syzkaller login: [ 36.790873] kauditd_printk_skb: 9 callbacks suppressed [ 36.790879] audit: type=1400 audit(1578852280.117:35): avc: denied { map } for pid=7047 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 43.122228] audit: type=1400 audit(1578852286.447:36): avc: denied { map } for pid=7058 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 45.138600] IPVS: ftp: loaded support on port[0] = 21 [ 45.539045] can: request_module (can-proto-0) failed. [ 46.677307] can: request_module (can-proto-0) failed. [ 46.822443] audit: type=1400 audit(1578852290.147:37): avc: denied { create } for pid=7058 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 46.846052] audit: type=1400 audit(1578852290.147:38): avc: denied { create } for pid=7058 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 46.869642] audit: type=1400 audit(1578852290.147:39): avc: denied { create } for pid=7058 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.0.253' (ECDSA) to the list of known hosts. 2020/01/12 18:04:57 parsed 1 programs 2020/01/12 18:04:58 executed programs: 0 [ 54.786639] IPVS: ftp: loaded support on port[0] = 21 [ 54.795591] IPVS: ftp: loaded support on port[0] = 21 [ 55.104722] chnl_net:caif_netlink_parms(): no params data found [ 55.122568] chnl_net:caif_netlink_parms(): no params data found [ 55.134377] IPVS: ftp: loaded support on port[0] = 21 [ 55.178157] IPVS: ftp: loaded support on port[0] = 21 [ 55.194578] IPVS: ftp: loaded support on port[0] = 21 [ 55.207420] IPVS: ftp: loaded support on port[0] = 21 [ 55.220929] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.227292] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.234565] device bridge_slave_0 entered promiscuous mode [ 55.245927] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.252348] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.259152] device bridge_slave_1 entered promiscuous mode [ 55.278935] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 55.289068] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.319438] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 55.327849] team0: Port device team_slave_0 added [ 55.337285] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.343829] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.350759] device bridge_slave_0 entered promiscuous mode [ 55.358553] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.364996] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.372147] device bridge_slave_1 entered promiscuous mode [ 55.391072] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 55.402324] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 55.409431] team0: Port device team_slave_1 added [ 55.416255] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.425292] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.433027] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.521952] device hsr_slave_0 entered promiscuous mode [ 55.560568] device hsr_slave_1 entered promiscuous mode [ 55.632293] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.639329] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.658089] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 55.665731] team0: Port device team_slave_0 added [ 55.672174] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 55.679346] team0: Port device team_slave_1 added [ 55.686333] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.694341] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.721495] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.727943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.734865] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.741227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.792579] device hsr_slave_0 entered promiscuous mode [ 55.830438] device hsr_slave_1 entered promiscuous mode [ 55.871535] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.904820] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.957058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.005312] chnl_net:caif_netlink_parms(): no params data found [ 56.013709] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.020312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.026907] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.033282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.043489] chnl_net:caif_netlink_parms(): no params data found [ 56.066257] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.083749] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.091343] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.098407] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.109448] chnl_net:caif_netlink_parms(): no params data found [ 56.118168] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.136179] chnl_net:caif_netlink_parms(): no params data found [ 56.163618] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.185724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.194802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.216656] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.223378] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.230789] device bridge_slave_0 entered promiscuous mode [ 56.237036] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.243665] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.250796] device bridge_slave_0 entered promiscuous mode [ 56.268063] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.274792] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.282012] device bridge_slave_0 entered promiscuous mode [ 56.288729] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.295361] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.302442] device bridge_slave_1 entered promiscuous mode [ 56.314691] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.321270] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.328204] device bridge_slave_1 entered promiscuous mode [ 56.334542] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.341135] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.348066] device bridge_slave_1 entered promiscuous mode [ 56.359308] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.365687] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.381967] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.402165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.409940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.417736] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.424173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.436445] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.445884] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.452993] device bridge_slave_0 entered promiscuous mode [ 56.459595] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.466047] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.472950] device bridge_slave_1 entered promiscuous mode [ 56.488739] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.499157] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.508608] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.524026] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.542442] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.559593] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.568013] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.577489] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.597691] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 56.605481] team0: Port device team_slave_0 added [ 