux/fs.h:748 [inline]
fuse_flush+0x1fd/0x5b0 fs/fuse/file.c:421
filp_close+0xb4/0x160 fs/open.c:1162
__close_fd+0x133/0x200 fs/file.c:636
__do_sys_close fs/open.c:1181 [inline]
__se_sys_close fs/open.c:1179 [inline]
__x64_sys_close+0x69/0x100 fs/open.c:1179
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f0d99fb13cb
Code: Bad RIP value.
RSP: 002b:00007fff419950e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f0d99fb13cb
RDX: 0000001b2e520000 RSI: 0000001b2e52604c RDI: 0000000000000004
RBP: 00007f0d9a121980 R08: 0000000000000000 R09: 000000003253460c
R10: 0011574199321ba7 R11: 0000000000000293 R12: 000000000011f01c
R13: 00007fff419951e0 R14: 00007f0d9a120050 R15: 0000000000000032
INFO: task syz-executor.0:2753 blocked for more than 140 seconds.
Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.0 D27592 2753 8115 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
fuse_wait_on_page_writeback fs/fuse/file.c:383 [inline]
fuse_wait_on_page_writeback.isra.0+0x11b/0x170 fs/fuse/file.c:379
fuse_launder_page fs/fuse/file.c:2033 [inline]
fuse_launder_page+0xb6/0xe0 fs/fuse/file.c:2026
do_launder_page mm/truncate.c:655 [inline]
invalidate_inode_pages2_range+0x795/0x1110 mm/truncate.c:725
fuse_finish_open+0x2e2/0x590 fs/fuse/file.c:182
fuse_open_common+0x254/0x2c0 fs/fuse/file.c:222
do_dentry_open+0x4aa/0x1160 fs/open.c:796
do_last fs/namei.c:3421 [inline]
path_openat+0x793/0x2df0 fs/namei.c:3537
do_filp_open+0x18c/0x3f0 fs/namei.c:3567
do_sys_open+0x3b3/0x520 fs/open.c:1085
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f0d99fff5f9
Code: Bad RIP value.
RSP: 002b:00007f0d98972168 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f0d9a11ff80 RCX: 00007f0d99fff5f9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0
RBP: 00007f0d9a05a7b0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff4199507f R14: 00007f0d98972300 R15: 0000000000022000
Showing all locks held in the system:
1 lock held by khungtaskd/1570:
#0: 0000000059ab9e25 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 kernel/locking/lockdep.c:4441
1 lock held by in:imklog/7810:
#0: 00000000c17b7148 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x26f/0x310 fs/file.c:767
1 lock held by syz-executor.0/2749:
#0: 000000008c445383 (&sb->s_type->i_mutex_key#30){+.+.}, at: inode_lock include/linux/fs.h:748 [inline]
#0: 000000008c445383 (&sb->s_type->i_mutex_key#30){+.+.}, at: fuse_flush+0x1fd/0x5b0 fs/fuse/file.c:421
2 locks held by syz-executor.0/2753:
#0: 000000009e17b982 (sb_writers#28){.+.+}, at: sb_start_write include/linux/fs.h:1579 [inline]
#0: 000000009e17b982 (sb_writers#28){.+.+}, at: mnt_want_write+0x3a/0xb0 fs/namespace.c:360
#1: 000000008c445383 (&sb->s_type->i_mutex_key#30){+.+.}, at: inode_lock include/linux/fs.h:748 [inline]
#1: 000000008c445383 (&sb->s_type->i_mutex_key#30){+.+.}, at: fuse_open_common+0x1bc/0x2c0 fs/fuse/file.c:215
1 lock held by syz-executor.3/8819:
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 1570 Comm: khungtaskd Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
nmi_cpu_backtrace.cold+0x63/0xa2 lib/nmi_backtrace.c:101
nmi_trigger_cpumask_backtrace+0x1a6/0x1f0 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline]
watchdog+0x991/0xe60 kernel/hung_task.c:287
kthread+0x33f/0x460 kernel/kthread.c:259
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 8819 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
RIP: 0010:__lock_release kernel/locking/lockdep.c:3705 [inline]
RIP: 0010:lock_release+0x339/0x8b0 kernel/locking/lockdep.c:3927
Code: 11 84 d2 74 09 80 fa 03 0f 8e 1c 05 00 00 48 89 c1 41 89 ae 80 08 00 00 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 <0f> 85 cc 04 00 00 49 8d be 78 08 00 00 4c 8b 28 48 b8 00 00 00 00
