syzkaller login: [ 35.537298] kauditd_printk_skb: 9 callbacks suppressed [ 35.537303] audit: type=1400 audit(1581467355.232:35): avc: denied { map } for pid=7032 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 41.900870] audit: type=1400 audit(1581467361.592:36): avc: denied { map } for pid=7043 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 44.127921] IPVS: ftp: loaded support on port[0] = 21 [ 44.541519] can: request_module (can-proto-0) failed. [ 45.551620] can: request_module (can-proto-0) failed. [ 45.725907] audit: type=1400 audit(1581467365.422:37): avc: denied { create } for pid=7043 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 45.750008] audit: type=1400 audit(1581467365.422:38): avc: denied { create } for pid=7043 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 45.774140] audit: type=1400 audit(1581467365.422:39): avc: denied { create } for pid=7043 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.0.237' (ECDSA) to the list of known hosts. 2020/02/12 00:29:33 parsed 1 programs 2020/02/12 00:29:33 executed programs: 0 [ 53.987457] IPVS: ftp: loaded support on port[0] = 21 [ 54.052139] IPVS: ftp: loaded support on port[0] = 21 [ 54.060395] IPVS: ftp: loaded support on port[0] = 21 [ 54.064264] IPVS: ftp: loaded support on port[0] = 21 [ 54.072393] IPVS: ftp: loaded support on port[0] = 21 [ 54.098459] IPVS: ftp: loaded support on port[0] = 21 [ 54.225289] chnl_net:caif_netlink_parms(): no params data found [ 54.299463] chnl_net:caif_netlink_parms(): no params data found [ 54.314538] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.321007] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.328573] device bridge_slave_0 entered promiscuous mode [ 54.335859] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.342338] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.349589] device bridge_slave_1 entered promiscuous mode [ 54.356145] chnl_net:caif_netlink_parms(): no params data found [ 54.406336] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.413036] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.420300] device bridge_slave_0 entered promiscuous mode [ 54.436636] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.454026] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.460416] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.468092] device bridge_slave_1 entered promiscuous mode [ 54.484652] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.563280] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.569778] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.576885] device bridge_slave_0 entered promiscuous mode [ 54.584992] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.595975] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.610336] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.618565] team0: Port device team_slave_0 added [ 54.624368] chnl_net:caif_netlink_parms(): no params data found [ 54.634764] chnl_net:caif_netlink_parms(): no params data found [ 54.644829] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.651359] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.659778] device bridge_slave_1 entered promiscuous mode [ 54.673467] chnl_net:caif_netlink_parms(): no params data found [ 54.685194] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.692465] team0: Port device team_slave_1 added [ 54.700053] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.711211] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.729578] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.737154] team0: Port device team_slave_0 added [ 54.743388] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.825830] device hsr_slave_0 entered promiscuous mode [ 54.863551] device hsr_slave_1 entered promiscuous mode [ 54.903709] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.911106] team0: Port device team_slave_1 added [ 54.917116] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.944634] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.955002] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.980749] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.987672] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.994137] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.001131] device bridge_slave_0 entered promiscuous mode [ 55.007737] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.015388] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 55.022954] team0: Port device team_slave_0 added [ 55.028443] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.035120] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.042042] device bridge_slave_0 entered promiscuous mode [ 55.048926] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.055399] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.062260] device bridge_slave_0 entered promiscuous mode [ 55.069282] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.075981] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.082885] device bridge_slave_1 entered promiscuous mode [ 55.096040] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 55.103556] team0: Port device team_slave_1 added [ 55.108847] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.117572] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.125008] device bridge_slave_1 entered promiscuous mode [ 55.139762] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.146291] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.153776] device bridge_slave_1 entered promiscuous mode [ 55.176364] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.185432] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.193656] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 55.246002] device hsr_slave_0 entered promiscuous mode [ 55.283609] device hsr_slave_1 entered promiscuous mode [ 55.344494] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 55.352362] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.359597] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.370146] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.414627] device hsr_slave_0 entered promiscuous mode [ 55.473491] device hsr_slave_1 entered promiscuous mode [ 55.519433] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.538563] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 55.546507] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.555195] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.567723] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 55.575532] team0: Port device team_slave_0 added [ 55.580735] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 55.588322] team0: Port device team_slave_0 added [ 55.594481] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.602333] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 55.609826] team0: Port device team_slave_1 added [ 55.616706] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.626931] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 55.634440] team0: Port device team_slave_1 added [ 55.643064] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.650913] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.661354] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.672131] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.735237] device hsr_slave_0 entered promiscuous mode [ 55.773427] device hsr_slave_1 entered promiscuous mode [ 55.823960] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.832122] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.839480] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 