[ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 33.598078] audit: type=1400 audit(1586655538.419:8): avc: denied { execmem } for pid=6131 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 33.614872] IPVS: ftp: loaded support on port[0] = 21 [ 34.049135] can: request_module (can-proto-0) failed. [ 35.033060] can: request_module (can-proto-0) failed. [ 35.058315] audit: type=1400 audit(1586655539.870:9): avc: denied { create } for pid=6110 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.10.42' (ECDSA) to the list of known hosts. 2020/04/12 01:39:07 parsed 1 programs 2020/04/12 01:39:08 executed programs: 0 [ 43.764978] audit: type=1400 audit(1586655548.583:10): avc: denied { execmem } for pid=6256 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 43.799520] IPVS: ftp: loaded support on port[0] = 21 [ 43.854897] IPVS: ftp: loaded support on port[0] = 21 [ 43.893697] IPVS: ftp: loaded support on port[0] = 21 [ 43.902219] IPVS: ftp: loaded support on port[0] = 21 [ 43.903285] IPVS: ftp: loaded support on port[0] = 21 [ 43.991045] chnl_net:caif_netlink_parms(): no params data found [ 44.008465] IPVS: ftp: loaded support on port[0] = 21 [ 44.118146] chnl_net:caif_netlink_parms(): no params data found [ 44.161243] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.169407] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.177184] device bridge_slave_0 entered promiscuous mode [ 44.223130] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.229534] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.238579] device bridge_slave_1 entered promiscuous mode [ 44.258195] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.265374] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.272343] device bridge_slave_0 entered promiscuous mode [ 44.307002] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.315602] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.321976] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.330344] device bridge_slave_1 entered promiscuous mode [ 44.375771] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.417463] chnl_net:caif_netlink_parms(): no params data found [ 44.441385] chnl_net:caif_netlink_parms(): no params data found [ 44.457098] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.466576] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.498906] chnl_net:caif_netlink_parms(): no params data found [ 44.513979] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.521543] team0: Port device team_slave_0 added [ 44.531716] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.539689] team0: Port device team_slave_1 added [ 44.568873] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.577182] chnl_net:caif_netlink_parms(): no params data found [ 44.605863] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.616877] team0: Port device team_slave_0 added [ 44.628266] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.655062] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.662257] team0: Port device team_slave_1 added [ 44.667936] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.703513] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.721126] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.728689] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.735945] device bridge_slave_0 entered promiscuous mode [ 44.774588] device hsr_slave_0 entered promiscuous mode [ 44.813157] device hsr_slave_1 entered promiscuous mode [ 44.880373] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.886913] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.895045] device bridge_slave_0 entered promiscuous mode [ 44.901336] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.908105] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.917746] device bridge_slave_1 entered promiscuous mode [ 44.927483] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.935123] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.941469] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.950933] device bridge_slave_0 entered promiscuous mode [ 44.957522] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.964322] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.971151] device bridge_slave_0 entered promiscuous mode [ 45.025029] device hsr_slave_0 entered promiscuous mode [ 45.063050] device hsr_slave_1 entered promiscuous mode [ 45.092875] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.099435] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.106964] device bridge_slave_1 entered promiscuous mode [ 45.126030] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.132880] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.139220] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.147743] device bridge_slave_1 entered promiscuous mode [ 45.154543] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.161015] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.170387] device bridge_slave_1 entered promiscuous mode [ 45.180260] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.188188] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.199816] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.216391] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.228864] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.236703] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.248182] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.257190] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.280085] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.295751] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.311080] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.321934] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.329718] team0: Port device team_slave_0 added [ 45.335627] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.342942] team0: Port device team_slave_1 added [ 45.348506] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.356655] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.364582] team0: Port device team_slave_0 added [ 45.374329] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.381545] team0: Port device team_slave_0 added [ 45.391289] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.399549] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.413816] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.421010] team0: Port device team_slave_1 added [ 45.427274] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.437274] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.444886] team0: Port device team_slave_1 added [ 45.505144] device hsr_slave_0 entered promiscuous mode [ 45.552866] device hsr_slave_1 entered promiscuous mode [ 45.602947] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.610122] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.617960] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.632315] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.639934] team0: Port device team_slave_0 added [ 