56.611697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.619460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.627259] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.633957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.642952] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.650874] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.669559] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 56.677131] team0: Port device team_slave_0 added [ 56.684634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.691003] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 56.698062] team0: Port device team_slave_1 added [ 56.703972] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 56.714356] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.722194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.729939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.738387] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 56.745629] team0: Port device team_slave_0 added [ 56.751368] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 56.758521] team0: Port device team_slave_1 added [ 56.766896] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 56.774035] team0: Port device team_slave_1 added [ 56.779483] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 56.787694] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 56.842611] device hsr_slave_0 entered promiscuous mode [ 56.880455] device hsr_slave_1 entered promiscuous mode [ 56.920957] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 56.928277] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 56.938756] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 56.946668] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.953358] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 56.971478] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.978693] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 56.988680] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 56.996072] team0: Port device team_slave_0 added [ 57.004422] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.053779] device hsr_slave_0 entered promiscuous mode [ 57.120488] device hsr_slave_1 entered promiscuous mode [ 57.160802] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 57.169502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.177408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.185201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.192153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.199128] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.215246] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 57.223361] team0: Port device team_slave_1 added [ 57.230948] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 57.237026] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.245120] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 57.255470] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.301768] device hsr_slave_0 entered promiscuous mode [ 57.350504] device hsr_slave_1 entered promiscuous mode [ 57.400570] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 57.407710] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 57.417786] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 57.427452] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 57.437445] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 57.444711] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 57.453452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.461539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.468966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.476602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.487643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.497296] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 57.513499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.522335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.529876] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.536268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.543295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.551105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.560853] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.571016] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 57.581454] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.622001] device hsr_slave_0 entered promiscuous mode [ 57.660513] device hsr_slave_1 entered promiscuous mode [ 57.700456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.708233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.716427] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.722860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.729690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.739406] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 57.745774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.754670] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 57.768081] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 57.775387] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 57.783074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.799381] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 57.807094] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.815366] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 57.824811] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 57.838892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.846783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.854404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.862398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.880345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.901125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.908786] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 57.919114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.927230] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.934962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.942799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.951951] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.958781] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.967176] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.978721] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.988416] audit: type=1400 audit(1578852301.307:40): avc: denied { associate } for pid=7151 comm="syz-executor.2" name="syz2" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 58.001335] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 58.021099] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.028662] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.039369] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 58.046224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.053482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.060536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.067558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.074473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.082588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.103328] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.112490] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 58.118561] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.126029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.135575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.149791] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.156213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.172147] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 