55.847226] team0: Port device team_slave_0 added [ 55.862213] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.872821] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 55.880851] team0: Port device team_slave_1 added [ 55.924739] device hsr_slave_0 entered promiscuous mode [ 55.963585] device hsr_slave_1 entered promiscuous mode [ 56.004776] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 56.021948] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 56.031749] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 56.040063] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 56.047850] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 56.058458] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 56.091017] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 56.125497] device hsr_slave_0 entered promiscuous mode [ 56.163497] device hsr_slave_1 entered promiscuous mode [ 56.204264] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 56.224443] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 56.245786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.269175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.278047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.289958] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.299784] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.308597] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.322420] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.329902] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.339126] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.345786] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.360084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.366994] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.378473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.386440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.393670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.400552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.407742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.414874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.423881] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.431857] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.438454] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.448323] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.455495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.465111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.472990] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.479629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.490252] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 56.501105] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.509763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.518117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.526120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.533894] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.540365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.548611] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.559574] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.569570] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.576611] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.584120] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.590657] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.598513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.605951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.614259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.622025] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.629332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.636437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.643445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.654584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.662494] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.670958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.680061] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.688013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.696453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.704534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.712184] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.718589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.725482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.733700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.741303] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.749788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.756796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.764874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.772568] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.778967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.786125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.793559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.805191] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.813083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.820961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.829538] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.836089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.851352] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.860047] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.868603] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.879448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.888237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.896206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.904460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.912014] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.918429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.929745] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.939531] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.951474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.961626] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.968880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.978283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.986058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.994097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.004032] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 57.014249] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 57.024138] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 57.033035] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 57.044385] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.051494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.059726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.067343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.075366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.083013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.090872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.099067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.107766] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.115614] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 57.123677] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 57.131717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.143518] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 