45.653607] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.661205] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.669376] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.676858] team0: Port device team_slave_1 added [ 45.682252] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.716625] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.767188] device hsr_slave_0 entered promiscuous mode [ 45.822836] device hsr_slave_1 entered promiscuous mode [ 45.863226] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.871080] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.924922] device hsr_slave_0 entered promiscuous mode [ 45.972692] device hsr_slave_1 entered promiscuous mode [ 46.013158] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.028160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.038707] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.048412] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.055377] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.105555] device hsr_slave_0 entered promiscuous mode [ 46.142650] device hsr_slave_1 entered promiscuous mode [ 46.184322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.192798] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.201631] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.210361] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.221849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.230138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.239274] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.250281] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.256554] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.263866] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.271835] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.282909] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.289014] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.297327] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.307849] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.315386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.323156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.329960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.338120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.346088] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.352668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.359786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.368887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.376564] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.383091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.390684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.408106] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.417159] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.434228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.442206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.451941] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.458662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.467902] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.477831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.488393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.495997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.503964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.511513] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.517899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.524926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.534362] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.543168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.555264] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.576790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.584661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.592888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.600607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.609434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.617791] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.631210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.640448] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.651279] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.659761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.667677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.675850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.685905] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.697836] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 46.707404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.715802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.723937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.731757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.739636] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.747661] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.758483] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 46.767820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.776913] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.785919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.794018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.802543] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.809334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.819393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.828152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.838948] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 46.850199] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.856525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.865452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.874391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.881903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.890085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.899544] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.908116] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.914779] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.926428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.935742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.942972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.950624] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 