58.178160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.187357] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.196802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.211933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.224990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.232858] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.239307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.251136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.257940] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.275560] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.285503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.293124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.301594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.309279] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.315694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.323045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.331558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.339079] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.345590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.354661] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.362965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.382600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.391379] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 58.409182] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.419850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.433096] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 58.441800] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.448680] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.459454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.466820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.477419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.486457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.493650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.500584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.510677] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 58.519210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 58.529679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.537625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.547889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.556091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.563764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.571546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.581036] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 58.589252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.601572] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 58.607671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.616579] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 58.626010] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.633748] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.642802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.650829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.658242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.676229] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 58.683994] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.697062] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 58.705227] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.717997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.735083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.742931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.751229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.758893] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.765272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.772345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.779227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.788045] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.796144] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.807383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.814561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.822322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.830023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.838044] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.844431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.853503] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 58.859584] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.867598] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 58.875943] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.889183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.896360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.904282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.913823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.923626] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 58.933756] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 58.941510] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.952471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.959913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.970396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.977928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.986104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.994042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.001733] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.008183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.016230] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.026685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.037636] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.049132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.066339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.079006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.086728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.094470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.102640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.111448] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 59.117469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.129249] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 59.137581] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.145215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.152558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.160015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.167533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.175640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.183413] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.189767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.202836] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 59.212802] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.220050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.234526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.242676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.251525] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 59.261711] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 59.267740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.282700] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.292271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.299445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.311189] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.321480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.333864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.343007] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 