57.149690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.158096] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 57.167033] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.174731] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 57.186041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.194317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.201949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.209688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.217719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.225643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.235064] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 57.245253] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 57.257472] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 57.268209] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 57.276362] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.282701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.290581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.298277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.306561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.314314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.321835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.329572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.337107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.345712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.352802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.359803] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.366757] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.375507] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 57.383029] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 57.395633] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 57.401839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.410110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.418854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.426996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.434969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.445902] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 57.455815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.464013] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 57.471764] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 57.480861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.490370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.498064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.505894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.515322] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 57.522988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.533813] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 57.539991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.551391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.561488] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 57.568348] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.577789] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.586930] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.594266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.601852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.609546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.617698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.625805] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.632166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.639519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.648971] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 57.660265] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.670958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.679188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.688766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.696929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.704978] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.711509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.721686] audit: type=1400 audit(1581467377.422:40): avc: denied { associate } for pid=7137 comm="syz-executor.2" name="syz2" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 57.750056] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 57.764403] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 57.779981] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 57.790583] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 57.801316] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 57.813295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.821860] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.833843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.841734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.849972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.858222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.866257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.873491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.881183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.890851] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 57.901619] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 57.910903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.919522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.928940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.936885] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 57.943641] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.953544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.967689] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 57.981850] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.991662] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 58.002566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.011310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.029488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.040068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.048385] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.054776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.062307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.071744] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.086762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.101105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.111386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.125300] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.131802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.141437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.152367] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 58.165594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.174104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.181762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.195394] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 58.201483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.211901] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.223511] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 58.238072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.246728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.262569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.271140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.285306] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 