syzkaller login: [ 35.083762] kauditd_printk_skb: 9 callbacks suppressed [ 35.083767] audit: type=1400 audit(1580461687.885:35): avc: denied { map } for pid=7073 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 43.470480] audit: type=1400 audit(1580461696.275:36): avc: denied { map } for pid=7084 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 45.672708] IPVS: ftp: loaded support on port[0] = 21 [ 46.082630] can: request_module (can-proto-0) failed. [ 47.142480] can: request_module (can-proto-0) failed. [ 47.296395] audit: type=1400 audit(1580461700.105:37): avc: denied { create } for pid=7084 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 47.320302] audit: type=1400 audit(1580461700.105:38): avc: denied { create } for pid=7084 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 47.343928] audit: type=1400 audit(1580461700.105:39): avc: denied { create } for pid=7084 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.0.221' (ECDSA) to the list of known hosts. 2020/01/31 09:08:27 parsed 1 programs 2020/01/31 09:08:28 executed programs: 0 [ 55.660791] IPVS: ftp: loaded support on port[0] = 21 [ 55.671004] IPVS: ftp: loaded support on port[0] = 21 [ 55.672354] IPVS: ftp: loaded support on port[0] = 21 [ 55.680324] IPVS: ftp: loaded support on port[0] = 21 [ 55.682617] IPVS: ftp: loaded support on port[0] = 21 [ 55.758517] IPVS: ftp: loaded support on port[0] = 21 [ 55.862869] chnl_net:caif_netlink_parms(): no params data found [ 55.930157] chnl_net:caif_netlink_parms(): no params data found [ 55.995025] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.001426] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.009507] device bridge_slave_0 entered promiscuous mode [ 56.017213] chnl_net:caif_netlink_parms(): no params data found [ 56.032811] chnl_net:caif_netlink_parms(): no params data found [ 56.051503] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.058412] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.065640] device bridge_slave_1 entered promiscuous mode [ 56.089041] chnl_net:caif_netlink_parms(): no params data found [ 56.100419] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.107392] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.114885] device bridge_slave_0 entered promiscuous mode [ 56.122785] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.132184] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.156511] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.162929] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.170452] device bridge_slave_1 entered promiscuous mode [ 56.211755] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.218223] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.225856] device bridge_slave_0 entered promiscuous mode [ 56.240475] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.273679] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.280285] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.289437] device bridge_slave_1 entered promiscuous mode [ 56.296676] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 56.305006] team0: Port device team_slave_0 added [ 56.311085] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.339871] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.346582] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.353581] device bridge_slave_0 entered promiscuous mode [ 56.360718] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 56.368466] team0: Port device team_slave_1 added [ 56.374684] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.381055] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.388798] device bridge_slave_0 entered promiscuous mode [ 56.398891] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.405571] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.412744] device bridge_slave_1 entered promiscuous mode [ 56.419190] chnl_net:caif_netlink_parms(): no params data found [ 56.431780] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.438997] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.447943] device bridge_slave_1 entered promiscuous mode [ 56.454641] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 56.466576] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 56.473975] team0: Port device team_slave_0 added [ 56.490463] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.501420] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.510594] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 56.521668] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 56.529140] team0: Port device team_slave_1 added [ 56.534756] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 56.545925] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.562804] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.575774] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.586876] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 56.625979] device hsr_slave_0 entered promiscuous mode [ 56.676994] device hsr_slave_1 entered promiscuous mode [ 56.728322] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 56.738917] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 56.750896] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.762882] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 56.770759] team0: Port device team_slave_0 added [ 56.776673] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 56.784227] team0: Port device team_slave_1 added [ 56.808330] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 56.820629] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 56.827987] team0: Port device team_slave_0 added [ 56.836908] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 56.845027] team0: Port device team_slave_1 added [ 56.852969] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 56.905831] device hsr_slave_0 entered promiscuous mode [ 56.964422] device hsr_slave_1 entered promiscuous mode [ 57.044626] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 57.051864] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 57.061405] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.068048] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.075259] device bridge_slave_0 entered promiscuous mode [ 57.081826] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 57.089460] team0: Port device team_slave_0 added [ 57.094935] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 57.102197] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 57.109608] team0: Port device team_slave_1 added [ 57.116208] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.122762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.129795] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.136310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.145073] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.152150] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.166796] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 