Warning: Permanently added '10.128.0.2' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program [ 1041.829126] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1288.125342] INFO: task kworker/0:0:3 blocked for more than 140 seconds. [ 1288.132306] Not tainted 4.14.202-syzkaller #0 [ 1288.138433] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.146643] kworker/0:0 D30064 3 2 0x80000000 [ 1288.152435] Workqueue: ipv6_addrconf addrconf_verify_work [ 1288.158293] Call Trace: [ 1288.160948] __schedule+0x88b/0x1de0 [ 1288.164687] ? io_schedule_timeout+0x140/0x140 [ 1288.169631] ? lock_downgrade+0x740/0x740 [ 1288.173788] schedule+0x8d/0x1b0 [ 1288.177420] schedule_preempt_disabled+0xf/0x20 [ 1288.182099] __mutex_lock+0x669/0x1310 [ 1288.186280] ? lock_downgrade+0x650/0x740 [ 1288.190446] ? addrconf_verify_work+0xa/0x20 [ 1288.194871] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1288.200723] ? process_one_work+0x6c4/0x14a0 [ 1288.205148] addrconf_verify_work+0xa/0x20 [ 1288.209680] process_one_work+0x793/0x14a0 [ 1288.213922] ? work_busy+0x320/0x320 [ 1288.217888] ? worker_thread+0x158/0xff0 [ 1288.221980] ? _raw_spin_unlock_irq+0x24/0x80 [ 1288.226754] worker_thread+0x5cc/0xff0 [ 1288.230654] ? rescuer_thread+0xc80/0xc80 [ 1288.234850] kthread+0x30d/0x420 [ 1288.238477] ? kthread_create_on_node+0xd0/0xd0 [ 1288.243151] ret_from_fork+0x24/0x30 [ 1288.247294] INFO: task syz-executor135:8033 blocked for more than 140 seconds. [ 1288.254676] Not tainted 4.14.202-syzkaller #0 [ 1288.259935] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.268136] syz-executor135 D26808 8033 8027 0x00000004 [ 1288.273799] Call Trace: [ 1288.276643] __schedule+0x88b/0x1de0 [ 1288.280365] ? io_schedule_timeout+0x140/0x140 [ 1288.284961] ? lock_downgrade+0x740/0x740 [ 1288.289462] schedule+0x8d/0x1b0 [ 1288.292832] schedule_preempt_disabled+0xf/0x20 [ 1288.297750] __mutex_lock+0x669/0x1310 [ 1288.301741] ? genl_rcv_msg+0x112/0x140 [ 1288.306024] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1288.311489] ? trace_hardirqs_on+0x10/0x10 [ 1288.316033] ? sock_sendmsg+0xb5/0x100 [ 1288.320655] ? do_syscall_64+0x1d5/0x640 [ 1288.324732] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1288.330507] genl_rcv_msg+0x112/0x140 [ 1288.334315] netlink_rcv_skb+0x125/0x390 [ 1288.338755] ? genl_family_rcv_msg+0xb20/0xb20 [ 1288.343514] ? netlink_ack+0x9a0/0x9a0 [ 1288.347776] ? lock_acquire+0x170/0x3f0 [ 1288.351759] genl_rcv+0x24/0x40 [ 1288.355079] netlink_unicast+0x437/0x610 [ 1288.359412] ? netlink_sendskb+0xd0/0xd0 [ 1288.363546] ? __check_object_size+0x179/0x22c [ 1288.368491] netlink_sendmsg+0x62e/0xb80 [ 1288.372564] ? nlmsg_notify+0x170/0x170 [ 1288.376882] ? security_socket_sendmsg+0x83/0xb0 [ 1288.381638] ? nlmsg_notify+0x170/0x170 [ 1288.385899] sock_sendmsg+0xb5/0x100 [ 1288.389617] SyS_sendto+0x1c7/0x2c0 [ 1288.393265] ? SyS_getpeername+0x220/0x220 [ 1288.397754] ? task_work_run+0xfd/0x190 [ 1288.401742] ? _raw_spin_unlock_irq+0x24/0x80 [ 1288.406507] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1288.411524] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1288.416264] ? task_work_run+0xfd/0x190 [ 1288.420245] ? do_syscall_64+0x4c/0x640 [ 1288.424240] ? SyS_getpeername+0x220/0x220 [ 1288.428758] do_syscall_64+0x1d5/0x640 [ 1288.432654] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1288.438170] RIP: 0033:0x406767 [ 1288.441358] RSP: 002b:00007fe80bd8ac50 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1288.449335] RAX: ffffffffffffffda RBX: 00007fe80bd8ad10 RCX: 0000000000406767 [ 1288.456834] RDX: 0000000000000038 RSI: 00007fe80bd8ad60 RDI: 0000000000000006 [ 1288.464124] RBP: 0000000000000000 R08: 00007fe80bd8ac60 R09: 000000000000000c [ 1288.471714] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1288.479211] R13: 0000000000000000 R14: 00007fe80bd8ad60 R15: 0000000000000006 [ 1288.486801] INFO: task syz-executor135:8071 blocked for more than 140 seconds. [ 1288.494160] Not tainted 4.14.202-syzkaller #0 [ 1288.499418] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.507605] syz-executor135 D29856 8071 8027 0x00000004 [ 1288.513267] Call Trace: [ 1288.516129] __schedule+0x88b/0x1de0 [ 1288.519850] ? io_schedule_timeout+0x140/0x140 [ 1288.524447] ? lock_downgrade+0x740/0x740 [ 1288.528884] schedule+0x8d/0x1b0 [ 1288.532256] schedule_preempt_disabled+0xf/0x20 [ 1288.537208] __mutex_lock+0x669/0x1310 [ 1288.541201] ? genl_rcv_msg+0x112/0x140 [ 1288.545552] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1288.551053] ? trace_hardirqs_on+0x10/0x10 [ 1288.555565] ? sock_sendmsg+0xb5/0x100 [ 1288.559457] ? SyS_sendto+0x1c7/0x2c0 [ 1288.563270] ? do_syscall_64+0x1d5/0x640 [ 