Extracting prog: 1m9.799187146s
Minimizing prog: 12m38.254139443s
Simplifying prog options: 1m47.203029717s
Extracting C: 35.853277605s
Simplifying C: 0s
extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program crashed: possible deadlock in blkg_conf_prep
single: successfully extracted reproducer
found reproducer with 12 syscalls
minimizing guilty program
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x8820)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000)
syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000)
preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program crashed: possible deadlock in blkg_conf_prep
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040000)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program crashed: possible deadlock in blkg_conf_prep
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040000)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040000)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r0, 0x0, 0x0, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040000)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r0, &(0x7f0000000300)=[{0x0}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040000)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040000)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040000)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040000)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, 0x0, 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
program did not crash
simplifying guilty program options
testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040000)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040000)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040000)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040000)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program crashed: possible deadlock in blkg_conf_prep
validation run: crashed=true
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040000)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
validation run: crashed=false
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040000)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program crashed: possible deadlock in blkg_conf_prep
validation run: crashed=true
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040000)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
validation run: crashed=false
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040000)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
validation run: crashed=false
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040000)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
validation run: crashed=false
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040000)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
validation run: crashed=false
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040000)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program did not crash
validation run: crashed=false
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040000)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8820)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0)
program crashed: possible deadlock in blkg_conf_prep
validation run: crashed=true
reproducing took 21m37.613825415s
repro crashed as (corrupted=false):
======================================================
WARNING: possible circular locking dependency detected
syzkaller #0 Not tainted
------------------------------------------------------
syz.1.18/6038 is trying to acquire lock:
ffffffff8efc8da0 (fs_reclaim){+.+.}-{0:0}, at: might_alloc include/linux/sched/mm.h:316 [inline]
ffffffff8efc8da0 (fs_reclaim){+.+.}-{0:0}, at: slab_pre_alloc_hook mm/slub.c:4636 [inline]
ffffffff8efc8da0 (fs_reclaim){+.+.}-{0:0}, at: slab_alloc_node mm/slub.c:4974 [inline]
ffffffff8efc8da0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x63/0x6a0 mm/slub.c:5010
but task is already holding lock:
ffff888026bd0d30 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 block/blk-cgroup.c:849
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #2 (&q->blkcg_mutex){+.+.}-{4:4}:
lock_acquire kernel/locking/lockdep.c:5908 [inline]
lock_acquire+0x1d1/0x380 kernel/locking/lockdep.c:5865
__mutex_lock_common kernel/locking/mutex.c:646 [inline]
__mutex_lock+0x1a4/0x1bd0 kernel/locking/mutex.c:821
blkcg_activate_policy+0x34f/0xbf0 block/blk-cgroup.c:1608
blk_throtl_init+0x39a/0x5b0 block/blk-throttle.c:1339
tg_set_conf.isra.0+0x252/0x500 block/blk-throttle.c:1368
cgroup_file_write+0x1e6/0x8a0 kernel/cgroup/cgroup.c:4412
kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:345
new_sync_write fs/read_write.c:595 [inline]
vfs_write+0x6af/0x1050 fs/read_write.c:687
ksys_write+0x12a/0x250 fs/read_write.c:739