57.178419] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.184999] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.191887] device bridge_slave_1 entered promiscuous mode [ 57.206999] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 57.266705] device hsr_slave_0 entered promiscuous mode [ 57.294496] device hsr_slave_1 entered promiscuous mode [ 57.340570] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.348817] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 57.356859] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 57.365129] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 57.373090] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 57.425788] device hsr_slave_0 entered promiscuous mode [ 57.464427] device hsr_slave_1 entered promiscuous mode [ 57.542820] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 57.552085] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 57.563648] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 57.582046] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 57.589498] team0: Port device team_slave_0 added [ 57.597362] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 57.605456] team0: Port device team_slave_1 added [ 57.610958] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 57.676603] device hsr_slave_0 entered promiscuous mode [ 57.744475] device hsr_slave_1 entered promiscuous mode [ 57.824958] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 57.832101] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 57.839642] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 57.905801] device hsr_slave_0 entered promiscuous mode [ 57.944432] device hsr_slave_1 entered promiscuous mode [ 57.984881] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 58.006104] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 58.019814] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 58.029891] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 58.042017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.056754] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.076090] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 58.097563] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.112021] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 58.118468] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.127012] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 58.138108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.146836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.158536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.168132] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.176880] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.195857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.203815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.211749] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.218284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.227156] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.239409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.250443] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.259153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.268884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.276258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.284027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.292690] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.299277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.308710] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 58.315243] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.327932] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.337821] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.348349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.356174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.364010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.372415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.380612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.388487] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.394881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.401945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.410566] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.426684] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.443180] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 58.452256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.463177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.471078] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.477553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.484925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.492694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.502807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.510512] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.519019] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.528012] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 58.535441] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.542402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.550313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.557342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.564289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.572040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.582076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.590703] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.600173] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.610124] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 58.619541] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 58.633113] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.639678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.649298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.657250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.664898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.672883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.680639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.687716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.695261] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.703037] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 58.712465] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 58.719406] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.727302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 58.739634] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 58.746087] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.752127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.760120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.768098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.775936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.786149] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 