58.293886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.301540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.313786] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 58.325548] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 58.332277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.340968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.353036] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 58.361086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.372261] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 58.378687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.388145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.396554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.409214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.425243] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 58.440410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.603412] INFO: task syz-executor.2:7158 blocked for more than 140 seconds. [ 212.610945] Not tainted 4.19.103-syzkaller #0 [ 212.616562] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 212.624703] syz-executor.2 D27192 7158 7137 0x00000004 [ 212.630330] Call Trace: [ 212.632932] __schedule+0x78c/0x1c10 [ 212.638139] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 212.643405] ? pci_mmcfg_check_reserved+0x120/0x120 [ 212.648562] ? autoremove_wake_function+0x160/0x160 [ 212.653654] schedule+0x7f/0x1b0 [ 212.657033] request_wait_answer+0x2fe/0x620 [ 212.661442] ? fuse_copy_one+0x130/0x130 [ 212.665576] ? lock_downgrade+0x860/0x860 [ 212.669821] ? finish_wait+0x290/0x290 [ 212.673762] ? do_raw_spin_unlock+0x177/0x260 [ 212.678253] __fuse_request_send+0xff/0x190 [ 212.682692] fuse_request_send+0x41/0x80 [ 212.686852] fuse_simple_request+0x2b4/0x610 [ 212.691408] fuse_lookup_name+0x244/0x590 [ 212.695615] ? fuse_create+0x10/0x10 [ 212.699334] ? mutex_lock_nested+0x16/0x20 [ 212.703777] fuse_lookup+0xf3/0x3b0 [ 212.707404] ? fuse_lookup_name+0x590/0x590 [ 212.711752] ? __d_lookup_rcu+0x8a0/0x8a0 [ 212.715950] ? __lockdep_init_map+0x105/0x590 [ 212.720480] __lookup_slow+0x216/0x400 [ 212.724566] ? vfs_unlink+0x450/0x450 [ 212.728382] lookup_slow+0x51/0x70 [ 212.731917] walk_component+0x694/0x2320 [ 212.736053] ? security_inode_permission+0x73/0xb0 [ 212.740981] ? path_init+0x1550/0x1550 [ 212.744943] ? link_path_walk.part.40+0x16d/0x1550 [ 212.749920] ? path_init+0xefe/0x1550 [ 212.753803] ? trace_hardirqs_on+0x28/0x190 [ 212.758127] ? walk_component+0x2320/0x2320 [ 212.762547] ? save_stack+0x43/0xd0 [ 212.766300] ? kasan_kmalloc+0xc7/0xe0 [ 212.770188] ? kasan_slab_alloc+0x12/0x20 [ 212.774526] path_lookupat.isra.43+0x180/0x850 [ 212.779134] ? path_parentat.isra.41+0x100/0x100 [ 212.783998] ? find_held_lock+0x36/0x1d0 [ 212.788065] filename_lookup.part.57+0x160/0x360 [ 212.792945] ? filename_parentat.isra.55.part.56+0x400/0x400 [ 212.798865] ? rcu_read_lock_sched_held+0x108/0x120 [ 212.803931] ? strncpy_from_user+0x80/0x260 [ 212.808247] ? getname_flags+0xf6/0x520 [ 212.813097] user_path_at_empty+0x39/0x40 [ 212.817333] vfs_statx+0xbe/0x150 [ 212.820846] ? vfs_statx_fd+0x90/0x90 [ 212.824757] ? kasan_check_read+0x11/0x20 [ 212.828912] __do_sys_newstat+0x85/0xe0 [ 212.832879] ? cp_new_stat+0x5b0/0x5b0 [ 212.836892] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 212.841649] ? do_syscall_64+0x21/0x4e0 [ 212.845765] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 212.851156] ? lockdep_hardirqs_on+0x421/0x5c0 [ 212.855816] ? do_syscall_64+0x21/0x4e0 [ 212.859796] __x64_sys_newstat+0x4f/0x70 [ 212.864073] do_syscall_64+0xd0/0x4e0 [ 212.867876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 212.873246] RIP: 0033:0x4592c9 [ 212.876436] Code: 24 48 c7 44 24 10 09 00 00 00 e8 82 ad ff ff 0f b6 44 24 18 88 44 24 40 48 8b 6c 24 20 48 83 c4 28 c3 e8 8a 8f ff ff eb a8 cc cc cc cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 76 68 [ 212.895831] RSP: 002b:00007fad7b5b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 212.903606] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004592c9 [ 212.911007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000580 [ 212.918486] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 212.925829] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad7b5b76d4 [ 212.933236] R13: 00000000004e52fb R14: 00000000004de648 R15: 00000000ffffffff [ 212.940526] INFO: task syz-executor.2:7160 blocked for more than 140 seconds. [ 212.948000] Not tainted 4.19.103-syzkaller #0 [ 212.953017] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 212.961240] syz-executor.2 D29704 7160 7137 0x00000004 [ 212.966925] Call Trace: [ 212.969577] __schedule+0x78c/0x1c10 [ 212.973428] ? pci_mmcfg_check_reserved+0x120/0x120 [ 212.978494] ? rwsem_down_write_failed+0x5c1/0xbf0 [ 212.983489] ? lockdep_hardirqs_on+0x421/0x5c0 [ 212.988074] ? _raw_spin_unlock_irq+0x27/0x80 [ 212.992620] schedule+0x7f/0x1b0 [ 212.996210] rwsem_down_write_failed+0x5c6/0xbf0 [ 213.000975] ? rwsem_down_read_failed_killable+0x550/0x550 [ 213.006652] ? avc_has_perm_noaudit+0x460/0x460 [ 213.011430] ? mark_held_locks+0x130/0x130 [ 213.015743] ? find_held_lock+0x36/0x1d0 [ 213.019826] call_rwsem_down_write_failed+0x17/0x30 [ 213.024984] ? call_rwsem_down_write_failed+0x17/0x30 [ 213.030240] down_write+0x53/0x90 [ 213.033794] ? lock_mount+0x82/0x290 [ 213.037507] lock_mount+0x82/0x290 [ 213.041081] do_add_mount+0x22/0x310 [ 213.044872] do_mount+0x1290/0x2410 [ 213.048599] ? __might_fault+0xf1/0x1b0 [ 213.052556] ? lock_downgrade+0x860/0x860 [ 213.056784] ? copy_mount_string+0x20/0x20 [ 213.061029] ? kasan_check_write+0x14/0x20 [ 213.065343] ? _copy_from_user+0x9c/0xd0 [ 213.069420] ? memdup_user+0x4a/0x80 [ 213.073234] ksys_mount+0xba/0xe0 [ 213.076683] __x64_sys_mount+0xb9/0x150 [ 213.080762] do_syscall_64+0xd0/0x4e0 [ 213.084640] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.089954] RIP: 0033:0x4592c9 [ 213.093224] Code: 24 48 c7 44 24 10 09 00 00 00 e8 82 ad ff ff 0f b6 44 24 18 88 44 24 40 48 8b 6c 24 20 48 83 c4 28 c3 e8 8a 8f ff ff eb a8 cc cc cc cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 76 68 [ 213.112430] RSP: 002b:00007fad7b595c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 213.120318] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004592c9 [ 213.127658] RDX: 0000000020000000 RSI: 0000000020000180 RDI: 0000000000000000 [ 213.135014] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 213.142415] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fad7b5966d4 [ 213.149765] R13: 00000000004c570b R14: 00000000004d9aa0 R15: 00000000ffffffff [ 213.157251] INFO: task syz-executor.2:7161 blocked for more than 140 seconds. [ 213.164776] Not tainted 4.19.103-syzkaller #0 [ 213.170013] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 213.178065] syz-executor.2 D28616 7161 7137 0x00000004 [ 213.183738] Call Trace: [ 213.186544] __schedule+0x78c/0x1c10 [ 213.190248] ? pci_mmcfg_check_reserved+0x120/0x120 [ 213.195349] ? rwsem_down_write_failed+0x5c1/0xbf0 [ 213.200292] ? lockdep_hardirqs_on+0x421/0x5c0 [ 213.204942] ? _raw_spin_unlock_irq+0x27/0x80 [ 213.209443] schedule+0x7f/0x1b0 [ 213.212817] rwsem_down_write_failed+0x5c6/0xbf0 [ 213.217714] ? rwsem_down_read_failed_killable+0x550/0x550 [ 213.223417] call_rwsem_down_write_failed+0x17/0x30 [ 213.228438] ? call_rwsem_down_write_failed+0x17/0x30 [ 213.233729] ? __lock_acquire+0x2631/0x4980 [ 213.238052] down_write+0x53/0x90 [ 