59.356149] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.375522] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.386417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.396781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.407218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.416755] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 59.425236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.433253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.445538] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 59.455643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.463912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.476447] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 59.483454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.502518] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 59.526093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.950311] INFO: task syz-executor.2:7179 blocked for more than 140 seconds. [ 211.957702] Not tainted 4.19.95-syzkaller #0 [ 211.964151] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 211.972224] syz-executor.2 D27416 7179 7151 0x00000004 [ 211.977857] Call Trace: [ 211.982845] __schedule+0x78c/0x1c10 [ 211.986552] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 211.991686] ? pci_mmcfg_check_reserved+0x120/0x120 [ 211.996692] ? autoremove_wake_function+0x160/0x160 [ 212.004102] schedule+0x7f/0x1b0 [ 212.007582] request_wait_answer+0x2fe/0x620 [ 212.012023] ? fuse_copy_one+0x130/0x130 [ 212.016071] ? lock_downgrade+0x860/0x860 [ 212.022525] ? finish_wait+0x290/0x290 [ 212.026400] ? do_raw_spin_unlock+0x177/0x260 [ 212.032184] __fuse_request_send+0xff/0x190 [ 212.036496] fuse_request_send+0x41/0x80 [ 212.041812] fuse_simple_request+0x2b4/0x610 [ 212.046291] fuse_lookup_name+0x244/0x590 [ 212.057184] ? fuse_create+0x10/0x10 [ 212.060926] ? mutex_lock_nested+0x16/0x20 [ 212.065261] fuse_lookup+0xf3/0x3b0 [ 212.068885] ? fuse_lookup_name+0x590/0x590 [ 212.073272] ? __d_lookup_rcu+0x8a0/0x8a0 [ 212.077430] ? __lockdep_init_map+0x105/0x590 [ 212.081969] __lookup_slow+0x216/0x400 [ 212.085930] ? vfs_unlink+0x450/0x450 [ 212.089725] lookup_slow+0x51/0x70 [ 212.093738] walk_component+0x694/0x2320 [ 212.097790] ? security_inode_permission+0x73/0xb0 [ 212.102759] ? path_init+0x1550/0x1550 [ 212.106665] ? link_path_walk.part.41+0x16d/0x1550 [ 212.111632] ? path_init+0xefe/0x1550 [ 212.115433] ? trace_hardirqs_on+0x28/0x190 [ 212.119737] ? walk_component+0x2320/0x2320 [ 212.124103] ? save_stack+0x43/0xd0 [ 212.127729] ? kasan_kmalloc+0xc7/0xe0 [ 212.131677] ? kasan_slab_alloc+0x12/0x20 [ 212.135819] path_lookupat.isra.44+0x180/0x850 [ 212.140438] ? path_parentat.isra.42+0x100/0x100 [ 212.145187] ? find_held_lock+0x36/0x1d0 [ 212.149233] filename_lookup.part.58+0x160/0x360 [ 212.154024] ? filename_parentat.isra.56.part.57+0x400/0x400 [ 212.159817] ? rcu_read_lock_sched_held+0x108/0x120 [ 212.165049] ? strncpy_from_user+0x80/0x260 [ 212.169363] ? getname_flags+0xf6/0x520 [ 212.173374] user_path_at_empty+0x39/0x40 [ 212.177508] vfs_statx+0xbe/0x150 [ 212.181007] ? vfs_statx_fd+0x90/0x90 [ 212.184815] ? kasan_check_read+0x11/0x20 [ 212.188953] __do_sys_newstat+0x85/0xe0 [ 212.192997] ? cp_new_stat+0x5b0/0x5b0 [ 212.196892] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 212.201689] ? do_syscall_64+0x21/0x4e0 [ 212.205656] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 212.211052] ? lockdep_hardirqs_on+0x421/0x5c0 [ 212.215624] ? do_syscall_64+0x21/0x4e0 [ 212.219677] __x64_sys_newstat+0x4f/0x70 [ 212.224177] do_syscall_64+0xd0/0x4e0 [ 212.227967] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 212.233175] RIP: 0033:0x4592c9 [ 212.236363] Code: Bad RIP value. [ 212.239704] RSP: 002b:00007ff4aba29c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 212.247446] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004592c9 [ 212.254730] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000580 [ 212.262029] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 212.269286] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4aba2a6d4 [ 212.277087] R13: 00000000004e52fb R14: 00000000004de648 R15: 00000000ffffffff [ 212.284417] INFO: task syz-executor.2:7180 blocked for more than 140 seconds. [ 212.291717] Not tainted 4.19.95-syzkaller #0 [ 212.296631] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 212.304666] syz-executor.2 D28616 7180 7151 0x00000004 [ 212.310354] Call Trace: [ 212.312945] __schedule+0x78c/0x1c10 [ 212.316645] ? pci_mmcfg_check_reserved+0x120/0x120 [ 212.321707] ? rwsem_down_write_failed+0x5c1/0xbf0 [ 212.326633] ? lockdep_hardirqs_on+0x421/0x5c0 [ 212.331242] ? _raw_spin_unlock_irq+0x27/0x80 [ 212.335731] schedule+0x7f/0x1b0 [ 212.339075] rwsem_down_write_failed+0x5c6/0xbf0 [ 212.343860] ? rwsem_down_read_failed_killable+0x550/0x550 [ 212.349489] call_rwsem_down_write_failed+0x17/0x30 [ 212.355199] ? call_rwsem_down_write_failed+0x17/0x30 [ 212.360437] ? __lock_acquire+0x2631/0x4980 [ 212.364811] down_write+0x53/0x90 [ 212.368282] ? fuse_reverse_inval_entry+0x9a/0x5d0 [ 212.373227] fuse_reverse_inval_entry+0x9a/0x5d0 [ 212.377972] ? lock_acquire+0x173/0x3d0 [ 212.381979] ? fuse_update_attributes+0xa0/0xa0 [ 212.386684] fuse_dev_do_write+0xb7d/0x2350 [ 212.391040] ? fuse_dev_read+0x1b0/0x1b0 [ 212.395095] ? futex_wait_setup+0x310/0x310 [ 212.399395] ? fuse_dev_do_read.isra.28+0x13c8/0x1c10 [ 212.404619] ? memset+0x31/0x40 [ 212.407908] fuse_dev_write+0x12a/0x1b0 [ 212.411913] ? fuse_dev_splice_write+0xa20/0xa20 [ 212.416667] __vfs_write+0x443/0x890 [ 212.420413] ? kernel_read+0x130/0x130 [ 212.424312] ? selinux_file_permission+0x326/0x3f0 [ 212.429223] ? rw_verify_area+0xb8/0x2b0 [ 212.433317] vfs_write+0x150/0x4d0 [ 212.436865] ksys_write+0x103/0x260 [ 212.440535] ? __ia32_sys_read+0xa0/0xa0 [ 212.444603] ? do_syscall_64+0x21/0x4e0 [ 212.448561] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 212.453965] __x64_sys_write+0x6e/0xb0 [ 212.457841] do_syscall_64+0xd0/0x4e0 [ 212.461662] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 212.466840] RIP: 0033:0x4592c9 [ 212.470017] Code: Bad RIP value. [ 212.473406] RSP: 002b:00007ff4aba08c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 212.481486] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004592c9 [ 212.488735] RDX: 000000000000002e RSI: 0000000020000000 RDI: 0000000000000003 [ 212.496024] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 212.503325] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4aba096d4 [ 212.510640] R13: 00000000004c8aa3 R14: 00000000004df6e0 R15: 00000000ffffffff [ 212.517957] INFO: task syz-executor.2:7181 blocked for more than 140 seconds. [ 212.525259] Not tainted 4.19.95-syzkaller #0 [ 212.530204] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 212.538164] syz-executor.2 D28696 7181 7151 0x00000004 [ 212.543829] Call Trace: [ 212.546411] __schedule+0x78c/0x1c10 [ 212.550106] ? pci_mmcfg_check_reserved+0x120/0x120 [ 212.555149] ? rwsem_down_write_failed+0x5c1/0xbf0 [ 212.560066] ? lockdep_hardirqs_on+0x421/0x5c0 [ 212.564783] ? _raw_spin_unlock_irq+0x27/0x80 [ 212.569277] schedule+0x7f/0x1b0 [ 212.572729] rwsem_down_write_failed+0x5c6/0xbf0 [ 212.577489] ? rwsem_down_read_failed_killable+0x550/0x550 [ 212.583155] ? avc_has_perm_noaudit+0x460/0x460 [ 212.587862] ? mark_held_locks+0x130/0x130 [ 212.592128] ? find_held_lock+0x36/0x1d0 [ 212.596191] call_rwsem_down_write_failed+0x17/0x30 [ 212.601249] ? call_rwsem_down_write_failed+0x17/0x30 [ 212.606467] down_write+0x53/0x90 [ 212.609899] ? lock_mount+0x82/0x290 [ 212.614077] lock_mount+0x82/0x290 [ 212.617608] do_add_mount+0x22/0x310 [ 212.621352] do_mount+0x1290/0x2410 [ 212.625102] ? __might_fault+0xf1/0x1b0 [ 212.629055] ? lock_downgrade+0x860/0x860 [ 212.633236] ? copy_mount_string+0x20/0x20 [ 212.637462] ? kasan_check_write+0x14/0x20 [ 212.641822] ? _copy_from_user+0x9c/0xd0 [ 212.645884] ? memdup_user+0x4a/0x80 [ 212.649581] ksys_mount+0xba/0xe0 [ 212.653068] __x64_sys_mount+0xb9/0x150 [ 212.657035] do_syscall_64+0xd0/0x4e0 [ 212.660866] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 212.666061] RIP: 0033:0x4592c9 [ 212.669240] Code: Bad RIP value. [ 212.672724] RSP: 002b:00007ff4ab9e7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 212.680476] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004592c9 [ 212.687748] RDX: 0000000020000000 RSI: 0000000020000180 RDI: 0000000000000000 [ 212.695051] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 212.702351] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ff4ab9e86d4 [ 212.709602] R13: 00000000004c570b R14: 00000000004d9aa0 R15: 00000000ffffffff [ 212.718757] INFO: task syz-executor.2:7193 blocked for more than 140 seconds. [ 212.726048] Not tainted 4.19.95-syzkaller #0 [ 212.731265] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 212.739359] syz-executor.2 D27720 7193 7151 0x00000004 [ 212.745432] Call Trace: [ 212.748013] __schedule+0x78c/0x1c10 [ 212.751750] ? pci_mmcfg_check_reserved+0x120/0x120 [ 212.756813] ? rwsem_down_write_failed+0x5c1/0xbf0 [ 212.761804] ? lockdep_hardirqs_on+0x421/0x5c0 [ 212.766378] ? _raw_spin_unlock_irq+0x27/0x80 [ 212.771159] schedule+0x7f/0x1b0 [ 212.774520] rwsem_down_write_failed+0x5c6/0xbf0 [ 212.779278] ? rwsem_down_read_failed_killable+0x550/0x550 [ 212.784934] ? mark_held_locks+0x130/0x130 [ 212.789157] ? trace_hardirqs_on+0x28/0x190 [ 212.793597] ? find_held_lock+0x36/0x1d0 [ 212.797653] call_rwsem_down_write_failed+0x17/0x30 [ 212.802690] ? call_rwsem_down_write_failed+0x17/0x30 [ 212.808010] down_write+0x53/0x90 [ 212.811507] ? lock_mount+0x82/0x290 [ 212.815257] lock_mount+0x82/0x290 [ 212.818787] do_add_mount+0x22/0x310 [ 212.822522] do_mount+0x1290/0x2410 [ 212.826164] ? copy_mount_string+0x20/0x20 [ 212.830495] ? rcu_read_lock_sched_held+0x108/0x120 [ 212.835505] ? kmem_cache_alloc_trace+0x350/0x740 [ 212.840378] ? kasan_check_write+0x14/0x20 [ 212.844606] ? copy_mount_options+0x55/0x270 [ 212.848999] ksys_mount+0xba/0xe0 [ 212.852471] __x64_sys_mount+0xb9/0x150 [ 212.856434] do_syscall_64+0xd0/0x4e0 [ 212.860265] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 212.865459] RIP: 0033:0x4592c9 [ 212.868635] Code: Bad RIP value. [ 212.872612] RSP: 002b:00007ff4ab9a5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 212.880366] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004592c9 [ 212.887624] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000000000000 [ 212.894913] RBP: 000000000075c1c0 R08: 0000000020000400 R09: 0000000000000000 [ 212.902203] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4ab9a66d4 [ 212.909496] R13: 00000000004c56df R14: 00000000004d9b60 R15: 00000000ffffffff [ 212.916817] INFO: task syz-executor.2:7194 blocked for more than 140 seconds. [ 212.924105] Not tainted 4.19.95-syzkaller #0 [ 212.929011] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 212.938491] syz-executor.2 D29144 7194 7151 0x00000004 [ 212.944142] Call Trace: [ 212.946717] __schedule+0x78c/0x1c10 [ 212.950469] ? pci_mmcfg_check_reserved+0x120/0x120 [ 212.955478] ? rwsem_down_read_failed+0x203/0x3e0 [ 212.960729] ? lockdep_hardirqs_on+0x421/0x5c0 [ 212.965297] ? _raw_spin_unlock_irq+0x27/0x80 [ 212.969771] ? rwsem_down_read_failed+0x21c/0x3e0 [ 212.974658] schedule+0x7f/0x1b0 [ 212.978029] rwsem_down_read_failed+0x21c/0x3e0 [ 212.982748] ? rwsem_down_write_failed+0xbf0/0xbf0 [ 212.987675] ? unlazy_walk+0x143/0x450 [ 212.991715] ? lock_downgrade+0x860/0x860 [ 212.995866] call_rwsem_down_read_failed+0x18/0x30 [ 213.001461] down_read+0x49/0xb0 [ 213.004823] ? lookup_slow+0x43/0x70 [ 213.008513] lookup_slow+0x43/0x70 [ 213.012078] walk_component+0x694/0x2320 [ 213.016136] ? security_inode_permission+0x73/0xb0 [ 213.021096] ? path_init+0x1550/0x1550 [ 213.024970] ? link_path_walk.part.41+0x16d/0x1550 [ 213.029935] ? path_init+0xefe/0x1550 [ 213.033763] ? trace_hardirqs_on+0x28/0x190 [ 213.038094] ? walk_component+0x2320/0x2320 [ 213.042481] ? save_stack+0x43/0xd0 [ 213.046141] ? kasan_kmalloc+0xc7/0xe0 [ 213.050003] ? kasan_slab_alloc+0x12/0x20 [ 213.054178] path_lookupat.isra.44+0x180/0x850 [ 213.058749] ? path_parentat.isra.42+0x100/0x100 [ 213.063580] ? find_held_lock+0x36/0x1d0 [ 213.067634] filename_lookup.part.58+0x160/0x360 [ 213.072566] ? filename_parentat.isra.56.part.57+0x400/0x400 [ 213.078367] ? rcu_read_lock_sched_held+0x108/0x120 [ 213.083420] ? strncpy_from_user+0x80/0x260 [ 213.087744] ? getname_flags+0xf6/0x520 [ 213.091771] user_path_at_empty+0x39/0x40 [ 213.095908] vfs_statx+0xbe/0x150 [ 213.099339] ? vfs_statx_fd+0x90/0x90 [ 213.103170] ? kasan_check_read+0x11/0x20 [ 213.107319] __do_sys_newstat+0x85/0xe0 [ 213.111328] ? cp_new_stat+0x5b0/0x5b0 [ 213.115207] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 213.119940] ? do_syscall_64+0x21/0x4e0 [ 213.123940] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.129294] ? lockdep_hardirqs_on+0x421/0x5c0 [ 213.134312] ? do_syscall_64+0x21/0x4e0 [ 213.138288] __x64_sys_newstat+0x4f/0x70 [ 213.142387] do_syscall_64+0xd0/0x4e0 [ 213.146192] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.151462] RIP: 0033:0x4592c9 [ 213.154723] Code: Bad RIP value. [ 213.158158] RSP: 002b:00007ff4ab984c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 213.165909] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004592c9 [ 213.173198] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000580 [ 213.180506] RBP: 000000000075c268 R08: 0000000000000000 R09: 0000000000000000 [ 213.187769] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4ab9856d4 [ 213.195064] R13: 00000000004e52fb R14: 00000000004de648 R15: 00000000ffffffff [ 213.202363] INFO: task syz-executor.1:7184 blocked for more than 140 seconds. [ 213.209622] Not tainted 4.19.95-syzkaller #0 [ 213.214573] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 213.222579] syz-executor.1 D27784 7184 7152 0x00000004 [ 213.228187] Call Trace: [ 213.230976] __schedule+0x78c/0x1c10 [ 213.234706] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 213.239801] ? pci_mmcfg_check_reserved+0x120/0x120 [ 213.244851] ? autoremove_wake_function+0x160/0x160 [ 213.249862] schedule+0x7f/0x1b0 [ 213.253250] request_wait_answer+0x2fe/0x620 [ 213.257690] ? fuse_copy_one+0x130/0x130 [ 213.262392] ? lock_downgrade+0x860/0x860 [ 213.266535] ? finish_wait+0x290/0x290 [ 213.270445] ? do_raw_spin_unlock+0x177/0x260 [ 213.274929] __fuse_request_send+0xff/0x190 [ 213.279227] fuse_request_send+0x41/0x80 [ 213.283315] fuse_simple_request+0x2b4/0x610 [ 213.287712] fuse_lookup_name+0x244/0x590 [ 213.291895] ? fuse_create+0x10/0x10 [ 213.295602] ? mutex_lock_nested+0x16/0x20 [ 213.299902] fuse_lookup+0xf3/0x3b0 [ 213.303562] ? fuse_lookup_name+0x590/0x590 [ 