[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.120' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 850.137666][ T8456] netlink: 32 bytes leftover after parsing attributes in process `syz-executor059'. [ 1002.362692][ T1659] INFO: task syz-executor059:8456 blocked for more than 143 seconds. [ 1002.371196][ T1659] Not tainted 5.11.0-rc5-syzkaller #0 [ 1002.377330][ T1659] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1002.386551][ T1659] task:syz-executor059 state:D stack:25784 pid: 8456 ppid: 8454 flags:0x00004004 [ 1002.396420][ T1659] Call Trace: [ 1002.399728][ T1659] __schedule+0x90c/0x21a0 [ 1002.405077][ T1659] ? io_schedule_timeout+0x140/0x140 [ 1002.410389][ T1659] schedule+0xcf/0x270 [ 1002.415321][ T1659] schedule_preempt_disabled+0xf/0x20 [ 1002.420704][ T1659] __mutex_lock+0x81a/0x1110 [ 1002.426232][ T1659] ? tcf_action_init_1+0x743/0x990 [ 1002.431549][ T1659] ? mutex_lock_io_nested+0xf60/0xf60 [ 1002.437794][ T1659] ? tc_lookup_action_n+0xcd/0xf0 [ 1002.443439][ T1659] ? lock_downgrade+0x6d0/0x6d0 [ 1002.448508][ T1659] ? generic_xdp_install+0x7b0/0x7b0 [ 1002.454535][ T1659] tcf_action_init_1+0x743/0x990 [ 1002.459492][ T1659] ? tcf_action_dump_old+0x80/0x80 [ 1002.465503][ T1659] ? find_held_lock+0x2d/0x110 [ 1002.470398][ T1659] tcf_action_init+0x265/0x4b0 [ 1002.477347][ T1659] ? tcf_action_init_1+0x990/0x990 [ 1002.482965][ T1659] ? lock_chain_count+0x20/0x20 [ 1002.487862][ T1659] ? __lock_acquire+0x16c2/0x54f0 [ 1002.493597][ T1659] tcf_action_add+0xd9/0x360 [ 1002.498307][ T1659] ? tca_action_gd+0xe20/0xe20 [ 1002.503794][ T1659] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1002.510235][ T1659] ? __nla_parse+0x3d/0x50 [ 1002.515714][ T1659] tc_ctl_action+0x33a/0x440 [ 1002.520435][ T1659] ? tcf_action_add+0x360/0x360 [ 1002.526207][ T1659] ? rtnetlink_rcv_msg+0x3c3/0xad0 [ 1002.531353][ T1659] ? tcf_action_add+0x360/0x360 [ 1002.537061][ T1659] rtnetlink_rcv_msg+0x44e/0xad0 [ 1002.542230][ T1659] ? rtnetlink_put_metrics+0x510/0x510 [ 1002.548664][ T1659] netlink_rcv_skb+0x153/0x420 [ 1002.553899][ T1659] ? rtnetlink_put_metrics+0x510/0x510 [ 1002.559387][ T1659] ? netlink_ack+0xaa0/0xaa0 [ 1002.564704][ T1659] ? netlink_deliver_tap+0x227/0xb70 [ 1002.570027][ T1659] netlink_unicast+0x533/0x7d0 [ 1002.575521][ T1659] ? netlink_attachskb+0x870/0x870 [ 1002.580648][ T1659] ? _copy_from_iter_full+0x275/0x850 [ 1002.586775][ T1659] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1002.593426][ T1659] ? __phys_addr_symbol+0x2c/0x70 [ 1002.598474][ T1659] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1002.604944][ T1659] ? __check_object_size+0x171/0x3f0 [ 1002.610255][ T1659] netlink_sendmsg+0x856/0xd90 [ 1002.615826][ T1659] ? netlink_unicast+0x7d0/0x7d0 [ 1002.620796][ T1659] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1002.627886][ T1659] ? netlink_unicast+0x7d0/0x7d0 [ 1002.633240][ T1659] sock_sendmsg+0xcf/0x120 [ 1002.637671][ T1659] ____sys_sendmsg+0x6e8/0x810 [ 1002.642441][ T1659] ? kernel_sendmsg+0x50/0x50 [ 1002.648156][ T1659] ? do_recvmmsg+0x6c0/0x6c0 [ 