213.241500] ? fuse_reverse_inval_entry+0x9a/0x5d0 [ 213.246649] fuse_reverse_inval_entry+0x9a/0x5d0 [ 213.251425] ? lock_acquire+0x173/0x3d0 [ 213.255521] ? fuse_update_attributes+0xa0/0xa0 [ 213.260196] fuse_dev_do_write+0xb7d/0x2350 [ 213.264599] ? _raw_spin_unlock_irqrestore+0xbb/0xd0 [ 213.269706] ? try_to_wake_up+0xc2/0xf20 [ 213.273840] ? fuse_dev_read+0x1b0/0x1b0 [ 213.277926] ? migrate_swap_stop+0x930/0x930 [ 213.282328] ? futex_wake+0x338/0x590 [ 213.286220] ? lock_downgrade+0x860/0x860 [ 213.290374] ? kasan_check_write+0x14/0x20 [ 213.294724] ? wake_up_q+0xb3/0x100 [ 213.298368] ? get_futex_key+0x1030/0x1030 [ 213.302662] ? memset+0x31/0x40 [ 213.306144] fuse_dev_write+0x12a/0x1b0 [ 213.310130] ? fuse_dev_splice_write+0xa20/0xa20 [ 213.314952] __vfs_write+0x443/0x890 [ 213.318669] ? kernel_read+0x130/0x130 [ 213.322562] ? selinux_file_permission+0x326/0x3f0 [ 213.327850] ? rw_verify_area+0xb8/0x2b0 [ 213.332036] vfs_write+0x150/0x4d0 [ 213.335755] ksys_write+0x103/0x260 [ 213.339532] ? __ia32_sys_read+0xa0/0xa0 [ 213.343678] ? do_syscall_64+0x21/0x4e0 [ 213.347921] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.353365] __x64_sys_write+0x6e/0xb0 [ 213.357264] do_syscall_64+0xd0/0x4e0 [ 213.361049] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.366408] RIP: 0033:0x4592c9 [ 213.369675] Code: 24 48 c7 44 24 10 09 00 00 00 e8 82 ad ff ff 0f b6 44 24 18 88 44 24 40 48 8b 6c 24 20 48 83 c4 28 c3 e8 8a 8f ff ff eb a8 cc cc cc cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 76 68 [ 213.388811] RSP: 002b:00007fad7b574c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 213.396578] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004592c9 [ 213.403992] RDX: 000000000000002e RSI: 0000000020000000 RDI: 0000000000000003 [ 213.411269] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 213.418851] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad7b5756d4 [ 213.426179] R13: 00000000004c8aa3 R14: 00000000004df6e0 R15: 00000000ffffffff [ 213.433785] INFO: task syz-executor.2:7188 blocked for more than 140 seconds. [ 213.442112] Not tainted 4.19.103-syzkaller #0 [ 213.447206] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 213.455254] syz-executor.2 D27960 7188 7137 0x00000004 [ 213.460881] Call Trace: [ 213.463544] __schedule+0x78c/0x1c10 [ 213.468527] ? pci_mmcfg_check_reserved+0x120/0x120 [ 213.473619] ? rwsem_down_write_failed+0x5c1/0xbf0 [ 213.478577] ? lockdep_hardirqs_on+0x421/0x5c0 [ 213.483264] ? _raw_spin_unlock_irq+0x27/0x80 [ 213.487820] schedule+0x7f/0x1b0 [ 213.491182] rwsem_down_write_failed+0x5c6/0xbf0 [ 213.496231] ? rwsem_down_read_failed_killable+0x550/0x550 [ 213.501968] ? mark_held_locks+0x130/0x130 [ 213.506277] ? trace_hardirqs_on+0x28/0x190 [ 213.510738] ? find_held_lock+0x36/0x1d0 [ 213.514891] call_rwsem_down_write_failed+0x17/0x30 [ 213.520046] ? call_rwsem_down_write_failed+0x17/0x30 [ 213.525463] down_write+0x53/0x90 [ 213.528932] ? lock_mount+0x82/0x290 [ 213.532628] lock_mount+0x82/0x290 [ 213.536308] do_add_mount+0x22/0x310 [ 213.540095] do_mount+0x1290/0x2410 [ 213.543915] ? copy_mount_string+0x20/0x20 [ 213.548316] ? rcu_read_lock_sched_held+0x108/0x120 [ 213.553549] ? kmem_cache_alloc_trace+0x350/0x740 [ 213.558491] ? kasan_check_write+0x14/0x20 [ 213.562725] ? copy_mount_options+0x55/0x270 [ 213.567327] ksys_mount+0xba/0xe0 [ 213.570778] __x64_sys_mount+0xb9/0x150 [ 213.574837] do_syscall_64+0xd0/0x4e0 [ 213.578728] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.583991] RIP: 0033:0x4592c9 [ 213.587180] Code: 24 48 c7 44 24 10 09 00 00 00 e8 82 ad ff ff 0f b6 44 24 18 88 44 24 40 48 8b 6c 24 20 48 83 c4 28 c3 e8 8a 8f ff ff eb a8 cc cc cc cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 76 68 [ 213.606175] RSP: 002b:00007fad7b553c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 213.613937] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004592c9 [ 213.621341] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000000000000 [ 213.628900] RBP: 000000000075c118 R08: 0000000020000400 R09: 0000000000000000 [ 213.636505] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad7b5546d4 [ 213.643864] R13: 00000000004c56df R14: 00000000004d9b60 R15: 00000000ffffffff [ 213.651255] INFO: task syz-executor.2:7189 blocked for more than 140 seconds. [ 213.658603] Not tainted 4.19.103-syzkaller #0 [ 213.663769] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 213.671747] syz-executor.2 D29144 7189 7137 0x00000004 [ 213.677433] Call Trace: [ 213.680037] __schedule+0x78c/0x1c10 [ 213.683884] ? pci_mmcfg_check_reserved+0x120/0x120 [ 213.689027] ? rwsem_down_read_failed+0x203/0x3e0 [ 213.693932] ? lockdep_hardirqs_on+0x421/0x5c0 [ 213.698509] ? _raw_spin_unlock_irq+0x27/0x80 [ 213.703295] ? rwsem_down_read_failed+0x21c/0x3e0 [ 213.708164] schedule+0x7f/0x1b0 [ 213.711528] rwsem_down_read_failed+0x21c/0x3e0 [ 213.716391] ? rwsem_down_write_failed+0xbf0/0xbf0 [ 213.721329] ? unlazy_walk+0x143/0x450 [ 213.725319] ? lock_downgrade+0x860/0x860 [ 213.729476] call_rwsem_down_read_failed+0x18/0x30 [ 213.734472] down_read+0x49/0xb0 [ 213.738621] ? lookup_slow+0x43/0x70 [ 213.742330] lookup_slow+0x43/0x70 [ 213.745929] walk_component+0x694/0x2320 [ 213.750253] ? security_inode_permission+0x73/0xb0 [ 213.755242] ? path_init+0x1550/0x1550 [ 213.759301] ? link_path_walk.part.40+0x16d/0x1550 [ 213.764290] ? path_init+0xefe/0x1550 [ 213.768086] ? trace_hardirqs_on+0x28/0x190 [ 213.772407] ? walk_component+0x2320/0x2320 [ 213.776946] ? save_stack+0x43/0xd0 [ 213.780663] ? kasan_kmalloc+0xc7/0xe0 [ 213.784613] ? kasan_slab_alloc+0x12/0x20 [ 213.788891] path_lookupat.isra.43+0x180/0x850 [ 213.793538] ? path_parentat.isra.41+0x100/0x100 [ 213.798436] ? find_held_lock+0x36/0x1d0 [ 213.802791] filename_lookup.part.57+0x160/0x360 [ 213.807945] ? filename_parentat.isra.55.part.56+0x400/0x400 [ 213.815105] ? rcu_read_lock_sched_held+0x108/0x120 [ 213.820131] ? strncpy_from_user+0x80/0x260 [ 213.824519] ? getname_flags+0xf6/0x520 [ 213.828487] user_path_at_empty+0x39/0x40 [ 213.832856] vfs_statx+0xbe/0x150 [ 213.836370] ? vfs_statx_fd+0x90/0x90 [ 213.840300] ? kasan_check_read+0x11/0x20 [ 213.844500] __do_sys_newstat+0x85/0xe0 [ 213.848520] ? cp_new_stat+0x5b0/0x5b0 [ 213.852406] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 213.857213] ? do_syscall_64+0x21/0x4e0 [ 213.861386] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.866831] ? lockdep_hardirqs_on+0x421/0x5c0 [ 213.871633] ? do_syscall_64+0x21/0x4e0 [ 213.875671] __x64_sys_newstat+0x4f/0x70 [ 213.879745] do_syscall_64+0xd0/0x4e0 [ 213.883627] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.888823] RIP: 0033:0x4592c9 [ 213.891997] Code: 24 48 c7 44 24 10 09 00 00 00 e8 82 ad ff ff 0f b6 44 24 18 88 44 24 40 48 8b 6c 24 20 48 83 c4 28 c3 e8 8a 8f ff ff eb a8 cc cc cc cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 76 68 [ 213.910997] RSP: 002b:00007fad7b532c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 213.918744] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004592c9 [ 213.926190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000580 [ 213.933554] RBP: 000000000075c1c0 R08: 0000000000000000 R09: 0000000000000000 [ 213.940833] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad7b5336d4 [ 213.948440] R13: 00000000004e52fb R14: 00000000004de648 R15: 00000000ffffffff [ 213.955789] INFO: task syz-executor.4:7163 blocked for more than 140 seconds. [ 213.963058] Not tainted 4.19.103-syzkaller #0 [ 