Warning: Permanently added '10.128.15.201' (ECDSA) to the list of known hosts. [ 519.624649] INFO: task syz-executor.2:7706 blocked for more than 140 seconds. [ 519.632099] Not tainted 4.19.109-syzkaller #0 [ 519.637503] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 519.645648] syz-executor.2 D24056 7706 1 0x00000004 [ 519.651326] Call Trace: [ 519.653926] __schedule+0x78c/0x1c10 [ 519.657675] ? pci_mmcfg_check_reserved+0x120/0x120 [ 519.662748] ? kasan_check_read+0x11/0x20 [ 519.666917] schedule+0x7f/0x1b0 [ 519.670374] schedule_preempt_disabled+0x13/0x20 [ 519.675172] __mutex_lock+0x806/0x1210 [ 519.679100] ? fuse_lock_inode+0x9a/0xc0 [ 519.683143] ? mutex_trylock+0x1e0/0x1e0 [ 519.687226] ? find_held_lock+0x36/0x1d0 [ 519.691276] ? mark_held_locks+0xc7/0x130 [ 519.695500] ? d_alloc_parallel+0x5f3/0x1750 [ 519.699912] ? lock_downgrade+0x860/0x860 [ 519.705245] ? kasan_check_read+0x11/0x20 [ 519.709385] mutex_lock_nested+0x16/0x20 [ 519.713426] ? mutex_lock_nested+0x16/0x20 [ 519.717688] fuse_lock_inode+0x9a/0xc0 [ 519.721602] fuse_lookup+0x89/0x3b0 [ 519.725242] ? fuse_lookup_name+0x590/0x590 [ 519.729556] ? __d_lookup_rcu+0x8a0/0x8a0 [ 519.733699] ? __lockdep_init_map+0x105/0x590 [ 519.738231] ? __lockdep_init_map+0x105/0x590 [ 519.742766] __lookup_slow+0x216/0x400 [ 519.746674] ? kasan_check_read+0x11/0x20 [ 519.750810] ? vfs_unlink+0x450/0x450 [ 519.754653] lookup_slow+0x51/0x70 [ 519.758188] walk_component+0x694/0x2320 [ 519.762272] ? selinux_inode_permission+0x2dc/0x4c0 [ 519.767345] ? path_init+0x1550/0x1550 [ 519.771237] ? selinux_capable+0x20/0x20 [ 519.775341] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 519.780296] ? security_inode_permission+0x73/0xb0 [ 519.785274] ? inode_permission+0xbe/0x3e0 [ 519.789519] link_path_walk.part.40+0x9d7/0x1550 [ 519.794299] ? _raw_spin_unlock+0x2c/0x50 [ 519.798493] ? walk_component+0x2320/0x2320 [ 519.802805] ? nd_jump_root+0x260/0x390 [ 519.806794] ? trailing_symlink+0x55f/0x8f0 [ 519.811123] path_mountpoint+0xaa/0x1ac0 [ 519.815231] ? path_openat+0x3c60/0x3c60 [ 519.819286] ? cache_grow_end+0xa8/0x190 [ 519.823327] filename_mountpoint.part.58+0x146/0x2f0 [ 519.828449] ? user_path_at_empty+0x40/0x40 [ 519.832821] ? strncpy_from_user+0x80/0x260 [ 519.837171] ? getname_flags+0xf6/0x520 [ 519.841152] user_path_mountpoint_at+0x35/0x40 [ 519.845859] ksys_umount+0x12e/0xcc0 [ 519.849596] ? __detach_mounts+0x2c0/0x2c0 [ 519.853821] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 519.858601] ? do_syscall_64+0x21/0x4e0 [ 519.862566] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 519.867948] ? lockdep_hardirqs_on+0x421/0x5c0 [ 519.872522] __x64_sys_umount+0x4f/0x70 [ 519.876524] do_syscall_64+0xd0/0x4e0 [ 519.880317] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 519.885589] RIP: 0033:0x45c487 [ 519.888779] Code: Bad RIP value. [ 519.892253] RSP: 002b:00007fff03e3eaa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 519.899981] RAX: ffffffffffffffda RBX: 000000000005a187 RCX: 000000000045c487 [ 519.907269] RDX: 0000000000403550 RSI: 0000000000000002 RDI: 00007fff03e3eb50 [ 519.914680] RBP: 0000000000000002 R08: 0000000000000000 R09: 000000000000000e [ 519.921940] R10: 000000000000000a R11: 0000000000000202 R12: 00007fff03e3fbe0 [ 519.929227] R13: 0000000001a63940 R14: 0000000000000000 R15: 00007fff03e3fbe0 [ 519.936560] [ 519.936560] Showing all locks held in the system: [ 519.942894] 2 locks held by init/1: [ 519.946578] #0: 00000000bb0f9a0f (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 519.955282] #1: 00000000a13be5dc (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 519.963086] 1 lock held by khungtaskd/1019: [ 519.967423] #0: 00000000c65ec850 (rcu_read_lock){....