46.960435] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.966661] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.975560] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.985412] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.994143] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.000292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.008311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.015863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.023720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.032149] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.038495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.045529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.052891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.060000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.069963] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.080740] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.087869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.095365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.103436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.110971] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.117366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.124354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.132639] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.140093] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.154084] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.164085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.171820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.181421] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.187861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.196355] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.203281] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.211273] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.219304] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.229408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.238341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.247249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.255601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.264170] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.271919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.280790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.294061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.301031] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.313002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.331541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.340068] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.346526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.354223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.367289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.375818] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.382264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.393021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.401483] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.431915] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.440747] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.451015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.463779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.471973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.483718] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.497964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.504648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.516769] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.527313] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.538386] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.544830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.552748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.560182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.569337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.577283] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.586512] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.594679] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.603272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.614002] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.621706] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.628319] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.635109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.645071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.653478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.661213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.669556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.677547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.685074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.694727] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.703924] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.712669] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.725298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.733082] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.740111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.748910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.756829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.765000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.774086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.781830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.790130] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.796540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.804589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.812807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.820324] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.826728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.834889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.844490] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.851708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.860100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.870350] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.878894] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.889052] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.896675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.908276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.916993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.925256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.936022] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.945467] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.953945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.962981] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.971219] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.980617] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.990546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.001691] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.009009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.016955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.027792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.035674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.043667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.051072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.058707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.067673] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.087619] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.094546