213.968238] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 213.976303] syz-executor.4 D27720 7163 7142 0x00000004 [ 213.981932] Call Trace: [ 213.984599] __schedule+0x78c/0x1c10 [ 213.988321] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 213.993485] ? pci_mmcfg_check_reserved+0x120/0x120 [ 213.998797] ? autoremove_wake_function+0x160/0x160 [ 214.003954] schedule+0x7f/0x1b0 [ 214.007319] request_wait_answer+0x2fe/0x620 [ 214.011915] ? fuse_copy_one+0x130/0x130 [ 214.016044] ? lock_downgrade+0x860/0x860 [ 214.020200] ? finish_wait+0x290/0x290 [ 214.024162] ? do_raw_spin_unlock+0x177/0x260 [ 214.028651] __fuse_request_send+0xff/0x190 [ 214.033228] fuse_request_send+0x41/0x80 [ 214.037394] fuse_simple_request+0x2b4/0x610 [ 214.041800] fuse_lookup_name+0x244/0x590 [ 214.046118] ? fuse_create+0x10/0x10 [ 214.050019] ? mutex_lock_nested+0x16/0x20 [ 214.054317] fuse_lookup+0xf3/0x3b0 [ 214.058045] ? fuse_lookup_name+0x590/0x590 [ 214.062470] ? __d_lookup_rcu+0x8a0/0x8a0 [ 214.066715] ? __lockdep_init_map+0x105/0x590 [ 214.071211] __lookup_slow+0x216/0x400 [ 214.075147] ? vfs_unlink+0x450/0x450 [ 214.079096] lookup_slow+0x51/0x70 [ 214.082647] walk_component+0x694/0x2320 [ 214.086774] ? security_inode_permission+0x73/0xb0 [ 214.091711] ? path_init+0x1550/0x1550 [ 214.095656] ? link_path_walk.part.40+0x16d/0x1550 [ 214.100577] ? path_init+0xefe/0x1550 [ 214.104438] ? trace_hardirqs_on+0x28/0x190 [ 214.108761] ? walk_component+0x2320/0x2320 [ 214.113068] ? save_stack+0x43/0xd0 [ 214.116757] ? kasan_kmalloc+0xc7/0xe0 [ 214.120653] ? kasan_slab_alloc+0x12/0x20 [ 214.124929] path_lookupat.isra.43+0x180/0x850 [ 214.129515] ? path_parentat.isra.41+0x100/0x100 [ 214.134679] ? find_held_lock+0x36/0x1d0 [ 214.138742] filename_lookup.part.57+0x160/0x360 [ 214.143661] ? filename_parentat.isra.55.part.56+0x400/0x400 [ 214.150576] ? rcu_read_lock_sched_held+0x108/0x120 [ 214.155645] ? strncpy_from_user+0x80/0x260 [ 214.159967] ? getname_flags+0xf6/0x520 [ 214.164021] user_path_at_empty+0x39/0x40 [ 214.168264] vfs_statx+0xbe/0x150 [ 214.171748] ? vfs_statx_fd+0x90/0x90 [ 214.175596] ? kasan_check_read+0x11/0x20 [ 214.179737] __do_sys_newstat+0x85/0xe0 [ 214.185339] ? cp_new_stat+0x5b0/0x5b0 [ 214.189248] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 214.194079] ? do_syscall_64+0x21/0x4e0 [ 214.198158] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.203677] ? lockdep_hardirqs_on+0x421/0x5c0 [ 214.208266] ? do_syscall_64+0x21/0x4e0 [ 214.212234] __x64_sys_newstat+0x4f/0x70 [ 214.216594] do_syscall_64+0xd0/0x4e0 [ 214.220392] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.225654] RIP: 0033:0x4592c9 [ 214.228976] Code: 24 48 c7 44 24 10 09 00 00 00 e8 82 ad ff ff 0f b6 44 24 18 88 44 24 40 48 8b 6c 24 20 48 83 c4 28 c3 e8 8a 8f ff ff eb a8 cc cc cc cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 76 68 [ 214.248213] RSP: 002b:00007f4c1a856c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 214.256105] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004592c9 [ 214.263447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000580 [ 214.270779] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 214.278113] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c1a8576d4 [ 214.285493] R13: 00000000004e52fb R14: 00000000004de648 R15: 00000000ffffffff [ 214.292795] INFO: task syz-executor.4:7165 blocked for more than 140 seconds. [ 214.300160] Not tainted 4.19.103-syzkaller #0 [ 214.305268] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 214.313293] syz-executor.4 D29496 7165 7142 0x00000004 [ 214.318952] Call Trace: [ 214.322171] __schedule+0x78c/0x1c10 [ 214.325986] ? pci_mmcfg_check_reserved+0x120/0x120 [ 214.331056] ? rwsem_down_write_failed+0x5c1/0xbf0 [ 214.336187] ? lockdep_hardirqs_on+0x421/0x5c0 [ 214.340850] ? _raw_spin_unlock_irq+0x27/0x80 [ 214.345526] schedule+0x7f/0x1b0 [ 214.348899] rwsem_down_write_failed+0x5c6/0xbf0 [ 214.353706] ? rwsem_down_read_failed_killable+0x550/0x550 [ 214.359422] ? avc_has_perm_noaudit+0x460/0x460 [ 214.364367] ? mark_held_locks+0x130/0x130 [ 214.368600] ? find_held_lock+0x36/0x1d0 [ 214.372772] call_rwsem_down_write_failed+0x17/0x30 [ 214.378038] ? call_rwsem_down_write_failed+0x17/0x30 [ 214.383416] down_write+0x53/0x90 [ 214.386868] ? lock_mount+0x82/0x290 [ 214.390564] lock_mount+0x82/0x290 [ 214.394447] do_add_mount+0x22/0x310 [ 214.398222] do_mount+0x1290/0x2410 [ 214.401831] ? __might_fault+0xf1/0x1b0 [ 214.406038] ? lock_downgrade+0x860/0x860 [ 214.410183] ? copy_mount_string+0x20/0x20 [ 214.414480] ? kasan_check_write+0x14/0x20 [ 214.418891] ? _copy_from_user+0x9c/0xd0 [ 214.423297] ? memdup_user+0x4a/0x80 [ 214.427008] ksys_mount+0xba/0xe0 [ 214.430514] __x64_sys_mount+0xb9/0x150 [ 214.434560] do_syscall_64+0xd0/0x4e0 [ 214.438358] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.443611] RIP: 0033:0x4592c9 [ 214.446795] Code: 24 48 c7 44 24 10 09 00 00 00 e8 82 ad ff ff 0f b6 44 24 18 88 44 24 40 48 8b 6c 24 20 48 83 c4 28 c3 e8 8a 8f ff ff eb a8 cc cc cc cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 76 68 [ 214.465765] RSP: 002b:00007f4c1a835c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 214.473515] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004592c9 [ 214.480785] RDX: 0000000020000000 RSI: 0000000020000180 RDI: 0000000000000000 [ 214.488269] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 214.496340] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f4c1a8366d4 [ 214.503845] R13: 00000000004c570b R14: 00000000004d9aa0 R15: 00000000ffffffff [ 214.514768] INFO: task syz-executor.4:7169 blocked for more than 140 seconds. [ 214.522035] Not tainted 4.19.103-syzkaller #0 [ 214.527247] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 214.535367] syz-executor.4 D28920 7169 7142 0x00000004 [ 214.540993] Call Trace: [ 214.543688] __schedule+0x78c/0x1c10 [ 214.547447] ? pci_mmcfg_check_reserved+0x120/0x120 [ 214.552823] ? rwsem_down_write_failed+0x5c1/0xbf0 [ 214.557954] ? lockdep_hardirqs_on+0x421/0x5c0 [ 214.562684] ? _raw_spin_unlock_irq+0x27/0x80 [ 214.567268] schedule+0x7f/0x1b0 [ 214.570638] rwsem_down_write_failed+0x5c6/0xbf0 [ 214.575476] ? rwsem_down_read_failed_killable+0x550/0x550 [ 214.581110] ? find_held_lock+0x36/0x1d0 [ 214.585248] ? __lock_is_held+0xb5/0x140 [ 214.589453] call_rwsem_down_write_failed+0x17/0x30 [ 214.594642] ? call_rwsem_down_write_failed+0x17/0x30 [ 214.599836] down_write+0x53/0x90 [ 214.603918] ? fuse_reverse_inval_entry+0x9a/0x5d0 [ 214.608891] fuse_reverse_inval_entry+0x9a/0x5d0 [ 214.613708] ? lock_acquire+0x173/0x3d0 [ 214.617687] ? fuse_update_attributes+0xa0/0xa0 [ 214.622552] fuse_dev_do_write+0xb7d/0x2350 [ 214.627079] ? fuse_dev_read+0x1b0/0x1b0 [ 214.631256] ? futex_wait_setup+0x310/0x310 [ 214.635642] ? kasan_check_write+0x14/0x20 [ 214.639994] ? wake_up_q+0xb3/0x100 [ 214.643697] ? memset+0x31/0x40 [ 214.646981] fuse_dev_write+0x12a/0x1b0 [ 214.651045] ? fuse_dev_splice_write+0xa20/0xa20 [ 214.656038] __vfs_write+0x443/0x890 [ 214.659761] ? kernel_read+0x130/0x130 [ 214.663709] ? selinux_file_permission+0x326/0x3f0 [ 214.668641] ? rw_verify_area+0xb8/0x2b0 [ 214.672860] vfs_write+0x150/0x4d0 [ 214.677091] ksys_write+0x103/0x260 [ 214.680872] ? __ia32_sys_read+0xa0/0xa0 [ 214.685074] ? do_syscall_64+0x21/0x4e0 [ 214.689384] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.694877] __x64_sys_write+0x6e/0xb0 [ 214.698891] do_syscall_64+0xd0/0x4e0 [ 