1002.653275][ T1659] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1002.659289][ T1659] ___sys_sendmsg+0xf3/0x170 [ 1002.664655][ T1659] ? sendmsg_copy_msghdr+0x160/0x160 [ 1002.669972][ T1659] ? __fget_files+0x266/0x3d0 [ 1002.675484][ T1659] ? lock_downgrade+0x6d0/0x6d0 [ 1002.680438][ T1659] ? do_huge_pmd_anonymous_page+0x8f1/0x2390 [ 1002.687123][ T1659] ? __fget_files+0x288/0x3d0 [ 1002.691812][ T1659] ? __fget_light+0xea/0x280 [ 1002.697117][ T1659] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1002.703849][ T1659] __sys_sendmsg+0xe5/0x1b0 [ 1002.708376][ T1659] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1002.714162][ T1659] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1002.720449][ T1659] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1002.727514][ T1659] do_syscall_64+0x2d/0x70 [ 1002.731937][ T1659] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1002.738528][ T1659] RIP: 0033:0x447b89 [ 1002.742433][ T1659] RSP: 002b:00007f1b0940ece8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1002.751642][ T1659] RAX: ffffffffffffffda RBX: 00000000006dcc28 RCX: 0000000000447b89 [ 1002.760129][ T1659] RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000003 [ 1002.768566][ T1659] RBP: 00000000006dcc20 R08: 0000000000000000 R09: 0000000000000000 [ 1002.777037][ T1659] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dcc2c [ 1002.785497][ T1659] R13: 00007ffc841424af R14: 00007f1b0940f9c0 R15: 20c49ba5e353f7cf [ 1002.794124][ T1659] [ 1002.794124][ T1659] Showing all locks held in the system: [ 1002.801857][ T1659] 3 locks held by kworker/1:0/19: [ 1002.807635][ T1659] #0: ffff888020ffc538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x871/0x15f0 [ 1002.820505][ T1659] #1: ffffc90000d97da8 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x8a5/0x15f0 [ 1002.831338][ T1659] #2: ffffffff8ca58a68 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20 [ 1002.841357][ T1659] 1 lock held by khungtaskd/1659: [ 1002.846846][ T1659] #0: ffffffff8b373da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 1002.857270][ T1659] 1 lock held by in:imklog/8152: [ 1002.862216][ T1659] #0: ffff888010fc0870 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 1002.872146][ T1659] 1 lock held by syz-executor059/8456: [ 1002.878150][ T1659] #0: ffffffff8ca58a68 (rtnl_mutex){+.+.}-{3:3}, at: tcf_action_init_1+0x743/0x990 [ 1002.888215][ T1659] 2 locks held by syz-executor059/8458: [ 1002.894388][ T1659] [ 1002.896720][ T1659] ============================================= [ 1002.896720][ T1659] [ 1002.905872][ T1659] NMI backtrace for cpu 1 [ 1002.910211][ T1659] CPU: 1 PID: 1659 Comm: khungtaskd Not tainted 5.11.0-rc5-syzkaller #0 [ 1002.918547][ T1659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1002.928765][ T1659] Call Trace: [ 1002.932058][ T1659] dump_stack+0x107/0x163 [ 1002.936398][ T1659] nmi_cpu_backtrace.cold+0x44/0xd7 [ 1002.941602][ T1659] ? lapic_can_unplug_cpu+0x80/0x80 [ 1002.946804][ T1659] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 1002.952797][ T1659] watchdog+0xd43/0xfa0 [ 1002.956966][ T1659] ? reset_hung_task_detector+0x30/0x30 [ 1002.962513][ T1659] kthread+0x3b1/0x4a0 [ 1002.966578][ T1659] ? __kthread_bind_mask+0xc0/0xc0 [ 1002.971687][ T1659] ret_from_fork+0x1f/0x30 [ 1002.976368][ T1659] Sending NMI from CPU 1 to CPUs 0: [ 1002.982204][ C0] NMI backtrace for cpu 0 [ 1002.982212][ C0] CPU: 0 PID: 8458 Comm: syz-executor059 Not tainted 5.11.0-rc5-syzkaller #0 [ 1002.982219][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1002.982226][ C0] RIP: 0010:check_kcov_mode+0x2c/0x40 [ 1002.982234][ C0] Code: 05 89 36 8f 7e 89 c2 81 e2 00 01 00 00 a9 00 01 ff 00 74 10 31 c0 85 d2 74 15 8b 96 cc 14 00 00 85 d2 74 0b 8b 86 a8 14 00 00 <39> f8 0f 94 c0 c3 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 31 c0 [ 1002.982245][ C0] RSP: 0018:ffffc9000166ef00 EFLAGS: 00000246 [ 1002.982255][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000001 [ 1002.982261][ C0] RDX: 0000000000000000 RSI: ffff8880202cb780 RDI: 0000000000000003 [ 1002.982268][ C0] RBP: ffffc9000166efb8 R08: 0000000000000000 R09: ffff8881473f6c07 [ 1002.982274][ C0] R10: ffffffff871653c9 R11: 0000000000000001 R12: ffffc9000166f0f0 [ 1002.982280][ C0] R13: 0000000000000000 R14: ffff8881473f6c00 R15: ffff8881473f6c90 [ 1002.982287][ C0] FS: 00007f1b093ee700(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 1002.982293][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1002.982298][ C0] CR2: 00007f6f1d552240 CR3: 0000000010f04000 CR4: 0000000000350ef0 [ 1002.982303][ C0] Call Trace: [ 1002.982307][ C0] __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1002.982312][ C0] tcf_idr_check_alloc+0x99/0x3b0 [ 1002.982316][ C0] tcf_connmark_init+0x2de/0x910 [ 1002.982320][ C0] ? tcf_connmark_act+0xb40/0xb40 [ 1002.982324][ C0] ? tc_lookup_action_n+0xcd/0xf0 [ 1002.982333][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 1002.982337][ C0] tcf_action_init_1+0x63b/0x990 [ 1002.982341][ C0] ? tcf_action_dump_old+0x80/0x80 [ 1002.982345][ C0] tcf_action_init+0x265/0x4b0 [ 1002.982349][ C0] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1002.982354][ C0] ? tcf_action_init_1+0x990/0x990 [ 1002.982358][ C0] ? lock_chain_count+0x20/0x20 [ 1002.982362][ C0] ? __lock_acquire+0x16c2/0x54f0 [ 1002.982366][ C0] tcf_action_add+0xd9/0x360 [ 1002.982370][ C0] ? tca_action_gd+0xe20/0xe20 [ 1002.982374][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1002.982378][ C0] ? __nla_parse+0x3d/0x50 [ 1002.982382][ C0] tc_ctl_action+0x33a/0x440 [ 1002.982386][ C0] ? tcf_action_add+0x360/0x360 [ 1002.982390][ C0] ? rtnetlink_rcv_msg+0x3c3/0xad0 [ 1002.982394][ C0] ? tcf_action_add+0x360/0x360 [ 1002.982398][ C0] rtnetlink_rcv_msg+0x44e/0xad0 [ 1002.982402][ C0] ? rtnetlink_put_metrics+0x510/0x510 [ 1002.982406][ C0] netlink_rcv_skb+0x153/0x420 [ 1002.982410][ C0] ? rtnetlink_put_metrics+0x510/0x510 [ 1002.982414][ C0] ? netlink_ack+0xaa0/0xaa0 [ 1002.982418][ C0] ? netlink_deliver_tap+0x227/0xb70 [ 1002.982423][ C0] netlink_unicast+0x533/0x7d0 [ 1002.982427][ C0] ? netlink_attachskb+0x870/0x870 [ 1002.982431][ C0] ? _copy_from_iter_full+0x275/0x850 [ 1002.982435][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1002.982440][ C0] ? __phys_addr_symbol+0x2c/0x70 [ 1002.982444][ C0] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1002.982449][ C0] ? __check_object_size+0x171/0x3f0 [ 1002.982453][ C0] netlink_sendmsg+0x856/0xd90 [ 1002.982457][ C0] ? netlink_unicast+0x7d0/0x7d0 [ 1002.982461][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1002.982466][ C0] ? netlink_unicast+0x7d0/0x7d0 [ 1002.982470][ C0] sock_sendmsg+0xcf/0x120 [ 1002.982473][ C0] ____sys_sendmsg+0x6e8/0x810 [ 1002.982480][ C0] ? kernel_sendmsg+0x50/0x50 [ 1002.982485][ C0] ? do_recvmmsg+0x6c0/0x6c0 [ 1002.982489][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1002.982494][ C0] ___sys_sendmsg+0xf3/0x170 [ 1002.982499][ C0] ? sendmsg_copy_msghdr+0x160/0x160 [ 1002.982503][ C0] ? __fget_files+0x266/0x3d0 [ 1002.982507][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 1002.982514][ C0] ? __fget_files+0x288/0x3d0 [ 1002.982518][ C0] ? __fget_light+0xea/0x280 [ 1002.982523][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1002.982528][ C0] __sys_sendmsg+0xe5/0x1b0 [ 1002.982532][ C0] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1002.982536][ C0] ? __do_sys_futex+0x2a2/0x470 [ 1002.982540][ C0] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1002.982544][ C0] do_syscall_64+0x2d/0x70 [ 1002.982548][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1002.982552][ C0] RIP: 0033:0x447b89 [ 1002.982559][ C0] Code: e8 4c b4 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1002.982571][ C0] RSP: 002b:00007f1b093edce8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1002.982581][ C0] RAX: ffffffffffffffda RBX: 00000000006dcc38 RCX: 0000000000447b89 [ 1002.982587][ C0] RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000004 [ 1002.982593][ C0] RBP: 00000000006dcc30 R08: 0000000000000004 R09: 0000000000000000 [ 1002.982599][ C0] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000006dcc3c [ 1002.982605][ C0] R13: 00007ffc841424af R14: 00007f1b093ee9c0 R15: 20c49ba5e353f7cf [ 1003.002541][ T1659] Kernel panic - not syncing: hung_task: blocked tasks [ 1003.464985][ T1659] CPU: 1 PID: 1659 Comm: khungtaskd Not tainted 5.11.0-rc5-syzkaller #0 [ 1003.473307][ T1659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1003.483440][ T1659] Call Trace: [ 1003.486713][ T1659] dump_stack+0x107/0x163 [ 1003.491045][ T1659] panic+0x306/0x73d [ 1003.495212][ T1659] ? __warn_printk+0xf3/0xf3 [ 1003.499942][ T1659] ? lapic_can_unplug_cpu+0x80/0x80 [ 1003.505145][ T1659] ? preempt_schedule_thunk+0x16/0x18 [ 1003.510522][ T1659] ? nmi_trigger_cpumask_backtrace+0x196/0x230 [ 1003.516710][ T1659] ? watchdog.cold+0x5/0x158 [ 1003.521331][ T1659] watchdog.cold+0x16/0x158 [ 1003.525907][ T1659] ? reset_hung_task_detector+0x30/0x30 [ 1003.531472][ T1659] kthread+0x3b1/0x4a0 [ 1003.535547][ T1659] ? __kthread_bind_mask+0xc0/0xc0 [ 1003.540662][ T1659] ret_from_fork+0x1f/0x30 [ 1003.548705][ T1659] Kernel Offset: disabled [ 1003.553036][ T1659] Rebooting in 86400 seconds..