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.103007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.110609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.121745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.130696] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.142924] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.150117] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.157296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.165721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.173956] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.183360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.190745] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.198835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.211068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.232869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.243026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.251140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.274973] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.286672] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.299616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.316003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.329865] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.337323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.353998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.385479] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.405934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.799940] INFO: task syz-executor.3:7156 blocked for more than 140 seconds. [ 206.807402] Not tainted 4.19.114-syzkaller #0 [ 206.813583] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 206.822127] syz-executor.3 D26936 7156 6258 0x00000004 [ 206.827812] Call Trace: [ 206.831147] __schedule+0x78c/0x1c10 [ 206.834898] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 206.840657] ? pci_mmcfg_check_reserved+0x120/0x120 [ 206.845693] ? autoremove_wake_function+0x160/0x160 [ 206.852664] schedule+0x7f/0x1b0 [ 206.856042] request_wait_answer+0x2fe/0x620 [ 206.862075] ? fuse_copy_one+0x130/0x130 [ 206.866161] ? lock_downgrade+0x860/0x860 [ 206.870835] ? finish_wait+0x290/0x290 [ 206.874723] ? do_raw_spin_unlock+0x177/0x260 [ 206.879214] __fuse_request_send+0xff/0x190 [ 206.885916] fuse_request_send+0x41/0x80 [ 206.890496] fuse_simple_request+0x2b4/0x610 [ 206.894915] fuse_lookup_name+0x244/0x590 [ 206.899050] ? fuse_create+0x10/0x10 [ 206.903553] ? mutex_lock_nested+0x16/0x20 [ 206.907813] fuse_lookup+0xf3/0x3b0 [ 206.911969] ? fuse_lookup_name+0x590/0x590 [ 206.916293] ? __d_lookup_rcu+0x8a0/0x8a0 [ 206.921144] ? __lockdep_init_map+0x105/0x590 [ 206.925644] __lookup_slow+0x216/0x400 [ 206.929511] ? vfs_unlink+0x450/0x450 [ 206.934044] lookup_slow+0x51/0x70 [ 206.937589] walk_component+0x694/0x2320 [ 206.942182] ? security_inode_permission+0x73/0xb0 [ 206.947107] ? path_init+0x1550/0x1550 [ 206.951703] ? link_path_walk.part.40+0x16d/0x1550 [ 206.956647] ? path_init+0xefe/0x1550 [ 206.961145] ? trace_hardirqs_on+0x28/0x190 [ 206.965474] ? walk_component+0x2320/0x2320 [ 206.970669] ? save_stack+0x43/0xd0 [ 206.974635] ? kasan_kmalloc+0xc7/0xe0 [ 206.978735] ? kasan_slab_alloc+0x12/0x20 [ 206.983547] path_lookupat.isra.43+0x180/0x850 [ 206.988145] ? path_parentat.isra.41+0x100/0x100 [ 206.993487] ? find_held_lock+0x36/0x1d0 [ 206.997612] filename_lookup.part.57+0x160/0x360 [ 207.002964] ? filename_parentat.isra.55.part.56+0x400/0x400 [ 207.008780] ? rcu_read_lock_sched_held+0x108/0x120 [ 207.014365] ? strncpy_from_user+0x80/0x260 [ 207.018813] ? getname_flags+0xf6/0x520 [ 207.023423] user_path_at_empty+0x39/0x40 [ 207.027574] vfs_statx+0xbe/0x150 [ 207.031772] ? vfs_statx_fd+0x90/0x90 [ 207.035601] ? kasan_check_read+0x11/0x20 [ 207.040638] __do_sys_newstat+0x85/0xe0 [ 207.044629] ? cp_new_stat+0x5b0/0x5b0 [ 207.048679] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 207.054248] ? do_syscall_64+0x21/0x4e0 [ 207.058238] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 207.064212] ? lockdep_hardirqs_on+0x421/0x5c0 [ 207.068821] ? do_syscall_64+0x21/0x4e0 [ 207.073459] __x64_sys_newstat+0x4f/0x70 [ 207.077528] do_syscall_64+0xd0/0x4e0 [ 207.082069] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 207.087281] RIP: 0033:0x4592c9 [ 207.090999] Code: Bad RIP value. [ 207.094358] RSP: 002b:00007fb1394a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 207.102601] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004592c9 [ 207.110330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000580 [ 207.117625] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 207.125653] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1394a96d4 [ 207.133398] R13: 00000000004e52fb R14: 00000000004de648 R15: 00000000ffffffff [ 207.141208] INFO: task syz-executor.3:7161 blocked for more than 140 seconds. [ 207.148486] Not tainted 4.19.114-syzkaller #0 [ 207.154070] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 207.162424] syz-executor.3 D29216 7161 6258 0x00000004 [ 207.168051] Call Trace: [ 207.171380] __schedule+0x78c/0x1c10 [ 207.175128] ? pci_mmcfg_check_reserved+0x120/0x120 [ 207.180856] ? rwsem_down_write_failed+0x5c1/0xbf0 [ 207.185800] ? lockdep_hardirqs_on+0x421/0x5c0 [ 207.190939] ? _raw_spin_unlock_irq+0x27/0x80 [ 207.195436] schedule+0x7f/0x1b0 [ 207.198785] rwsem_down_write_failed+0x5c6/0xbf0 [ 207.204443] ? rwsem_down_read_failed_killable+0x550/0x550 [ 207.210548] ? avc_has_perm_noaudit+0x460/0x460 [ 207.215263] ? mark_held_locks+0x130/0x130 [ 207.219495] ? find_held_lock+0x36/0x1d0 [ 207.224438] call_rwsem_down_write_failed+0x17/0x30 [ 207.229496] ? call_rwsem_down_write_failed+0x17/0x30 [ 207.235256] down_write+0x53/0x90 [ 207.238729] ? lock_mount+0x82/0x290 [ 207.243198] lock_mount+0x82/0x290 [ 207.246817] do_add_mount+0x22/0x310 [ 207.251634] do_mount+0x1290/0x2410 [ 207.255260] ? __might_fault+0xf1/0x1b0 [ 207.259214] ? lock_downgrade+0x860/0x860 [ 207.264068] ? copy_mount_string+0x20/0x20 [ 207.268305] ? kasan_check_write+0x14/0x20 [ 207.273087] ? _copy_from_user+0x9c/0xd0 [ 207.277146] ? memdup_user+0x4a/0x80 [ 207.281657] ksys_mount+0xba/0xe0 [ 207.285130] __x64_sys_mount+0xb9/0x150 [ 207.289095] do_syscall_64+0xd0/0x4e0 [ 207.293683] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 207.298898] RIP: 0033:0x4592c9 [ 207.302904] Code: Bad RIP value. [ 207.306271] RSP: 002b:00007fb139487c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 207.314578] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004592c9 [ 207.322206] RDX: 0000000020000000 RSI: 0000000020000180 RDI: 0000000000000000 [ 207.329467] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 207.337392] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fb1394886d4 [ 207.345149] R13: 00000000004c570b R14: 00000000004d9aa0 R15: 00000000ffffffff [ 207.352950] INFO: task syz-executor.3:7167 blocked for more than 140 seconds. [ 207.360791] Not tainted 