58.793944] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.801638] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.816833] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.825225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.832889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.841297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.849468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.857323] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.863694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.871119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.879233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.886977] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.893342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.900786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.908245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.917767] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 58.926748] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.935012] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 58.941184] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.950849] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.965790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.976320] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.984742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.992523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.000193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.007180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.014308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.022254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.030106] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.036492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.044071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.052328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.060267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.067960] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.074508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.082295] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 59.088492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.100411] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.110332] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.119934] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.129469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.137911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.146499] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.152893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.160297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.168044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.176173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.184309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.191333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.204591] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.215784] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.226743] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.236504] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.246948] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.254528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.262559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.280513] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.287230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.294658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.302473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.310553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.318748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.327099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.336465] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.345901] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.360561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.369477] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.379418] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.389372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.398167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.406072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.414093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.423100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.432735] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 59.446901] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.457148] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 59.469360] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.477765] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 59.485885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.493689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.502385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.510520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.518743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.527967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.538377] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 59.548085] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 59.557134] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 59.567240] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.578119] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 59.587389] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 59.597207] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 59.604314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.611341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.619351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.627671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.635769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.643457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.651054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.658652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.667142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.675674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.683750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.691576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.699468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.709344] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 59.716085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.724385] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 59.730628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.743224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.753432] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 59.760599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.769233] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 59.775736] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.789789] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 59.800718] audit: type=1400 audit(1580461712.605:40): avc: denied { associate } for pid=7184 comm="syz-executor.2" name="syz2" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 59.805916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.848506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.858520] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.875296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.884020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.894310] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.901198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.909100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.917669] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 59.927988] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 59.938864] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.960203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.969864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.979890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.988644] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.995091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.006511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.025461] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.069482] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.079566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.103377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.122691] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.130541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.159712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.185887] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.201377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.210379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.227083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.244326] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 60.253472] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 60.287832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.318917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.349547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.366237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.382939] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 60.393856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.457508] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 60.523940] 8021q: adding VLAN 0 to HW filter on device batadv0 2020/01/31 09:08:33 executed programs: 11 [ 212.554263] INFO: task syz-executor.2:7200 blocked for more than 140 seconds. [ 212.561737] Not tainted 4.19.100-syzkaller #0 [ 212.584160] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 212.592199] syz-executor.2 D28120 7200 7184 0x80000004 [ 212.624167] Call Trace: [ 212.626812] __schedule+0x78c/0x1c10 [ 212.630524] ? pci_mmcfg_check_reserved+0x120/0x120 [ 212.644178] ? rwsem_down_read_failed+0x203/0x3e0 [ 212.649068] ? lockdep_hardirqs_on+0x421/0x5c0 [ 212.653669] ? _raw_spin_unlock_irq+0x27/0x80 [ 212.674187] ? rwsem_down_read_failed+0x21c/0x3e0 [ 212.679086] schedule+0x7f/0x1b0 [ 212.682461] rwsem_down_read_failed+0x21c/0x3e0 [ 212.704191] ? rwsem_down_write_failed+0xbf0/0xbf0 [ 212.709182] ? find_held_lock+0x36/0x1d0 [ 212.713270] call_rwsem_down_read_failed+0x18/0x30 [ 212.744200] down_read+0x49/0xb0 [ 212.747613] ? do_exit+0x617/0x2d20 [ 212.751249] do_exit+0x617/0x2d20 [ 212.774203] ? kasan_check_write+0x14/0x20 [ 212.778586] ? wake_up_q+0xb3/0x100 [ 212.782230] ? mm_update_next_owner+0x680/0x680 [ 212.814181] ? find_held_lock+0x36/0x1d0 [ 212.818402] ? get_signal+0x2c3/0x1a00 [ 212.822297] ? _raw_spin_unlock_irq+0x27/0x80 [ 212.854171] ? get_signal+0x2c3/0x1a00 [ 212.858109] do_group_exit+0xf4/0x2f0 [ 212.862045] get_signal+0x313/0x1a00 [ 212.894186] ? vm_mmap_pgoff+0x15a/0x210 [ 212.898292] ? lock_downgrade+0x860/0x860 [ 212.902456] do_signal+0x87/0x1960 [ 212.914185] ? vm_mmap_pgoff+0x15a/0x210 [ 212.918276] ? vma_is_stack_for_current+0x90/0x90 [ 212.923132] ? setup_sigcontext+0x7d0/0x7d0 [ 212.954259] ? _copy_to_user+0x91/0xb0 [ 212.958205] ? ksys_mmap_pgoff+0xa4/0x650 [ 212.962367] ? exit_to_usermode_loop+0x3a/0x200 [ 213.004194] ? do_syscall_64+0x413/0x4e0 [ 213.008317] ? lockdep_hardirqs_on+0x421/0x5c0 [ 213.012912] ? exit_to_usermode_loop+0x3a/0x200 [ 213.044178] ? trace_hardirqs_on+0x28/0x190 [ 213.048563] exit_to_usermode_loop+0x114/0x200 [ 213.053157] do_syscall_64+0x413/0x4e0 [ 213.098569] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.103804] RIP: 0033:0x4592ca [ 213.134174] Code: 89 f5 41 54 49 89 fc 55 53 74 35 49 63 e8 48 63 da 4d 89 f9 49 89 e8 4d 63 d6 48 89 da 4c 89 ee 4c 89 e7 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 4e 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 [ 213.184162] RSP: 002b:00007ffcf3b605b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 213.192052] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00000000004592ca [ 213.234177] RDX: 0000000000000003 RSI: 0000000000021000 RDI: 0000000000000000 [ 213.241500] RBP: ffffffffffffffff R08: ffffffffffffffff R09: 0000000000000000 [ 213.264171] R10: 0000000000020022 R11: 0000000000000246 R12: 0000000000000000 [ 213.271489] R13: 0000000000021000 R14: 0000000000020022 R15: 0000000000000000 [ 213.294155] INFO: task syz-executor.2:7209 blocked for more than 140 seconds. [ 213.301458] Not tainted 4.19.100-syzkaller #0 [ 213.314165] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 213.322167] syz-executor.2 D28312 7209 7184 0x80000004 [ 213.354174] Call Trace: [ 213.356815] __schedule+0x78c/0x1c10 [ 213.360549] ? pci_mmcfg_check_reserved+0x120/0x120 [ 213.394200] ? rwsem_down_read_failed+0x203/0x3e0 [ 213.399096] ? lockdep_hardirqs_on+0x421/0x5c0 [ 213.403687] ? _raw_spin_unlock_irq+0x27/0x80 [ 213.444176] ? rwsem_down_read_failed+0x21c/0x3e0 [ 213.449071] schedule+0x7f/0x1b0 [ 213.452433] rwsem_down_read_failed+0x21c/0x3e0 [ 213.484186] ? rwsem_down_write_failed+0xbf0/0xbf0 [ 213.489176] ? find_held_lock+0x36/0x1d0 [ 213.493247] call_rwsem_down_read_failed+0x18/0x30 [ 213.534185] down_read+0x49/0xb0 [ 213.537598] ? do_exit+0x617/0x2d20 [ 213.541381] do_exit+0x617/0x2d20 [ 213.574189] ? trace_hardirqs_on+0x28/0x190 [ 213.578564] ? mm_update_next_owner+0x680/0x680 [ 213.583242] ? find_held_lock+0x36/0x1d0 [ 213.614184] ? get_signal+0x2c3/0x1a00 [ 213.618107] ? _raw_spin_unlock_irq+0x27/0x80 [ 213.622611] ? get_signal+0x2c3/0x1a00 [ 213.644180] do_group_exit+0xf4/0x2f0 [ 213.648035] get_signal+0x313/0x1a00 [ 213.651855] ? vm_mmap_pgoff+0x15a/0x210 [ 213.698817] ? lock_downgrade+0x860/0x860 [ 213.703043] do_signal+0x87/0x1960 [ 213.718812] ? vm_mmap_pgoff+0x15a/0x210 [ 213.723070] ? vma_is_stack_for_current+0x90/0x90 [ 213.758814] ? setup_sigcontext+0x7d0/0x7d0 [ 213.763184] ? ksys_dup3+0x2e0/0x2e0 [ 213.767273] ? _copy_to_user+0x91/0xb0 [ 213.771174] ? kasan_check_write+0x14/0x20 [ 