RSP: 0018:ffff8880ba107c18 EFLAGS: 00000046
RAX: ffff888045e50d58 RBX: ffffffff8d243760 RCX: 1ffff11008bca1ab
RDX: dffffc0000000000 RSI: ffffffff8d3e9620 RDI: ffff888045e50d7a
RBP: 0000000000000002 R08: ffffffff8d3e9608 R09: 0000000000000001
R10: 0000000000000000 R11: ffffffff8c66505b R12: 1ffff11017420f86
R13: ffffffff83774825 R14: ffff888045e50480 R15: 0000000000000003
FS: 00007f2fed92a700(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8a6101fe28 CR3: 00000000aaa5b000 CR4: 00000000003406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:158 [inline]
_raw_spin_unlock_irqrestore+0x1b/0xe0 kernel/locking/spinlock.c:184
debug_object_activate+0x295/0x450 lib/debugobjects.c:498
debug_hrtimer_activate kernel/time/hrtimer.c:416 [inline]
debug_activate kernel/time/hrtimer.c:465 [inline]
enqueue_hrtimer+0x27/0x3d0 kernel/time/hrtimer.c:972
__run_hrtimer kernel/time/hrtimer.c:1480 [inline]
__hrtimer_run_queues+0xae6/0xe60 kernel/time/hrtimer.c:1527
hrtimer_interrupt+0x326/0x9e0 kernel/time/hrtimer.c:1585
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1071 [inline]
smp_apic_timer_interrupt+0x10c/0x550 arch/x86/kernel/apic/apic.c:1096
apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
RIP: 0010:preempt_schedule_irq+0xa6/0x140 kernel/sched/core.c:3744
Code: 00 00 e8 3d 04 29 f9 e8 58 3f 4f f9 4c 89 e8 48 c1 e8 03 80 3c 18 00 75 69 48 83 3d 9b 18 d9 01 00 74 5b fb 66 0f 1f 44 00 00 01 00 00 00 e8 40 d1 ff ff 48 c7 c0 90 82 f1 89 48 c1 e8 03 80
RSP: 0018:ffff88802204f810 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 1ffffffff13e3053 RBX: dffffc0000000000 RCX: 1ffff11008bca1a5
RDX: 0000000000000000 RSI: ffff888045e50d08 RDI: ffff888045e50d04
RBP: ffffed1008bca090 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff888045e50480
R13: ffffffff89f18298 R14: 0000000000000000 R15: 0000000000000000
retint_kernel+0x1b/0x2d
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:lock_is_held_type+0x17a/0x210 kernel/locking/lockdep.c:3948
Code: 00 00 00 00 fc ff df c7 85 84 08 00 00 00 00 00 00 48 c1 e8 03 80 3c 10 00 75 63 48 83 3d 45 cc a6 08 00 74 2c 48 89 df 57 9d <0f> 1f 44 00 00 48 83 c4 08 44 89 e0 5b 5d 41 5c c3 48 83 c4 08 41
RSP: 0018:ffff88802204f8e8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff02
RAX: 1ffffffff13e3051 RBX: 0000000000000286 RCX: 0000000000000001
RDX: dffffc0000000000 RSI: 00000000ffffffff RDI: 0000000000000286
RBP: ffff888045e50480 R08: 0000000000000000 R09: 000000000007ffff
R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000002 R14: 0000000000000002 R15: dffffc0000000000
lock_is_held include/linux/lockdep.h:344 [inline]
___might_sleep+0x1ea/0x2b0 kernel/sched/core.c:6157
inet_twsk_purge+0xeb/0x7c0 net/ipv4/inet_timewait_sock.c:266
ops_exit_list+0xf9/0x150 net/core/net_namespace.c:156
setup_net+0x3d1/0x720 net/core/net_namespace.c:333
copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439
create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107
copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165
copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916
copy_process kernel/fork.c:1710 [inline]
_do_fork+0x22f/0xf30 kernel/fork.c:2219
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f2feefb75f9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2fed92a118 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f2fef0d7f80 RCX: 00007f2feefb75f9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000066b60480
RBP: 00007f2fef0127b0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
R13: 00007ffd9915e30f R14: 00007f2fed92a300 R15: 0000000000022000