213.307871] ? __d_lookup_rcu+0x8a0/0x8a0 [ 213.312098] ? __lockdep_init_map+0x105/0x590 [ 213.316583] __lookup_slow+0x216/0x400 [ 213.320506] ? vfs_unlink+0x450/0x450 [ 213.324303] lookup_slow+0x51/0x70 [ 213.327817] walk_component+0x694/0x2320 [ 213.331900] ? security_inode_permission+0x73/0xb0 [ 213.336835] ? path_init+0x1550/0x1550 [ 213.340759] ? link_path_walk.part.41+0x16d/0x1550 [ 213.345681] ? path_init+0xefe/0x1550 [ 213.349472] ? trace_hardirqs_on+0x28/0x190 [ 213.353850] ? walk_component+0x2320/0x2320 [ 213.358164] ? save_stack+0x43/0xd0 [ 213.361819] ? kasan_kmalloc+0xc7/0xe0 [ 213.365696] ? kasan_slab_alloc+0x12/0x20 [ 213.369822] path_lookupat.isra.44+0x180/0x850 [ 213.374461] ? path_parentat.isra.42+0x100/0x100 [ 213.379221] ? find_held_lock+0x36/0x1d0 [ 213.383319] filename_lookup.part.58+0x160/0x360 [ 213.388066] ? filename_parentat.isra.56.part.57+0x400/0x400 [ 213.394333] ? rcu_read_lock_sched_held+0x108/0x120 [ 213.399345] ? strncpy_from_user+0x80/0x260 [ 213.403694] ? getname_flags+0xf6/0x520 [ 213.407792] user_path_at_empty+0x39/0x40 [ 213.411988] vfs_statx+0xbe/0x150 [ 213.415433] ? vfs_statx_fd+0x90/0x90 [ 213.419213] ? kasan_check_read+0x11/0x20 [ 213.423402] __do_sys_newstat+0x85/0xe0 [ 213.427366] ? cp_new_stat+0x5b0/0x5b0 [ 213.431301] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 213.436055] ? do_syscall_64+0x21/0x4e0 [ 213.440030] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.445419] ? lockdep_hardirqs_on+0x421/0x5c0 [ 213.449989] ? do_syscall_64+0x21/0x4e0 [ 213.454006] __x64_sys_newstat+0x4f/0x70 [ 213.458055] do_syscall_64+0xd0/0x4e0 [ 213.461905] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.467265] RIP: 0033:0x4592c9 [ 213.470619] Code: Bad RIP value. [ 213.473983] RSP: 002b:00007f6fc0154c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 213.481732] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004592c9 [ 213.489866] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000580 [ 213.497171] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 213.504473] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6fc01556d4 [ 213.511778] R13: 00000000004e52fb R14: 00000000004de648 R15: 00000000ffffffff [ 213.519051] INFO: task syz-executor.1:7185 blocked for more than 140 seconds. [ 213.527223] Not tainted 4.19.95-syzkaller #0 [ 213.532181] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 213.540173] syz-executor.1 D28920 7185 7152 0x00000004 [ 213.545796] Call Trace: [ 213.548366] __schedule+0x78c/0x1c10 [ 213.552115] ? pci_mmcfg_check_reserved+0x120/0x120 [ 213.557127] ? rwsem_down_write_failed+0x5c1/0xbf0 [ 213.562081] ? lockdep_hardirqs_on+0x421/0x5c0 [ 213.566652] ? _raw_spin_unlock_irq+0x27/0x80 [ 213.571193] schedule+0x7f/0x1b0 [ 213.574563] rwsem_down_write_failed+0x5c6/0xbf0 [ 213.579306] ? rwsem_down_read_failed_killable+0x550/0x550 [ 213.585023] ? find_held_lock+0x36/0x1d0 [ 213.589122] ? __lock_is_held+0xb5/0x140 [ 213.593247] call_rwsem_down_write_failed+0x17/0x30 [ 213.598295] ? call_rwsem_down_write_failed+0x17/0x30 [ 213.603569] down_write+0x53/0x90 [ 213.607015] ? fuse_reverse_inval_entry+0x9a/0x5d0 [ 213.611991] fuse_reverse_inval_entry+0x9a/0x5d0 [ 213.616752] ? lock_acquire+0x173/0x3d0 [ 213.620765] ? fuse_update_attributes+0xa0/0xa0 [ 213.625424] fuse_dev_do_write+0xb7d/0x2350 [ 213.629727] ? fuse_dev_read+0x1b0/0x1b0 [ 213.634263] ? futex_wait_setup+0x310/0x310 [ 213.638588] ? fuse_dev_do_read.isra.28+0x13c8/0x1c10 [ 213.643853] ? memset+0x31/0x40 [ 213.647150] fuse_dev_write+0x12a/0x1b0 [ 213.651779] ? fuse_dev_splice_write+0xa20/0xa20 [ 213.656538] __vfs_write+0x443/0x890 [ 213.660275] ? kernel_read+0x130/0x130 [ 213.664269] ? selinux_file_permission+0x326/0x3f0 [ 213.669184] ? rw_verify_area+0xb8/0x2b0 [ 213.673313] vfs_write+0x150/0x4d0 [ 213.676876] ksys_write+0x103/0x260 [ 213.680598] ? __ia32_sys_read+0xa0/0xa0 [ 213.684678] ? do_syscall_64+0x21/0x4e0 [ 213.688824] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.694748] __x64_sys_write+0x6e/0xb0 [ 213.698635] do_syscall_64+0xd0/0x4e0 [ 213.702465] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.707644] RIP: 0033:0x4592c9 [ 213.710878] Code: Bad RIP value. [ 213.714237] RSP: 002b:00007f6fc0133c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 213.721973] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004592c9 [ 213.729231] RDX: 000000000000002e RSI: 0000000020000000 RDI: 0000000000000003 [ 213.736526] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 213.743831] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6fc01346d4 [ 213.751127] R13: 00000000004c8aa3 R14: 00000000004df6e0 R15: 00000000ffffffff [ 213.758395] INFO: task syz-executor.1:7186 blocked for more than 140 seconds. [ 213.765695] Not tainted 4.19.95-syzkaller #0 [ 213.770644] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 213.778597] syz-executor.1 D28824 7186 7152 0x00000004 [ 213.784699] Call Trace: [ 213.787301] __schedule+0x78c/0x1c10 [ 213.791162] ? pci_mmcfg_check_reserved+0x120/0x120 [ 213.796180] ? rwsem_down_write_failed+0x5c1/0xbf0 [ 213.801151] ? lockdep_hardirqs_on+0x421/0x5c0 [ 213.805727] ? _raw_spin_unlock_irq+0x27/0x80 [ 213.810252] schedule+0x7f/0x1b0 [ 213.813609] rwsem_down_write_failed+0x5c6/0xbf0 [ 213.818522] ? rwsem_down_read_failed_killable+0x550/0x550 [ 213.824241] ? avc_has_perm_noaudit+0x460/0x460 [ 213.828906] ? mark_held_locks+0x130/0x130 [ 213.833191] ? find_held_lock+0x36/0x1d0 [ 213.837267] call_rwsem_down_write_failed+0x17/0x30 [ 213.842338] ? call_rwsem_down_write_failed+0x17/0x30 [ 213.847622] down_write+0x53/0x90 [ 213.851118] ? lock_mount+0x82/0x290 [ 213.854821] lock_mount+0x82/0x290 [ 213.858353] do_add_mount+0x22/0x310 [ 213.862124] do_mount+0x1290/0x2410 [ 213.865751] ? __might_fault+0xf1/0x1b0 [ 213.869749] ? lock_downgrade+0x860/0x860 [ 213.873994] ? copy_mount_string+0x20/0x20 [ 213.878227] ? kasan_check_write+0x14/0x20 [ 213.882503] ? _copy_from_user+0x9c/0xd0 [ 213.886555] ? memdup_user+0x4a/0x80 [ 213.890305] ksys_mount+0xba/0xe0 [ 213.893749] __x64_sys_mount+0xb9/0x150 [ 213.897711] do_syscall_64+0xd0/0x4e0 [ 213.901548] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.906735] RIP: 0033:0x4592c9 [ 213.909918] Code: Bad RIP value. [ 213.913721] RSP: 002b:00007f6fc0112c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 213.921469] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004592c9 [ 213.928726] RDX: 0000000020000000 RSI: 0000000020000180 RDI: 0000000000000000 [ 213.936038] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 213.943333] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f6fc01136d4 [ 213.950629] R13: 00000000004c570b R14: 00000000004d9aa0 R15: 00000000ffffffff [ 213.957899] INFO: task syz-executor.1:7208 blocked for more than 140 seconds. [ 213.965191] Not tainted 4.19.95-syzkaller #0 [ 213.970104] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 213.978098] syz-executor.1 D26312 7208 7152 0x00000004 [ 213.983754] Call Trace: [ 213.986334] __schedule+0x78c/0x1c10 [ 213.990036] ? pci_mmcfg_check_reserved+0x120/0x120 [ 213.995073] ? rwsem_down_write_failed+0x5c1/0xbf0 [ 214.000002] ? lockdep_hardirqs_on+0x421/0x5c0 [ 214.004627] ? _raw_spin_unlock_irq+0x27/0x80 [ 214.009113] schedule+0x7f/0x1b0 [ 214.012498] rwsem_down_write_failed+0x5c6/0xbf0 [ 214.017254] ? rwsem_down_read_failed_killable+0x550/0x550 [ 214.022917] ? mark_held_locks+0x130/0x130 [ 214.027148] ? trace_hardirqs_on+0x28/0x190 [ 214.031502] ? find_held_lock+0x36/0x1d0 [ 