[ 39.812285][ T27] audit: type=1800 audit(1580076065.727:29): pid=7695 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 39.839561][ T27] audit: type=1800 audit(1580076065.727:30): pid=7695 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 49.073749][ T7862] IPVS: ftp: loaded support on port[0] = 21 [ 49.367639][ T91] tipc: TX() has been purged, node left! [ 49.646194][ T7858] can: request_module (can-proto-0) failed. [ 52.270955][ T7858] can: request_module (can-proto-0) failed. [ 52.282065][ T7858] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.1.17' (ECDSA) to the list of known hosts. 2020/01/26 22:01:24 parsed 1 programs 2020/01/26 22:01:25 executed programs: 0 [ 59.854051][ T7939] IPVS: ftp: loaded support on port[0] = 21 [ 59.855914][ T7946] IPVS: ftp: loaded support on port[0] = 21 [ 59.866549][ T7943] IPVS: ftp: loaded support on port[0] = 21 [ 59.870608][ T7941] IPVS: ftp: loaded support on port[0] = 21 [ 59.880744][ T7948] IPVS: ftp: loaded support on port[0] = 21 [ 59.887011][ T7949] IPVS: ftp: loaded support on port[0] = 21 [ 60.044560][ T7943] chnl_net:caif_netlink_parms(): no params data found [ 60.126625][ T7948] chnl_net:caif_netlink_parms(): no params data found [ 60.155929][ T7939] chnl_net:caif_netlink_parms(): no params data found [ 60.165952][ T7943] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.174194][ T7943] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.182150][ T7943] device bridge_slave_0 entered promiscuous mode [ 60.193716][ T7943] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.200890][ T7943] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.208829][ T7943] device bridge_slave_1 entered promiscuous mode [ 60.221008][ T7946] chnl_net:caif_netlink_parms(): no params data found [ 60.239199][ T7948] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.246265][ T7948] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.255353][ T7948] device bridge_slave_0 entered promiscuous mode [ 60.266230][ T7948] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.274195][ T7948] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.281862][ T7948] device bridge_slave_1 entered promiscuous mode [ 60.321015][ T7943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.343246][ T7948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.358436][ T7939] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.365700][ T7939] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.375664][ T7939] device bridge_slave_0 entered promiscuous mode [ 60.388901][ T7943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.399522][ T7948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.411094][ T7941] chnl_net:caif_netlink_parms(): no params data found [ 60.423472][ T7939] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.431132][ T7939] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.439050][ T7939] device bridge_slave_1 entered promiscuous mode [ 60.461641][ T7949] chnl_net:caif_netlink_parms(): no params data found [ 60.480191][ T7946] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.487263][ T7946] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.495036][ T7946] device bridge_slave_0 entered promiscuous mode [ 60.507194][ T7946] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.514366][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.522011][ T7946] device bridge_slave_1 entered promiscuous mode [ 60.547406][ T7941] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.554893][ T7941] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.563274][ T7941] device bridge_slave_0 entered promiscuous mode [ 60.572973][ T7941] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.580115][ T7941] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.588074][ T7941] device bridge_slave_1 entered promiscuous mode [ 60.600243][ T7943] team0: Port device team_slave_0 added [ 60.607114][ T7948] team0: Port device team_slave_0 added [ 60.625674][ T7946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.640032][ T7939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.650160][ T7943] team0: Port device team_slave_1 added [ 60.657340][ T7939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.668156][ T7948] team0: Port device team_slave_1 added [ 60.684782][ T7946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.704426][ T7939] team0: Port device team_slave_0 added [ 60.734778][ T7941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.745879][ T7939] team0: Port device team_slave_1 added [ 60.753269][ T7949] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.760922][ T7949] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.771409][ T7949] device bridge_slave_0 entered promiscuous mode [ 60.780520][ T7946] team0: Port device team_slave_0 added [ 60.790714][ T7949] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.798035][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.805728][ T7949] device bridge_slave_1 entered promiscuous mode [ 60.817201][ T7941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.837122][ T7946] team0: Port device team_slave_1 added [ 60.920224][ T7943] device hsr_slave_0 entered promiscuous mode [ 60.957985][ T7943] device hsr_slave_1 entered promiscuous mode [ 61.050094][ T7948] device hsr_slave_0 entered promiscuous mode [ 61.097954][ T7948] device hsr_slave_1 entered promiscuous mode [ 61.137750][ T7948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.145575][ T7948] Cannot create hsr debugfs directory [ 61.153837][ T7941] team0: Port device team_slave_0 added [ 61.197839][ T7949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.214695][ T7941] team0: Port device team_slave_1 added [ 61.290144][ T7946] device hsr_slave_0 entered promiscuous mode [ 61.337861][ T7946] device hsr_slave_1 entered promiscuous mode [ 61.387673][ T7946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.395256][ T7946] Cannot create hsr debugfs directory [ 61.402022][ T7949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.427156][ T7949] team0: Port device team_slave_0 added [ 61.489333][ T7939] device hsr_slave_0 entered promiscuous mode [ 61.527841][ T7939] device hsr_slave_1 entered promiscuous mode [ 61.580568][ T7939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.588301][ T7939] Cannot create hsr debugfs directory [ 61.620454][ T7949] team0: Port device team_slave_1 added [ 61.670278][ T7941] device hsr_slave_0 entered promiscuous mode [ 61.737828][ T7941] device hsr_slave_1 entered promiscuous mode [ 61.807741][ T7941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.815319][ T7941] Cannot create hsr debugfs directory [ 61.823438][ T7943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.881963][ T7943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.931628][ T7943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.002767][ T7943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.050013][ T7946] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 62.109303][ T7946] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 62.210151][ T7949] device hsr_slave_0 entered promiscuous mode [ 62.248002][ T7949] device hsr_slave_1 entered promiscuous mode [ 62.297653][ T7949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.305237][ T7949] Cannot create hsr debugfs directory [ 62.323587][ T7948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.379373][ T7946] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 62.428883][ T7939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.502186][ T7939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.560745][ T7948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.609540][ T7946] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 62.652858][ T7939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.713330][ T7939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.759817][ T7949] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.801387][ T7949] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.860092][ T7948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.917419][ T7941] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.980837][ T7949] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.049329][ T7949] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.089834][ T7948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.139271][ T7941] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.199948][ T7941] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.249797][ T7941] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.370060][ T7943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.407089][ T7943] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.417045][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.426654][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.460775][ T7946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.479003][ T7941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.502835][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.511594][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.520224][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.528884][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.536728][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.546199][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.554671][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.561749][ T2945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.569565][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.577228][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.592601][ T7941] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.609936][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.617953][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.625601][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.633649][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.654025][ T7949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.671330][ T7946] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.682721][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.691991][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.700457][ T2753] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.707617][ T2753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.716303][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.725573][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.734163][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.742670][ T2753] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.749802][ T2753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.757283][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.766434][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.774889][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.798711][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.806955][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.815815][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.824802][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.833651][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.842193][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.851229][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.860120][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.869491][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.878630][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.886974][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.906830][ T7949] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.911985][ T7943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.926333][ T7943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.947043][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.954884][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.963570][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.974608][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.981695][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.989880][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.998956][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.007248][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.014331][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.021815][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.030715][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.039109][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.046755][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.055595][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.064074][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.073272][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.082395][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.090947][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.098036][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.105473][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.114306][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.123230][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.130388][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.137960][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.148325][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.156079][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.163848][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.172633][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.191609][ T7948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.210088][ T7943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.219175][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.226954][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.236752][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.246175][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.257076][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.265587][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.273292][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.281062][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.289356][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.297441][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.305839][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.319504][ T7939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.336351][ T7948] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.346795][ T7946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.373669][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.382696][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.396885][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.405837][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.414731][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.423151][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.430890][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.438686][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.447125][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.455493][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.463186][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.473320][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.490094][ T7946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.507912][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.515566][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.529775][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.538493][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.547204][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.562717][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.570397][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.570996][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.592698][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.593576][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.606320][ T7949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.647334][ T7939] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.649054][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.649512][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.649849][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.649880][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.650225][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.650802][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.650892][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.650965][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.651363][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.683823][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.684357][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.684803][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.685107][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.685517][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.685824][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.686095][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.698925][ T7941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.720201][ T7949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.723063][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.723496][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.723762][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.724030][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.724332][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.724854][ T2753] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.724878][ T2753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.725031][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.725317][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.725495][ T2753] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.725509][ T2753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.725645][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.725961][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.726314][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.726371][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.726527][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.730418][ T7948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.758872][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.759643][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.760073][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.760713][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.761135][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.761491][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.761904][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.764986][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.765060][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.798321][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.798812][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.802052][ T7948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.806712][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.832237][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.832328][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.845841][ T7939] 8021q: adding VLAN 0 to HW filter on device batadv0 2020/01/26 22:01:31 executed programs: 6 [ 220.947799][ T1115] INFO: task syz-executor.1:8034 blocked for more than 143 seconds. [ 220.956794][ T1115] Not tainted 5.5.0-rc7-syzkaller #0 [ 220.971903][ T1115] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 220.983515][ T1115] syz-executor.1 D28200 8034 7941 0x00004004 [ 221.002267][ T1115] Call Trace: [ 221.005614][ T1115] __schedule+0x8a9/0x1970 [ 221.017441][ T1115] ? firmware_map_remove+0x174/0x174 [ 221.026318][ T1115] schedule+0xc3/0x2b0 [ 221.037249][ T1115] schedule_preempt_disabled+0x13/0x20 [ 221.045803][ T1115] __mutex_lock+0x8b5/0x1410 [ 221.056860][ T1115] ? tty_buffer_lock_exclusive+0x2b/0x30 [ 221.065758][ T1115] ? mutex_lock_io_nested+0x1280/0x1280 [ 221.080525][ T1115] ? lock_acquire+0x194/0x410 [ 221.085466][ T1115] mutex_lock_nested+0x16/0x20 [ 221.095791][ T1115] ? mutex_lock_nested+0x16/0x20 [ 221.104510][ T1115] tty_buffer_lock_exclusive+0x2b/0x30 [ 221.115687][ T1115] paste_selection+0x114/0x3d0 [ 221.124238][ T1115] ? __might_fault+0xf1/0x1b0 [ 221.134904][ T1115] ? vcs_remove_sysfs+0x50/0x50 [ 221.143506][ T1115] ? lock_acquire+0x194/0x410 [ 221.153632][ T1115] ? wake_up_q+0x120/0x120 [ 221.161656][ T1115] tioclinux+0x105/0x380 [ 221.166165][ T1115] vt_ioctl+0x18d9/0x21f0 [ 221.176645][ T1115] ? complete_change_console+0x300/0x300 [ 221.187072][ T1115] ? save_stack+0x5d/0x90 [ 221.200295][ T1115] ? save_stack+0x21/0x90 [ 221.204802][ T1115] ? __kasan_slab_free+0x102/0x150 [ 221.216453][ T1115] ? kasan_slab_free+0xe/0x10 [ 221.224942][ T1115] ? kfree+0x108/0x2c0 [ 221.234395][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 221.245004][ T1115] ? tomoyo_file_ioctl+0x14/0x20 [ 221.254254][ T1115] ? security_file_ioctl+0x4a/0x90 [ 221.261725][ T1115] ? ksys_ioctl+0x39/0x90 [ 221.266457][ T1115] ? __x64_sys_ioctl+0x6e/0xb0 [ 221.277216][ T1115] ? do_syscall_64+0xca/0x5f0 [ 221.284706][ T1115] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 221.294965][ T1115] ? find_held_lock+0x36/0x1d0 [ 221.303082][ T1115] ? debug_check_no_obj_freed+0x207/0x436 [ 221.314990][ T1115] ? lock_downgrade+0x900/0x900 [ 221.322939][ T1115] ? __kasan_check_write+0x14/0x20 [ 221.332460][ T1115] ? do_raw_spin_lock+0x132/0x2e0 [ 221.341581][ T1115] tty_ioctl+0x45b/0x12f0 [ 221.346281][ T1115] ? tty_vhangup+0x20/0x20 [ 221.358382][ T1115] ? tomoyo_path_number_perm+0x1e8/0x4c0 [ 221.364297][ T1115] ? lock_downgrade+0x900/0x900 [ 221.374969][ T1115] ? kfree+0x224/0x2c0 [ 221.381287][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 221.387371][ T1115] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 221.398536][ T1115] ? kfree+0x224/0x2c0 [ 221.403088][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 221.413923][ T1115] ? tomoyo_path_number_perm+0x213/0x4c0 [ 221.422620][ T1115] ? tomoyo_execute_permission+0x460/0x460 [ 221.436906][ T1115] ? find_held_lock+0x36/0x1d0 [ 221.443248][ T1115] ? __fget+0x294/0x410 [ 221.452654][ T1115] do_vfs_ioctl+0x196/0x1190 [ 221.457460][ T1115] ? compat_ioctl_preallocate+0x1d0/0x1d0 [ 221.464551][ T1115] ? __fget+0x2ac/0x410 [ 221.475439][ T1115] ? ksys_dup3+0x2e0/0x2e0 [ 221.481338][ T1115] ? put_timespec64+0xa9/0x100 [ 221.486653][ T1115] ? nsecs_to_jiffies+0x20/0x20 [ 221.496642][ T1115] ? tomoyo_file_ioctl+0x14/0x20 [ 221.504400][ T1115] ksys_ioctl+0x62/0x90 [ 221.517119][ T1115] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 221.524372][ T1115] __x64_sys_ioctl+0x6e/0xb0 [ 221.534852][ T1115] do_syscall_64+0xca/0x5f0 [ 221.541471][ T1115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 221.552755][ T1115] RIP: 0033:0x45a919 [ 221.556787][ T1115] Code: Bad RIP value. [ 221.562858][ T1115] RSP: 002b:00007f8002ef0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.577174][ T1115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 221.588522][ T1115] RDX: 0000000020000040 RSI: 000000000000541c RDI: 0000000000000003 [ 221.597279][ T1115] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 221.615838][ T1115] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8002ef16d4 [ 221.627170][ T1115] R13: 00000000004c5c45 R14: 00000000004dc038 R15: 00000000ffffffff [ 221.642722][ T1115] INFO: task syz-executor.5:8038 blocked for more than 144 seconds. [ 221.654584][ T1115] Not tainted 5.5.0-rc7-syzkaller #0 [ 221.664771][ T1115] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 221.684171][ T1115] syz-executor.5 D28200 8038 7946 0x00004004 [ 221.691393][ T1115] Call Trace: [ 221.694700][ T1115] __schedule+0x8a9/0x1970 [ 221.706517][ T1115] ? firmware_map_remove+0x174/0x174 [ 221.713758][ T1115] schedule+0xc3/0x2b0 [ 221.723699][ T1115] schedule_preempt_disabled+0x13/0x20 [ 221.729478][ T1115] __mutex_lock+0x8b5/0x1410 [ 221.734271][ T1115] ? tty_buffer_lock_exclusive+0x2b/0x30 [ 221.746892][ T1115] ? mutex_lock_io_nested+0x1280/0x1280 [ 221.756362][ T1115] ? lock_acquire+0x194/0x410 [ 221.767091][ T1115] mutex_lock_nested+0x16/0x20 [ 221.772476][ T1115] ? mutex_lock_nested+0x16/0x20 [ 221.783490][ T1115] tty_buffer_lock_exclusive+0x2b/0x30 [ 221.789826][ T1115] paste_selection+0x114/0x3d0 [ 221.794701][ T1115] ? __might_fault+0xf1/0x1b0 [ 221.805429][ T1115] ? vcs_remove_sysfs+0x50/0x50 [ 221.811609][ T1115] ? lock_acquire+0x194/0x410 [ 221.816403][ T1115] ? wake_up_q+0x120/0x120 [ 221.826945][ T1115] tioclinux+0x105/0x380 [ 221.831627][ T1115] vt_ioctl+0x18d9/0x21f0 [ 221.835975][ T1115] ? complete_change_console+0x300/0x300 [ 221.848001][ T1115] ? save_stack+0x5d/0x90 [ 221.852649][ T1115] ? save_stack+0x21/0x90 [ 221.857453][ T1115] ? __kasan_slab_free+0x102/0x150 [ 221.870435][ T1115] ? kasan_slab_free+0xe/0x10 [ 221.875261][ T1115] ? kfree+0x108/0x2c0 [ 221.884001][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 221.892434][ T1115] ? tomoyo_file_ioctl+0x14/0x20 [ 221.897400][ T1115] ? security_file_ioctl+0x4a/0x90 [ 221.906815][ T1115] ? ksys_ioctl+0x39/0x90 [ 221.913143][ T1115] ? __x64_sys_ioctl+0x6e/0xb0 [ 221.922846][ T1115] ? do_syscall_64+0xca/0x5f0 [ 221.930570][ T1115] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 221.936770][ T1115] ? find_held_lock+0x36/0x1d0 [ 221.946057][ T1115] ? debug_check_no_obj_freed+0x207/0x436 [ 221.954428][ T1115] ? lock_downgrade+0x900/0x900 [ 221.965102][ T1115] ? __kasan_check_write+0x14/0x20 [ 221.972510][ T1115] ? do_raw_spin_lock+0x132/0x2e0 [ 221.983209][ T1115] tty_ioctl+0x45b/0x12f0 [ 221.990408][ T1115] ? tty_vhangup+0x20/0x20 [ 221.994880][ T1115] ? tomoyo_path_number_perm+0x1e8/0x4c0 [ 222.006090][ T1115] ? lock_downgrade+0x900/0x900 [ 222.013105][ T1115] ? kfree+0x224/0x2c0 [ 222.021914][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 222.031288][ T1115] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 222.037114][ T1115] ? kfree+0x224/0x2c0 [ 222.045295][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 222.053720][ T1115] ? tomoyo_path_number_perm+0x213/0x4c0 [ 222.063549][ T1115] ? tomoyo_execute_permission+0x460/0x460 [ 222.071839][ T1115] ? find_held_lock+0x36/0x1d0 [ 222.076794][ T1115] ? __fget+0x294/0x410 [ 222.085472][ T1115] do_vfs_ioctl+0x196/0x1190 [ 222.093595][ T1115] ? compat_ioctl_preallocate+0x1d0/0x1d0 [ 222.103821][ T1115] ? __fget+0x2ac/0x410 [ 222.110502][ T1115] ? ksys_dup3+0x2e0/0x2e0 [ 222.115111][ T1115] ? put_timespec64+0xa9/0x100 [ 222.124147][ T1115] ? nsecs_to_jiffies+0x20/0x20 [ 222.131932][ T1115] ? tomoyo_file_ioctl+0x14/0x20 [ 222.137311][ T1115] ksys_ioctl+0x62/0x90 [ 222.146249][ T1115] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 222.154046][ T1115] __x64_sys_ioctl+0x6e/0xb0 [ 222.162646][ T1115] do_syscall_64+0xca/0x5f0 [ 222.167399][ T1115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 222.175389][ T1115] RIP: 0033:0x45a919 [ 222.183662][ T1115] Code: Bad RIP value. [ 222.190475][ T1115] RSP: 002b:00007fc42d2c0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.204348][ T1115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 222.215008][ T1115] RDX: 0000000020000040 RSI: 000000000000541c RDI: 0000000000000003 [ 222.226964][ T1115] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 222.237425][ T1115] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc42d2c16d4 [ 222.249971][ T1115] R13: 00000000004c5c45 R14: 00000000004dc038 R15: 00000000ffffffff [ 222.262864][ T1115] INFO: task syz-executor.3:8042 blocked for more than 144 seconds. [ 222.273972][ T1115] Not tainted 5.5.0-rc7-syzkaller #0 [ 222.283076][ T1115] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 222.295541][ T1115] syz-executor.3 D28200 8042 7948 0x00004004 [ 222.305246][ T1115] Call Trace: [ 222.313613][ T1115] __schedule+0x8a9/0x1970 [ 222.322164][ T1115] ? firmware_map_remove+0x174/0x174 [ 222.330686][ T1115] schedule+0xc3/0x2b0 [ 222.334904][ T1115] schedule_preempt_disabled+0x13/0x20 [ 222.343907][ T1115] __mutex_lock+0x8b5/0x1410 [ 222.351999][ T1115] ? tty_buffer_lock_exclusive+0x2b/0x30 [ 222.361943][ T1115] ? mutex_lock_io_nested+0x1280/0x1280 [ 222.371282][ T1115] ? lock_acquire+0x194/0x410 [ 222.376274][ T1115] mutex_lock_nested+0x16/0x20 [ 222.384373][ T1115] ? mutex_lock_nested+0x16/0x20 [ 222.394337][ T1115] tty_buffer_lock_exclusive+0x2b/0x30 [ 222.403409][ T1115] paste_selection+0x114/0x3d0 [ 222.411429][ T1115] ? __might_fault+0xf1/0x1b0 [ 222.416394][ T1115] ? vcs_remove_sysfs+0x50/0x50 [ 222.425459][ T1115] ? lock_acquire+0x194/0x410 [ 222.433321][ T1115] ? wake_up_q+0x120/0x120 [ 222.440908][ T1115] tioclinux+0x105/0x380 [ 222.445190][ T1115] vt_ioctl+0x18d9/0x21f0 [ 222.452804][ T1115] ? complete_change_console+0x300/0x300 [ 222.461371][ T1115] ? save_stack+0x5d/0x90 [ 222.465735][ T1115] ? save_stack+0x21/0x90 [ 222.474118][ T1115] ? __kasan_slab_free+0x102/0x150 [ 222.483346][ T1115] ? kasan_slab_free+0xe/0x10 [ 222.491275][ T1115] ? kfree+0x108/0x2c0 [ 222.495362][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 222.504549][ T1115] ? tomoyo_file_ioctl+0x14/0x20 [ 222.512761][ T1115] ? security_file_ioctl+0x4a/0x90 [ 222.521647][ T1115] ? ksys_ioctl+0x39/0x90 [ 222.526729][ T1115] ? __x64_sys_ioctl+0x6e/0xb0 [ 222.535679][ T1115] ? do_syscall_64+0xca/0x5f0 [ 222.543591][ T1115] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 222.553964][ T1115] ? find_held_lock+0x36/0x1d0 [ 222.561948][ T1115] ? debug_check_no_obj_freed+0x207/0x436 [ 222.571332][ T1115] ? lock_downgrade+0x900/0x900 [ 222.576310][ T1115] ? __kasan_check_write+0x14/0x20 [ 222.584664][ T1115] ? do_raw_spin_lock+0x132/0x2e0 [ 222.593247][ T1115] tty_ioctl+0x45b/0x12f0 [ 222.600914][ T1115] ? tty_vhangup+0x20/0x20 [ 222.605374][ T1115] ? tomoyo_path_number_perm+0x1e8/0x4c0 [ 222.614061][ T1115] ? lock_downgrade+0x900/0x900 [ 222.622248][ T1115] ? kfree+0x224/0x2c0 [ 222.626617][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 222.637236][ T1115] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 222.646719][ T1115] ? kfree+0x224/0x2c0 [ 222.655335][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 222.664855][ T1115] ? tomoyo_path_number_perm+0x213/0x4c0 [ 222.674006][ T1115] ? tomoyo_execute_permission+0x460/0x460 [ 222.683132][ T1115] ? find_held_lock+0x36/0x1d0 [ 222.691272][ T1115] ? __fget+0x294/0x410 [ 222.695685][ T1115] do_vfs_ioctl+0x196/0x1190 [ 222.704024][ T1115] ? compat_ioctl_preallocate+0x1d0/0x1d0 [ 222.713919][ T1115] ? __fget+0x2ac/0x410 [ 222.721539][ T1115] ? ksys_dup3+0x2e0/0x2e0 [ 222.725985][ T1115] ? put_timespec64+0xa9/0x100 [ 222.733857][ T1115] ? nsecs_to_jiffies+0x20/0x20 [ 222.741776][ T1115] ? tomoyo_file_ioctl+0x14/0x20 [ 222.746964][ T1115] ksys_ioctl+0x62/0x90 [ 222.755161][ T1115] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 222.764090][ T1115] __x64_sys_ioctl+0x6e/0xb0 [ 222.771995][ T1115] do_syscall_64+0xca/0x5f0 [ 222.776625][ T1115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 222.786481][ T1115] RIP: 0033:0x45a919 [ 222.793557][ T1115] Code: Bad RIP value. [ 222.800576][ T1115] RSP: 002b:00007f36815ddc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.813259][ T1115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 222.824466][ T1115] RDX: 0000000020000040 RSI: 000000000000541c RDI: 0000000000000003 [ 222.835842][ T1115] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 222.847179][ T1115] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f36815de6d4 [ 222.862559][ T1115] R13: 00000000004c5c45 R14: 00000000004dc038 R15: 00000000ffffffff [ 222.872868][ T1115] INFO: task syz-executor.2:8045 blocked for more than 145 seconds. [ 222.885048][ T1115] Not tainted 5.5.0-rc7-syzkaller #0 [ 222.893241][ T1115] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 222.906183][ T1115] syz-executor.2 D28040 8045 7939 0x00004004 [ 222.916069][ T1115] Call Trace: [ 222.924156][ T1115] __schedule+0x8a9/0x1970 [ 222.930659][ T1115] ? firmware_map_remove+0x174/0x174 [ 222.936092][ T1115] schedule+0xc3/0x2b0 [ 222.944307][ T1115] schedule_preempt_disabled+0x13/0x20 [ 222.952571][ T1115] __mutex_lock+0x8b5/0x1410 [ 222.957400][ T1115] ? tty_buffer_lock_exclusive+0x2b/0x30 [ 222.967296][ T1115] ? mutex_lock_io_nested+0x1280/0x1280 [ 222.976015][ T1115] ? lock_acquire+0x194/0x410 [ 222.985450][ T1115] mutex_lock_nested+0x16/0x20 [ 222.992868][ T1115] ? mutex_lock_nested+0x16/0x20 [ 223.002337][ T1115] tty_buffer_lock_exclusive+0x2b/0x30 [ 223.009922][ T1115] paste_selection+0x114/0x3d0 [ 223.014992][ T1115] ? __might_fault+0xf1/0x1b0 [ 223.023949][ T1115] ? vcs_remove_sysfs+0x50/0x50 [ 223.031755][ T1115] ? lock_acquire+0x194/0x410 [ 223.036461][ T1115] ? wake_up_q+0x120/0x120 [ 223.045894][ T1115] tioclinux+0x105/0x380 [ 223.052628][ T1115] vt_ioctl+0x18d9/0x21f0 [ 223.057078][ T1115] ? complete_change_console+0x300/0x300 [ 223.066581][ T1115] ? save_stack+0x5d/0x90 [ 223.073536][ T1115] ? save_stack+0x21/0x90 [ 223.083319][ T1115] ? __kasan_slab_free+0x102/0x150 [ 223.090655][ T1115] ? kasan_slab_free+0xe/0x10 [ 223.095347][ T1115] ? kfree+0x108/0x2c0 [ 223.103732][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 223.112163][ T1115] ? tomoyo_file_ioctl+0x14/0x20 [ 223.117122][ T1115] ? security_file_ioctl+0x4a/0x90 [ 223.126543][ T1115] ? ksys_ioctl+0x39/0x90 [ 223.133042][ T1115] ? __x64_sys_ioctl+0x6e/0xb0 [ 223.142961][ T1115] ? do_syscall_64+0xca/0x5f0 [ 223.150151][ T1115] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 223.156730][ T1115] ? find_held_lock+0x36/0x1d0 [ 223.165815][ T1115] ? debug_check_no_obj_freed+0x207/0x436 [ 223.174673][ T1115] ? lock_downgrade+0x900/0x900 [ 223.183941][ T1115] ? __kasan_check_write+0x14/0x20 [ 223.192806][ T1115] ? do_raw_spin_lock+0x132/0x2e0 [ 223.201959][ T1115] tty_ioctl+0x45b/0x12f0 [ 223.206354][ T1115] ? tty_vhangup+0x20/0x20 [ 223.212999][ T1115] ? tomoyo_path_number_perm+0x1e8/0x4c0 [ 223.223067][ T1115] ? lock_downgrade+0x900/0x900 [ 223.230401][ T1115] ? kfree+0x224/0x2c0 [ 223.234535][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 223.244489][ T1115] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 223.252863][ T1115] ? kfree+0x224/0x2c0 [ 223.256973][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 223.267482][ T1115] ? tomoyo_path_number_perm+0x213/0x4c0 [ 223.275554][ T1115] ? tomoyo_execute_permission+0x460/0x460 [ 223.286761][ T1115] ? find_held_lock+0x36/0x1d0 [ 223.293845][ T1115] ? __fget+0x294/0x410 [ 223.304070][ T1115] do_vfs_ioctl+0x196/0x1190 [ 223.310937][ T1115] ? compat_ioctl_preallocate+0x1d0/0x1d0 [ 223.317191][ T1115] ? __fget+0x2ac/0x410 [ 223.325854][ T1115] ? ksys_dup3+0x2e0/0x2e0 [ 223.332796][ T1115] ? put_timespec64+0xa9/0x100 [ 223.342299][ T1115] ? nsecs_to_jiffies+0x20/0x20 [ 223.347210][ T1115] ? tomoyo_file_ioctl+0x14/0x20 [ 223.355678][ T1115] ksys_ioctl+0x62/0x90 [ 223.364827][ T1115] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 223.372239][ T1115] __x64_sys_ioctl+0x6e/0xb0 [ 223.377013][ T1115] do_syscall_64+0xca/0x5f0 [ 223.385849][ T1115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 223.394708][ T1115] RIP: 0033:0x45a919 [ 223.402797][ T1115] Code: Bad RIP value. [ 223.406901][ T1115] RSP: 002b:00007fac10422c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.418963][ T1115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 223.427128][ T1115] RDX: 0000000020000040 RSI: 000000000000541c RDI: 0000000000000003 [ 223.442214][ T1115] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 223.453745][ T1115] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fac104236d4 [ 223.465235][ T1115] R13: 00000000004c5c45 R14: 00000000004dc038 R15: 00000000ffffffff [ 223.481011][ T1115] INFO: task syz-executor.2:8046 blocked for more than 145 seconds. [ 223.492417][ T1115] Not tainted 5.5.0-rc7-syzkaller #0 [ 223.501636][ T1115] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 223.514852][ T1115] syz-executor.2 D28200 8046 7939 0x00004004 [ 223.524565][ T1115] Call Trace: [ 223.532206][ T1115] __schedule+0x8a9/0x1970 [ 223.537098][ T1115] ? firmware_map_remove+0x174/0x174 [ 223.545624][ T1115] schedule+0xc3/0x2b0 [ 223.552743][ T1115] schedule_preempt_disabled+0x13/0x20 [ 223.561300][ T1115] __mutex_lock+0x8b5/0x1410 [ 223.565914][ T1115] ? tty_buffer_lock_exclusive+0x2b/0x30 [ 223.575636][ T1115] ? mutex_lock_io_nested+0x1280/0x1280 [ 223.584377][ T1115] ? lock_acquire+0x194/0x410 [ 223.593937][ T1115] mutex_lock_nested+0x16/0x20 [ 223.602877][ T1115] ? mutex_lock_nested+0x16/0x20 [ 223.611635][ T1115] tty_buffer_lock_exclusive+0x2b/0x30 [ 223.617115][ T1115] paste_selection+0x114/0x3d0 [ 223.625442][ T1115] ? __might_fault+0xf1/0x1b0 [ 223.633336][ T1115] ? vcs_remove_sysfs+0x50/0x50 [ 223.642323][ T1115] ? lock_acquire+0x194/0x410 [ 223.647205][ T1115] ? wake_up_q+0x120/0x120 [ 223.655036][ T1115] tioclinux+0x105/0x380 [ 223.662515][ T1115] vt_ioctl+0x18d9/0x21f0 [ 223.666864][ T1115] ? complete_change_console+0x300/0x300 [ 223.676746][ T1115] ? save_stack+0x5d/0x90 [ 223.684096][ T1115] ? save_stack+0x21/0x90 [ 223.691435][ T1115] ? __kasan_slab_free+0x102/0x150 [ 223.696654][ T1115] ? kasan_slab_free+0xe/0x10 [ 223.707040][ T1115] ? kfree+0x108/0x2c0 [ 223.714767][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 223.723767][ T1115] ? tomoyo_file_ioctl+0x14/0x20 [ 223.731834][ T1115] ? security_file_ioctl+0x4a/0x90 [ 223.740851][ T1115] ? ksys_ioctl+0x39/0x90 [ 223.745340][ T1115] ? __x64_sys_ioctl+0x6e/0xb0 [ 223.755096][ T1115] ? do_syscall_64+0xca/0x5f0 [ 223.762825][ T1115] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 223.772201][ T1115] ? find_held_lock+0x36/0x1d0 [ 223.777363][ T1115] ? debug_check_no_obj_freed+0x207/0x436 [ 223.786123][ T1115] ? lock_downgrade+0x900/0x900 [ 223.794433][ T1115] ? __kasan_check_write+0x14/0x20 [ 223.802953][ T1115] ? do_raw_spin_lock+0x132/0x2e0 [ 223.812051][ T1115] tty_ioctl+0x45b/0x12f0 [ 223.816618][ T1115] ? tty_vhangup+0x20/0x20 [ 223.824275][ T1115] ? tomoyo_path_number_perm+0x1e8/0x4c0 [ 223.834207][ T1115] ? lock_downgrade+0x900/0x900 [ 223.842350][ T1115] ? kfree+0x224/0x2c0 [ 223.846972][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 223.855882][ T1115] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 223.865363][ T1115] ? kfree+0x224/0x2c0 [ 223.872626][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 223.881803][ T1115] ? tomoyo_path_number_perm+0x213/0x4c0 [ 223.890659][ T1115] ? tomoyo_execute_permission+0x460/0x460 [ 223.896506][ T1115] ? find_held_lock+0x36/0x1d0 [ 223.904907][ T1115] ? __fget+0x294/0x410 [ 223.912525][ T1115] do_vfs_ioctl+0x196/0x1190 [ 223.917334][ T1115] ? compat_ioctl_preallocate+0x1d0/0x1d0 [ 223.927420][ T1115] ? __fget+0x2ac/0x410 [ 223.935568][ T1115] ? ksys_dup3+0x2e0/0x2e0 [ 223.943312][ T1115] ? put_timespec64+0xa9/0x100 [ 223.951316][ T1115] ? nsecs_to_jiffies+0x20/0x20 [ 223.956418][ T1115] ? tomoyo_file_ioctl+0x14/0x20 [ 223.965250][ T1115] ksys_ioctl+0x62/0x90 [ 223.973798][ T1115] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 223.982190][ T1115] __x64_sys_ioctl+0x6e/0xb0 [ 223.986910][ T1115] do_syscall_64+0xca/0x5f0 [ 223.994870][ T1115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 224.003909][ T1115] RIP: 0033:0x45a919 [ 224.011276][ T1115] Code: Bad RIP value. [ 224.015461][ T1115] RSP: 002b:00007fac10401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.027385][ T1115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 224.040028][ T1115] RDX: 0000000020000040 RSI: 000000000000541c RDI: 0000000000000003 [ 224.052500][ T1115] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 224.062847][ T1115] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fac104026d4 [ 224.075687][ T1115] R13: 00000000004c5c45 R14: 00000000004dc038 R15: 00000000ffffffff [ 224.086923][ T1115] INFO: task syz-executor.4:8050 blocked for more than 146 seconds. [ 224.099853][ T1115] Not tainted 5.5.0-rc7-syzkaller #0 [ 224.105890][ T1115] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 224.120768][ T1115] syz-executor.4 D28040 8050 7949 0x00004004 [ 224.127143][ T1115] Call Trace: [ 224.132631][ T1115] __schedule+0x8a9/0x1970 [ 224.141165][ T1115] ? firmware_map_remove+0x174/0x174 [ 224.146750][ T1115] schedule+0xc3/0x2b0 [ 224.158255][ T1115] schedule_preempt_disabled+0x13/0x20 [ 224.163895][ T1115] __mutex_lock+0x8b5/0x1410 [ 224.169111][ T1115] ? tty_buffer_lock_exclusive+0x2b/0x30 [ 224.174918][ T1115] ? mutex_lock_io_nested+0x1280/0x1280 [ 224.180901][ T1115] ? lock_acquire+0x194/0x410 [ 224.185706][ T1115] mutex_lock_nested+0x16/0x20 [ 224.191812][ T1115] ? mutex_lock_nested+0x16/0x20 [ 224.196774][ T1115] tty_buffer_lock_exclusive+0x2b/0x30 [ 224.202722][ T1115] paste_selection+0x114/0x3d0 [ 224.208032][ T1115] ? __might_fault+0xf1/0x1b0 [ 224.212717][ T1115] ? vcs_remove_sysfs+0x50/0x50 [ 224.218339][ T1115] ? lock_acquire+0x194/0x410 [ 224.223196][ T1115] ? wake_up_q+0x120/0x120 [ 224.229113][ T1115] tioclinux+0x105/0x380 [ 224.233718][ T1115] vt_ioctl+0x18d9/0x21f0 [ 224.238482][ T1115] ? complete_change_console+0x300/0x300 [ 224.244302][ T1115] ? save_stack+0x5d/0x90 [ 224.249215][ T1115] ? save_stack+0x21/0x90 [ 224.253667][ T1115] ? __kasan_slab_free+0x102/0x150 [ 224.259283][ T1115] ? kasan_slab_free+0xe/0x10 [ 224.264170][ T1115] ? kfree+0x108/0x2c0 [ 224.269381][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 224.275042][ T1115] ? tomoyo_file_ioctl+0x14/0x20 [ 224.281168][ T1115] ? security_file_ioctl+0x4a/0x90 [ 224.286465][ T1115] ? ksys_ioctl+0x39/0x90 [ 224.291388][ T1115] ? __x64_sys_ioctl+0x6e/0xb0 [ 224.296658][ T1115] ? do_syscall_64+0xca/0x5f0 [ 224.302682][ T1115] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 224.309223][ T1115] ? find_held_lock+0x36/0x1d0 [ 224.314103][ T1115] ? debug_check_no_obj_freed+0x207/0x436 [ 224.320197][ T1115] ? lock_downgrade+0x900/0x900 [ 224.325059][ T1115] ? __kasan_check_write+0x14/0x20 [ 224.330466][ T1115] ? do_raw_spin_lock+0x132/0x2e0 [ 224.335777][ T1115] tty_ioctl+0x45b/0x12f0 [ 224.340783][ T1115] ? tty_vhangup+0x20/0x20 [ 224.345584][ T1115] ? tomoyo_path_number_perm+0x1e8/0x4c0 [ 224.351799][ T1115] ? lock_downgrade+0x900/0x900 [ 224.356654][ T1115] ? kfree+0x224/0x2c0 [ 224.362244][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 224.368198][ T1115] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 224.373720][ T1115] ? kfree+0x224/0x2c0 [ 224.379096][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 224.384869][ T1115] ? tomoyo_path_number_perm+0x213/0x4c0 [ 224.391146][ T1115] ? tomoyo_execute_permission+0x460/0x460 [ 224.397850][ T1115] ? find_held_lock+0x36/0x1d0 [ 224.402822][ T1115] ? __fget+0x294/0x410 [ 224.407327][ T1115] do_vfs_ioctl+0x196/0x1190 [ 224.413605][ T1115] ? compat_ioctl_preallocate+0x1d0/0x1d0 [ 224.420095][ T1115] ? __fget+0x2ac/0x410 [ 224.424489][ T1115] ? ksys_dup3+0x2e0/0x2e0 [ 224.429262][ T1115] ? put_timespec64+0xa9/0x100 [ 224.434208][ T1115] ? nsecs_to_jiffies+0x20/0x20 [ 224.439461][ T1115] ? tomoyo_file_ioctl+0x14/0x20 [ 224.444681][ T1115] ksys_ioctl+0x62/0x90 [ 224.449585][ T1115] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 224.455057][ T1115] __x64_sys_ioctl+0x6e/0xb0 [ 224.460125][ T1115] do_syscall_64+0xca/0x5f0 [ 224.464649][ T1115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 224.471289][ T1115] RIP: 0033:0x45a919 [ 224.475209][ T1115] Code: Bad RIP value. [ 224.479898][ T1115] RSP: 002b:00007f119b4a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.490287][ T1115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 224.499138][ T1115] RDX: 0000000020000040 RSI: 000000000000541c RDI: 0000000000000003 [ 224.508274][ T1115] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 224.516437][ T1115] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f119b4aa6d4 [ 224.526080][ T1115] R13: 00000000004c5c45 R14: 00000000004dc038 R15: 00000000ffffffff [ 224.535221][ T1115] INFO: task syz-executor.4:8051 blocked for more than 146 seconds. [ 224.544130][ T1115] Not tainted 5.5.0-rc7-syzkaller #0 [ 224.550654][ T1115] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 224.559871][ T1115] syz-executor.4 D28200 8051 7949 0x00000004 [ 224.566216][ T1115] Call Trace: [ 224.570190][ T1115] __schedule+0x8a9/0x1970 [ 224.574794][ T1115] ? firmware_map_remove+0x174/0x174 [ 224.580378][ T1115] schedule+0xc3/0x2b0 [ 224.584504][ T1115] schedule_preempt_disabled+0x13/0x20 [ 224.590569][ T1115] __mutex_lock+0x8b5/0x1410 [ 224.595794][ T1115] ? tty_buffer_lock_exclusive+0x2b/0x30 [ 224.602576][ T1115] ? mutex_lock_io_nested+0x1280/0x1280 [ 224.608497][ T1115] ? lock_acquire+0x194/0x410 [ 224.613480][ T1115] mutex_lock_nested+0x16/0x20 [ 224.620165][ T1115] ? mutex_lock_nested+0x16/0x20 [ 224.625222][ T1115] tty_buffer_lock_exclusive+0x2b/0x30 [ 224.632961][ T1115] paste_selection+0x114/0x3d0 [ 224.638014][ T1115] ? __might_fault+0xf1/0x1b0 [ 224.642877][ T1115] ? vcs_remove_sysfs+0x50/0x50 [ 224.648062][ T1115] ? lock_acquire+0x194/0x410 [ 224.652756][ T1115] ? wake_up_q+0x120/0x120 [ 224.657298][ T1115] tioclinux+0x105/0x380 [ 224.662122][ T1115] vt_ioctl+0x18d9/0x21f0 [ 224.666665][ T1115] ? complete_change_console+0x300/0x300 [ 224.672907][ T1115] ? save_stack+0x5d/0x90 [ 224.677249][ T1115] ? save_stack+0x21/0x90 [ 224.682924][ T1115] ? __kasan_slab_free+0x102/0x150 [ 224.688734][ T1115] ? kasan_slab_free+0xe/0x10 [ 224.694433][ T1115] ? kfree+0x108/0x2c0 [ 224.698941][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 224.704738][ T1115] ? tomoyo_file_ioctl+0x14/0x20 [ 224.710908][ T1115] ? security_file_ioctl+0x4a/0x90 [ 224.716178][ T1115] ? ksys_ioctl+0x39/0x90 [ 224.720919][ T1115] ? __x64_sys_ioctl+0x6e/0xb0 [ 224.725967][ T1115] ? do_syscall_64+0xca/0x5f0 [ 224.731093][ T1115] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 224.737176][ T1115] ? find_held_lock+0x36/0x1d0 [ 224.744043][ T1115] ? debug_check_no_obj_freed+0x207/0x436 [ 224.751323][ T1115] ? lock_downgrade+0x900/0x900 [ 224.756270][ T1115] ? __kasan_check_write+0x14/0x20 [ 224.761926][ T1115] ? do_raw_spin_lock+0x132/0x2e0 [ 224.767220][ T1115] tty_ioctl+0x45b/0x12f0 [ 224.772182][ T1115] ? tty_vhangup+0x20/0x20 [ 224.776617][ T1115] ? tomoyo_path_number_perm+0x1e8/0x4c0 [ 224.783524][ T1115] ? lock_downgrade+0x900/0x900 [ 224.789189][ T1115] ? kfree+0x224/0x2c0 [ 224.793479][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 224.799835][ T1115] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 224.806243][ T1115] ? kfree+0x224/0x2c0 [ 224.810788][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 224.817092][ T1115] ? tomoyo_path_number_perm+0x213/0x4c0 [ 224.824016][ T1115] ? tomoyo_execute_permission+0x460/0x460 [ 224.830518][ T1115] ? find_held_lock+0x36/0x1d0 [ 224.835478][ T1115] ? __fget+0x294/0x410 [ 224.840036][ T1115] do_vfs_ioctl+0x196/0x1190 [ 224.845642][ T1115] ? compat_ioctl_preallocate+0x1d0/0x1d0 [ 224.852922][ T1115] ? __fget+0x2ac/0x410 [ 224.858733][ T1115] ? ksys_dup3+0x2e0/0x2e0 [ 224.863169][ T1115] ? put_timespec64+0xa9/0x100 [ 224.868712][ T1115] ? nsecs_to_jiffies+0x20/0x20 [ 224.873668][ T1115] ? tomoyo_file_ioctl+0x14/0x20 [ 224.880770][ T1115] ksys_ioctl+0x62/0x90 [ 224.885024][ T1115] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 224.890634][ T1115] __x64_sys_ioctl+0x6e/0xb0 [ 224.896950][ T1115] do_syscall_64+0xca/0x5f0 [ 224.902075][ T1115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 224.908750][ T1115] RIP: 0033:0x45a919 [ 224.912871][ T1115] Code: Bad RIP value. [ 224.917218][ T1115] RSP: 002b:00007f119b488c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.926437][ T1115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 224.936487][ T1115] RDX: 0000000020000040 RSI: 000000000000541c RDI: 0000000000000003 [ 224.945258][ T1115] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 224.954148][ T1115] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f119b4896d4 [ 224.963868][ T1115] R13: 00000000004c5c45 R14: 00000000004dc038 R15: 00000000ffffffff [ 224.973613][ T1115] INFO: task syz-executor.0:8054 blocked for more than 147 seconds. [ 224.982387][ T1115] Not tainted 5.5.0-rc7-syzkaller #0 [ 224.988513][ T1115] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 224.998023][ T1115] syz-executor.0 D27976 8054 7943 0x00004004 [ 225.005090][ T1115] Call Trace: [ 225.009940][ T1115] __schedule+0x8a9/0x1970 [ 225.014375][ T1115] ? firmware_map_remove+0x174/0x174 [ 225.020421][ T1115] schedule+0xc3/0x2b0 [ 225.024510][ T1115] schedule_preempt_disabled+0x13/0x20 [ 225.031042][ T1115] __mutex_lock+0x8b5/0x1410 [ 225.035651][ T1115] ? tty_buffer_lock_exclusive+0x2b/0x30 [ 225.042774][ T1115] ? mutex_lock_io_nested+0x1280/0x1280 [ 225.048670][ T1115] ? lock_acquire+0x194/0x410 [ 225.053621][ T1115] mutex_lock_nested+0x16/0x20 [ 225.059071][ T1115] ? mutex_lock_nested+0x16/0x20 [ 225.064455][ T1115] tty_buffer_lock_exclusive+0x2b/0x30 [ 225.071748][ T1115] paste_selection+0x114/0x3d0 [ 225.076890][ T1115] ? __might_fault+0xf1/0x1b0 [ 225.081996][ T1115] ? vcs_remove_sysfs+0x50/0x50 [ 225.087138][ T1115] ? lock_acquire+0x194/0x410 [ 225.092402][ T1115] ? wake_up_q+0x120/0x120 [ 225.096924][ T1115] tioclinux+0x105/0x380 [ 225.101597][ T1115] vt_ioctl+0x18d9/0x21f0 [ 225.106110][ T1115] ? complete_change_console+0x300/0x300 [ 225.112174][ T1115] ? save_stack+0x5d/0x90 [ 225.117118][ T1115] ? save_stack+0x21/0x90 [ 225.122581][ T1115] ? __kasan_slab_free+0x102/0x150 [ 225.128051][ T1115] ? kasan_slab_free+0xe/0x10 [ 225.133022][ T1115] ? kfree+0x108/0x2c0 [ 225.137321][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 225.144309][ T1115] ? tomoyo_file_ioctl+0x14/0x20 [ 225.150316][ T1115] ? security_file_ioctl+0x4a/0x90 [ 225.155705][ T1115] ? ksys_ioctl+0x39/0x90 [ 225.160464][ T1115] ? __x64_sys_ioctl+0x6e/0xb0 [ 225.165240][ T1115] ? do_syscall_64+0xca/0x5f0 [ 225.170512][ T1115] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 225.176915][ T1115] ? find_held_lock+0x36/0x1d0 [ 225.183185][ T1115] ? debug_check_no_obj_freed+0x207/0x436 [ 225.190056][ T1115] ? lock_downgrade+0x900/0x900 [ 225.195069][ T1115] ? __kasan_check_write+0x14/0x20 [ 225.200997][ T1115] ? do_raw_spin_lock+0x132/0x2e0 [ 225.206163][ T1115] tty_ioctl+0x45b/0x12f0 [ 225.211248][ T1115] ? tty_vhangup+0x20/0x20 [ 225.215775][ T1115] ? tomoyo_path_number_perm+0x1e8/0x4c0 [ 225.222209][ T1115] ? lock_downgrade+0x900/0x900 [ 225.227075][ T1115] ? kfree+0x224/0x2c0 [ 225.231653][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 225.237837][ T1115] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 225.243137][ T1115] ? kfree+0x224/0x2c0 [ 225.247262][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 225.253265][ T1115] ? tomoyo_path_number_perm+0x213/0x4c0 [ 225.259975][ T1115] ? tomoyo_execute_permission+0x460/0x460 [ 225.266058][ T1115] ? find_held_lock+0x36/0x1d0 [ 225.272524][ T1115] ? __fget+0x294/0x410 [ 225.276716][ T1115] do_vfs_ioctl+0x196/0x1190 [ 225.281746][ T1115] ? compat_ioctl_preallocate+0x1d0/0x1d0 [ 225.289077][ T1115] ? __fget+0x2ac/0x410 [ 225.293437][ T1115] ? ksys_dup3+0x2e0/0x2e0 [ 225.298300][ T1115] ? put_timespec64+0xa9/0x100 [ 225.303101][ T1115] ? nsecs_to_jiffies+0x20/0x20 [ 225.308459][ T1115] ? tomoyo_file_ioctl+0x14/0x20 [ 225.313917][ T1115] ksys_ioctl+0x62/0x90 [ 225.318446][ T1115] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 225.323976][ T1115] __x64_sys_ioctl+0x6e/0xb0 [ 225.329187][ T1115] do_syscall_64+0xca/0x5f0 [ 225.333940][ T1115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 225.340403][ T1115] RIP: 0033:0x45a919 [ 225.344741][ T1115] Code: Bad RIP value. [ 225.349144][ T1115] RSP: 002b:00007fddf5b7dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.358264][ T1115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 225.366412][ T1115] RDX: 0000000020000040 RSI: 000000000000541c RDI: 0000000000000003 [ 225.376351][ T1115] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 225.385208][ T1115] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fddf5b7e6d4 [ 225.393786][ T1115] R13: 00000000004c5c45 R14: 00000000004dc038 R15: 00000000ffffffff [ 225.404616][ T1115] INFO: task syz-executor.0:8056 blocked for more than 147 seconds. [ 225.413317][ T1115] Not tainted 5.5.0-rc7-syzkaller #0 [ 225.419455][ T1115] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 225.428646][ T1115] syz-executor.0 D28696 8056 7943 0x00004004 [ 225.435186][ T1115] Call Trace: [ 225.438807][ T1115] __schedule+0x8a9/0x1970 [ 225.443251][ T1115] ? firmware_map_remove+0x174/0x174 [ 225.448993][ T1115] schedule+0xc3/0x2b0 [ 225.453160][ T1115] schedule_preempt_disabled+0x13/0x20 [ 225.459108][ T1115] __mutex_lock+0x8b5/0x1410 [ 225.463844][ T1115] ? tty_buffer_lock_exclusive+0x2b/0x30 [ 225.469862][ T1115] ? mutex_lock_io_nested+0x1280/0x1280 [ 225.475436][ T1115] ? lock_acquire+0x194/0x410 [ 225.481574][ T1115] mutex_lock_nested+0x16/0x20 [ 225.486483][ T1115] ? mutex_lock_nested+0x16/0x20 [ 225.491957][ T1115] tty_buffer_lock_exclusive+0x2b/0x30 [ 225.497444][ T1115] paste_selection+0x114/0x3d0 [ 225.502702][ T1115] ? __might_fault+0xf1/0x1b0 [ 225.507415][ T1115] ? vcs_remove_sysfs+0x50/0x50 [ 225.513669][ T1115] ? lock_acquire+0x194/0x410 [ 225.519418][ T1115] ? wake_up_q+0x120/0x120 [ 225.523859][ T1115] tioclinux+0x105/0x380 [ 225.529593][ T1115] vt_ioctl+0x18d9/0x21f0 [ 225.534159][ T1115] ? complete_change_console+0x300/0x300 [ 225.540132][ T1115] ? save_stack+0x5d/0x90 [ 225.544658][ T1115] ? save_stack+0x21/0x90 [ 225.549389][ T1115] ? __kasan_slab_free+0x102/0x150 [ 225.555040][ T1115] ? kasan_slab_free+0xe/0x10 [ 225.560508][ T1115] ? kfree+0x108/0x2c0 [ 225.564599][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 225.570909][ T1115] ? tomoyo_file_ioctl+0x14/0x20 [ 225.575893][ T1115] ? security_file_ioctl+0x4a/0x90 [ 225.581554][ T1115] ? ksys_ioctl+0x39/0x90 [ 225.585892][ T1115] ? __x64_sys_ioctl+0x6e/0xb0 [ 225.591715][ T1115] ? do_syscall_64+0xca/0x5f0 [ 225.597030][ T1115] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 225.603478][ T1115] ? find_held_lock+0x36/0x1d0 [ 225.608729][ T1115] ? debug_check_no_obj_freed+0x207/0x436 [ 225.614637][ T1115] ? lock_downgrade+0x900/0x900 [ 225.621101][ T1115] ? __kasan_check_write+0x14/0x20 [ 225.626392][ T1115] ? do_raw_spin_lock+0x132/0x2e0 [ 225.631964][ T1115] tty_ioctl+0x45b/0x12f0 [ 225.636322][ T1115] ? tty_vhangup+0x20/0x20 [ 225.641185][ T1115] ? tomoyo_path_number_perm+0x1e8/0x4c0 [ 225.647115][ T1115] ? lock_downgrade+0x900/0x900 [ 225.652491][ T1115] ? kfree+0x224/0x2c0 [ 225.656859][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 225.663809][ T1115] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 225.669868][ T1115] ? kfree+0x224/0x2c0 [ 225.673964][ T1115] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 225.680078][ T1115] ? tomoyo_path_number_perm+0x213/0x4c0 [ 225.685862][ T1115] ? tomoyo_execute_permission+0x460/0x460 [ 225.692296][ T1115] ? find_held_lock+0x36/0x1d0 [ 225.697162][ T1115] ? __fget+0x294/0x410 [ 225.702669][ T1115] do_vfs_ioctl+0x196/0x1190 [ 225.707480][ T1115] ? compat_ioctl_preallocate+0x1d0/0x1d0 [ 225.713817][ T1115] ? __fget+0x2ac/0x410 [ 225.718246][ T1115] ? ksys_dup3+0x2e0/0x2e0 [ 225.722789][ T1115] ? put_timespec64+0xa9/0x100 [ 225.728921][ T1115] ? nsecs_to_jiffies+0x20/0x20 [ 225.734030][ T1115] ? tomoyo_file_ioctl+0x14/0x20 [ 225.739504][ T1115] ksys_ioctl+0x62/0x90 [ 225.743823][ T1115] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 225.749637][ T1115] __x64_sys_ioctl+0x6e/0xb0 [ 225.754672][ T1115] do_syscall_64+0xca/0x5f0 [ 225.759767][ T1115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 225.765813][ T1115] RIP: 0033:0x45a919 [ 225.770255][ T1115] Code: Bad RIP value. [ 225.774341][ T1115] RSP: 002b:00007fddf5b5cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.783422][ T1115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 225.792723][ T1115] RDX: 0000000020000040 RSI: 000000000000541c RDI: 0000000000000003 [ 225.801413][ T1115] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 225.810659][ T1115] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fddf5b5d6d4 [ 225.819330][ T1115] R13: 00000000004c5c45 R14: 00000000004dc038 R15: 00000000ffffffff [ 225.827913][ T1115] [ 225.827913][ T1115] Showing all locks held in the system: [ 225.835862][ T1115] 1 lock held by khungtaskd/1115: [ 225.842703][ T1115] #0: ffffffff88d9e200 (rcu_read_lock){....}, at: debug_show_all_locks+0x5b/0x275 [ 225.853707][ T1115] 1 lock held by rsyslogd/7733: [ 225.858886][ T1115] #0: ffff88809fc83da0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xa3/0xc0 [ 225.868097][ T1115] 2 locks held by login/7824: [ 225.872914][ T1115] #0: ffff88808fdec198 (&tty->legacy_mutex){+.+.}, at: tty_lock+0x68/0xb0 [ 225.881988][ T1115] #1: ffff88808fdec090 (&tty->ldisc_sem){++++}, at: ldsem_down_write+0x2d/0x40 [ 225.891507][ T1115] 2 locks held by getty/7825: [ 225.896204][ T1115] #0: ffff88808bb40090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 225.905798][ T1115] #1: ffffc900017bb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x17d0 [ 225.916122][ T1115] 2 locks held by getty/7826: [ 225.922796][ T1115] #0: ffff888096554090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 225.932435][ T1115] #1: ffffc9000181b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x17d0 [ 225.942829][ T1115] 2 locks held by getty/7827: [ 225.948984][ T1115] #0: ffff8880a376a090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 225.958697][ T1115] #1: ffffc9000183b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x17d0 [ 225.969034][ T1115] 2 locks held by getty/7828: [ 225.974044][ T1115] #0: ffff88809512d090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 225.983969][ T1115] #1: ffffc9000180b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x17d0 [ 225.994321][ T1115] 2 locks held by getty/7829: [ 225.999353][ T1115] #0: ffff88808f6d8090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 226.008676][ T1115] #1: ffffc9000182b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x17d0 [ 226.019241][ T1115] 2 locks held by getty/7830: [ 226.024179][ T1115] #0: ffff8880942bb090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 226.034350][ T1115] #1: ffffc9000177b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x17d0 [ 226.044543][ T1115] 2 locks held by syz-executor.1/8034: [ 226.051527][ T1115] #0: ffff88808fdec090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 226.061981][ T1115] #1: ffff8880aa5bc0a8 (&buf->lock){+.+.}, at: tty_buffer_lock_exclusive+0x2b/0x30 [ 226.072065][ T1115] 2 locks held by syz-executor.5/8038: [ 226.078066][ T1115] #0: ffff88808fdec090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 226.087461][ T1115] #1: ffff8880aa5bc0a8 (&buf->lock){+.+.