1288.567640] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1288.573020] genl_rcv_msg+0x112/0x140 [ 1288.577195] netlink_rcv_skb+0x125/0x390 [ 1288.581277] ? genl_family_rcv_msg+0xb20/0xb20 [ 1288.586322] ? netlink_ack+0x9a0/0x9a0 [ 1288.590215] ? lock_acquire+0x170/0x3f0 [ 1288.594215] genl_rcv+0x24/0x40 [ 1288.597792] netlink_unicast+0x437/0x610 [ 1288.601872] ? netlink_sendskb+0xd0/0xd0 [ 1288.606212] ? __check_object_size+0x179/0x22c [ 1288.610802] netlink_sendmsg+0x62e/0xb80 [ 1288.614880] ? nlmsg_notify+0x170/0x170 [ 1288.619147] ? security_socket_sendmsg+0x83/0xb0 [ 1288.623910] ? nlmsg_notify+0x170/0x170 [ 1288.628167] sock_sendmsg+0xb5/0x100 [ 1288.631916] SyS_sendto+0x1c7/0x2c0 [ 1288.635786] ? SyS_getpeername+0x220/0x220 [ 1288.640294] ? sock_poll+0x220/0x220 [ 1288.644033] ? SyS_socket+0x12f/0x1b0 [ 1288.648124] ? move_addr_to_kernel+0x60/0x60 [ 1288.652625] ? __do_page_fault+0x159/0xad0 [ 1288.657121] ? do_syscall_64+0x4c/0x640 [ 1288.661098] ? SyS_getpeername+0x220/0x220 [ 1288.665603] do_syscall_64+0x1d5/0x640 [ 1288.669504] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1288.674711] RIP: 0033:0x406767 [ 1288.678183] RSP: 002b:00007fe80bd69c80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1288.686139] RAX: ffffffffffffffda RBX: 00007fe80bd69d20 RCX: 0000000000406767 [ 1288.693467] RDX: 0000000000000020 RSI: 00007fe80bd69d70 RDI: 000000000000000a [ 1288.701172] RBP: 0000000000000000 R08: 00007fe80bd69c90 R09: 000000000000000c [ 1288.708703] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fe80bd69cf4 [ 1288.716275] R13: 0000000000000010 R14: 00007fe80bd69d70 R15: 000000000000000a [ 1288.723614] INFO: task syz-executor135:8072 blocked for more than 140 seconds. [ 1288.731232] Not tainted 4.14.202-syzkaller #0 [ 1288.736458] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.744559] syz-executor135 D29856 8072 8027 0x00000004 [ 1288.750461] Call Trace: [ 1288.753059] __schedule+0x88b/0x1de0 [ 1288.757133] ? io_schedule_timeout+0x140/0x140 [ 1288.761720] ? lock_downgrade+0x740/0x740 [ 1288.766127] schedule+0x8d/0x1b0 [ 1288.769498] schedule_preempt_disabled+0xf/0x20 [ 1288.774162] __mutex_lock+0x669/0x1310 [ 1288.778385] ? genl_rcv_msg+0x112/0x140 [ 1288.782381] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1288.788104] ? trace_hardirqs_on+0x10/0x10 [ 1288.792342] ? sock_sendmsg+0xb5/0x100 [ 1288.796510] ? SyS_sendto+0x1c7/0x2c0 [ 1288.800312] ? do_syscall_64+0x1d5/0x640 [ 1288.804384] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1288.810184] genl_rcv_msg+0x112/0x140 [ 1288.814038] netlink_rcv_skb+0x125/0x390 [ 1288.818372] ? genl_family_rcv_msg+0xb20/0xb20 [ 1288.822963] ? netlink_ack+0x9a0/0x9a0 [ 1288.827104] ? lock_acquire+0x170/0x3f0 [ 1288.831088] genl_rcv+0x24/0x40 [ 1288.834382] netlink_unicast+0x437/0x610 [ 1288.838971] ? netlink_sendskb+0xd0/0xd0 [ 1288.843043] ? __check_object_size+0x179/0x22c [ 1288.847902] netlink_sendmsg+0x62e/0xb80 [ 1288.851969] ? nlmsg_notify+0x170/0x170 [ 1288.856226] ? security_socket_sendmsg+0x83/0xb0 [ 1288.860981] ? nlmsg_notify+0x170/0x170 [ 1288.864968] sock_sendmsg+0xb5/0x100 [ 1288.868992] SyS_sendto+0x1c7/0x2c0 [ 1288.872625] ? SyS_getpeername+0x220/0x220 [ 1288.877137] ? sock_poll+0x220/0x220 [ 1288.880859] ? SyS_socket+0x12f/0x1b0 [ 1288.884673] ? move_addr_to_kernel+0x60/0x60 [ 1288.889385] ? __do_page_fault+0x159/0xad0 [ 1288.893622] ? do_syscall_64+0x4c/0x640 [ 1288.897938] ? SyS_getpeername+0x220/0x220 [ 1288.902178] do_syscall_64+0x1d5/0x640 [ 1288.906330] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1288.911648] RIP: 0033:0x406767 [ 1288.914894] RSP: 002b:00007fe80bd48c80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1288.922938] RAX: ffffffffffffffda RBX: 00007fe80bd48d20 RCX: 0000000000406767 [ 1288.930479] RDX: 0000000000000020 RSI: 00007fe80bd48d70 RDI: 0000000000000007 [ 1288.938032] RBP: 0000000000000000 R08: 00007fe80bd48c90 R09: 000000000000000c [ 1288.945629] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fe80bd48cf4 [ 1288.952927] R13: 0000000000000010 R14: 00007fe80bd48d70 R15: 0000000000000007 [ 1288.960620] INFO: task syz-executor135:8075 blocked for more than 140 seconds. [ 1288.968331] Not tainted 4.14.202-syzkaller #0 [ 1288.973365] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.981631] syz-executor135 D29472 8075 8027 0x00000004 [ 1288.987499] Call Trace: [ 1288.990117] __schedule+0x88b/0x1de0 [ 1288.993871] ? io_schedule_timeout+0x140/0x140 [ 1288.998765] ? lock_downgrade+0x740/0x740 [ 1289.002919] schedule+0x8d/0x1b0 [ 1289.006870] schedule_preempt_disabled+0xf/0x20 [ 1289.011590] __mutex_lock+0x669/0x1310 [ 1289.015746] ? genl_rcv_msg+0x112/0x140 [ 1289.019751] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1289.025242] ? trace_hardirqs_on+0x10/0x10 [ 1289.029721] ? sock_sendmsg+0xb5/0x100 [ 1289.033619] ? ___sys_sendmsg+0x6c8/0x800 [ 1289.038130] ? __sys_sendmsg+0xa3/0x120 [ 1289.042109] ? SyS_sendmsg+0x27/0x40 [ 1289.046120] ? do_syscall_64+0x1d5/0x640 [ 1289.050190] genl_rcv_msg+0x112/0x140 [ 1289.054012] netlink_rcv_skb+0x125/0x390 [ 1289.058378] ? genl_family_rcv_msg+0xb20/0xb20 [ 1289.062964] ? netlink_ack+0x9a0/0x9a0 [ 1289.067100] ? lock_acquire+0x170/0x3f0 [ 1289.071083] genl_rcv+0x24/0x40 [ 1289.074379] netlink_unicast+0x437/0x610 [ 1289.078740] ? netlink_sendskb+0xd0/0xd0 [ 1289.082804] ? __check_object_size+0x179/0x22c [ 1289.087635] netlink_sendmsg+0x62e/0xb80 [ 1289.091703] ? nlmsg_notify+0x170/0x170 [ 1289.095941] ? kernel_recvmsg+0x210/0x210 [ 1289.100096] ? security_socket_sendmsg+0x83/0xb0 [ 1289.104960] ? nlmsg_notify+0x170/0x170 [ 1289.109232] sock_sendmsg+0xb5/0x100 [ 1289.112968] ___sys_sendmsg+0x6c8/0x800 [ 1289.117232] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1289.122077] ? do_futex+0x12b/0x1930 [ 1289.126100] ? dev_ifsioc+0x7d0/0x7d0 [ 1289.129917] ? __fget+0x1fe/0x360 [ 1289.133387] ? lock_acquire+0x170/0x3f0 [ 1289.137658] ? lock_downgrade+0x740/0x740 [ 1289.141873] ? __fget+0x225/0x360 [ 1289.145588] ? __fdget+0x196/0x1f0 [ 1289.149134] ? sockfd_lookup_light+0xb2/0x160 [ 1289.153652] __sys_sendmsg+0xa3/0x120 [ 1289.157785] ? SyS_shutdown+0x160/0x160 [ 1289.161772] ? security_file_ioctl+0x83/0xb0 [ 1289.166499] ? fput+0xb/0x140 [ 1289.169609] SyS_sendmsg+0x27/0x40 [ 1289.173188] ? __sys_sendmsg+0x120/0x120 [ 1289.177537] do_syscall_64+0x1d5/0x640 [ 1289.181491] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1289.187015] RIP: 0033:0x447ba9 [ 1289.190208] RSP: 002b:00007fe80bd28d98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1289.198219] RAX: ffffffffffffffda RBX: 00000000006dccb8 RCX: 0000000000447ba9 [ 1289.205717] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000009 [ 1289.213012] RBP: 00000000006dccb0 R08: 000000000000000d R09: 0000000000000000 [ 1289.220564] R10: 0000000000000008 R11: 0000000000000246 R12: 00000000006dccbc [ 1289.228088] R13: 0000000000000000 R14: 000000306e616c77 R15: ffffffff00000000 [ 1289.235695] INFO: task syz-executor135:8076 blocked for more than 140 seconds. [ 1289.243054] Not tainted 4.14.202-syzkaller #0 [ 1289.248329] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1289.256558] syz-executor135 D29472 8076 8027 0x00000004 [ 1289.262219] Call Trace: [ 1289.264825] __schedule+0x88b/0x1de0 [ 1289.268868] ? io_schedule_timeout+0x140/0x140 [ 1289.273453] ? lock_downgrade+0x740/0x740 [ 1289.277926] schedule+0x8d/0x1b0 [ 1289.281295] schedule_preempt_disabled+0xf/0x20 [ 1289.286317] __mutex_lock+0x669/0x1310 [ 1289.290232] ? genl_rcv_msg+0x112/0x140 [ 1289.294222] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1289.299952] ? trace_hardirqs_on+0x10/0x10 [ 1289.304187] ? sock_sendmsg+0xb5/0x100 [ 1289.308361] ? ___sys_sendmsg+0x6c8/0x800 [ 1289.312510] ? __sys_sendmsg+0xa3/0x120 [ 1289.316742] ? SyS_sendmsg+0x27/0x40 [ 1289.320456] ? do_syscall_64+0x1d5/0x640 [ 1289.324570] genl_rcv_msg+0x112/0x140 [ 1289.328641] netlink_rcv_skb+0x125/0x390 [ 1289.332707] ? genl_family_rcv_msg+0xb20/0xb20 [ 1289.337569] ? netlink_ack+0x9a0/0x9a0 [ 1289.341460] ? lock_acquire+0x170/0x3f0 [ 1289.345782] genl_rcv+0x24/0x40 [ 1289.349072] netlink_unicast+0x437/0x610 [ 1289.353151] ? netlink_sendskb+0xd0/0xd0 [ 1289.357512] ? __check_object_size+0x179/0x22c [ 1289.362098] netlink_sendmsg+0x62e/0xb80 [ 1289.366435] ? nlmsg_notify+0x170/0x170 [ 1289.370417] ? kernel_recvmsg+0x210/0x210 [ 1289.374583] ? security_socket_sendmsg+0x83/0xb0 [ 1289.379648] ? nlmsg_notify+0x170/0x170 [ 1289.383673] sock_sendmsg+0xb5/0x100 [ 1289.387678] ___sys_sendmsg+0x6c8/0x800 [ 1289.391658] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1289.396710] ? __fget+0x1fe/0x360 [ 1289.400168] ? lock_acquire+0x170/0x3f0 [ 1289.404166] ? lock_downgrade+0x740/0x740 [ 1289.408633] ? __fget+0x225/0x360 [ 1289.412091] ? __fdget+0x196/0x1f0 [ 1289.415946] ? sockfd_lookup_light+0xb2/0x160 [ 1289.420464] __sys_sendmsg+0xa3/0x120 [ 1289.424277] ? SyS_shutdown+0x160/0x160 [ 1289.428547] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1289.433568] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1289.438489] SyS_sendmsg+0x27/0x40 [ 1289.442079] ? __sys_sendmsg+0x120/0x120 [ 1289.446395] do_syscall_64+0x1d5/0x640 [ 1289.450337] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1289.455806] RIP: 0033:0x447ba9 [ 1289.458995] RSP: 002b:00007fe80bd07d98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1289.466965] RAX: ffffffffffffffda RBX: 00000000006dccc8 RCX: 0000000000447ba9 [ 1289.474255] RDX: 0000000000044000 