4.19.114-syzkaller #0 [ 207.365913] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 207.374446] syz-executor.3 D27496 7167 6258 0x00000004 [ 207.380539] Call Trace: [ 207.383201] __schedule+0x78c/0x1c10 [ 207.386917] ? pci_mmcfg_check_reserved+0x120/0x120 [ 207.392785] ? rwsem_down_write_failed+0x5c1/0xbf0 [ 207.397724] ? lockdep_hardirqs_on+0x421/0x5c0 [ 207.402857] ? _raw_spin_unlock_irq+0x27/0x80 [ 207.407357] schedule+0x7f/0x1b0 [ 207.411426] rwsem_down_write_failed+0x5c6/0xbf0 [ 207.416191] ? rwsem_down_read_failed_killable+0x550/0x550 [ 207.422350] call_rwsem_down_write_failed+0x17/0x30 [ 207.427377] ? call_rwsem_down_write_failed+0x17/0x30 [ 207.433203] ? __lock_acquire+0x2631/0x4980 [ 207.437598] down_write+0x53/0x90 [ 207.441929] ? fuse_reverse_inval_entry+0x9a/0x5d0 [ 207.446986] fuse_reverse_inval_entry+0x9a/0x5d0 [ 207.453179] ? lock_acquire+0x173/0x3d0 [ 207.457225] ? fuse_update_attributes+0xa0/0xa0 [ 207.462511] fuse_dev_do_write+0xb7d/0x2350 [ 207.467018] ? _raw_spin_unlock_irqrestore+0xbb/0xd0 [ 207.472737] ? try_to_wake_up+0xc2/0xf20 [ 207.476816] ? fuse_dev_read+0x1b0/0x1b0 [ 207.481626] ? migrate_swap_stop+0x930/0x930 [ 207.486219] ? futex_wake+0x338/0x5a0 [ 207.490963] ? lock_downgrade+0x860/0x860 [ 207.495222] ? wake_up_q+0xb3/0x100 [ 207.499303] ? get_futex_key+0xe80/0xe80 [ 207.504172] ? memset+0x31/0x40 [ 207.507459] fuse_dev_write+0x12a/0x1b0 [ 207.512184] ? fuse_dev_splice_write+0xa20/0xa20 [ 207.516964] ? add_uuid+0x120/0x680 [ 207.521405] __vfs_write+0x443/0x890 [ 207.525163] ? kernel_read+0x130/0x130 [ 207.529035] ? selinux_file_permission+0x326/0x3f0 [ 207.534742] ? rw_verify_area+0xb8/0x2b0 [ 207.538799] vfs_write+0x150/0x4d0 [ 207.542855] ksys_write+0x103/0x260 [ 207.546483] ? __ia32_sys_read+0xa0/0xa0 [ 207.551242] ? do_syscall_64+0x21/0x4e0 [ 207.555307] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 207.561204] __x64_sys_write+0x6e/0xb0 [ 207.565224] do_syscall_64+0xd0/0x4e0 [ 207.569010] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 207.575287] RIP: 0033:0x4592c9 [ 207.578496] Code: Bad RIP value. [ 207.582674] RSP: 002b:00007fb139466c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.591029] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004592c9 [ 207.598307] RDX: 000000000000002e RSI: 0000000020000000 RDI: 0000000000000003 [ 207.606247] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 207.614229] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1394676d4 [ 207.622068] R13: 00000000004c8aa3 R14: 00000000004df6e0 R15: 00000000ffffffff [ 207.630042] INFO: task syz-executor.3:7170 blocked for more than 140 seconds. [ 207.637373] Not tainted 4.19.114-syzkaller #0 [ 207.642701] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 207.651946] syz-executor.3 D27960 7170 6258 0x00000004 [ 207.657649] Call Trace: [ 207.660307] __schedule+0x78c/0x1c10 [ 207.664026] ? pci_mmcfg_check_reserved+0x120/0x120 [ 207.669063] ? rwsem_down_write_failed+0x5c1/0xbf0 [ 207.674118] ? lockdep_hardirqs_on+0x421/0x5c0 [ 207.678701] ? _raw_spin_unlock_irq+0x27/0x80 [ 207.683425] schedule+0x7f/0x1b0 [ 207.686818] rwsem_down_write_failed+0x5c6/0xbf0 [ 207.691671] ? rwsem_down_read_failed_killable+0x550/0x550 [ 207.697305] ? mark_held_locks+0x130/0x130 [ 207.701585] ? trace_hardirqs_on+0x28/0x190 [ 207.705900] ? find_held_lock+0x36/0x1d0 [ 207.710074] call_rwsem_down_write_failed+0x17/0x30 [ 207.715090] ? call_rwsem_down_write_failed+0x17/0x30 [ 207.720318] down_write+0x53/0x90 [ 207.723769] ? lock_mount+0x82/0x290 [ 207.727461] lock_mount+0x82/0x290 [ 207.731655] do_add_mount+0x22/0x310 [ 207.735475] do_mount+0x1290/0x2410 [ 207.739341] ? copy_mount_string+0x20/0x20 [ 207.743656] ? rcu_read_lock_sched_held+0x108/0x120 [ 207.748677] ? kmem_cache_alloc_trace+0x350/0x740 [ 207.753599] ? kasan_check_write+0x14/0x20 [ 207.757850] ? copy_mount_options+0x55/0x270 [ 207.762309] ksys_mount+0xba/0xe0 [ 207.765768] __x64_sys_mount+0xb9/0x150 [ 207.769820] do_syscall_64+0xd0/0x4e0 [ 207.773622] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 207.778808] RIP: 0033:0x4592c9 [ 207.782057] Code: Bad RIP value. [ 207.785426] RSP: 002b:00007fb139445c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 207.793213] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004592c9 [ 207.800573] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000000000000 [ 207.807847] RBP: 000000000075c118 R08: 0000000020000400 R09: 0000000000000000 [ 207.815283] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1394466d4 [ 207.822638] R13: 00000000004c56df R14: 00000000004d9b60 R15: 00000000ffffffff [ 207.830055] INFO: task syz-executor.3:7171 blocked for more than 140 seconds. [ 207.837325] Not tainted 4.19.114-syzkaller #0 [ 207.842421] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 207.850489] syz-executor.3 D29144 7171 6258 0x00000004 [ 207.856235] Call Trace: [ 207.858811] __schedule+0x78c/0x1c10 [ 207.863125] ? pci_mmcfg_check_reserved+0x120/0x120 [ 207.868277] ? rwsem_down_read_failed+0x203/0x3e0 [ 207.873212] ? lockdep_hardirqs_on+0x421/0x5c0 [ 207.877806] ? _raw_spin_unlock_irq+0x27/0x80 [ 207.882374] ? rwsem_down_read_failed+0x21c/0x3e0 [ 207.887241] schedule+0x7f/0x1b0 [ 207.890728] rwsem_down_read_failed+0x21c/0x3e0 [ 207.895403] ? rwsem_down_write_failed+0xbf0/0xbf0 [ 207.900378] ? unlazy_walk+0x143/0x450 [ 207.904268] ? lock_downgrade+0x860/0x860 [ 207.908429] call_rwsem_down_read_failed+0x18/0x30 [ 207.913461] down_read+0x49/0xb0 [ 207.916845] ? lookup_slow+0x43/0x70 [ 207.920594] lookup_slow+0x43/0x70 [ 207.924155] walk_component+0x694/0x2320 [ 207.928198] ? security_inode_permission+0x73/0xb0 [ 207.933222] ? path_init+0x1550/0x1550 [ 207.937111] ? link_path_walk.part.40+0x16d/0x1550 [ 207.942089] ? path_init+0xefe/0x1550 [ 207.945893] ? trace_hardirqs_on+0x28/0x190 [ 207.950311] ? walk_component+0x2320/0x2320 [ 207.954638] ? save_stack+0x43/0xd0 [ 207.958472] ? kasan_kmalloc+0xc7/0xe0 [ 207.962427] ? kasan_slab_alloc+0x12/0x20 [ 207.966580] path_lookupat.isra.43+0x180/0x850 [ 207.971249] ? mark_held_locks+0x130/0x130 [ 207.975490] ? path_parentat.isra.41+0x100/0x100 [ 207.980297] ? mark_held_locks+0x130/0x130 [ 207.984530] ? __save_stack_trace+0x9c/0x100 [ 207.988928] ? find_held_lock+0x36/0x1d0 [ 207.993671] filename_lookup.part.57+0x160/0x360 [ 207.998438] ? filename_parentat.isra.55.part.56+0x400/0x400 [ 208.004278] ? rcu_read_lock_sched_held+0x108/0x120 [ 208.009332] ? strncpy_from_user+0x80/0x260 [ 208.013736] ? getname_flags+0xf6/0x520 [ 208.017821] user_path_at_empty+0x39/0x40 [ 208.022095] vfs_statx+0xbe/0x150 [ 208.025539] ? vfs_statx_fd+0x90/0x90 [ 208.029322] ? kasan_check_read+0x11/0x20 [ 208.033541] __do_sys_newstat+0x85/0xe0 [ 208.037511] ? cp_new_stat+0x5b0/0x5b0 [ 208.041447] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 208.046203] ? do_syscall_64+0x21/0x4e0 [ 208.050260] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 208.055619] ? lockdep_hardirqs_on+0x421/0x5c0 [ 