}, at: debug_show_all_locks+0x5b/0x27a [ 519.976057] 1 lock held by rsyslogd/6949: [ 519.980217] #0: 000000001f59f52b (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xa7/0xd0 [ 519.988051] 2 locks held by cron/6999: [ 519.991949] #0: 00000000bb0f9a0f (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 520.000632] #1: 00000000a13be5dc (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 520.008452] 2 locks held by getty/7071: [ 520.012469] #0: 000000007a6b7771 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 520.020788] #1: 000000009024026c (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 520.029903] 2 locks held by getty/7072: [ 520.033868] #0: 0000000023e3056e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 520.042142] #1: 00000000f864435a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 520.051015] 2 locks held by getty/7073: [ 520.055008] #0: 00000000d4148e95 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 520.063254] #1: 00000000494b9c1f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 520.072251] 2 locks held by getty/7074: [ 520.076246] #0: 00000000defe05a9 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 520.084532] #1: 0000000027fb9102 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 520.093545] 2 locks held by getty/7075: [ 520.097560] #0: 0000000021b220f2 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 520.106463] #1: 000000005f6fe7cf (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 520.115355] 2 locks held by getty/7076: [ 520.119317] #0: 00000000b0729825 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 520.127572] #1: 00000000b9bc5122 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 520.136443] 2 locks held by getty/7077: [ 520.140403] #0: 000000004c132480 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 520.148690] #1: 0000000020019b82 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 520.157603] 2 locks held by syz-executor.2/7706: [ 520.162355] #0: 0000000088d62c3d (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 520.171074] #1: 000000003c143d39 (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 520.178911] 2 locks held by syz-executor.2/7764: [ 520.184176] #0: 0000000088d62c3d (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 520.192921] #1: 000000003c143d39 (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 520.200736] 2 locks held by syz-executor.5/7783: [ 520.205497] #0: 0000000050bad8ea (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 520.214168] #1: 000000007fd355eb (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 520.222108] 2 locks held by syz-executor186/7824: [ 520.226968] #0: 00000000bb0f9a0f (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 520.235689] #1: 00000000a13be5dc (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 520.243503] 2 locks held by syz-executor186/7829: [ 520.248391] #0: 00000000bb0f9a0f (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 520.257295] #1: 00000000a13be5dc (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 520.265255] [ 520.266878] ============================================= [ 520.266878] [ 520.273870] NMI backtrace for cpu 0 [ 520.277536] CPU: 0 PID: 1019 Comm: khungtaskd Not tainted 