RSI: 0000000020000340 RDI: 0000000000000008 [ 1289.481816] RBP: 00000000006dccc0 R08: 00007fe80bd08700 R09: 0000000000000000 [ 1289.489351] R10: 00007fe80bd08700 R11: 0000000000000246 R12: 00000000006dcccc [ 1289.496954] R13: 0000000000000000 R14: 000000306e616c77 R15: ffffffff00000000 [ 1289.504295] INFO: task syz-executor135:8077 blocked for more than 140 seconds. [ 1289.512025] Not tainted 4.14.202-syzkaller #0 [ 1289.517231] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1289.525476] syz-executor135 D29856 8077 8027 0x00000004 [ 1289.531156] Call Trace: [ 1289.533737] __schedule+0x88b/0x1de0 [ 1289.537772] ? io_schedule_timeout+0x140/0x140 [ 1289.542355] ? lock_downgrade+0x740/0x740 [ 1289.546788] schedule+0x8d/0x1b0 [ 1289.550179] schedule_preempt_disabled+0xf/0x20 [ 1289.554858] __mutex_lock+0x669/0x1310 [ 1289.558995] ? genl_rcv_msg+0x112/0x140 [ 1289.562984] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1289.568718] ? trace_hardirqs_on+0x10/0x10 [ 1289.572954] ? sock_sendmsg+0xb5/0x100 [ 1289.577078] ? SyS_sendto+0x1c7/0x2c0 [ 1289.580924] ? do_syscall_64+0x1d5/0x640 [ 1289.584996] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1289.590676] genl_rcv_msg+0x112/0x140 [ 1289.594531] netlink_rcv_skb+0x125/0x390 [ 1289.598843] ? genl_family_rcv_msg+0xb20/0xb20 [ 1289.603426] ? netlink_ack+0x9a0/0x9a0 [ 1289.607578] ? lock_acquire+0x170/0x3f0 [ 1289.611560] genl_rcv+0x24/0x40 [ 1289.614851] netlink_unicast+0x437/0x610 [ 1289.619164] ? netlink_sendskb+0xd0/0xd0 [ 1289.623252] ? __check_object_size+0x179/0x22c [ 1289.628123] netlink_sendmsg+0x62e/0xb80 [ 1289.632191] ? nlmsg_notify+0x170/0x170 [ 1289.636431] ? security_socket_sendmsg+0x83/0xb0 [ 1289.641236] ? nlmsg_notify+0x170/0x170 [ 1289.645541] sock_sendmsg+0xb5/0x100 [ 1289.649312] SyS_sendto+0x1c7/0x2c0 [ 1289.652961] ? SyS_getpeername+0x220/0x220 [ 1289.657505] ? sock_poll+0x220/0x220 [ 1289.661228] ? SyS_socket+0x12f/0x1b0 [ 1289.665044] ? move_addr_to_kernel+0x60/0x60 [ 1289.669742] ? __do_page_fault+0x159/0xad0 [ 1289.674048] ? do_syscall_64+0x4c/0x640 [ 1289.678288] ? SyS_getpeername+0x220/0x220 [ 1289.682527] do_syscall_64+0x1d5/0x640 [ 1289.686755] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1289.692043] RIP: 0033:0x406767 [ 1289.695485] RSP: 002b:00007fe80bce5c20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1289.703194] RAX: ffffffffffffffda RBX: 00007fe80bce5d10 RCX: 0000000000406767 [ 1289.710731] RDX: 0000000000000020 RSI: 00007fe80bce5d60 RDI: 000000000000000d [ 1289.718215] RBP: 0000000000000000 R08: 00007fe80bce5c30 R09: 000000000000000c [ 1289.725868] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fe80bce5c94 [ 1289.733157] R13: 0000000000000010 R14: 00007fe80bce5d60 R15: 000000000000000d [ 1289.740800] INFO: task syz-executor135:8078 blocked for more than 140 seconds. [ 1289.748374] Not tainted 4.14.202-syzkaller #0 [ 1289.753412] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1289.761668] syz-executor135 D30096 8078 8027 0x00000004 [ 1289.767535] Call Trace: [ 1289.770151] __schedule+0x88b/0x1de0 [ 1289.773914] ? io_schedule_timeout+0x140/0x140 [ 1289.778809] ? lock_downgrade+0x740/0x740 [ 1289.782963] schedule+0x8d/0x1b0 [ 1289.786591] schedule_preempt_disabled+0xf/0x20 [ 1289.791265] __mutex_lock+0x669/0x1310 [ 1289.795494] ? genl_rcv_msg+0x112/0x140 [ 1289.799473] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1289.804941] ? trace_hardirqs_on+0x10/0x10 [ 1289.809479] ? sock_sendmsg+0xb5/0x100 [ 1289.813370] ? SyS_sendto+0x1c7/0x2c0 [ 1289.817475] ? do_syscall_64+0x1d5/0x640 [ 1289.821540] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1289.827238] genl_rcv_msg+0x112/0x140 [ 1289.831061] netlink_rcv_skb+0x125/0x390 [ 1289.835681] ? genl_family_rcv_msg+0xb20/0xb20 [ 1289.840301] ? netlink_ack+0x9a0/0x9a0 [ 1289.844284] ? lock_acquire+0x170/0x3f0 [ 1289.848643] genl_rcv+0x24/0x40 [ 1289.851939] netlink_unicast+0x437/0x610 [ 1289.856264] ? netlink_sendskb+0xd0/0xd0 [ 1289.860328] ? __check_object_size+0x179/0x22c [ 1289.864956] netlink_sendmsg+0x62e/0xb80 [ 1289.869390] ? nlmsg_notify+0x170/0x170 [ 1289.873375] ? security_socket_sendmsg+0x83/0xb0 [ 1289.878395] ? nlmsg_notify+0x170/0x170 [ 1289.882373] sock_sendmsg+0xb5/0x100 [ 1289.886371] SyS_sendto+0x1c7/0x2c0 [ 1289.890004] ? SyS_getpeername+0x220/0x220 [ 1289.894265] ? sock_poll+0x220/0x220 [ 1289.898284] ? SyS_socket+0x12f/0x1b0 [ 1289.902089] ? move_addr_to_kernel+0x60/0x60 [ 1289.906760] ? __do_page_fault+0x159/0xad0 [ 1289.911020] ? do_syscall_64+0x4c/0x640 [ 1289.915008] ? SyS_getpeername+0x220/0x220 [ 1289.919537] do_syscall_64+0x1d5/0x640 [ 1289.923436] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1289.928886] RIP: 0033:0x406767 [ 