208.060242] ? do_syscall_64+0x21/0x4e0 [ 208.064209] __x64_sys_newstat+0x4f/0x70 [ 208.068261] do_syscall_64+0xd0/0x4e0 [ 208.072166] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 208.077351] RIP: 0033:0x4592c9 [ 208.080699] Code: Bad RIP value. [ 208.084063] RSP: 002b:00007fb139424c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 208.091861] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004592c9 [ 208.099156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000580 [ 208.106492] RBP: 000000000075c1c0 R08: 0000000000000000 R09: 0000000000000000 [ 208.113846] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1394256d4 [ 208.121921] R13: 00000000004e52fb R14: 00000000004de648 R15: 00000000ffffffff [ 208.129232] INFO: task syz-executor.4:7162 blocked for more than 140 seconds. [ 208.136548] Not tainted 4.19.114-syzkaller #0 [ 208.141601] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 208.149714] syz-executor.4 D27192 7162 6259 0x00000004 [ 208.155370] Call Trace: [ 208.157949] __schedule+0x78c/0x1c10 [ 208.161712] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 208.166831] ? pci_mmcfg_check_reserved+0x120/0x120 [ 208.171899] ? autoremove_wake_function+0x160/0x160 [ 208.176928] schedule+0x7f/0x1b0 [ 208.180329] request_wait_answer+0x2fe/0x620 [ 208.184730] ? fuse_copy_one+0x130/0x130 [ 208.188785] ? lock_downgrade+0x860/0x860 [ 208.192989] ? finish_wait+0x290/0x290 [ 208.196877] ? do_raw_spin_unlock+0x177/0x260 [ 208.201418] __fuse_request_send+0xff/0x190 [ 208.205749] fuse_request_send+0x41/0x80 [ 208.210138] fuse_simple_request+0x2b4/0x610 [ 208.214553] fuse_lookup_name+0x244/0x590 [ 208.218697] ? fuse_create+0x10/0x10 [ 208.222481] ? mutex_lock_nested+0x16/0x20 [ 208.226871] fuse_lookup+0xf3/0x3b0 [ 208.230593] ? fuse_lookup_name+0x590/0x590 [ 208.234914] ? __d_lookup_rcu+0x8a0/0x8a0 [ 208.239057] ? __lockdep_init_map+0x105/0x590 [ 208.243662] __lookup_slow+0x216/0x400 [ 208.247557] ? vfs_unlink+0x450/0x450 [ 208.251966] lookup_slow+0x51/0x70 [ 208.255518] walk_component+0x694/0x2320 [ 208.259651] ? security_inode_permission+0x73/0xb0 [ 208.264577] ? path_init+0x1550/0x1550 [ 208.268458] ? link_path_walk.part.40+0x16d/0x1550 [ 208.273423] ? path_init+0xefe/0x1550 [ 208.277222] ? trace_hardirqs_on+0x28/0x190 [ 208.281610] ? walk_component+0x2320/0x2320 [ 208.285939] ? save_stack+0x43/0xd0 [ 208.289645] ? kasan_kmalloc+0xc7/0xe0 [ 208.294599] ? kasan_slab_alloc+0x12/0x20 [ 208.298738] path_lookupat.isra.43+0x180/0x850 [ 208.303376] ? path_parentat.isra.41+0x100/0x100 [ 208.308240] ? find_held_lock+0x36/0x1d0 [ 208.312372] filename_lookup.part.57+0x160/0x360 [ 208.317236] ? filename_parentat.isra.55.part.56+0x400/0x400 [ 208.326750] ? rcu_read_lock_sched_held+0x108/0x120 [ 208.331832] ? strncpy_from_user+0x80/0x260 [ 208.336233] ? getname_flags+0xf6/0x520 [ 208.340282] user_path_at_empty+0x39/0x40 [ 208.344448] vfs_statx+0xbe/0x150 [ 208.347895] ? vfs_statx_fd+0x90/0x90 [ 208.351805] ? kasan_check_read+0x11/0x20 [ 208.355964] __do_sys_newstat+0x85/0xe0 [ 208.359975] ? cp_new_stat+0x5b0/0x5b0 [ 208.363893] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 208.368645] ? do_syscall_64+0x21/0x4e0 [ 208.372764] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 208.378125] ? lockdep_hardirqs_on+0x421/0x5c0 [ 208.383357] ? do_syscall_64+0x21/0x4e0 [ 208.387471] __x64_sys_newstat+0x4f/0x70 [ 208.392546] do_syscall_64+0xd0/0x4e0 [ 208.396361] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 208.402215] RIP: 0033:0x4592c9 [ 208.405414] Code: Bad RIP value. [ 208.408884] RSP: 002b:00007f33ce7e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 208.417628] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004592c9 [ 208.425336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000580 [ 208.433113] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 208.440926] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f33ce7e86d4 [ 208.448214] R13: 00000000004e52fb R14: 00000000004de648 R15: 00000000ffffffff [ 208.456067] INFO: task syz-executor.4:7168 blocked for more than 140 seconds. [ 208.464184] Not tainted 4.19.114-syzkaller #0 [ 208.469263] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 208.478014] syz-executor.4 D28920 7168 6259 0x00000004 [ 208.484064] Call Trace: [ 208.486649] __schedule+0x78c/0x1c10 [ 208.491132] ? pci_mmcfg_check_reserved+0x120/0x120 [ 208.496189] ? rwsem_down_write_failed+0x5c1/0xbf0 [ 208.501692] ? lockdep_hardirqs_on+0x421/0x5c0 [ 208.506368] ? _raw_spin_unlock_irq+0x27/0x80 [ 208.511413] schedule+0x7f/0x1b0 [ 208.514793] rwsem_down_write_failed+0x5c6/0xbf0 [ 208.520303] ? rwsem_down_read_failed_killable+0x550/0x550 [ 208.526003] ? find_held_lock+0x36/0x1d0 [ 208.530894] ? __lock_is_held+0xb5/0x140 [ 208.535005] call_rwsem_down_write_failed+0x17/0x30 [ 208.540709] ? call_rwsem_down_write_failed+0x17/0x30 [ 208.546065] down_write+0x53/0x90 [ 208.550238] ? fuse_reverse_inval_entry+0x9a/0x5d0 [ 208.555189] fuse_reverse_inval_entry+0x9a/0x5d0 [ 208.560812] ? lock_acquire+0x173/0x3d0 [ 208.564791] ? fuse_update_attributes+0xa0/0xa0 [ 208.570254] fuse_dev_do_write+0xb7d/0x2350 [ 208.574681] ? refcount_sub_and_test_checked+0xe0/0x180 [ 208.580417] ? fuse_dev_read+0x1b0/0x1b0 [ 208.584504] ? futex_wait_setup+0x320/0x320 [ 208.588981] ? futex_lock_pi_atomic+0x200/0x200 [ 208.594594] ? fuse_dev_do_read.isra.28+0x13c8/0x1c10 [ 208.600220] ? memset+0x31/0x40 [ 208.603755] fuse_dev_write+0x12a/0x1b0 [ 208.607716] ? fuse_dev_splice_write+0xa20/0xa20 [ 208.613213] ? regdom_intersect.part.29+0x280/0x720 [ 208.618243] __vfs_write+0x443/0x890 [ 208.622712] ? kernel_read+0x130/0x130 [ 208.626677] ? selinux_file_permission+0x326/0x3f0 [ 208.632212] ? rw_verify_area+0xb8/0x2b0 [ 208.636275] vfs_write+0x150/0x4d0 [ 208.641361] ksys_write+0x103/0x260 [ 208.644999] ? __ia32_sys_read+0xa0/0xa0 [ 208.649045] ? do_syscall_64+0x21/0x4e0 [ 208.653793] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 208.659285] __x64_sys_write+0x6e/0xb0 [ 208.663798] do_syscall_64+0xd0/0x4e0 [ 208.667604] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 208.673508] RIP: 0033:0x4592c9 [ 208.676727] Code: Bad RIP value. [ 208.680657] RSP: 002b:00007f33ce7c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.688361] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004592c9 [ 208.696263] RDX: 000000000000002e RSI: 0000000020000000 RDI: 0000000000000003 [ 208.703895] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 208.711573] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f33ce7c76d4 [ 208.718842] R13: 00000000004c8aa3 R14: 00000000004df6e0 R15: 00000000ffffffff [ 208.727259] INFO: task syz-executor.4:7169 blocked for more than 140 seconds. [ 208.734850] Not tainted 4.19.114-syzkaller #0 [ 208.739953] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 208.748172] syz-executor.4 D28824 7169 6259 0x00000004 [ 208.753867] Call Trace: [ 208.756452] __schedule+0x78c/0x1c10 [ 208.760250] ? pci_mmcfg_check_reserved+0x120/0x120 [ 