214.702819] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.708393] RIP: 0033:0x4592c9 [ 214.711588] Code: 24 48 c7 44 24 10 09 00 00 00 e8 82 ad ff ff 0f b6 44 24 18 88 44 24 40 48 8b 6c 24 20 48 83 c4 28 c3 e8 8a 8f ff ff eb a8 cc cc cc cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 76 68 [ 214.730823] RSP: 002b:00007f4c1a814c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 214.738781] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004592c9 [ 214.746124] RDX: 000000000000002e RSI: 0000000020000000 RDI: 0000000000000003 [ 214.754096] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 214.761528] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c1a8156d4 [ 214.768866] R13: 00000000004c8aa3 R14: 00000000004df6e0 R15: 00000000ffffffff [ 214.776434] INFO: task syz-executor.4:7193 blocked for more than 140 seconds. [ 214.783871] Not tainted 4.19.103-syzkaller #0 [ 214.788941] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 214.796987] syz-executor.4 D27960 7193 7142 0x00000004 [ 214.802630] Call Trace: [ 214.805291] __schedule+0x78c/0x1c10 [ 214.809003] ? pci_mmcfg_check_reserved+0x120/0x120 [ 214.814090] ? rwsem_down_write_failed+0x5c1/0xbf0 [ 214.819021] ? lockdep_hardirqs_on+0x421/0x5c0 [ 214.823908] ? _raw_spin_unlock_irq+0x27/0x80 [ 214.828507] schedule+0x7f/0x1b0 [ 214.832683] rwsem_down_write_failed+0x5c6/0xbf0 [ 214.837509] ? rwsem_down_read_failed_killable+0x550/0x550 [ 214.843195] ? mark_held_locks+0x130/0x130 [ 214.847540] ? trace_hardirqs_on+0x28/0x190 [ 214.851875] ? find_held_lock+0x36/0x1d0 [ 214.856036] call_rwsem_down_write_failed+0x17/0x30 [ 214.861081] ? call_rwsem_down_write_failed+0x17/0x30 [ 214.866473] down_write+0x53/0x90 [ 214.869933] ? lock_mount+0x82/0x290 [ 214.873705] lock_mount+0x82/0x290 [ 214.877257] do_add_mount+0x22/0x310 [ 214.880976] do_mount+0x1290/0x2410 [ 214.884796] ? copy_mount_string+0x20/0x20 [ 214.889170] ? rcu_read_lock_sched_held+0x108/0x120 [ 214.894232] ? kmem_cache_alloc_trace+0x350/0x740 [ 214.899167] ? kasan_check_write+0x14/0x20 [ 214.903473] ? _copy_from_user+0x9c/0xd0 [ 214.907530] ? copy_mount_options+0x55/0x270 [ 214.912064] ksys_mount+0xba/0xe0 [ 214.915588] __x64_sys_mount+0xb9/0x150 [ 214.919577] do_syscall_64+0xd0/0x4e0 [ 214.923516] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.928705] RIP: 0033:0x4592c9 [ 214.932032] Code: 24 48 c7 44 24 10 09 00 00 00 e8 82 ad ff ff 0f b6 44 24 18 88 44 24 40 48 8b 6c 24 20 48 83 c4 28 c3 e8 8a 8f ff ff eb a8 cc cc cc cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 76 68 [ 214.951390] RSP: 002b:00007f4c1a7f3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 214.959333] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004592c9 [ 214.966823] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000000000000 [ 214.974135] RBP: 000000000075c118 R08: 0000000020000400 R09: 0000000000000000 [ 214.981406] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c1a7f46d4 [ 214.988738] R13: 00000000004c56df R14: 00000000004d9b60 R15: 00000000ffffffff [ 214.996198] INFO: task syz-executor.4:7194 blocked for more than 140 seconds. [ 215.003538] Not tainted 4.19.103-syzkaller #0 [ 215.008636] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 215.016700] syz-executor.4 D29144 7194 7142 0x00000004 [ 215.022339] Call Trace: [ 215.025080] __schedule+0x78c/0x1c10 [ 215.028793] ? pci_mmcfg_check_reserved+0x120/0x120 [ 215.033869] ? rwsem_down_read_failed+0x203/0x3e0 [ 215.038834] ? lockdep_hardirqs_on+0x421/0x5c0 [ 215.043507] ? _raw_spin_unlock_irq+0x27/0x80 [ 215.048004] ? rwsem_down_read_failed+0x21c/0x3e0 [ 215.052893] schedule+0x7f/0x1b0 [ 215.056329] rwsem_down_read_failed+0x21c/0x3e0 [ 215.061010] ? rwsem_down_write_failed+0xbf0/0xbf0 [ 215.066032] ? unlazy_walk+0x143/0x450 [ 215.069918] ? lock_downgrade+0x860/0x860 [ 215.074292] call_rwsem_down_read_failed+0x18/0x30 [ 215.079306] down_read+0x49/0xb0 [ 215.082712] ? lookup_slow+0x43/0x70 [ 215.086506] lookup_slow+0x43/0x70 [ 215.090041] walk_component+0x694/0x2320 [ 215.094155] ? security_inode_permission+0x73/0xb0 [ 215.099091] ? path_init+0x1550/0x1550 [ 215.102964] ? link_path_walk.part.40+0x16d/0x1550 [ 215.108133] ? path_init+0xefe/0x1550 [ 215.112063] ? trace_hardirqs_on+0x28/0x190 [ 215.116458] ? walk_component+0x2320/0x2320 [ 215.120901] ? save_stack+0x43/0xd0 [ 215.124591] ? kasan_kmalloc+0xc7/0xe0 [ 215.128550] ? kasan_slab_alloc+0x12/0x20 [ 215.132743] path_lookupat.isra.43+0x180/0x850 [ 215.137381] ? mark_held_locks+0x130/0x130 [ 215.141623] ? path_parentat.isra.41+0x100/0x100 [ 215.146473] ? find_held_lock+0x36/0x1d0 [ 215.150821] filename_lookup.part.57+0x160/0x360 [ 215.155750] ? filename_parentat.isra.55.part.56+0x400/0x400 [ 215.161698] ? rcu_read_lock_sched_held+0x108/0x120 [ 215.166839] ? strncpy_from_user+0x80/0x260 [ 215.171324] ? getname_flags+0xf6/0x520 [ 215.175350] user_path_at_empty+0x39/0x40 [ 215.179632] vfs_statx+0xbe/0x150 [ 215.183070] ? vfs_statx_fd+0x90/0x90 [ 215.186948] ? kasan_check_read+0x11/0x20 [ 215.191098] __do_sys_newstat+0x85/0xe0 [ 215.195137] ? cp_new_stat+0x5b0/0x5b0 [ 215.199031] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 215.203869] ? do_syscall_64+0x21/0x4e0 [ 215.207970] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 215.213393] ? lockdep_hardirqs_on+0x421/0x5c0 [ 215.218166] ? do_syscall_64+0x21/0x4e0 [ 215.222260] __x64_sys_newstat+0x4f/0x70 [ 215.226496] do_syscall_64+0xd0/0x4e0 [ 215.230304] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 215.235810] RIP: 0033:0x4592c9 [ 215.239006] Code: 24 48 c7 44 24 10 09 00 00 00 e8 82 ad ff ff 0f b6 44 24 18 88 44 24 40 48 8b 6c 24 20 48 83 c4 28 c3 e8 8a 8f ff ff eb a8 cc cc cc cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 76 68 [ 215.258281] RSP: 002b:00007f4c1a7d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 215.266099] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004592c9 [ 215.273729] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000580 [ 215.281237] RBP: 000000000075c1c0 R08: 0000000000000000 R09: 0000000000000000 [ 215.288587] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c1a7d36d4 [ 215.295923] R13: 00000000004e52fb R14: 00000000004de648 R15: 00000000ffffffff [ 215.303601] [ 215.303601] Showing all locks held in the system: [ 215.310041] 1 lock held by khungtaskd/1037: [ 215.314430] #0: 000000001fe23557 (rcu_read_lock){....}, at: debug_show_all_locks+0x5b/0x27a [ 215.323366] 1 lock held by rsyslogd/6896: [ 215.327713] #0: 00000000acfe75d5 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xa7/0xd0 [ 215.335853] 2 locks held by getty/7019: [ 215.339828] #0: 00000000eb5c027d (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 215.348278] #1: 000000006d61a1bf (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 215.357175] 2 locks held by getty/7020: [ 215.361139] #0: 00000000c50b6635 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 215.369548] #1: 0000000018bca616 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 215.378453] 2 locks held by getty/7021: [ 215.382416] #0: 0000000088182dd9 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 215.390942] #1: 00000000d6a8eca4 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 215.399956] 2 locks held by getty/7022: [ 215.404076] #0: 00000000575321cd (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 215.412610] #1: 000000001928d715 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 215.421608] 2 locks held by getty/7023: [ 215.425665] #0: 00000000ebe019b5 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 215.433967] #1: 00000000aa2d538a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 215.442893] 2 locks held by getty/7024: [ 215.446925] #0: 00000000be766b41 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 215.455444] #1: 0000000031ad957b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 215.464497] 2 locks held by getty/7025: [ 215.468525] #0: 0000000086afa987 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 215.476839] #1: 00000000b96fd044 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 215.485751] 2 locks held by syz-executor.2/7158: [ 215.490505] #0: 00000000a743d820 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 215.499253] #1: 000000008c4eb360 (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 215.507105] 1 lock held by syz-executor.2/7160: [ 215.511773] #0: 00000000a743d820 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 215.520522] 2 locks held by syz-executor.2/7161: [ 215.525318] #0: 000000002e42a0cc (&fc->killsb){.