214.035668] call_rwsem_down_write_failed+0x17/0x30 [ 214.041333] ? call_rwsem_down_write_failed+0x17/0x30 [ 214.046560] down_write+0x53/0x90 [ 214.050006] ? lock_mount+0x82/0x290 [ 214.053764] lock_mount+0x82/0x290 [ 214.057310] do_add_mount+0x22/0x310 [ 214.061072] do_mount+0x1290/0x2410 [ 214.064697] ? copy_mount_string+0x20/0x20 [ 214.068927] ? rcu_read_lock_sched_held+0x108/0x120 [ 214.073998] ? kmem_cache_alloc_trace+0x350/0x740 [ 214.078836] ? kasan_check_write+0x14/0x20 [ 214.083142] ? copy_mount_options+0x55/0x270 [ 214.087540] ksys_mount+0xba/0xe0 [ 214.091032] __x64_sys_mount+0xb9/0x150 [ 214.094996] do_syscall_64+0xd0/0x4e0 [ 214.098776] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.104039] RIP: 0033:0x4592c9 [ 214.107244] Code: Bad RIP value. [ 214.110638] RSP: 002b:00007f6fc00f1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 214.118372] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004592c9 [ 214.125712] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000000000000 [ 214.133002] RBP: 000000000075c118 R08: 0000000020000400 R09: 0000000000000000 [ 214.140303] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6fc00f26d4 [ 214.147564] R13: 00000000004c56df R14: 00000000004d9b60 R15: 00000000ffffffff [ 214.154884] INFO: task syz-executor.1:7209 blocked for more than 140 seconds. [ 214.163609] Not tainted 4.19.95-syzkaller #0 [ 214.168517] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 214.176946] syz-executor.1 D29144 7209 7152 0x00000004 [ 214.182646] Call Trace: [ 214.185231] __schedule+0x78c/0x1c10 [ 214.188926] ? pci_mmcfg_check_reserved+0x120/0x120 [ 214.193979] ? rwsem_down_read_failed+0x203/0x3e0 [ 214.198815] ? lockdep_hardirqs_on+0x421/0x5c0 [ 214.203421] ? _raw_spin_unlock_irq+0x27/0x80 [ 214.207987] ? rwsem_down_read_failed+0x21c/0x3e0 [ 214.212871] schedule+0x7f/0x1b0 [ 214.216409] rwsem_down_read_failed+0x21c/0x3e0 [ 214.221157] ? rwsem_down_write_failed+0xbf0/0xbf0 [ 214.226078] ? unlazy_walk+0x143/0x450 [ 214.229948] ? lock_downgrade+0x860/0x860 [ 214.234142] call_rwsem_down_read_failed+0x18/0x30 [ 214.239101] down_read+0x49/0xb0 [ 214.242490] ? lookup_slow+0x43/0x70 [ 214.246191] lookup_slow+0x43/0x70 [ 214.249707] walk_component+0x694/0x2320 [ 214.253790] ? security_inode_permission+0x73/0xb0 [ 214.258764] ? path_init+0x1550/0x1550 [ 214.262679] ? link_path_walk.part.41+0x16d/0x1550 [ 214.267591] ? path_init+0xefe/0x1550 [ 214.271487] ? trace_hardirqs_on+0x28/0x190 [ 214.275815] ? walk_component+0x2320/0x2320 [ 214.280112] ? save_stack+0x43/0xd0 [ 214.283768] ? kasan_kmalloc+0xc7/0xe0 [ 214.287639] ? kasan_slab_alloc+0x12/0x20 [ 214.291810] path_lookupat.isra.44+0x180/0x850 [ 214.296378] ? path_parentat.isra.42+0x100/0x100 [ 214.301820] ? find_held_lock+0x36/0x1d0 [ 214.305903] filename_lookup.part.58+0x160/0x360 [ 214.310693] ? filename_parentat.isra.56.part.57+0x400/0x400 [ 214.316485] ? rcu_read_lock_sched_held+0x108/0x120 [ 214.321523] ? strncpy_from_user+0x80/0x260 [ 214.325897] ? getname_flags+0xf6/0x520 [ 214.329846] user_path_at_empty+0x39/0x40 [ 214.334061] vfs_statx+0xbe/0x150 [ 214.337503] ? vfs_statx_fd+0x90/0x90 [ 214.341337] ? kasan_check_read+0x11/0x20 [ 214.345472] __do_sys_newstat+0x85/0xe0 [ 214.349432] ? cp_new_stat+0x5b0/0x5b0 [ 214.353390] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 214.358140] ? do_syscall_64+0x21/0x4e0 [ 214.362135] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.367487] ? lockdep_hardirqs_on+0x421/0x5c0 [ 214.372101] ? do_syscall_64+0x21/0x4e0 [ 214.376064] __x64_sys_newstat+0x4f/0x70 [ 214.380104] do_syscall_64+0xd0/0x4e0 [ 214.383939] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.389126] RIP: 0033:0x4592c9 [ 214.392355] Code: Bad RIP value. [ 214.395705] RSP: 002b:00007f6fc00d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 214.403455] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004592c9 [ 214.410749] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000580 [ 214.418007] RBP: 000000000075c1c0 R08: 0000000000000000 R09: 0000000000000000 [ 214.425297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6fc00d16d4 [ 214.432929] R13: 00000000004e52fb R14: 00000000004de648 R15: 00000000ffffffff [ 214.441402] [ 214.441402] Showing all locks held in the system: [ 214.447740] 1 lock held by khungtaskd/1037: [ 214.452097] #0: 0000000047272851 (rcu_read_lock){....}, at: debug_show_all_locks+0x5b/0x27a [ 214.460758] 1 lock held by rsyslogd/6911: [ 214.464891] #0: 0000000068d4f60d (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xa7/0xd0 [ 214.472730] 2 locks held by getty/7033: [ 214.476773] #0: 000000008ffcf9f3 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 214.485031] #1: 000000001d2186c1 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 214.493905] 2 locks held by getty/7034: [ 214.497856] #0: 000000005b829476 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 214.506122] #1: 00000000aa894feb (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 214.514985] 2 locks held by getty/7035: [ 214.518943] #0: 000000004c308112 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 214.527217] #1: 00000000a543f442 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 214.536080] 2 locks held by getty/7036: [ 214.540036] #0: 00000000ffb51a07 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 214.548830] #1: 000000009af066d8 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 214.557693] 2 locks held by getty/7037: [ 214.562101] #0: 00000000336a2253 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 214.570374] #1: 00000000ab5e177a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 214.579216] 2 locks held by getty/7038: [ 214.583207] #0: 000000008214793d (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 214.591460] #1: 00000000f1f457ff (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 214.600327] 2 locks held by getty/7039: [ 214.604289] #0: 000000004388f07f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 214.612568] #1: 00000000d6d27f37 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 214.621439] 2 locks held by syz-executor.2/7179: [ 214.626258] #0: 0000000067d921be (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 214.634966] #1: 0000000050c39dda (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 214.642811] 2 locks held by syz-executor.2/7180: [ 214.647550] #0: 00000000d3d0f026 (&fc->killsb){++++}, at: fuse_dev_do_write+0x19c5/0x2350 [ 214.656018] #1: 0000000067d921be (&type->i_mutex_dir_key#8){++++}, at: fuse_reverse_inval_entry+0x9a/0x5d0 [ 214.665949] 1 lock held by syz-executor.2/7181: [ 214.670735] #0: 0000000067d921be (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 214.679406] 1 lock held by syz-executor.2/7193: [ 214.684167] #0: 0000000067d921be (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 214.693297] 1 lock held by syz-executor.2/7194: [ 214.697946] #0: 0000000067d921be (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 214.708036] 2 locks held by syz-executor.1/7184: [ 214.712801] #0: 0000000089fcdc56 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 214.721503] #1: 0000000090a6b2ef (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 214.729319] 2 locks held by syz-executor.1/7185: [ 214.734096] #0: 00000000ef46a3fd (&fc->killsb){++++}, at: fuse_dev_do_write+0x19c5/0x2350 [ 214.742594] #1: 0000000089fcdc56 (&type->i_mutex_dir_key#8){++++}, at: fuse_reverse_inval_entry+0x9a/0x5d0 [ 214.752553] 1 lock held by syz-executor.1/7186: [ 214.757209] #0: 0000000089fcdc56 