208.765260] ? rwsem_down_write_failed+0x5c1/0xbf0 [ 208.770268] ? lockdep_hardirqs_on+0x421/0x5c0 [ 208.774862] ? _raw_spin_unlock_irq+0x27/0x80 [ 208.779337] schedule+0x7f/0x1b0 [ 208.782784] rwsem_down_write_failed+0x5c6/0xbf0 [ 208.787534] ? rwsem_down_read_failed_killable+0x550/0x550 [ 208.793768] ? avc_has_perm_noaudit+0x460/0x460 [ 208.798474] ? mark_held_locks+0x130/0x130 [ 208.802880] ? find_held_lock+0x36/0x1d0 [ 208.806946] call_rwsem_down_write_failed+0x17/0x30 [ 208.812035] ? call_rwsem_down_write_failed+0x17/0x30 [ 208.817234] down_write+0x53/0x90 [ 208.820737] ? lock_mount+0x82/0x290 [ 208.824458] lock_mount+0x82/0x290 [ 208.828115] do_add_mount+0x22/0x310 [ 208.831908] do_mount+0x1290/0x2410 [ 208.835536] ? __might_fault+0xf1/0x1b0 [ 208.839563] ? lock_downgrade+0x860/0x860 [ 208.843715] ? copy_mount_string+0x20/0x20 [ 208.847947] ? kasan_check_write+0x14/0x20 [ 208.852254] ? _copy_from_user+0x9c/0xd0 [ 208.856322] ? memdup_user+0x4a/0x80 [ 208.860085] ksys_mount+0xba/0xe0 [ 208.863530] __x64_sys_mount+0xb9/0x150 [ 208.867488] do_syscall_64+0xd0/0x4e0 [ 208.871370] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 208.876587] RIP: 0033:0x4592c9 [ 208.879833] Code: Bad RIP value. [ 208.883198] RSP: 002b:00007f33ce7a5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 208.891122] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004592c9 [ 208.898390] RDX: 0000000020000000 RSI: 0000000020000180 RDI: 0000000000000000 [ 208.905700] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 208.913056] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f33ce7a66d4 [ 208.920923] R13: 00000000004c570b R14: 00000000004d9aa0 R15: 00000000ffffffff [ 208.928254] INFO: task syz-executor.4:7181 blocked for more than 140 seconds. [ 208.935573] Not tainted 4.19.114-syzkaller #0 [ 208.940642] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 208.948614] syz-executor.4 D29144 7181 6259 0x00000004 [ 208.954307] Call Trace: [ 208.956914] __schedule+0x78c/0x1c10 [ 208.960702] ? pci_mmcfg_check_reserved+0x120/0x120 [ 208.965718] ? rwsem_down_read_failed+0x203/0x3e0 [ 208.970606] ? lockdep_hardirqs_on+0x421/0x5c0 [ 208.975298] ? _raw_spin_unlock_irq+0x27/0x80 [ 208.979858] ? rwsem_down_read_failed+0x21c/0x3e0 [ 208.984697] schedule+0x7f/0x1b0 [ 208.988047] rwsem_down_read_failed+0x21c/0x3e0 [ 208.992816] ? rwsem_down_write_failed+0xbf0/0xbf0 [ 208.997737] ? unlazy_walk+0x143/0x450 [ 209.001656] ? lock_downgrade+0x860/0x860 [ 209.005798] ? __irqentry_text_end+0x8ae54/0x1fb25c [ 209.010886] call_rwsem_down_read_failed+0x18/0x30 [ 209.015919] down_read+0x49/0xb0 [ 209.019276] ? lookup_slow+0x43/0x70 [ 209.023044] lookup_slow+0x43/0x70 [ 209.026579] walk_component+0x694/0x2320 [ 209.030843] ? security_inode_permission+0x73/0xb0 [ 209.035774] ? path_init+0x1550/0x1550 [ 209.039726] ? link_path_walk.part.40+0x16d/0x1550 [ 209.045914] ? path_init+0xefe/0x1550 [ 209.050318] ? trace_hardirqs_on+0x28/0x190 [ 209.054648] ? walk_component+0x2320/0x2320 [ 209.059008] ? save_stack+0x43/0xd0 [ 209.062668] ? kasan_kmalloc+0xc7/0xe0 [ 209.066551] ? kasan_slab_alloc+0x12/0x20 [ 209.070874] path_lookupat.isra.43+0x180/0x850 [ 209.075549] ? path_parentat.isra.41+0x100/0x100 [ 209.081639] ? find_held_lock+0x36/0x1d0 [ 209.085717] filename_lookup.part.57+0x160/0x360 [ 209.090526] ? filename_parentat.isra.55.part.56+0x400/0x400 [ 209.096322] ? rcu_read_lock_sched_held+0x108/0x120 [ 209.101390] ? strncpy_from_user+0x80/0x260 [ 209.105708] ? getname_flags+0xf6/0x520 [ 209.109728] user_path_at_empty+0x39/0x40 [ 209.113882] vfs_statx+0xbe/0x150 [ 209.117343] ? vfs_statx_fd+0x90/0x90 [ 209.121239] ? kasan_check_read+0x11/0x20 [ 209.125388] __do_sys_newstat+0x85/0xe0 [ 209.129407] ? cp_new_stat+0x5b0/0x5b0 [ 209.133294] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 209.138044] ? do_syscall_64+0x21/0x4e0 [ 209.142055] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 209.147412] ? lockdep_hardirqs_on+0x421/0x5c0 [ 209.152108] ? do_syscall_64+0x21/0x4e0 [ 209.156088] __x64_sys_newstat+0x4f/0x70 [ 209.160208] do_syscall_64+0xd0/0x4e0 [ 209.164012] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 209.169197] RIP: 0033:0x4592c9 [ 209.172440] Code: Bad RIP value. [ 209.175803] RSP: 002b:00007f33ce784c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 209.184261] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004592c9 [ 209.191614] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000580 [ 209.198883] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 209.207429] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f33ce7856d4 [ 209.214759] R13: 00000000004e52fb R14: 00000000004de648 R15: 00000000ffffffff [ 209.222104] INFO: task syz-executor.4:7182 blocked for more than 140 seconds. [ 209.229427] Not tainted 4.19.114-syzkaller #0 [ 209.234434] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 209.242436] syz-executor.4 D27960 7182 6259 0x00000004 [ 209.248085] Call Trace: [ 209.250723] __schedule+0x78c/0x1c10 [ 209.254431] ? pci_mmcfg_check_reserved+0x120/0x120 [ 209.259499] ? rwsem_down_write_failed+0x5c1/0xbf0 [ 209.264432] ? lockdep_hardirqs_on+0x421/0x5c0 [ 209.269005] ? _raw_spin_unlock_irq+0x27/0x80 [ 209.273542] schedule+0x7f/0x1b0 [ 209.276925] rwsem_down_write_failed+0x5c6/0xbf0 [ 209.281776] ? rwsem_down_read_failed_killable+0x550/0x550 [ 209.287401] ? mark_held_locks+0x130/0x130 [ 209.291673] ? trace_hardirqs_on+0x28/0x190 [ 209.295988] ? find_held_lock+0x36/0x1d0 [ 209.300110] call_rwsem_down_write_failed+0x17/0x30 [ 209.305120] ? call_rwsem_down_write_failed+0x17/0x30 [ 209.310922] down_write+0x53/0x90 [ 209.314392] ? lock_mount+0x82/0x290 [ 209.318092] lock_mount+0x82/0x290 [ 209.321665] do_add_mount+0x22/0x310 [ 209.325386] do_mount+0x1290/0x2410 [ 209.328990] ? copy_mount_string+0x20/0x20 [ 209.333280] ? rcu_read_lock_sched_held+0x108/0x120 [ 209.338304] ? kmem_cache_alloc_trace+0x350/0x740 [ 209.343249] ? kasan_check_write+0x14/0x20 [ 209.347672] ? copy_mount_options+0x55/0x270 [ 209.352120] ksys_mount+0xba/0xe0 [ 209.355570] __x64_sys_mount+0xb9/0x150 [ 209.359593] do_syscall_64+0xd0/0x4e0 [ 209.364526] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 209.369795] RIP: 0033:0x4592c9 [ 209.373019] Code: Bad RIP value. [ 209.376379] RSP: 002b:00007f33ce763c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 209.384523] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004592c9 [ 209.391968] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000000000000 [ 209.399416] RBP: 000000000075c1c0 R08: 0000000020000400 R09: 0000000000000000 [ 209.406743] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f33ce7646d4 [ 209.414090] R13: 00000000004c56df R14: 00000000004d9b60 R15: 00000000ffffffff [ 209.421453] [ 209.421453] Showing all locks held in the system: [ 209.427790] 1 lock held by khungtaskd/1036: [ 209.432172] #0: 000000004ee2cc95 (rcu_read_lock){....