+.+}, at: fuse_dev_do_write+0x19c5/0x2350 [ 215.533800] #1: 00000000a743d820 (&type->i_mutex_dir_key#8){++++}, at: fuse_reverse_inval_entry+0x9a/0x5d0 [ 215.543904] 1 lock held by syz-executor.2/7188: [ 215.548583] #0: 00000000a743d820 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 215.557489] 1 lock held by syz-executor.2/7189: [ 215.562153] #0: 00000000a743d820 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 215.570939] 2 locks held by syz-executor.4/7163: [ 215.575904] #0: 0000000009ed5949 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 215.584712] #1: 00000000cb985664 (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 215.592731] 1 lock held by syz-executor.4/7165: [ 215.597464] #0: 0000000009ed5949 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 215.606368] 2 locks held by syz-executor.4/7169: [ 215.611116] #0: 000000005be00544 (&fc->killsb){.+.+}, at: fuse_dev_do_write+0x19c5/0x2350 [ 215.619718] #1: 0000000009ed5949 (&type->i_mutex_dir_key#8){++++}, at: fuse_reverse_inval_entry+0x9a/0x5d0 [ 215.629666] 1 lock held by syz-executor.4/7193: [ 215.634506] #0: 0000000009ed5949 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 215.643615] 1 lock held by syz-executor.4/7194: [ 215.648285] #0: 0000000009ed5949 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 215.657068] 2 locks held by syz-executor.0/7168: [ 215.662090] #0: 0000000022e965f4 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 215.670831] #1: 00000000388e1886 (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 215.678937] 1 lock held by syz-executor.0/7170: [ 215.683654] #0: 0000000022e965f4 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 215.692346] 2 locks held by syz-executor.0/7171: [ 215.697155] #0: 00000000c34174d8 (&fc->killsb){.+.+}, at: fuse_dev_do_write+0x19c5/0x2350 [ 215.705730] #1: 0000000022e965f4 (&type->i_mutex_dir_key#8){++++}, at: fuse_reverse_inval_entry+0x9a/0x5d0 [ 215.715686] 1 lock held by syz-executor.0/7197: [ 215.720510] #0: 0000000022e965f4 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 215.729471] 1 lock held by syz-executor.0/7198: [ 215.734379] #0: 0000000022e965f4 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 215.743427] 2 locks held by syz-executor.3/7174: [ 215.748301] #0: 000000008cba7668 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 215.757059] #1: 0000000049dbe9db (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 215.765125] 2 locks held by syz-executor.3/7175: [ 215.769864] #0: 00000000a5033fc5 (&fc->killsb){.+.+}, at: fuse_dev_do_write+0x19c5/0x2350 [ 215.778345] #1: 000000008cba7668 (&type->i_mutex_dir_key#8){++++}, at: fuse_reverse_inval_entry+0x9a/0x5d0 [ 215.788520] 1 lock held by syz-executor.3/7176: [ 215.793339] #0: 000000008cba7668 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 215.802018] 1 lock held by syz-executor.3/7201: [ 215.806770] #0: 000000008cba7668 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 215.815718] 1 lock held by syz-executor.3/7202: [ 215.820374] #0: 000000008cba7668 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 215.829100] 2 locks held by syz-executor.5/7179: [ 215.834075] #0: 000000003958d901 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 215.842741] #1: 000000004c13380a (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 215.850661] 1 lock held by syz-executor.5/7184: [ 215.855379] #0: 000000003958d901 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 215.864134] 2 locks held by syz-executor.5/7186: [ 215.868894] #0: 000000008193f978 (&fc->killsb){.+.+}, at: fuse_dev_do_write+0x19c5/0x2350 [ 215.877373] #1: 000000003958d901 (&type->i_mutex_dir_key#8){++++}, at: fuse_reverse_inval_entry+0x9a/0x5d0 [ 215.887532] 1 lock held by syz-executor.5/7205: [ 215.892209] #0: 000000003958d901 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 215.901072] 1 lock held by syz-executor.5/7206: [ 215.905778] #0: 000000003958d901 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 215.914674] 2 locks held by syz-executor.1/7183: [ 215.919533] #0: 000000003e352488 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 215.928644] #1: 000000005f546b02 (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 215.936694] 2 locks held by syz-executor.1/7185: [ 215.941754] #0: 00000000c81c2e51 (&fc->killsb){.+.+}, at: fuse_dev_do_write+0x19c5/0x2350 [ 215.950391] #1: 000000003e352488 (&type->i_mutex_dir_key#8){++++}, at: fuse_reverse_inval_entry+0x9a/0x5d0 [ 215.960572] 1 lock held by syz-executor.1/7187: [ 215.965321] #0: 000000003e352488 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 215.974185] 1 lock held by syz-executor.1/7209: [ 215.978849] #0: 000000003e352488 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 215.987697] 1 lock held by syz-executor.1/7210: [ 215.992363] #0: 000000003e352488 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 216.001281] [ 216.002975] ============================================= [ 216.002975] [ 216.010193] NMI backtrace for cpu 1 [ 216.013873] CPU: 1 PID: 1037 Comm: khungtaskd Not tainted 4.19.103-syzkaller #0 [ 216.021313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.030665] Call Trace: [ 216.033253] dump_stack+0x123/0x177 [ 216.036886] nmi_cpu_backtrace.cold.4+0x3e/0x76 [ 216.041614] ? lapic_can_unplug_cpu.cold.29+0x3f/0x3f [ 216.046921] nmi_trigger_cpumask_backtrace+0xe6/0x11a [ 216.052273] arch_trigger_cpumask_backtrace+0x14/0x20 [ 216.057468] watchdog+0x5c3/0xb40 [ 216.060942] kthread+0x324/0x3e0 [ 216.064364] ? hungtask_pm_notify+0x40/0x40 [ 216.068682] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 216.074215] ret_from_fork+0x24/0x30 [ 216.078170] Sending NMI from CPU 1 to CPUs 0: [ 216.082735] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x12/0x20 [ 216.083675] Kernel panic - not syncing: hung_task: blocked tasks [ 216.096859] CPU: 1 PID: 1037 Comm: khungtaskd Not tainted 4.19.103-syzkaller #0 [ 216.104305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.113650] Call Trace: [ 216.116224] dump_stack+0x123/0x177 [ 216.119844] panic+0x1cd/0x375 [ 216.123023] ? __warn_printk+0xd6/0xd6 [ 216.126912] watchdog+0x5d4/0xb40 [ 216.130362] kthread+0x324/0x3e0 [ 216.133719] ? hungtask_pm_notify+0x40/0x40 [ 216.138027] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 216.143605] ret_from_fork+0x24/0x30 [ 216.149291] Kernel Offset: disabled [ 216.152927] Rebooting in 86400 seconds..