213.799638] ? fput+0x18/0x120 [ 213.802876] ? ksys_mmap_pgoff+0x3dc/0x650 [ 213.807448] ? exit_to_usermode_loop+0x3a/0x200 [ 213.812127] ? do_syscall_64+0x413/0x4e0 [ 213.858533] ? lockdep_hardirqs_on+0x421/0x5c0 [ 213.863165] ? exit_to_usermode_loop+0x3a/0x200 [ 213.884181] ? trace_hardirqs_on+0x28/0x190 [ 213.888550] exit_to_usermode_loop+0x114/0x200 [ 213.893152] do_syscall_64+0x413/0x4e0 [ 213.944184] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.949643] RIP: 0033:0x459279 [ 213.952849] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 214.024170] RSP: 002b:00007f51f943cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 214.031928] RAX: fffffffffffffffc RBX: 0000000000000006 RCX: 0000000000459279 [ 214.054172] RDX: 0000000001000000 RSI: 0000000000001000 RDI: 0000000020ffd000 [ 214.061482] RBP: 000000000075bfc0 R08: 0000000000000004 R09: 0000000000000000 [ 214.084175] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f51f943d6d4 [ 214.091494] R13: 00000000004c5567 R14: 00000000004d9918 R15: 00000000ffffffff [ 214.114183] INFO: task syz-executor.1:7202 blocked for more than 140 seconds. [ 214.121492] Not tainted 4.19.100-syzkaller #0 [ 214.144182] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 214.152192] syz-executor.1 D28120 7202 7180 0x80000004 [ 214.184181] Call Trace: [ 214.186842] __schedule+0x78c/0x1c10 [ 214.190578] ? pci_mmcfg_check_reserved+0x120/0x120 [ 214.224173] ? rwsem_down_read_failed+0x203/0x3e0 [ 214.229070] ? lockdep_hardirqs_on+0x421/0x5c0 [ 214.233663] ? _raw_spin_unlock_irq+0x27/0x80 [ 214.254159] ? rwsem_down_read_failed+0x21c/0x3e0 [ 214.259042] schedule+0x7f/0x1b0 [ 214.262407] rwsem_down_read_failed+0x21c/0x3e0 [ 214.274173] ? rwsem_down_write_failed+0xbf0/0xbf0 [ 214.279135] ? find_held_lock+0x36/0x1d0 [ 214.283207] call_rwsem_down_read_failed+0x18/0x30 [ 214.304191] down_read+0x49/0xb0 [ 214.307619] ? do_exit+0x617/0x2d20 [ 214.311251] do_exit+0x617/0x2d20 [ 214.324168] ? trace_hardirqs_on+0x28/0x190 [ 214.328528] ? mm_update_next_owner+0x680/0x680 [ 214.333213] ? find_held_lock+0x36/0x1d0 [ 214.384190] ? get_signal+0x2c3/0x1a00 [ 214.388187] ? _raw_spin_unlock_irq+0x27/0x80 [ 214.392690] ? get_signal+0x2c3/0x1a00 [ 214.414186] do_group_exit+0xf4/0x2f0 [ 214.418044] get_signal+0x313/0x1a00 [ 214.421991] ? vm_mmap_pgoff+0x15a/0x210 [ 214.454201] ? lock_downgrade+0x860/0x860 [ 214.458414] do_signal+0x87/0x1960 [ 214.462099] ? vm_mmap_pgoff+0x15a/0x210 [ 214.494174] ? vma_is_stack_for_current+0x90/0x90 [ 214.499061] ? setup_sigcontext+0x7d0/0x7d0 [ 214.503398] ? kvm_clock_get_cycles+0x9/0x10 [ 214.524185] ? ksys_mmap_pgoff+0xa4/0x650 [ 214.528383] ? exit_to_usermode_loop+0x3a/0x200 [ 214.533060] ? do_syscall_64+0x413/0x4e0 [ 214.564181] ? lockdep_hardirqs_on+0x421/0x5c0 [ 214.568812] ? exit_to_usermode_loop+0x3a/0x200 [ 214.573495] ? trace_hardirqs_on+0x28/0x190 [ 214.594172] exit_to_usermode_loop+0x114/0x200 [ 214.598817] do_syscall_64+0x413/0x4e0 [ 214.602722] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.634175] RIP: 0033:0x4592ca [ 214.637408] Code: 89 f5 41 54 49 89 fc 55 53 74 35 49 63 e8 48 63 da 4d 89 f9 49 89 e8 4d 63 d6 48 89 da 4c 89 ee 4c 89 e7 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 4e 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 [ 214.684173] RSP: 002b:00007ffc1ef00378 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 214.691941] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00000000004592ca [ 214.734169] RDX: 0000000000000003 RSI: 0000000000021000 RDI: 0000000000000000 [ 214.741485] RBP: ffffffffffffffff R08: ffffffffffffffff R09: 0000000000000000 [ 214.774162] R10: 0000000000020022 R11: 0000000000000246 R12: 0000000000000000 [ 214.781484] R13: 0000000000021000 R14: 0000000000020022 R15: 0000000000000000 [ 214.804165] INFO: task syz-executor.1:7213 blocked for more than 140 seconds. [ 214.811485] Not tainted 4.19.100-syzkaller #0 [ 214.834163] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 214.842616] syz-executor.1 D28600 7213 7180 0x80000004 [ 214.864167] Call Trace: [ 214.866813] __schedule+0x78c/0x1c10 [ 214.870551] ? pci_mmcfg_check_reserved+0x120/0x120 [ 214.894184] ? rwsem_down_read_failed+0x203/0x3e0 [ 214.899085] ? lockdep_hardirqs_on+0x421/0x5c0 [ 214.903681] ? _raw_spin_unlock_irq+0x27/0x80 [ 214.934183] ? rwsem_down_read_failed+0x21c/0x3e0 [ 214.939169] schedule+0x7f/0x1b0 [ 214.942532] rwsem_down_read_failed+0x21c/0x3e0 [ 214.974185] ? rwsem_down_write_failed+0xbf0/0xbf0 [ 214.979174] ? find_held_lock+0x36/0x1d0 [ 214.983257] call_rwsem_down_read_failed+0x18/0x30 [ 215.004177] down_read+0x49/0xb0 [ 215.007584] ? do_exit+0x617/0x2d20 [ 215.011209] do_exit+0x617/0x2d20 [ 215.024191] ? mm_update_next_owner+0x680/0x680 [ 215.028901] ? find_held_lock+0x36/0x1d0 [ 215.033001] ? get_signal+0x2c3/0x1a00 [ 215.044180] ? _raw_spin_unlock_irq+0x27/0x80 [ 215.048724] ? get_signal+0x2c3/0x1a00 [ 215.052724] do_group_exit+0xf4/0x2f0 [ 215.084183] get_signal+0x313/0x1a00 [ 215.087952] ? lock_downgrade+0x860/0x860 [ 215.092113] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 215.124197] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 215.129037] do_signal+0x87/0x1960 [ 215.132584] ? retint_kernel+0x2d/0x2d [ 215.164192] ? setup_sigcontext+0x7d0/0x7d0 [ 215.168678] ? exit_to_usermode_loop+0x3a/0x200 [ 215.173377] ? do_syscall_64+0x413/0x4e0 [ 215.208629] ? lockdep_hardirqs_on+0x421/0x5c0 [ 215.213255] ? exit_to_usermode_loop+0x3a/0x200 [ 215.248677] ? trace_hardirqs_on+0x28/0x190 [ 215.253061] exit_to_usermode_loop+0x114/0x200 [ 215.284208] do_syscall_64+0x413/0x4e0 [ 215.288148] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 215.293330] RIP: 0033:0x459279 [ 215.314176] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 215.374179] RSP: 002b:00007f833a874cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 215.381949] RAX: fffffffffffffe00 RBX: 000000000075bfc8 RCX: 0000000000459279 [ 215.404182] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bfc8 [ 215.411505] RBP: 000000000075bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 215.434180] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bfcc [ 215.441495] R13: 00007ffc1ef0041f R14: 00007f833a8759c0 R15: 000000000075bfcc [ 215.464196] INFO: task syz-executor.0:7220 blocked for more than 140 seconds. [ 215.471743] Not tainted 4.19.100-syzkaller #0 [ 215.504173] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 215.512207] syz-executor.0 D28120 7220 7178 0x80000000 [ 215.544203] Call Trace: [ 215.546849] __schedule+0x78c/0x1c10 [ 215.550583] ? pci_mmcfg_check_reserved+0x120/0x120 [ 215.584182] ? rwsem_down_read_failed+0x203/0x3e0 [ 215.589077] ? lockdep_hardirqs_on+0x421/0x5c0 [ 215.593656] ? _raw_spin_unlock_irq+0x27/0x80 [ 215.614188] ? rwsem_down_read_failed+0x21c/0x3e0 [ 215.619184] schedule+0x7f/0x1b0 [ 215.622565] rwsem_down_read_failed+0x21c/0x3e0 [ 215.634186] ? rwsem_down_write_failed+0xbf0/0xbf0 [ 