1289.932084] RSP: 002b:00007fe80bcc4c80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1289.940143] RAX: ffffffffffffffda RBX: 00007fe80bcc4d20 RCX: 0000000000406767 [ 1289.947639] RDX: 0000000000000020 RSI: 00007fe80bcc4d70 RDI: 000000000000000c [ 1289.954998] RBP: 0000000000000000 R08: 00007fe80bcc4c90 R09: 000000000000000c [ 1289.962696] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fe80bcc4cf4 [ 1289.970208] R13: 0000000000000010 R14: 00007fe80bcc4d70 R15: 000000000000000c [ 1289.977747] INFO: task syz-executor135:8087 blocked for more than 140 seconds. [ 1289.985111] Not tainted 4.14.202-syzkaller #0 [ 1289.990371] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1289.998556] syz-executor135 D28960 8087 8027 0x00000004 [ 1290.004215] Call Trace: [ 1290.007075] __schedule+0x88b/0x1de0 [ 1290.010902] ? io_schedule_timeout+0x140/0x140 [ 1290.015782] ? lock_downgrade+0x740/0x740 [ 1290.019937] schedule+0x8d/0x1b0 [ 1290.023317] schedule_preempt_disabled+0xf/0x20 [ 1290.028235] __mutex_lock+0x669/0x1310 [ 1290.032133] ? genl_rcv_msg+0x112/0x140 [ 1290.036347] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1290.041814] ? trace_hardirqs_on+0x10/0x10 [ 1290.046379] ? sock_sendmsg+0xb5/0x100 [ 1290.050271] ? ___sys_sendmsg+0x6c8/0x800 [ 1290.054447] ? __sys_sendmsg+0xa3/0x120 [ 1290.058704] ? SyS_sendmsg+0x27/0x40 [ 1290.062424] ? do_syscall_64+0x1d5/0x640 [ 1290.066815] genl_rcv_msg+0x112/0x140 [ 1290.070621] netlink_rcv_skb+0x125/0x390 [ 1290.074723] ? genl_family_rcv_msg+0xb20/0xb20 [ 1290.079563] ? netlink_ack+0x9a0/0x9a0 [ 1290.083455] ? lock_acquire+0x170/0x3f0 [ 1290.087679] genl_rcv+0x24/0x40 [ 1290.090972] netlink_unicast+0x437/0x610 [ 1290.095051] ? netlink_sendskb+0xd0/0xd0 [ 1290.099360] ? __check_object_size+0x179/0x22c [ 1290.103974] netlink_sendmsg+0x62e/0xb80 [ 1290.108284] ? nlmsg_notify+0x170/0x170 [ 1290.112260] ? kernel_recvmsg+0x210/0x210 [ 1290.116672] ? security_socket_sendmsg+0x83/0xb0 [ 1290.121429] ? nlmsg_notify+0x170/0x170 [ 1290.125818] sock_sendmsg+0xb5/0x100 [ 1290.129552] ___sys_sendmsg+0x6c8/0x800 [ 1290.133546] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1290.138560] ? __fget+0x1fe/0x360 [ 1290.142020] ? lock_acquire+0x170/0x3f0 [ 1290.146279] ? lock_downgrade+0x740/0x740 [ 1290.150447] ? __fget+0x225/0x360 [ 1290.153946] ? __fdget+0x196/0x1f0 [ 1290.157734] ? sockfd_lookup_light+0xb2/0x160 [ 1290.162233] __sys_sendmsg+0xa3/0x120 [ 1290.166302] ? SyS_shutdown+0x160/0x160 [ 1290.170286] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1290.175542] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1290.180042] SyS_sendmsg+0x27/0x40 [ 1290.183597] ? __sys_sendmsg+0x120/0x120 [ 1290.188053] do_syscall_64+0x1d5/0x640 [ 1290.192002] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1290.197495] RIP: 0033:0x447ba9 [ 1290.200685] RSP: 002b:00007fe80bca4d98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1290.208655] RAX: ffffffffffffffda RBX: 00000000006dccf8 RCX: 0000000000447ba9 [ 1290.216149] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 000000000000000b [ 1290.223444] RBP: 00000000006dccf0 R08: 0000000000000005 R09: 0000000000000000 [ 1290.230998] R10: 0000000000000008 R11: 0000000000000246 R12: 00000000006dccfc [ 1290.238482] R13: 0000000000000000 R14: 000000306e616c77 R15: ffffffff00000000 [ 1290.246031] INFO: task syz-executor135:8064 blocked for more than 140 seconds. [ 1290.254348] Not tainted 4.14.202-syzkaller #0 [ 1290.259622] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1290.267870] syz-executor135 D29856 8064 8030 0x00000004 [ 1290.273579] Call Trace: [ 1290.276409] __schedule+0x88b/0x1de0 [ 1290.280129] ? io_schedule_timeout+0x140/0x140 [ 1290.284728] ? lock_downgrade+0x740/0x740 [ 1290.289140] schedule+0x8d/0x1b0 [ 1290.292508] schedule_preempt_disabled+0xf/0x20 [ 1290.297465] __mutex_lock+0x669/0x1310 [ 1290.301361] ? genl_rcv_msg+0x112/0x140 [ 1290.307489] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1290.312970] ? trace_hardirqs_on+0x10/0x10 [ 1290.317436] ? sock_sendmsg+0xb5/0x100 [ 1290.321369] ? SyS_sendto+0x1c7/0x2c0 [ 1290.325184] ? do_syscall_64+0x1d5/0x640 [ 1290.329593] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1290.334990] genl_rcv_msg+0x112/0x140 [ 1290.339037] netlink_rcv_skb+0x125/0x390 [ 1290.343101] ? genl_family_rcv_msg+0xb20/0xb20 [ 1290.347941] ? netlink_ack+0x9a0/0x9a0 [ 1290.351830] ? lock_acquire+0x170/0x3f0 [ 1290.356063] genl_rcv+0x24/0x40 [ 1290.359352] netlink_unicast+0x437/0x610 [ 1290.363452] ? netlink_sendskb+0xd0/0xd0 [ 1290.367778] ? __check_object_size+0x179/0x22c [ 1290.372410] netlink_sendmsg+0x62e/0xb80 [ 1290.376692] ? nlmsg_notify+0x170/0x170 [ 1290.380701] ? security_socket_sendmsg+0x83/0xb0 [ 