}, at: debug_show_all_locks+0x5b/0x27a [ 209.441528] 1 lock held by in:imklog/5776: [ 209.445775] #0: 000000002e85a8cf (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xa7/0xd0 [ 209.453672] 2 locks held by syz-executor.3/7156: [ 209.458588] #0: 0000000037c5ca30 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 209.467303] #1: 0000000016ab61ad (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 209.475179] 1 lock held by syz-executor.3/7161: [ 209.479909] #0: 0000000037c5ca30 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 209.488588] 2 locks held by syz-executor.3/7167: [ 209.493402] #0: 00000000f8e8ac6a (&fc->killsb){.+.+}, at: fuse_dev_do_write+0x19c5/0x2350 [ 209.501940] #1: 0000000037c5ca30 (&type->i_mutex_dir_key#8){++++}, at: fuse_reverse_inval_entry+0x9a/0x5d0 [ 209.511893] 1 lock held by syz-executor.3/7170: [ 209.516559] #0: 0000000037c5ca30 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 209.525296] 1 lock held by syz-executor.3/7171: [ 209.530020] #0: 0000000037c5ca30 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 209.538701] 2 locks held by syz-executor.4/7162: [ 209.543534] #0: 0000000094d8e657 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 209.552259] #1: 00000000da792de5 (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 209.560141] 2 locks held by syz-executor.4/7168: [ 209.565146] #0: 00000000e35b4a76 (&fc->killsb){.+.+}, at: fuse_dev_do_write+0x19c5/0x2350 [ 209.574188] #1: 0000000094d8e657 (&type->i_mutex_dir_key#8){++++}, at: fuse_reverse_inval_entry+0x9a/0x5d0 [ 209.584169] 1 lock held by syz-executor.4/7169: [ 209.588836] #0: 0000000094d8e657 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 209.597701] 1 lock held by syz-executor.4/7181: [ 209.602687] #0: 0000000094d8e657 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 209.611583] 1 lock held by syz-executor.4/7182: [ 209.616397] #0: 0000000094d8e657 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 209.625156] 2 locks held by syz-executor.2/7180: [ 209.629971] #0: 00000000699d8f48 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 209.638653] #1: 000000009cacdf02 (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 209.646537] 1 lock held by syz-executor.2/7192: [ 209.651250] #0: 00000000699d8f48 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 209.659976] 2 locks held by syz-executor.2/7196: [ 209.664720] #0: 00000000dd0a3cfb (&fc->killsb){.+.+}, at: fuse_dev_do_write+0x19c5/0x2350 [ 209.673180] #1: 00000000699d8f48 (&type->i_mutex_dir_key#8){++++}, at: fuse_reverse_inval_entry+0x9a/0x5d0 [ 209.683143] 1 lock held by syz-executor.2/7214: [ 209.687797] #0: 00000000699d8f48 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 209.696522] 1 lock held by syz-executor.2/7215: [ 209.701601] #0: 00000000699d8f48 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 209.710338] 2 locks held by syz-executor.5/7191: [ 209.715125] #0: 000000005a7f83b3 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 209.723828] #1: 00000000ad4d079e (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 209.731677] 1 lock held by syz-executor.5/7199: [ 209.736470] #0: 000000005a7f83b3 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 209.745227] 2 locks held by syz-executor.5/7207: [ 209.750047] #0: 00000000f6499207 (&fc->killsb){.+.+}, at: fuse_dev_do_write+0x19c5/0x2350 [ 209.758453] #1: 000000005a7f83b3 (&type->i_mutex_dir_key#8){++++}, at: fuse_reverse_inval_entry+0x9a/0x5d0 [ 209.768546] 1 lock held by syz-executor.5/7220: [ 209.773274] #0: 000000005a7f83b3 (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 209.782040] 1 lock held by syz-executor.5/7221: [ 209.786699] #0: 000000005a7f83b3 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 209.795507] 2 locks held by syz-executor.0/7198: [ 209.800341] #0: 00000000a22558ff (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 209.809013] #1: 00000000056d2311 (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 209.816854] 1 lock held by syz-executor.0/7208: [ 209.821568] #0: 00000000a22558ff (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 209.830837] 2 locks held by syz-executor.0/7211: [ 209.835594] #0: 00000000de5c021b (&fc->killsb){.+.+}, at: fuse_dev_do_write+0x19c5/0x2350 [ 209.844047] #1: 00000000a22558ff (&type->i_mutex_dir_key#8){++++}, at: fuse_reverse_inval_entry+0x9a/0x5d0 [ 209.854106] 1 lock held by syz-executor.0/7227: [ 209.858773] #0: 00000000a22558ff (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 209.867498] 1 lock held by syz-executor.0/7228: [ 209.872208] #0: 00000000a22558ff (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 209.880942] 2 locks held by syz-executor.1/7205: [ 209.885696] #0: 000000006429fddc (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 209.894666] #1: 0000000089a24f1f (&fi->mutex){+.+.}, at: fuse_lock_inode+0x9a/0xc0 [ 209.902618] 2 locks held by syz-executor.1/7212: [ 209.907460] #0: 000000009e665991 (&fc->killsb){.+.+}, at: fuse_dev_do_write+0x19c5/0x2350 [ 209.916060] #1: 000000006429fddc (&type->i_mutex_dir_key#8){++++}, at: fuse_reverse_inval_entry+0x9a/0x5d0 [ 209.926015] 1 lock held by syz-executor.1/7213: [ 209.930754] #0: 000000006429fddc (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 209.939595] 1 lock held by syz-executor.1/7233: [ 209.944249] #0: 000000006429fddc (&type->i_mutex_dir_key#8){++++}, at: lock_mount+0x82/0x290 [ 209.953089] 1 lock held by syz-executor.1/7234: [ 209.957771] #0: 000000006429fddc (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x43/0x70 [ 209.967068] [ 209.968708] ============================================= [ 209.968708] [ 209.975785] NMI backtrace for cpu 0 [ 209.979535] CPU: 0 PID: 1036 Comm: khungtaskd Not tainted 4.19.114-syzkaller #0 [ 209.986981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.996366] Call Trace: [ 209.998957] dump_stack+0x123/0x177 [ 210.002575] nmi_cpu_backtrace.cold.4+0x3e/0x76 [ 210.007246] ? lapic_can_unplug_cpu.cold.29+0x3f/0x3f [ 210.012427] nmi_trigger_cpumask_backtrace+0xe6/0x11a [ 210.017617] arch_trigger_cpumask_backtrace+0x14/0x20 [ 210.022805] watchdog+0x5c3/0xb40 [ 210.026253] kthread+0x324/0x3e0 [ 210.029608] ? hungtask_pm_notify+0x40/0x40 [ 210.033915] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 210.039443] ret_from_fork+0x24/0x30 [ 210.043217] Sending NMI from CPU 0 to CPUs 1: [ 210.047858] NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0x12/0x20 [ 210.048806] Kernel panic - not syncing: hung_task: blocked tasks [ 210.061640] CPU: 0 PID: 1036 Comm: khungtaskd Not tainted 4.19.114-syzkaller #0 [ 210.069081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.078438] Call Trace: [ 210.081056] dump_stack+0x123/0x177 [ 210.084854] panic+0x1cd/0x375 [ 210.088041] ? __warn_printk+0xd6/0xd6 [ 210.091918] watchdog+0x5d4/0xb40 [ 210.095488] kthread+0x324/0x3e0 [ 210.098856] ? hungtask_pm_notify+0x40/0x40 [ 210.103162] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 210.108742] ret_from_fork+0x24/0x30 [ 210.114225] Kernel Offset: disabled [ 210.117856] Rebooting in 86400 seconds..