215.639169] ? find_held_lock+0x36/0x1d0 [ 215.643255] call_rwsem_down_read_failed+0x18/0x30 [ 215.664197] down_read+0x49/0xb0 [ 215.667615] ? do_exit+0x617/0x2d20 [ 215.671421] do_exit+0x617/0x2d20 [ 215.704183] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 215.709341] ? match_held_lock+0x4e0/0x570 [ 215.713586] ? mm_update_next_owner+0x680/0x680 [ 215.744211] ? do_group_exit+0x26e/0x2f0 [ 215.748320] ? _raw_spin_unlock_irq+0x27/0x80 [ 215.752825] ? do_group_exit+0x26e/0x2f0 [ 215.784207] ? lockdep_hardirqs_on+0x421/0x5c0 [ 215.788849] ? _raw_spin_unlock_irq+0x27/0x80 [ 215.793342] ? trace_hardirqs_on+0x28/0x190 [ 215.804183] do_group_exit+0xf4/0x2f0 [ 215.808028] __x64_sys_exit_group+0x39/0x40 [ 215.812362] do_syscall_64+0xd0/0x4e0 [ 215.834263] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 215.839510] RIP: 0033:0x459279 [ 215.842922] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 215.904177] RSP: 002b:00007ffe13f08c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 215.911932] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 0000000000459279 [ 215.964180] RDX: 0000000000412f61 RSI: fffffffffffffff7 RDI: 0000000000000000 [ 215.971502] RBP: 0000000000000000 R08: ffffffffffffffff R09: 00007ffe13f08cc0 [ 215.995166] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 216.002587] R13: 00007ffe13f08cc0 R14: 0000000000000000 R15: 00007ffe13f08cd0 [ 216.055781] INFO: task syz-executor.0:7221 blocked for more than 140 seconds. [ 216.063101] Not tainted 4.19.100-syzkaller #0 [ 216.095757] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 216.103889] syz-executor.0 D28008 7221 7178 0x80000000 [ 216.127285] Call Trace: [ 216.129913] __schedule+0x78c/0x1c10 [ 216.133637] ? pci_mmcfg_check_reserved+0x120/0x120 [ 216.167044] ? rwsem_down_read_failed+0x203/0x3e0 [ 216.172055] ? lockdep_hardirqs_on+0x421/0x5c0 [ 216.195859] ? _raw_spin_unlock_irq+0x27/0x80 [ 216.200407] ? rwsem_down_read_failed+0x21c/0x3e0 [ 216.237585] schedule+0x7f/0x1b0 [ 216.241108] rwsem_down_read_failed+0x21c/0x3e0 [ 216.284155] ? rwsem_down_write_failed+0xbf0/0xbf0 [ 216.289146] ? find_held_lock+0x36/0x1d0 [ 216.293223] call_rwsem_down_read_failed+0x18/0x30 [ 216.324193] down_read+0x49/0xb0 [ 216.327594] ? do_exit+0x617/0x2d20 [ 216.331279] do_exit+0x617/0x2d20 [ 216.354182] ? mm_update_next_owner+0x680/0x680 [ 216.358920] ? find_held_lock+0x36/0x1d0 [ 216.363001] ? get_signal+0x2c3/0x1a00 [ 216.396282] ? _raw_spin_unlock_irq+0x27/0x80 [ 216.400830] ? get_signal+0x2c3/0x1a00 [ 216.427242] do_group_exit+0xf4/0x2f0 [ 216.431108] get_signal+0x313/0x1a00 [ 216.455680] do_signal+0x87/0x1960 [ 216.459260] ? lock_downgrade+0x860/0x860 [ 216.463420] ? setup_sigcontext+0x7d0/0x7d0 [ 216.495635] ? kasan_check_read+0x11/0x20 [ 216.499830] ? _copy_to_user+0x91/0xb0 [ 216.503718] ? __x64_sys_futex+0x1cb/0x3a0 [ 216.527812] ? exit_to_usermode_loop+0x3a/0x200 [ 216.533079] ? do_syscall_64+0x413/0x4e0 [ 216.547190] ? lockdep_hardirqs_on+0x421/0x5c0 [ 216.551813] ? exit_to_usermode_loop+0x3a/0x200 [ 216.575658] ? trace_hardirqs_on+0x28/0x190 [ 216.580023] exit_to_usermode_loop+0x114/0x200 [ 216.615653] do_syscall_64+0x413/0x4e0 [ 216.619579] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 216.656410] RIP: 0033:0x459279 [ 216.659662] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 216.718603] RSP: 002b:00007f6d61234cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 216.738749] RAX: fffffffffffffe00 RBX: 000000000075bf28 RCX: 0000000000459279 [ 216.758796] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bf28 [ 216.778747] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 216.818513] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bf2c [ 216.838491] R13: 00007ffe13f08a5f R14: 00007f6d612359c0 R15: 000000000075bf2c [ 216.884189] INFO: task syz-executor.0:7230 blocked for more than 140 seconds. [ 216.891511] Not tainted 4.19.100-syzkaller #0 [ 216.919151] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 216.938618] syz-executor.0 D29000 7230 7178 0x80000000 [ 216.958643] Call Trace: [ 216.961291] __schedule+0x78c/0x1c10 [ 216.965335] ? pci_mmcfg_check_reserved+0x120/0x120 [ 216.970361] ? rwsem_down_read_failed+0x203/0x3e0 [ 216.998645] ? lockdep_hardirqs_on+0x421/0x5c0 [ 217.003267] ? _raw_spin_unlock_irq+0x27/0x80 [ 217.018632] ? rwsem_down_read_failed+0x21c/0x3e0 [ 217.023515] schedule+0x7f/0x1b0 [ 217.039427] rwsem_down_read_failed+0x21c/0x3e0 [ 217.068917] ? rwsem_down_write_failed+0xbf0/0xbf0 [ 217.073891] ? find_held_lock+0x36/0x1d0 [ 217.088654] call_rwsem_down_read_failed+0x18/0x30 [ 217.093633] down_read+0x49/0xb0 [ 217.115091] ? do_exit+0x617/0x2d20 [ 217.118771] do_exit+0x617/0x2d20 [ 217.122237] ? mm_update_next_owner+0x680/0x680 [ 217.164173] ? find_held_lock+0x36/0x1d0 [ 217.168280] ? get_signal+0x2c3/0x1a00 [ 217.172177] ? _raw_spin_unlock_irq+0x27/0x80 [ 217.214183] ? get_signal+0x2c3/0x1a00 [ 217.218113] do_group_exit+0xf4/0x2f0 [ 217.221911] get_signal+0x313/0x1a00 [ 217.248453] do_signal+0x87/0x1960 [ 217.252059] ? lock_downgrade+0x860/0x860 [ 217.288857] ? setup_sigcontext+0x7d0/0x7d0 [ 217.293237] ? kasan_check_read+0x11/0x20 [ 217.309310] ? _copy_to_user+0x91/0xb0 [ 217.313238] ? __x64_sys_futex+0x1cb/0x3a0 [ 217.328616] ? blkg_prfill_rwstat_field_recursive+0x100/0x100 [ 217.358407] ? exit_to_usermode_loop+0x3a/0x200 [ 217.363133] ? do_syscall_64+0x413/0x4e0 [ 217.398729] ? lockdep_hardirqs_on+0x421/0x5c0 [ 217.403365] ? exit_to_usermode_loop+0x3a/0x200 [ 217.424183] ? trace_hardirqs_on+0x28/0x190 [ 217.428552] exit_to_usermode_loop+0x114/0x200 [ 217.433173] do_syscall_64+0x413/0x4e0 [ 217.457978] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 217.463444] RIP: 0033:0x459279 [ 217.504136] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 217.569056] RSP: 002b:00007f6d61213cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 217.588440] RAX: fffffffffffffe00 RBX: 000000000075bfc8 RCX: 0000000000459279 [ 217.608522] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bfc8 [ 217.654136] RBP: 000000000075bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 217.661432] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bfcc [ 217.708627] R13: 00007ffe13f08a5f R14: 00007f6d612149c0 R15: 000000000075bfcc [ 217.728447] INFO: task syz-executor.4:7238 blocked for more than 140 seconds. [ 217.748420] Not tainted 4.19.100-syzkaller #0 [ 217.753447] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 217.824143] syz-executor.4 D28120 7238 7186 0x80000000 [ 217.829815] Call Trace: [ 217.832397] __schedule+0x78c/0x1c10 [ 217.844154] ? pci_mmcfg_check_reserved+0x120/0x120 [ 217.849182] ? rwsem_down_read_failed+0x203/0x3e0 [ 217.854015] ? lockdep_hardirqs_on+0x421/0x5c0 [ 217.874134] ? _raw_spin_unlock_irq+0x27/0x80 [ 217.878646] ? rwsem_down_read_failed+0x21c/0x3e0 [ 217.883476] schedule+0x7f/0x1b0 [ 217.904147] rwsem_down_read_failed+0x21c/0x3e0 [ 217.908838] ? rwsem_down_write_failed+0xbf0/0xbf0 [ 217.913762] ? find_held_lock+0x36/0x1d0 [ 217.934153] call_rwsem_down_read_failed+0x18/0x30 [ 217.939106] down_read+0x49/0xb0 [ 217.942461] ? do_exit+0x617/0x2d20 [ 217.964179] do_exit+0x617/0x2d20 [ 217.967685] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 217.972785] ? match_held_lock+0x4e0/0x570 [ 218.004179] ? mm_update_next_owner+0x680/0x680 [ 218.008883] ? do_group_exit+0x26e/0x2f0 [ 218.012936] ? _raw_spin_unlock_irq+0x27/0x80 [ 218.058428] ? do_group_exit+0x26e/0x2f0 [ 218.062528] ? lockdep_hardirqs_on+0x421/0x5c0 [ 218.079305] ? _raw_spin_unlock_irq+0x27/0x80 [ 218.083813] ? trace_hardirqs_on+0x28/0x190 [ 218.124148] do_group_exit+0xf4/0x2f0 [ 218.127979] __x64_sys_exit_group+0x39/0x40 [ 218.132295] do_syscall_64+0xd0/0x4e0 [ 218.159283] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 218.164807] RIP: 0033:0x459279 [ 218.168008] Code: Bad RIP value. [ 218.171362] RSP: 002b:00007ffe64b403c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 218.219078] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 0000000000459279 [ 218.226646] RDX: 0000000000412f61 RSI: fffffffffffffff7 RDI: 0000000000000000 [ 218.233916] RBP: 0000000000000000 R08: ffffffffffffffff R09: 00007ffe64b40420 [ 218.284147] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 218.291459] R13: 00007ffe64b40420 R14: 0000000000000000 R15: 00007ffe64b40430 [ 218.344806] INFO: task syz-executor.4:7239 blocked for more than 140 seconds. [ 218.352124] Not tainted 4.19.100-syzkaller #0 [ 218.378542] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 218.399560] syz-executor.4 D28008 7239 7186 0x80000000 [ 218.418780] Call Trace: [ 218.421428] __schedule+0x78c/0x1c10 [ 218.458637] ? pci_mmcfg_check_reserved+0x120/0x120 [ 218.463701] ? rwsem_down_read_failed+0x203/0x3e0 [ 218.484172] ? lockdep_hardirqs_on+0x421/0x5c0 [ 218.488798] ? _raw_spin_unlock_irq+0x27/0x80 [ 218.493308] ? rwsem_down_read_failed+0x21c/0x3e0 [ 218.544185] schedule+0x7f/0x1b0 [ 218.547606] rwsem_down_read_failed+0x21c/0x3e0 [ 218.552287] ? rwsem_down_write_failed+0xbf0/0xbf0 [ 218.578923] ? find_held_lock+0x36/0x1d0 [ 218.583041] call_rwsem_down_read_failed+0x18/0x30 [ 218.604859] down_read+0x49/0xb0 [ 218.608279] ? do_exit+0x617/0x2d20 [ 218.611920] do_exit+0x617/0x2d20 [ 218.659010] ? mm_update_next_owner+0x680/0x680 [ 218.663740] ? find_held_lock+0x36/0x1d0 [ 218.684174] ? get_signal+0x2c3/0x1a00 [ 218.688110] ? _raw_spin_unlock_irq+0x27/0x80 [ 218.692702] ? get_signal+0x2c3/0x1a00 [ 218.739392] do_group_exit+0xf4/0x2f0 [ 218.743237] get_signal+0x313/0x1a00 [ 218.758558] do_signal+0x87/0x1960 [ 218.762152] ? lock_downgrade+0x860/0x860 [ 218.778708] ? setup_sigcontext+0x7d0/0x7d0 [ 218.783070] ? kasan_check_read+0x11/0x20 [ 218.818693] ? _copy_to_user+0x91/0xb0 [ 218.822634] ? __x64_sys_futex+0x1cb/0x3a0 [ 218.827321] ? exit_to_usermode_loop+0x3a/0x200 [ 218.832002] ? do_syscall_64+0x413/0x4e0 [ 218.858839] ? lockdep_hardirqs_on+0x421/0x5c0 [ 218.863480] ? exit_to_usermode_loop+0x3a/0x200 [ 218.898736] ? trace_hardirqs_on+0x28/0x190 [ 218.903106] exit_to_usermode_loop+0x114/0x200 [ 218.918760] do_syscall_64+0x413/0x4e0 [ 218.922688] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 218.958754] RIP: 0033:0x459279 [ 218.961993] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 219.018894] RSP: 002b:00007ff776897cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 219.027010] RAX: fffffffffffffe00 RBX: 000000000075bf28 RCX: 0000000000459279 [ 219.058574] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bf28 [ 219.066207] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 219.073493] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bf2c [ 219.105648] R13: 00007ffe64b401bf R14: 00007ff7768989c0 R15: 000000000075bf2c [ 219.112994] INFO: task syz-executor.4:7242 blocked for more than 140 seconds. [ 219.178622] Not tainted 4.19.100-syzkaller #0 [ 219.183681] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 219.218700] syz-executor.4 D29000 7242 7186 0x80000000 [ 219.238854] Call Trace: [ 219.241486] __schedule+0x78c/0x1c10 [ 219.245550] ? pci_mmcfg_check_reserved+0x120/0x120 [ 219.250579] ? rwsem_down_read_failed+0x203/0x3e0 [ 219.278515] ? lockdep_hardirqs_on+0x421/0x5c0 [ 219.283133] ? _raw_spin_unlock_irq+0x27/0x80 [ 219.298600] ? rwsem_down_read_failed+0x21c/0x3e0 [ 219.303496] schedule+0x7f/0x1b0 [ 219.338553] rwsem_down_read_failed+0x21c/0x3e0 [ 219.343293] ? rwsem_down_write_failed+0xbf0/0xbf0 [ 219.384203] ? find_held_lock+0x36/0x1d0 [ 219.388331] call_rwsem_down_read_failed+0x18/0x30 [ 219.393273] down_read+0x49/0xb0 [ 219.418590] ? do_exit+0x617/0x2d20 [ 219.422269] do_exit+0x617/0x2d20 [ 219.439376] ? mm_update_next_owner+0x680/0x680 [ 219.444434] ? find_held_lock+0x36/0x1d0 [ 219.448529] ? get_signal+0x2c3/0x1a00 [ 219.452440] ? _raw_spin_unlock_irq+0x27/0x80 [ 219.478562] ? get_signal+0x2c3/0x1a00 [ 219.482752] do_group_exit+0xf4/0x2f0 [ 219.529274] get_signal+0x313/0x1a00 [ 219.533041] do_signal+0x87/0x1960 [ 219.548672] ? lock_downgrade+0x860/0x860 [ 219.552888] ? setup_sigcontext+0x7d0/0x7d0 [ 219.574199] ? kasan_check_read+0x11/0x20 [ 219.578405] ? _copy_to_user+0x91/0xb0 [ 219.582312] ? __x64_sys_futex+0x1cb/0x3a0 [ 219.624183] ? blkg_prfill_rwstat_field_recursive+0x100/0x100 [ 219.630120] ? exit_to_usermode_loop+0x3a/0x200 [ 219.654168] ? do_syscall_64+0x413/0x4e0 [ 219.658261] ? lockdep_hardirqs_on+0x421/0x5c0 [ 219.662835] ? exit_to_usermode_loop+0x3a/0x200 [ 219.704185] ? trace_hardirqs_on+0x28/0x190 [ 219.708564] exit_to_usermode_loop+0x114/0x200 [ 219.713159] do_syscall_64+0x413/0x4e0 [ 219.724173] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 219.729508] RIP: 0033:0x459279 [ 219.732711] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 219.784178] RSP: 002b:00007ff776876cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 219.791935] RAX: fffffffffffffe00 RBX: 000000000075bfc8 RCX: 0000000000459279 [ 219.834161] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bfc8 [ 219.841574] RBP: 000000000075bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 219.874180] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bfcc [ 219.881495] R13: 00007ffe64b401bf R14: 00007ff7768779c0 R15: 000000000075bfcc [ 219.914185] [ 219.914185] Showing all locks held in the system: [ 219.920562] 1 lock held by khungtaskd/1035: [ 219.934159] #0: 000000006a1193ba (rcu_read_lock){....