1290.385724] ? nlmsg_notify+0x170/0x170 [ 1290.389702] sock_sendmsg+0xb5/0x100 [ 1290.393433] SyS_sendto+0x1c7/0x2c0 [ 1290.397311] ? SyS_getpeername+0x220/0x220 [ 1290.401558] ? sock_poll+0x220/0x220 [ 1290.405528] ? SyS_socket+0x12f/0x1b0 [ 1290.409332] ? move_addr_to_kernel+0x60/0x60 [ 1290.413783] ? __do_page_fault+0x159/0xad0 [ 1290.418262] ? do_syscall_64+0x4c/0x640 [ 1290.422237] ? SyS_getpeername+0x220/0x220 [ 1290.426877] do_syscall_64+0x1d5/0x640 [ 1290.430798] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1290.436223] RIP: 0033:0x406767 [ 1290.439414] RSP: 002b:00007fe80bd69c20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1290.447458] RAX: ffffffffffffffda RBX: 00007fe80bd69d10 RCX: 0000000000406767 [ 1290.454727] RDX: 0000000000000020 RSI: 00007fe80bd69d60 RDI: 0000000000000006 [ 1290.462245] RBP: 0000000000000000 R08: 00007fe80bd69c30 R09: 000000000000000c [ 1290.469724] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fe80bd69c94 [ 1290.477226] R13: 0000000000000010 R14: 00007fe80bd69d60 R15: 0000000000000006 [ 1290.484559] [ 1290.484559] Showing all locks held in the system: [ 1290.491170] 3 locks held by kworker/0:0/3: [ 1290.495547] #0: ("%s"("ipv6_addrconf")){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 1290.505118] #1: ((addr_chk_work).work){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 1290.514646] #2: (rtnl_mutex){+.+.}, at: [] addrconf_verify_work+0xa/0x20 [ 1290.523307] 1 lock held by khungtaskd/1531: [ 1290.527664] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7c/0x21a [ 1290.536786] 2 locks held by syz-executor135/8033: [ 1290.541644] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1290.549109] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1290.557326] 2 locks held by syz-executor135/8071: [ 1290.562155] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1290.569623] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1290.577839] 2 locks held by syz-executor135/8072: [ 1290.582695] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1290.590429] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1290.598654] 2 locks held by syz-executor135/8075: [ 1290.603498] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1290.610963] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1290.619178] 2 locks held by syz-executor135/8076: [ 1290.624034] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1290.631531] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1290.639933] 2 locks held by syz-executor135/8077: [ 1290.644787] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1290.652235] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1290.660475] 2 locks held by syz-executor135/8078: [ 1290.665372] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1290.672786] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1290.681020] 2 locks held by syz-executor135/8087: [ 1290.685910] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1290.693312] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1290.701590] 2 locks held by syz-executor135/8064: [ 1290.706489] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1290.713888] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1290.722125] 2 locks held by syz-executor135/8081: [ 1290.727025] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1290.734422] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1290.742803] 2 locks held by syz-executor135/8082: [ 1290.747717] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1290.755157] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1290.763395] 2 locks held by syz-executor135/8090: [ 1290.768285] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1290.775789] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1290.783970] 2 locks held by syz-executor135/8093: [ 1290.788919] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1290.796373] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1290.804554] 2 locks held by syz-executor135/8098: [ 1290.809462] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1290.816901] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1290.825139] 2 locks held by syz-executor135/8099: [ 1290.830054] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1290.837490] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1290.845794] 2 locks held by syz-executor135/8105: [ 1290.850650] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1290.858116] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1290.866329] 2 locks held by syz-executor135/8043: [ 1290.871185] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1290.878636] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1290.886855] 2 locks held by syz-executor135/8063: [ 1290.891710] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1290.899160] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1290.907376] 2 locks held by syz-executor135/8085: [ 1290.912230] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1290.919683] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1290.927933] 2 locks held by syz-executor135/8086: [ 1290.932787] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1290.940239] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1290.948457] 2 locks held by syz-executor135/8092: [ 1290.953339] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1290.960786] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1290.969009] 2 locks held by syz-executor135/8094: [ 1290.973865] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1290.981315] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1290.989528] 2 locks held by syz-executor135/8100: [ 1290.994382] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.001841] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.010075] 2 locks held by syz-executor135/8101: [ 1291.014932] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.022411] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.030628] 2 locks held by syz-executor135/8040: [ 1291.035539] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.042937] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.051180] 2 locks held by syz-executor135/8054: [ 1291.056112] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.063509] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.071740] 2 locks held by syz-executor135/8060: [ 1291.076722] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.084168] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.092405] 2 locks held by syz-executor135/8066: [ 1291.097298] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.104692] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.112924] 2 locks held by syz-executor135/8069: [ 1291.117820] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.127026] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.135223] 2 locks held by syz-executor135/8070: [ 1291.140155] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.147724] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.155947] 2 locks held by syz-executor135/8074: [ 1291.160824] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.168271] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.176491] 2 locks held by syz-executor135/8044: [ 1291.181321] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.188779] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.197008] 2 locks held by syz-executor135/8062: [ 1291.201863] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.209310] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.217532] 2 locks held by syz-executor135/8079: [ 1291.222361] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.229806] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.238074] 2 locks held by syz-executor135/8080: [ 1291.242904] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.250359] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.258591] 2 locks held by syz-executor135/8088: [ 1291.263422] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.270912] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.279132] 2 locks held by syz-executor135/8089: [ 1291.283974] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.291432] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.299653] 2 locks held by syz-executor135/8096: [ 1291.304480] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.311952] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.320183] 2 locks held by syz-executor135/8097: [ 1291.325015] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.332476] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.340697] 2 locks held by syz-executor135/8042: [ 1291.345584] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.352954] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.361193] 2 locks held by syz-executor135/8065: [ 1291.366102] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.373496] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.381732] 2 locks held by syz-executor135/8083: [ 1291.386622] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.394060] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.402296] 2 locks held by syz-executor135/8084: [ 1291.407186] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.414581] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.422839] 2 locks held by syz-executor135/8091: [ 1291.427732] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.435127] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.443365] 