do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:79 [inline]
__do_fast_syscall_32+0x13a/0x8b0 arch/x86/entry/syscall_32.c:291
do_fast_syscall_32+0x32/0x70 arch/x86/entry/syscall_32.c:316
entry_SYSENTER_compat_after_hwframe+0x84/0x8e
-> #1 (&q->q_usage_counter(io)#17){++++}-{0:0}:
lock_acquire kernel/locking/lockdep.c:5908 [inline]
lock_acquire+0x1d1/0x380 kernel/locking/lockdep.c:5865
blk_alloc_queue+0x610/0x790 block/blk-core.c:504
blk_mq_alloc_queue+0x174/0x290 block/blk-mq.c:4420
__blk_mq_alloc_disk+0x29/0x120 block/blk-mq.c:4467
loop_add+0x498/0xb60 drivers/block/loop.c:2071
loop_init+0x1d3/0x200 drivers/block/loop.c:2310
do_one_initcall+0x11c/0x6f0 init/main.c:1357
do_initcall_level init/main.c:1419 [inline]
do_initcalls init/main.c:1435 [inline]
do_basic_setup init/main.c:1455 [inline]
kernel_init_freeable+0x6ea/0x7b0 init/main.c:1670
kernel_init+0x21/0x1e0 init/main.c:1560
ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
-> #0 (fs_reclaim){+.+.}-{0:0}:
check_prev_add+0xeb/0xe60 kernel/locking/lockdep.c:3181
check_prevs_add kernel/locking/lockdep.c:3300 [inline]
validate_chain kernel/locking/lockdep.c:3924 [inline]
__lock_acquire+0x1492/0x1ec0 kernel/locking/lockdep.c:5254
lock_acquire kernel/locking/lockdep.c:5908 [inline]
lock_acquire+0x1d1/0x380 kernel/locking/lockdep.c:5865
__fs_reclaim_acquire mm/page_alloc.c:4375 [inline]
fs_reclaim_acquire+0xc4/0x100 mm/page_alloc.c:4389
might_alloc include/linux/sched/mm.h:316 [inline]
slab_pre_alloc_hook mm/slub.c:4636 [inline]
slab_alloc_node mm/slub.c:4974 [inline]
kmem_cache_alloc_noprof+0x63/0x6a0 mm/slub.c:5010
__radix_tree_preload+0x333/0x820 lib/radix-tree.c:338
blkg_conf_prep+0x489/0xf10 block/blk-cgroup.c:885
tg_set_conf.isra.0+0x1ed/0x500 block/blk-throttle.c:1373
cgroup_file_write+0x1e6/0x8a0 kernel/cgroup/cgroup.c:4412
kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:345
new_sync_write fs/read_write.c:595 [inline]
vfs_write+0x6af/0x1050 fs/read_write.c:687
ksys_write+0x12a/0x250 fs/read_write.c:739
do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:79 [inline]
__do_fast_syscall_32+0x13a/0x8b0 arch/x86/entry/syscall_32.c:291
do_fast_syscall_32+0x32/0x70 arch/x86/entry/syscall_32.c:316
entry_SYSENTER_compat_after_hwframe+0x84/0x8e
other info that might help us debug this:
Chain exists of:
fs_reclaim --> &q->q_usage_counter(io)#17 --> &q->blkcg_mutex
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(&q->blkcg_mutex);
lock(&q->q_usage_counter(io)#17);
lock(&q->blkcg_mutex);
lock(fs_reclaim);
*** DEADLOCK ***
locks held by syz.1.18/6038: 6, last CPU#1:
#0: ffff88802a9782b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 fs/file.c:1259
#1: ffff8880253ae460 (sb_writers#10){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739
#2: ffff88806c875c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:336
#3: ffff88805c4a5d28 (kn->active#66){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline]
#3: ffff88805c4a5d28 (kn->active#66){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:337
#4: ffff888026bd0bb0 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x253/0x410 block/blk-cgroup.c:806
#5: ffff888026bd0d30 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 block/blk-cgroup.c:849
stack backtrace:
CPU: 1 UID: 0 PID: 6038 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
print_circular_bug.cold+0x178/0x1be kernel/locking/lockdep.c:2059
check_noncircular+0x146/0x160 kernel/locking/lockdep.c:2191
check_prev_add+0xeb/0xe60 kernel/locking/lockdep.c:3181
check_prevs_add kernel/locking/lockdep.c:3300 [inline]
validate_chain kernel/locking/lockdep.c:3924 [inline]
__lock_acquire+0x1492/0x1ec0 kernel/locking/lockdep.c:5254
lock_acquire kernel/locking/lockdep.c:5908 [inline]
lock_acquire+0x1d1/0x380 kernel/locking/lockdep.c:5865
__fs_reclaim_acquire mm/page_alloc.c:4375 [inline]
fs_reclaim_acquire+0xc4/0x100 mm/page_alloc.c:4389
might_alloc include/linux/sched/mm.h:316 [inline]
slab_pre_alloc_hook mm/slub.c:4636 [inline]
slab_alloc_node mm/slub.c:4974 [inline]
kmem_cache_alloc_noprof+0x63/0x6a0 mm/slub.c:5010
__radix_tree_preload+0x333/0x820 lib/radix-tree.c:338
blkg_conf_prep+0x489/0xf10 block/blk-cgroup.c:885
tg_set_conf.isra.0+0x1ed/0x500 block/blk-throttle.c:1373
cgroup_file_write+0x1e6/0x8a0 kernel/cgroup/cgroup.c:4412
kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:345
new_sync_write fs/read_write.c:595 [inline]
vfs_write+0x6af/0x1050 fs/read_write.c:687
ksys_write+0x12a/0x250 fs/read_write.c:739
do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:79 [inline]
__do_fast_syscall_32+0x13a/0x8b0 arch/x86/entry/syscall_32.c:291
do_fast_syscall_32+0x32/0x70 arch/x86/entry/syscall_32.c:316
entry_SYSENTER_compat_after_hwframe+0x84/0x8e
RIP: 0023:0xf6fdefec
Code: Unable to access opcode bytes at 0xf6fdefc2.