}, at: debug_show_all_locks+0x5b/0x27a [ 219.942919] 1 lock held by rsyslogd/6937: [ 219.964175] #0: 0000000028218c4a (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xa7/0xd0 [ 219.972042] 2 locks held by getty/7059: [ 219.984175] #0: 00000000dcc313b2 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 219.992461] #1: 0000000007067d59 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 220.044175] 2 locks held by getty/7060: [ 220.048190] #0: 000000003fb10504 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 220.084171] #1: 000000006b6dd70f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 220.093176] 2 locks held by getty/7061: [ 220.124170] #0: 00000000b64f1ccc (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 220.132458] #1: 000000002bea43d4 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 220.174164] 2 locks held by getty/7062: [ 220.178179] #0: 00000000d54b4a20 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 220.194163] #1: 00000000a62c2583 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 220.203163] 2 locks held by getty/7063: [ 220.234220] #0: 00000000b24b4a32 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 220.242512] #1: 00000000ac54ad63 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 220.294144] 2 locks held by getty/7064: [ 220.298175] #0: 00000000f924c100 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 220.334169] #1: 0000000086e85169 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 220.343066] 2 locks held by getty/7065: [ 220.388694] #0: 0000000060e71258 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 220.408582] #1: 000000000235383d (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 220.434960] 1 lock held by syz-executor.2/7200: [ 220.439667] #0: 00000000fd77a403 (&mm->mmap_sem){++++}, at: do_exit+0x617/0x2d20 [ 220.468654] 1 lock held by syz-executor.2/7201: [ 220.473371] 1 lock held by syz-executor.2/7209: [ 220.508650] #0: 00000000fd77a403 (&mm->mmap_sem){++++}, at: do_exit+0x617/0x2d20 [ 220.516681] 1 lock held by syz-executor.1/7202: [ 220.521463] #0: 0000000048f5b6a4 (&mm->mmap_sem){++++}, at: do_exit+0x617/0x2d20 [ 220.574178] 2 locks held by syz-executor.1/7204: [ 220.578978] 1 lock held by syz-executor.1/7213: [ 220.583638] #0: 0000000048f5b6a4 (&mm->mmap_sem){++++}, at: do_exit+0x617/0x2d20 [ 220.634141] 1 lock held by syz-executor.0/7220: [ 220.638931] #0: 000000005e17ca15 (&mm->mmap_sem){++++}, at: do_exit+0x617/0x2d20 [ 220.664174] 1 lock held by syz-executor.0/7221: [ 220.668879] #0: 000000005e17ca15 (&mm->mmap_sem){++++}, at: do_exit+0x617/0x2d20 [ 220.704174] 1 lock held by syz-executor.0/7230: [ 220.708887] #0: 000000005e17ca15 (&mm->mmap_sem){++++}, at: do_exit+0x617/0x2d20 [ 220.746426] 1 lock held by syz-executor.0/7231: [ 220.751144] 1 lock held by syz-executor.4/7238: [ 220.786369] #0: 0000000042dd5e13 (&mm->mmap_sem){++++}, at: do_exit+0x617/0x2d20 [ 220.794070] 1 lock held by syz-executor.4/7239: [ 220.816355] #0: 0000000042dd5e13 (&mm->mmap_sem){++++}, at: do_exit+0x617/0x2d20 [ 220.824030] 1 lock held by syz-executor.4/7242: [ 220.856472] #0: 0000000042dd5e13 (&mm->mmap_sem){++++}, at: do_exit+0x617/0x2d20 [ 220.876606] 2 locks held by syz-executor.4/7245: [ 220.881400] [ 220.883019] ============================================= [ 220.883019] [ 220.906392] NMI backtrace for cpu 0 [ 220.910059] CPU: 0 PID: 1035 Comm: khungtaskd Not tainted 4.19.100-syzkaller #0 [ 220.917505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.926949] Call Trace: [ 220.929558] dump_stack+0x123/0x177 [ 220.933199] nmi_cpu_backtrace.cold.4+0x3e/0x76 [ 220.937875] ? lapic_can_unplug_cpu.cold.29+0x3f/0x3f [ 220.943067] nmi_trigger_cpumask_backtrace+0xe6/0x11a [ 220.948248] arch_trigger_cpumask_backtrace+0x14/0x20 [ 220.953428] watchdog+0x5c3/0xb40 [ 220.956878] kthread+0x324/0x3e0 [ 220.960232] ? hungtask_pm_notify+0x40/0x40 [ 220.964542] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 220.970066] ret_from_fork+0x24/0x30 [ 220.973971] Sending NMI from CPU 0 to CPUs 1: [ 220.978696] NMI backtrace for cpu 1 [ 220.978698] CPU: 1 PID: 7231 Comm: syz-executor.0 Not tainted 4.19.100-syzkaller #0 [ 220.978700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.978701] RIP: 0010:check_memory_region+0x21/0x1b0 [ 220.978703] Code: 2e 0f 1f 84 00 00 00 00 00 48 85 f6 0f 84 3c 01 00 00 48 b8 ff ff ff ff ff 7f ff ff 55 0f b6 d2 48 39 c7 48 89 e5 41 55 41 54 <53> 0f 86 11 01 00 00 4c 8d 5c 37 ff 48 89 fb 49 b9 00 00 00 00 00 [ 220.978705] RSP: 0018:ffff8880957d7a78 EFLAGS: 00000216 [ 220.978707] RAX: ffff7fffffffffff RBX: ffff8880a43a7ac0 RCX: ffffffff81760076 [ 220.978709] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880a43a7b68 [ 220.978710] RBP: ffff8880957d7a88 R08: ffffed1012835987 R09: ffffed1012835986 [ 220.978711] R10: ffff8880957d7a98 R11: ffff8880941acc37 R12: ffff8880957d7b70 [ 220.978713] R13: ffff8880941acc30 R14: ffff8880941ac940 R15: ffff8880a43a7b68 [ 220.978714] FS: 00007f6d611f3700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 220.978715] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 220.978717] CR2: ffffffffff600400 CR3: 00000000a41e9000 CR4: 00000000001406e0 [ 220.978718] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 220.978719] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 220.978720] Call Trace: [ 220.978721] kasan_check_read+0x11/0x20 [ 220.978722] perf_mmap+0x5d6/0x1660 [ 220.978723] ? perf_release+0x50/0x50 [ 220.978724] ? memset+0x31/0x40 [ 220.978726] mmap_region+0x9b7/0x1470 [ 220.978727] ? __x64_sys_brk+0x680/0x680 [ 220.978728] ? get_unmapped_area+0x1bd/0x330 [ 220.978729] do_mmap+0x6b5/0xea0 [ 220.978730] ? call_rwsem_down_write_failed_killable+0x17/0x30 [ 220.978731] vm_mmap_pgoff+0x195/0x210 [ 220.978732] ? vma_is_stack_for_current+0x90/0x90 [ 220.978733] ? ksys_dup3+0x2e0/0x2e0 [ 220.978734] ? _copy_to_user+0x91/0xb0 [ 220.978735] ksys_mmap_pgoff+0x3c6/0x650 [ 220.978737] ? find_mergeable_anon_vma+0x290/0x290 [ 220.978738] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 220.978739] ? do_syscall_64+0x21/0x4e0 [ 220.978740] __x64_sys_mmap+0xe9/0x1b0 [ 220.978741] do_syscall_64+0xd0/0x4e0 [ 220.978742] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 220.978743] RIP: 0033:0x459279 [ 220.978746] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 220.978747] RSP: 002b:00007f6d611f2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 220.978749] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459279 [ 220.978751] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 220.978752] RBP: 000000000075c060 R08: 0000000000000003 R09: 0000000000000000 [ 220.978753] R10: 0002000000001011 R11: 0000000000000246 R12: 00007f6d611f36d4 [ 220.978755] R13: 00000000004c55bd R14: 00000000004d9990 R15: 00000000ffffffff [ 221.174162] Kernel panic - not syncing: hung_task: blocked tasks [ 221.258843] CPU: 0 PID: 1035 Comm: khungtaskd Not tainted 4.19.100-syzkaller #0 [ 221.266277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 221.275636] Call Trace: [ 221.278217] dump_stack+0x123/0x177 [ 221.281848] panic+0x1cd/0x375 [ 221.285032] ? __warn_printk+0xd6/0xd6 [ 221.288916] watchdog+0x5d4/0xb40 [ 221.292366] kthread+0x324/0x3e0 [ 221.295718] ? hungtask_pm_notify+0x40/0x40 [ 221.300031] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 221.305559] ret_from_fork+0x24/0x30 [ 221.310808] Kernel Offset: disabled [ 221.314477] Rebooting in 86400 seconds..