4.19.109-syzkaller #0 [ 520.285056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.294392] Call Trace: [ 520.297022] dump_stack+0x123/0x177 [ 520.300637] nmi_cpu_backtrace.cold.4+0x3e/0x76 [ 520.305283] ? lapic_can_unplug_cpu.cold.29+0x3f/0x3f [ 520.310469] nmi_trigger_cpumask_backtrace+0xe6/0x11a [ 520.315649] arch_trigger_cpumask_backtrace+0x14/0x20 [ 520.320869] watchdog+0x5c3/0xb40 [ 520.324306] kthread+0x324/0x3e0 [ 520.327648] ? hungtask_pm_notify+0x40/0x40 [ 520.331946] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 520.337469] ret_from_fork+0x24/0x30 [ 520.341219] Sending NMI from CPU 0 to CPUs 1: [ 520.346025] NMI backtrace for cpu 1 [ 520.346027] CPU: 1 PID: 611 Comm: kworker/u4:4 Not tainted 4.19.109-syzkaller #0 [ 520.346029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.346031] Workqueue: bat_events batadv_purge_orig [ 520.346033] RIP: 0010:__lock_acquire+0x1e4/0x4980 [ 520.346036] Code: 0f 85 2a 30 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 <0f> 85 28 32 00 00 49 81 7d 00 a0 d1 ea 88 0f 84 4a ff ff ff 83 fe [ 520.346037] RSP: 0018:ffff8880a8d77a10 EFLAGS: 00000046 [ 520.346040] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 520.346041] RDX: 1ffff1100dbfc303 RSI: 0000000000000000 RDI: ffffffff87f20740 [ 520.346042] RBP: ffff8880a8d77bf8 R08: 0000000000000001 R09: 0000000000000000 [ 520.346044] R10: ffffed1015d64732 R11: ffff8880aeb23993 R12: 0000000000000000 [ 520.346045] R13: ffff88806dfe1818 R14: ffff8880a8e583c0 R15: 0000000000000000 [ 520.346047] FS: 0000000000000000(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 520.346048] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 520.346049] CR2: 00000000004ae90f CR3: 0000000098c8a000 CR4: 00000000001406e0 [ 520.346051] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 520.346052] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 520.346053] Call Trace: [ 520.346054] ? check_noncircular+0x20/0x20 [ 520.346056] ? mark_held_locks+0x130/0x130 [ 520.346057] ? __lock_acquire+0x792/0x4980 [ 520.346058] ? mark_held_locks+0x130/0x130 [ 520.346059] lock_acquire+0x173/0x3d0 [ 520.346060] ? batadv_purge_orig_ref+0x101/0xe80 [ 520.346061] _raw_spin_lock_bh+0x31/0x40 [ 520.346063] ? batadv_purge_orig_ref+0x101/0xe80 [ 520.346064] batadv_purge_orig_ref+0x101/0xe80 [ 520.346065] batadv_purge_orig+0x14/0x60 [ 520.346066] process_one_work+0x830/0x1670 [ 520.346067] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 520.346068] ? lock_acquire+0x173/0x3d0 [ 520.346069] ? kasan_check_write+0x14/0x20 [ 520.346071] ? do_raw_spin_lock+0xd0/0x240 [ 520.346072] worker_thread+0x85/0xb60 [ 520.346073] ? __kthread_parkme+0x47/0x190 [ 520.346074] kthread+0x324/0x3e0 [ 520.346075] ? process_one_work+0x1670/0x1670 [ 520.346076] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 520.346078] ret_from_fork+0x24/0x30 [ 520.346835] Kernel panic - not syncing: hung_task: blocked tasks [ 520.572267] CPU: 0 PID: 1019 Comm: khungtaskd Not tainted 4.19.109-syzkaller #0 [ 520.579696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.589151] Call Trace: [ 520.591728] dump_stack+0x123/0x177 [ 520.595350] panic+0x1cd/0x375 [ 520.598537] ? __warn_printk+0xd6/0xd6 [ 520.602454] watchdog+0x5d4/0xb40 [ 520.605889] kthread+0x324/0x3e0 [ 520.609243] ? hungtask_pm_notify+0x40/0x40 [ 520.613597] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 520.619140] ret_from_fork+0x24/0x30 [ 520.624561] Kernel Offset: disabled [ 520.628396] Rebooting in 86400 seconds..