RSP: 002b:00000000f67d550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0
RDX: 000000000000006a RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
final repro crashed as (corrupted=false):
======================================================
WARNING: possible circular locking dependency detected
syzkaller #0 Not tainted
------------------------------------------------------
syz.1.18/6038 is trying to acquire lock:
ffffffff8efc8da0 (fs_reclaim){+.+.}-{0:0}, at: might_alloc include/linux/sched/mm.h:316 [inline]
ffffffff8efc8da0 (fs_reclaim){+.+.}-{0:0}, at: slab_pre_alloc_hook mm/slub.c:4636 [inline]
ffffffff8efc8da0 (fs_reclaim){+.+.}-{0:0}, at: slab_alloc_node mm/slub.c:4974 [inline]
ffffffff8efc8da0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x63/0x6a0 mm/slub.c:5010
but task is already holding lock:
ffff888026bd0d30 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 block/blk-cgroup.c:849
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #2 (&q->blkcg_mutex){+.+.}-{4:4}:
lock_acquire kernel/locking/lockdep.c:5908 [inline]
lock_acquire+0x1d1/0x380 kernel/locking/lockdep.c:5865
__mutex_lock_common kernel/locking/mutex.c:646 [inline]
__mutex_lock+0x1a4/0x1bd0 kernel/locking/mutex.c:821
blkcg_activate_policy+0x34f/0xbf0 block/blk-cgroup.c:1608
blk_throtl_init+0x39a/0x5b0 block/blk-throttle.c:1339
tg_set_conf.isra.0+0x252/0x500 block/blk-throttle.c:1368
cgroup_file_write+0x1e6/0x8a0 kernel/cgroup/cgroup.c:4412
kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:345
new_sync_write fs/read_write.c:595 [inline]
vfs_write+0x6af/0x1050 fs/read_write.c:687
ksys_write+0x12a/0x250 fs/read_write.c:739
do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:79 [inline]
__do_fast_syscall_32+0x13a/0x8b0 arch/x86/entry/syscall_32.c:291
do_fast_syscall_32+0x32/0x70 arch/x86/entry/syscall_32.c:316
entry_SYSENTER_compat_after_hwframe+0x84/0x8e
-> #1 (&q->q_usage_counter(io)#17){++++}-{0:0}:
lock_acquire kernel/locking/lockdep.c:5908 [inline]
lock_acquire+0x1d1/0x380 kernel/locking/lockdep.c:5865
blk_alloc_queue+0x610/0x790 block/blk-core.c:504
blk_mq_alloc_queue+0x174/0x290 block/blk-mq.c:4420
__blk_mq_alloc_disk+0x29/0x120 block/blk-mq.c:4467
loop_add+0x498/0xb60 drivers/block/loop.c:2071
loop_init+0x1d3/0x200 drivers/block/loop.c:2310
do_one_initcall+0x11c/0x6f0 init/main.c:1357
do_initcall_level init/main.c:1419 [inline]
do_initcalls init/main.c:1435 [inline]
do_basic_setup init/main.c:1455 [inline]
kernel_init_freeable+0x6ea/0x7b0 init/main.c:1670
kernel_init+0x21/0x1e0 init/main.c:1560
ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
-> #0 (fs_reclaim){+.+.}-{0:0}:
check_prev_add+0xeb/0xe60 kernel/locking/lockdep.c:3181
check_prevs_add kernel/locking/lockdep.c:3300 [inline]
validate_chain kernel/locking/lockdep.c:3924 [inline]
__lock_acquire+0x1492/0x1ec0 kernel/locking/lockdep.c:5254
lock_acquire kernel/locking/lockdep.c:5908 [inline]
lock_acquire+0x1d1/0x380 kernel/locking/lockdep.c:5865
__fs_reclaim_acquire mm/page_alloc.c:4375 [inline]
fs_reclaim_acquire+0xc4/0x100 mm/page_alloc.c:4389
might_alloc include/linux/sched/mm.h:316 [inline]
slab_pre_alloc_hook mm/slub.c:4636 [inline]
slab_alloc_node mm/slub.c:4974 [inline]
kmem_cache_alloc_noprof+0x63/0x6a0 mm/slub.c:5010