}, at: tty_buffer_lock_exclusive+0x2b/0x30 [ 226.097664][ T1115] 3 locks held by syz-executor.3/8041: [ 226.103294][ T1115] 2 locks held by syz-executor.3/8042: [ 226.109320][ T1115] #0: ffff88808fdec090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 226.118854][ T1115] #1: ffff8880aa5bc0a8 (&buf->lock){+.+.}, at: tty_buffer_lock_exclusive+0x2b/0x30 [ 226.128571][ T1115] 2 locks held by syz-executor.2/8045: [ 226.134529][ T1115] #0: ffff88808fdec090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 226.144645][ T1115] #1: ffff8880aa5bc0a8 (&buf->lock){+.+.}, at: tty_buffer_lock_exclusive+0x2b/0x30 [ 226.155091][ T1115] 2 locks held by syz-executor.2/8046: [ 226.161017][ T1115] #0: ffff88808fdec090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 226.171441][ T1115] #1: ffff8880aa5bc0a8 (&buf->lock){+.+.}, at: tty_buffer_lock_exclusive+0x2b/0x30 [ 226.182204][ T1115] 2 locks held by syz-executor.4/8050: [ 226.187999][ T1115] #0: ffff88808fdec090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 226.197188][ T1115] #1: ffff8880aa5bc0a8 (&buf->lock){+.+.}, at: tty_buffer_lock_exclusive+0x2b/0x30 [ 226.207067][ T1115] 2 locks held by syz-executor.4/8051: [ 226.212967][ T1115] #0: ffff88808fdec090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 226.222827][ T1115] #1: ffff8880aa5bc0a8 (&buf->lock){+.+.}, at: tty_buffer_lock_exclusive+0x2b/0x30 [ 226.232909][ T1115] 2 locks held by syz-executor.0/8054: [ 226.238926][ T1115] #0: ffff88808fdec090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 226.248935][ T1115] #1: ffff8880aa5bc0a8 (&buf->lock){+.+.}, at: tty_buffer_lock_exclusive+0x2b/0x30 [ 226.258749][ T1115] 2 locks held by syz-executor.0/8056: [ 226.264331][ T1115] #0: ffff88808fdec090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 226.273849][ T1115] #1: ffff8880aa5bc0a8 (&buf->lock){+.+.}, at: tty_buffer_lock_exclusive+0x2b/0x30 [ 226.285809][ T1115] [ 226.288609][ T1115] ============================================= [ 226.288609][ T1115] [ 226.297388][ T1115] NMI backtrace for cpu 1 [ 226.301858][ T1115] CPU: 1 PID: 1115 Comm: khungtaskd Not tainted 5.5.0-rc7-syzkaller #0 [ 226.310363][ T1115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.321061][ T1115] Call Trace: [ 226.324393][ T1115] dump_stack+0x12d/0x187 [ 226.329065][ T1115] nmi_cpu_backtrace.cold.7+0x4b/0x84 [ 226.334453][ T1115] ? lapic_can_unplug_cpu.cold.29+0x3f/0x3f [ 226.340405][ T1115] nmi_trigger_cpumask_backtrace+0x18b/0x1b7 [ 226.346478][ T1115] arch_trigger_cpumask_backtrace+0x14/0x20 [ 226.352499][ T1115] watchdog+0x611/0xc50 [ 226.356784][ T1115] kthread+0x331/0x3f0 [ 226.361092][ T1115] ? hungtask_pm_notify+0x40/0x40 [ 226.366221][ T1115] ? kthread_mod_delayed_work+0x190/0x190 [ 226.373430][ T1115] ret_from_fork+0x24/0x30 [ 226.378266][ T1115] Sending NMI from CPU 1 to CPUs 0: [ 226.383958][ C0] NMI backtrace for cpu 0 [ 226.383960][ C0] CPU: 0 PID: 8041 Comm: syz-executor.3 Not tainted 5.5.0-rc7-syzkaller #0 [ 226.383962][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.383963][ C0] RIP: 0010:lock_is_held_type+0x179/0x300 [ 226.383966][ C0] Code: 89 e3 45 31 f6 48 c1 eb 03 48 89 45 c8 48 b8 00 00 00 00 00 fc ff df 48 01 c3 41 8b 85 90 08 00 00 85 c0 7f 25 e9 0b 01 00 00 <0f> b6 03 41 83 c6 01 84 c0 74 08 3c 03 0f 8e 39 01 00 00 45 3b b5 [ 226.383968][ C0] RSP: 0018:ffffc90002c775b0 EFLAGS: 00000046 [ 226.383971][ C0] RAX: 0000000000000000 RBX: ffffed101246a55a RCX: ffff888092352ad8 [ 226.383972][ C0] RDX: 0000000000000000 RSI: ffffffff88dc0580 RDI: ffff888092352b72 [ 226.383974][ C0] RBP: ffffc90002c775f8 R08: ffffed1015d4703d R09: ffffed1015d4703d [ 226.383975][ C0] R10: ffffed1015d4703c R11: ffff8880aea381e3 R12: ffff888092352ad0 [ 226.383977][ C0] R13: ffff888092352240 R14: 0000000000000003 R15: ffff888092352b50 [ 226.383978][ C0] FS: 00007f36815ff700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 226.383980][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.383981][ C0] CR2: 00007f119b467db8 CR3: 00000000a89c7000 CR4: 00000000001406f0 [ 226.383983][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.383984][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 226.383986][ C0] Call Trace: [ 226.383987][ C0] ? __kasan_check_read+0x11/0x20 [ 226.383988][ C0] update_curr+0x637/0x8b0 [ 226.383989][ C0] ? pick_next_entity+0x197/0x390 [ 226.383990][ C0] ? sched_clock+0x31/0x40 [ 226.383992][ C0] pick_next_task_fair+0x21f/0xbb0 [ 226.383993][ C0] __schedule+0x385/0x1970 [ 226.383994][ C0] ? firmware_map_remove+0x174/0x174 [ 226.383995][ C0] ? retint_kernel+0x2b/0x2b [ 226.383996][ C0] schedule+0xc3/0x2b0 [ 226.383997][ C0] paste_selection+0x36d/0x3d0 [ 226.383999][ C0] ? vcs_remove_sysfs+0x50/0x50 [ 226.384000][ C0] ? lock_acquire+0x194/0x410 [ 226.384001][ C0] ? wake_up_q+0x120/0x120 [ 226.384002][ C0] tioclinux+0x105/0x380 [ 226.384003][ C0] vt_ioctl+0x18d9/0x21f0 [ 226.384004][ C0] ? complete_change_console+0x300/0x300 [ 226.384006][ C0] ? save_stack+0x5d/0x90 [ 226.384007][ C0] ? save_stack+0x21/0x90 [ 226.384008][ C0] ? __kasan_slab_free+0x102/0x150 [ 226.384009][ C0] ? kasan_slab_free+0xe/0x10 [ 226.384010][ C0] ? kfree+0x108/0x2c0 [ 226.384012][ C0] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 226.384013][ C0] ? tomoyo_file_ioctl+0x14/0x20 [ 226.384014][ C0] ? security_file_ioctl+0x4a/0x90 [ 226.384015][ C0] ? ksys_ioctl+0x39/0x90 [ 226.384016][ C0] ? __x64_sys_ioctl+0x6e/0xb0 [ 226.384018][ C0] ? do_syscall_64+0xca/0x5f0 [ 226.384019][ C0] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 226.384020][ C0] ? find_held_lock+0x36/0x1d0 [ 226.384021][ C0] ? debug_check_no_obj_freed+0x207/0x436 [ 226.384023][ C0] ? lock_downgrade+0x900/0x900 [ 226.384024][ C0] ? __kasan_check_write+0x14/0x20 [ 226.384025][ C0] ? do_raw_spin_lock+0x132/0x2e0 [ 226.384026][ C0] tty_ioctl+0x45b/0x12f0 [ 226.384027][ C0] ? tty_vhangup+0x20/0x20 [ 226.384028][ C0] ? tomoyo_path_number_perm+0x1e8/0x4c0 [ 226.384030][ C0] ? lock_downgrade+0x900/0x900 [ 226.384031][ C0] ? kfree+0x224/0x2c0 [ 226.384032][ C0] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 226.384033][ C0] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 226.384034][ C0] ? kfree+0x224/0x2c0 [ 226.384036][ C0] ? tomoyo_path_number_perm+0x3e6/0x4c0 [ 226.384037][ C0] ? tomoyo_path_number_perm+0x213/0x4c0 [ 226.384039][ C0] ? tomoyo_execute_permission+0x460/0x460 [ 226.384040][ C0] ? find_held_lock+0x36/0x1d0 [ 226.384041][ C0] ? __fget+0x294/0x410 [ 226.384042][ C0] do_vfs_ioctl+0x196/0x1190 [ 226.384043][ C0] ? compat_ioctl_preallocate+0x1d0/0x1d0 [ 226.384044][ C0] ? __fget+0x2ac/0x410 [ 226.384045][ C0] ? ksys_dup3+0x2e0/0x2e0 [ 226.384047][ C0] ? put_timespec64+0xa9/0x100 [ 226.384048][ C0] ? nsecs_to_jiffies+0x20/0x20 [ 226.384049][ C0] ? tomoyo_file_ioctl+0x14/0x20 [ 226.384050][ C0] ksys_ioctl+0x62/0x90 [ 226.384052][ C0] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 226.384053][ C0] __x64_sys_ioctl+0x6e/0xb0 [ 226.384054][ C0] do_syscall_64+0xca/0x5f0 [ 226.384055][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 226.384056][ C0] RIP: 0033:0x45a919 [ 226.384059][ C0] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 226.384061][ C0] RSP: 002b:00007f36815fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.384064][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 226.384065][ C0] RDX: 0000000020000040 RSI: 000000000000541c RDI: 0000000000000003 [ 226.384067][ C0] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 226.384069][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f36815ff6d4 [ 226.384070][ C0] R13: 00000000004c5c45 R14: 00000000004dc038 R15: 00000000ffffffff [ 226.394134][ T1115] Kernel panic - not syncing: hung_task: blocked tasks [ 226.898020][ T1115] CPU: 1 PID: 1115 Comm: khungtaskd Not tainted 5.5.0-rc7-syzkaller #0 [ 226.906260][ T1115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.916316][ T1115] Call Trace: [ 226.919621][ T1115] dump_stack+0x12d/0x187 [ 226.924067][ T1115] panic+0x22a/0x4e3 [ 226.927981][ T1115] ? add_taint.cold.7+0x11/0x11 [ 226.932852][ T1115] ? ___preempt_schedule+0x16/0x18 [ 226.937980][ T1115] watchdog+0x622/0xc50 [ 226.942139][ T1115] kthread+0x331/0x3f0 [ 226.946211][ T1115] ? hungtask_pm_notify+0x40/0x40 [ 226.951227][ T1115] ? kthread_mod_delayed_work+0x190/0x190 [ 226.956953][ T1115] ret_from_fork+0x24/0x30 [ 226.963143][ T1115] Kernel Offset: disabled [ 226.967487][ T1115] Rebooting in 86400 seconds..