2 locks held by syz-executor135/8095: [ 1291.448265] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.455719] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.463873] 2 locks held by syz-executor135/8102: [ 1291.468787] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.476238] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.484422] 2 locks held by syz-executor135/8103: [ 1291.489353] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.496787] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.504944] 2 locks held by syz-executor135/8107: [ 1291.509863] #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 [ 1291.517317] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 [ 1291.525550] 3 locks held by kworker/0:1/8053: [ 1291.530033] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 1291.538532] #1: ((linkwatch_work).work){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 1291.548135] #2: (rtnl_mutex){+.+.}, at: [] linkwatch_event+0xa/0x50 [ 1291.556490] [ 1291.558111] ============================================= [ 1291.558111] [ 1291.566012] NMI backtrace for cpu 1 [ 1291.569694] CPU: 1 PID: 1531 Comm: khungtaskd Not tainted 4.14.202-syzkaller #0 [ 1291.577149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1291.586521] Call Trace: [ 1291.589187] dump_stack+0x1b2/0x283 [ 1291.592867] nmi_cpu_backtrace.cold+0x57/0x93 [ 1291.597412] ? irq_force_complete_move.cold+0x89/0x89 [ 1291.602676] nmi_trigger_cpumask_backtrace+0x13a/0x17f [ 1291.608015] watchdog+0x5b9/0xb40 [ 1291.611557] ? hungtask_pm_notify+0x50/0x50 [ 1291.615898] kthread+0x30d/0x420 [ 1291.619275] ? kthread_create_on_node+0xd0/0xd0 [ 1291.623960] ret_from_fork+0x24/0x30 [ 1291.627794] Sending NMI from CPU 1 to CPUs 0: [ 1291.632709] NMI backtrace for cpu 0 [ 1291.632713] CPU: 0 PID: 4617 Comm: systemd-journal Not tainted 4.14.202-syzkaller #0 [ 1291.632718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1291.632721] task: ffff8880a1638680 task.stack: ffff8880a1640000 [ 1291.632723] RIP: 0010:lock_release+0x2e8/0x870 [ 1291.632726] RSP: 0018:ffff8880a1647d70 EFLAGS: 00000046 [ 1291.632732] RAX: 0000000000000003 RBX: 1ffff110142c8fb1 RCX: 0000000000000000 [ 1291.632735] RDX: ffff8880a1638f08 RSI: ffffffff88fd6f40 RDI: ffff8880a1638f2a [ 1291.632739] RBP: ffffffff88fd6f40 R08: ffffffff8b98f0c8 R09: 0000000000000001 [ 1291.632742] R10: 0000000000000000 R11: ffff8880a1638680 R12: ffffffff816c1530 [ 1291.632746] R13: ffffffff8beb3d40 R14: ffff8880a1638680 R15: 0000000000000001 [ 1291.632749] FS: 00007fc1509bd8c0(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 1291.632752] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1291.632756] CR2: 00007fc14ddca000 CR3: 00000000a18af000 CR4: 00000000001406f0 [ 1291.632759] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1291.632762] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1291.632764] Call Trace: [ 1291.632767] ? lock_downgrade+0x740/0x740 [ 1291.632769] ? putname+0xcd/0x110 [ 1291.632772] kmem_cache_alloc+0x29/0x3c0 [ 1291.632774] prepare_creds+0x39/0x490 [ 1291.632776] SyS_faccessat+0x7b/0x680 [ 1291.632779] ? SyS_fallocate+0x80/0x80 [ 1291.632781] ? do_syscall_64+0x4c/0x640 [ 1291.632784] ? SyS_faccessat+0x680/0x680 [ 1291.632786] do_syscall_64+0x1d5/0x640 [ 1291.632789] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1291.632791] RIP: 0033:0x7fc14fc799c7 [ 1291.632794] RSP: 002b:00007fff53633448 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1291.632800] RAX: ffffffffffffffda RBX: 00007fff53636470 RCX: 00007fc14fc799c7 [ 1291.632803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055fe064b39a3 [ 1291.632807] RBP: 00007fff53633590 R08: 000055fe064a93e5 R09: 0000000000000018 [ 1291.632810] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1291.632814] R13: 0000000000000000 R14: 000055fe07d388a0 R15: 00007fff53633a80 [ 1291.632815] Code: fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 66 03 00 00 66 83 6a 22 10 66 f7 42 22 f0 ff 0f 85 bf 00 00 00 <48> b8 00 00 00 00 00 fc ff df 48 8b 4c 24 08 8b 6c 24 38 48 c1 [ 1291.634831] Kernel panic - not syncing: hung_task: blocked tasks [ 1291.858575] CPU: 1 PID: 1531 Comm: khungtaskd Not tainted 4.14.202-syzkaller #0 [ 1291.866098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1291.875578] Call Trace: [ 1291.878189] dump_stack+0x1b2/0x283 [ 1291.881936] panic+0x1f9/0x42d [ 1291.885151] ? add_taint.cold+0x16/0x16 [ 1291.889172] watchdog+0x5ca/0xb40 [ 1291.892640] ? hungtask_pm_notify+0x50/0x50 [ 1291.896984] kthread+0x30d/0x420 [ 1291.900363] ? kthread_create_on_node+0xd0/0xd0 [ 1291.905094] ret_from_fork+0x24/0x30 [ 1291.909605] Kernel Offset: disabled [ 1291.913616] Rebooting in 86400 seconds..