__radix_tree_preload+0x333/0x820 lib/radix-tree.c:338
blkg_conf_prep+0x489/0xf10 block/blk-cgroup.c:885
tg_set_conf.isra.0+0x1ed/0x500 block/blk-throttle.c:1373
cgroup_file_write+0x1e6/0x8a0 kernel/cgroup/cgroup.c:4412
kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:345
new_sync_write fs/read_write.c:595 [inline]
vfs_write+0x6af/0x1050 fs/read_write.c:687
ksys_write+0x12a/0x250 fs/read_write.c:739
do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:79 [inline]
__do_fast_syscall_32+0x13a/0x8b0 arch/x86/entry/syscall_32.c:291
do_fast_syscall_32+0x32/0x70 arch/x86/entry/syscall_32.c:316
entry_SYSENTER_compat_after_hwframe+0x84/0x8e
other info that might help us debug this:
Chain exists of:
fs_reclaim --> &q->q_usage_counter(io)#17 --> &q->blkcg_mutex
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(&q->blkcg_mutex);
lock(&q->q_usage_counter(io)#17);
lock(&q->blkcg_mutex);
lock(fs_reclaim);
*** DEADLOCK ***
locks held by syz.1.18/6038: 6, last CPU#1:
#0: ffff88802a9782b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 fs/file.c:1259
#1: ffff8880253ae460 (sb_writers#10){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739
#2: ffff88806c875c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:336
#3: ffff88805c4a5d28 (kn->active#66){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline]
#3: ffff88805c4a5d28 (kn->active#66){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:337
#4: ffff888026bd0bb0 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x253/0x410 block/blk-cgroup.c:806
#5: ffff888026bd0d30 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 block/blk-cgroup.c:849
stack backtrace:
CPU: 1 UID: 0 PID: 6038 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
print_circular_bug.cold+0x178/0x1be kernel/locking/lockdep.c:2059
check_noncircular+0x146/0x160 kernel/locking/lockdep.c:2191
check_prev_add+0xeb/0xe60 kernel/locking/lockdep.c:3181
check_prevs_add kernel/locking/lockdep.c:3300 [inline]
validate_chain kernel/locking/lockdep.c:3924 [inline]
__lock_acquire+0x1492/0x1ec0 kernel/locking/lockdep.c:5254
lock_acquire kernel/locking/lockdep.c:5908 [inline]
lock_acquire+0x1d1/0x380 kernel/locking/lockdep.c:5865
__fs_reclaim_acquire mm/page_alloc.c:4375 [inline]
fs_reclaim_acquire+0xc4/0x100 mm/page_alloc.c:4389
might_alloc include/linux/sched/mm.h:316 [inline]
slab_pre_alloc_hook mm/slub.c:4636 [inline]
slab_alloc_node mm/slub.c:4974 [inline]
kmem_cache_alloc_noprof+0x63/0x6a0 mm/slub.c:5010
__radix_tree_preload+0x333/0x820 lib/radix-tree.c:338
blkg_conf_prep+0x489/0xf10 block/blk-cgroup.c:885
tg_set_conf.isra.0+0x1ed/0x500 block/blk-throttle.c:1373
cgroup_file_write+0x1e6/0x8a0 kernel/cgroup/cgroup.c:4412
kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:345
new_sync_write fs/read_write.c:595 [inline]
vfs_write+0x6af/0x1050 fs/read_write.c:687
ksys_write+0x12a/0x250 fs/read_write.c:739
do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:79 [inline]
__do_fast_syscall_32+0x13a/0x8b0 arch/x86/entry/syscall_32.c:291
do_fast_syscall_32+0x32/0x70 arch/x86/entry/syscall_32.c:316
entry_SYSENTER_compat_after_hwframe+0x84/0x8e
RIP: 0023:0xf6fdefec
Code: Unable to access opcode bytes at 0xf6fdefc2.
RSP: 002b:00000000f67d550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0
RDX: 000000000000006a RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000