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 214.765953] 1 lock held by syz-executor.1/7208: [ 214.770643] #0: 0000000089fcdc56 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 214.779313] 1 lock held by syz-executor.1/7209: [ 214.784005] #0: 0000000089fcdc56 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 214.793136] 2 locks held by syz-executor.0/7189: [ 214.797867] #0: 00000000b0347bdb (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 214.806554] #1: 0000000076558033 (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 214.814363] 1 lock held by syz-executor.0/7190: [ 214.819008] #0: 00000000b0347bdb (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 214.828124] 2 locks held by syz-executor.0/7191: [ 214.832900] #0: 00000000b47eb840 (&fc->killsb){++++}, at: fuse_dev_do_write+0x19c5/0x2350 [ 214.841333] #1: 00000000b0347bdb (&type->i_mutex_dir_key#8){++++}, at: fuse_reverse_inval_entry+0x9a/0x5d0 [ 214.851286] 1 lock held by syz-executor.0/7215: [ 214.855946] #0: 00000000b0347bdb (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 214.864654] 1 lock held by syz-executor.0/7216: [ 214.869308] #0: 00000000b0347bdb (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 214.878009] 2 locks held by syz-executor.3/7198: [ 214.882771] #0: 00000000412244d1 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 214.891556] #1: 000000002aa3e060 (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 214.899353] 1 lock held by syz-executor.3/7199: [ 214.904038] #0: 00000000412244d1 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 214.912792] 2 locks held by syz-executor.3/7200: [ 214.917535] #0: 000000000d1fec79 (&fc->killsb){++++}, at: fuse_dev_do_write+0x19c5/0x2350 [ 214.926015] #1: 00000000412244d1 (&type->i_mutex_dir_key#8){++++}, at: fuse_reverse_inval_entry+0x9a/0x5d0 [ 214.935942] 1 lock held by syz-executor.3/7219: [ 214.940640] #0: 00000000412244d1 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 214.949308] 1 lock held by syz-executor.3/7220: [ 214.954442] #0: 00000000412244d1 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 214.963144] 2 locks held by syz-executor.5/7203: [ 214.967880] #0: 000000002fe14570 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 214.976605] #1: 0000000042a8621d (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 214.984434] 2 locks held by syz-executor.5/7207: [ 214.989165] #0: 00000000461e22c1 (&fc->killsb){++++}, at: fuse_dev_do_write+0x19c5/0x2350 [ 214.997619] #1: 000000002fe14570 (&type->i_mutex_dir_key#8){++++}, at: fuse_reverse_inval_entry+0x9a/0x5d0 [ 215.007536] 1 lock held by syz-executor.5/7213: [ 215.012231] #0: 000000002fe14570 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 215.020919] 1 lock held by syz-executor.5/7224: [ 215.025562] #0: 000000002fe14570 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 215.034250] 1 lock held by syz-executor.5/7225: [ 215.038914] #0: 000000002fe14570 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 215.047691] 2 locks held by syz-executor.4/7206: [ 215.052458] #0: 00000000ad02f2d6 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 215.061176] #1: 0000000074c0d526 (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 215.069151] 1 lock held by syz-executor.4/7212: [ 215.073840] #0: 00000000ad02f2d6 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 215.082887] 2 locks held by syz-executor.4/7214: [ 215.087621] #0: 00000000646e6105 (&fc->killsb){++++}, at: fuse_dev_do_write+0x19c5/0x2350 [ 215.096050] #1: 00000000ad02f2d6 (&type->i_mutex_dir_key#8){++++}, at: fuse_reverse_inval_entry+0x9a/0x5d0 [ 215.105950] 1 lock held by syz-executor.4/7227: [ 215.110635] #0: 00000000ad02f2d6 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 215.119304] 1 lock held by syz-executor.4/7228: [ 215.124003] #0: 00000000ad02f2d6 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 215.132700] [ 215.134310] ============================================= [ 215.134310] [ 215.141366] NMI backtrace for cpu 0 [ 215.144991] CPU: 0 PID: 1037 Comm: khungtaskd Not tainted 4.19.95-syzkaller #0 [ 215.152326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.161658] Call Trace: [ 215.164227] dump_stack+0x123/0x177 [ 215.167842] nmi_cpu_backtrace.cold.4+0x3e/0x76 [ 215.172493] ? lapic_can_unplug_cpu.cold.29+0x3f/0x3f [ 215.177660] nmi_trigger_cpumask_backtrace+0xe6/0x11a [ 215.182839] arch_trigger_cpumask_backtrace+0x14/0x20 [ 215.188005] watchdog+0x5c3/0xb40 [ 215.191436] kthread+0x324/0x3e0 [ 215.194778] ? hungtask_pm_notify+0x40/0x40 [ 215.199076] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 215.204589] ret_from_fork+0x24/0x30 [ 215.208355] Sending NMI from CPU 0 to CPUs 1: [ 215.213027] NMI backtrace for cpu 1 [ 215.213030] CPU: 1 PID: 23 Comm: kworker/u4:1 Not tainted 4.19.95-syzkaller #0 [ 215.213031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.213032] Workqueue: bat_events batadv_nc_worker [ 215.213035] RIP: 0010:__lock_acquire+0x1f8/0x4980 [ 215.213038] Code: c3 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 28 32 00 00 49 81 7d 00 60 a1 ea 88 0f 84 4a ff ff ff <83> fe 01 0f 87 4d ff ff ff 48 b8 00 00 00 00 00 fc ff df 89 f3 49 [ 215.213039] RSP: 0018:ffff8880a98dfa90 EFLAGS: 00000006 [ 215.213041] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 215.213043] RDX: 1ffffffff0ff33d4 RSI: 0000000000000000 RDI: ffffffff87f20740 [ 215.213044] RBP: ffff8880a98dfc80 R08: 0000000000000000 R09: 0000000000000000 [ 215.213046] R10: ffffed1015d64732 R11: ffff8880aeb23993 R12: 0000000000000000 [ 215.213047] R13: ffffffff87f99ea0 R14: ffff8880a98cc600 R15: 0000000000000002 [ 215.213049] FS: 0000000000000000(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 215.213050] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.213051] CR2: 0000000000ebb000 CR3: 00000000a5af4000 CR4: 00000000001406e0 [ 215.213053] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 215.213054] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 215.213055] Call Trace: [ 215.213056] ? __lock_acquire+0x792/0x4980 [ 215.213057] ? mark_held_locks+0x130/0x130 [ 215.213059] ? mark_held_locks+0x130/0x130 [ 215.213060] ? find_held_lock+0x36/0x1d0 [ 215.213061] lock_acquire+0x173/0x3d0 [ 215.213062] ? batadv_nc_worker+0xbc/0x630 [ 215.213063] batadv_nc_worker+0xec/0x630 [ 215.213064] ? batadv_nc_worker+0xbc/0x630 [ 215.213065] process_one_work+0x830/0x1670 [ 215.213067] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 215.213068] ? lock_acquire+0x173/0x3d0 [ 215.213069] ? kasan_check_write+0x14/0x20 [ 215.213070] ? do_raw_spin_lock+0xd0/0x240 [ 215.213071] worker_thread+0x85/0xb60 [ 215.213072] ? __kthread_parkme+0x47/0x190 [ 215.213073] kthread+0x324/0x3e0 [ 215.213075] ? process_one_work+0x1670/0x1670 [ 215.213076] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 215.213077] ret_from_fork+0x24/0x30 [ 215.214437] Kernel panic - not syncing: hung_task: blocked tasks [ 215.427229] CPU: 0 PID: 1037 Comm: khungtaskd Not tainted 4.19.95-syzkaller #0 [ 215.434570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.443898] Call Trace: [ 215.446462] dump_stack+0x123/0x177 [ 215.450067] panic+0x1cd/0x375 [ 215.453233] ? __warn_printk+0xd6/0xd6 [ 215.457102] watchdog+0x5d4/0xb40 [ 215.460533] kthread+0x324/0x3e0 [ 215.463880] ? hungtask_pm_notify+0x40/0x40 [ 215.468175] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 215.473686] ret_from_fork+0x24/0x30 [ 215.478924] Kernel Offset: disabled [ 215.482553] Rebooting in 86400 seconds..