Warning: Permanently added '10.128.1.19' (ECDSA) to the list of known hosts. syzkaller login: [ 829.346812] IPVS: ftp: loaded support on port[0] = 21 [ 829.400721] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 829.409621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.432851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.441603] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready executing program executing program [ 829.456015] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 829.467858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.478424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.491995] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 986.524508] INFO: task kworker/0:0:5 blocked for more than 140 seconds. [ 986.531375] Not tainted 4.19.155-syzkaller #0 [ 986.537198] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 986.545740] kworker/0:0 D29688 5 2 0x80000000 [ 986.551607] Workqueue: ipv6_addrconf addrconf_dad_work [ 986.558077] Call Trace: [ 986.560724] __schedule+0x887/0x2040 [ 986.566287] ? io_schedule_timeout+0x140/0x140 [ 986.570953] ? lock_downgrade+0x720/0x720 [ 986.576169] ? __mutex_lock+0x458/0x1260 [ 986.580244] schedule+0x8d/0x1b0 [ 986.583625] schedule_preempt_disabled+0xf/0x20 [ 986.589809] __mutex_lock+0x647/0x1260 [ 986.593716] ? addrconf_dad_work+0x9c/0x10a0 [ 986.599213] ? __mutex_add_waiter+0x160/0x160 [ 986.603715] ? lock_downgrade+0x720/0x720 [ 986.608918] ? lock_acquire+0x170/0x3c0 [ 986.612962] ? debug_object_deactivate+0xfc/0x2e0 [ 986.619020] ? trace_hardirqs_off+0x64/0x200 [ 986.623442] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 986.629704] addrconf_dad_work+0x9c/0x10a0 [ 986.634129] ? addrconf_dad_completed+0xb60/0xb60 [ 986.640338] process_one_work+0x864/0x1570 [ 986.645460] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 986.650152] worker_thread+0x64c/0x1130 [ 986.657607] ? process_one_work+0x1570/0x1570 [ 986.662171] kthread+0x33f/0x460 [ 986.666709] ? kthread_park+0x180/0x180 [ 986.670694] ret_from_fork+0x24/0x30 [ 986.676532] INFO: task kworker/1:0:19 blocked for more than 140 seconds. [ 986.683566] Not tainted 4.19.155-syzkaller #0 [ 986.689752] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 986.699126] kworker/1:0 D26360 19 2 0x80000000 [ 986.705917] Workqueue: ipv6_addrconf addrconf_dad_work [ 986.711197] Call Trace: [ 986.713784] __schedule+0x887/0x2040 [ 986.719053] ? io_schedule_timeout+0x140/0x140 [ 986.723649] ? lock_downgrade+0x720/0x720 [ 986.729728] ? __mutex_lock+0x458/0x1260 [ 986.733828] schedule+0x8d/0x1b0 [ 986.738295] schedule_preempt_disabled+0xf/0x20 [ 986.742975] __mutex_lock+0x647/0x1260 [ 986.747983] ? addrconf_dad_work+0x9c/0x10a0 [ 986.752427] ? __mutex_add_waiter+0x160/0x160 [ 986.757988] ? lock_downgrade+0x720/0x720 [ 986.762142] ? lock_acquire+0x170/0x3c0 [ 986.767120] ? debug_object_deactivate+0xfc/0x2e0 [ 986.771977] ? trace_hardirqs_off+0x64/0x200 [ 986.777443] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 986.782561] addrconf_dad_work+0x9c/0x10a0 [ 986.787964] ? addrconf_dad_completed+0xb60/0xb60 [ 986.792980] process_one_work+0x864/0x1570 [ 986.798545] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 986.803299] worker_thread+0x64c/0x1130 [ 986.808410] ? process_one_work+0x1570/0x1570 [ 986.812920] kthread+0x33f/0x460 [ 986.817398] ? kthread_park+0x180/0x180 [ 986.821425] ret_from_fork+0x24/0x30 [ 986.827008] INFO: task kworker/0:1:8102 blocked for more than 140 seconds. [ 986.834028] Not tainted 4.19.155-syzkaller #0 [ 986.840204] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 986.849216] kworker/0:1 D30128 8102 2 0x80000000 [ 986.856044] Workqueue: events linkwatch_event [ 986.860663] Call Trace: [ 986.863400] __schedule+0x887/0x2040 [ 986.868692] ? io_schedule_timeout+0x140/0x140 [ 986.873288] ? lock_downgrade+0x720/0x720 [ 986.878513] ? __mutex_lock+0x458/0x1260 [ 986.882586] schedule+0x8d/0x1b0 [ 986.887036] schedule_preempt_disabled+0xf/0x20 [ 986.891718] __mutex_lock+0x647/0x1260 [ 986.896928] ? linkwatch_event+0xb/0x60 [ 986.900926] ? __mutex_add_waiter+0x160/0x160 [ 986.906623] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 986.911746] ? process_one_work+0x77b/0x1570 [ 986.918279] ? check_preemption_disabled+0x41/0x280 [ 986.923331] linkwatch_event+0xb/0x60 [ 986.928411] process_one_work+0x864/0x1570 [ 986.932683] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 986.938622] worker_thread+0x64c/0x1130 [ 986.942621] ? __kthread_parkme+0x133/0x1e0 [ 986.948061] ? process_one_work+0x1570/0x1570 [ 986.952918] kthread+0x33f/0x460 [ 986.957981] ? kthread_park+0x180/0x180 [ 986.961970] ret_from_fork+0x24/0x30 [ 986.966832] INFO: task kworker/0:3:8142 blocked for more than 140 seconds. [ 986.973853] Not tainted 4.19.155-syzkaller #0 [ 986.980891] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 986.989711] kworker/0:3 D28312 8142 2 0x80000000 [ 986.996521] Workqueue: events disconnect_work [ 987.001023] Call Trace: [ 987.003623] __schedule+0x887/0x2040 [ 987.008914] ? io_schedule_timeout+0x140/0x140 [ 987.013515] ? lock_downgrade+0x720/0x720 [ 987.018744] ? __mutex_lock+0x458/0x1260 [ 987.022848] schedule+0x8d/0x1b0 [ 987.027515] schedule_preempt_disabled+0xf/0x20 [ 987.032214] __mutex_lock+0x647/0x1260 [ 987.037273] ? disconnect_work+0x18/0x200 [ 987.041435] ? __mutex_add_waiter+0x160/0x160 [ 987.047031] ? trace_hardirqs_off+0x64/0x200 [ 987.051455] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 987.057795] ? check_preemption_disabled+0x41/0x280 [ 987.062828] disconnect_work+0x18/0x200 [ 987.067919] process_one_work+0x864/0x1570 [ 987.072262] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 987.078539] worker_thread+0x64c/0x1130 [ 987.082967] ? __kthread_parkme+0x133/0x1e0 [ 987.089108] ? process_one_work+0x1570/0x1570 [ 987.093614] kthread+0x33f/0x460 [ 987.098068] ? kthread_park+0x180/0x180 [ 987.102075] ret_from_fork+0x24/0x30 [ 987.108014] [ 987.108014] Showing all locks held in the system: [ 987.115091] 3 locks held by kworker/0:0/5: [ 987.119337] #0: 00000000e3865122 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: process_one_work+0x767/0x1570 [ 987.131023] #1: 0000000050c6b283 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}, at: process_one_work+0x79c/0x1570 [ 987.143310] #2: 0000000070720d93 (rtnl_mutex){+.+.}, at: addrconf_dad_work+0x9c/0x10a0 [ 987.152264] 3 locks held by kworker/1:0/19: [ 987.157257] #0: 00000000e3865122 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: process_one_work+0x767/0x1570 [ 987.168409] #1: 000000000f2d7d0e ((work_completion)(&(&ifa->dad_work)->work)){+.+.}, at: process_one_work+0x79c/0x1570 [ 987.180084] #2: 0000000070720d93 (rtnl_mutex){+.+.}, at: addrconf_dad_work+0x9c/0x10a0 [ 987.188984] 1 lock held by khungtaskd/1566: [ 987.193305] #0: 000000009841bf2a (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 [ 987.203110] 1 lock held by in:imklog/7758: [ 987.208137] #0: 000000009f0d095a (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x26f/0x310 [ 987.217630] 3 locks held by kworker/0:1/8102: [ 987.222123] #0: 0000000043a8f26a ((wq_completion)"events"){+.+.}, at: process_one_work+0x767/0x1570 [ 987.232524] #1: 00000000e30d55ed ((linkwatch_work).work){+.+.}, at: process_one_work+0x79c/0x1570 [ 987.242342] #2: 0000000070720d93 (rtnl_mutex){+.+.}, at: linkwatch_event+0xb/0x60 [ 987.251178] 3 locks held by kworker/0:3/8142: [ 987.256463] #0: 0000000043a8f26a ((wq_completion)"events"){+.+.}, at: process_one_work+0x767/0x1570 [ 987.266468] #1: 00000000beb62ed3 (cfg80211_disconnect_work){+.+.}, at: process_one_work+0x79c/0x1570 [ 987.276570] #2: 0000000070720d93 (rtnl_mutex){+.+.}, at: disconnect_work+0x18/0x200 [ 987.285255] 4 locks held by syz-executor489/8155: [ 987.290147] [ 987.291764] ============================================= [ 987.291764] [ 987.300275] NMI backtrace for cpu 1 [ 987.303912] CPU: 1 PID: 1566 Comm: khungtaskd Not tainted 4.19.155-syzkaller #0 [ 987.311351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.320715] Call Trace: [ 987.323371] dump_stack+0x1fc/0x2fe [ 987.327006] nmi_cpu_backtrace.cold+0x63/0xa2 [ 987.331543] ? lapic_can_unplug_cpu.cold+0x39/0x39 [ 987.336474] nmi_trigger_cpumask_backtrace+0x1a6/0x1eb [ 987.341823] watchdog+0x991/0xe60 [ 987.345278] ? reset_hung_task_detector+0x30/0x30 [ 987.350117] kthread+0x33f/0x460 [ 987.353479] ? kthread_park+0x180/0x180 [ 987.357452] ret_from_fork+0x24/0x30 [ 987.361302] Sending NMI from CPU 1 to CPUs 0: [ 987.366831] NMI backtrace for cpu 0 [ 987.366836] CPU: 0 PID: 8155 Comm: syz-executor489 Not tainted 4.19.155-syzkaller #0 [ 987.366841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.366844] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x8/0x20 [ 987.366853] Code: 00 00 48 8b 0c 24 48 89 f2 48 89 fe bf 06 00 00 00 e9 2c ff ff ff 66 90 66 2e 0f 1f 84 00 00 00 00 00 48 8b 0c 24 40 0f b6 d6 <40> 0f b6 f7 bf 01 00 00 00 e9 0a ff ff ff 66 2e 0f 1f 84 00 00 00 [ 987.366856] RSP: 0018:ffff8880afa6f398 EFLAGS: 00000246 [ 987.366862] RAX: 0000000000000000 RBX: ffff8880afaadbc0 RCX: ffffffff87c34d4e [ 987.366865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 987.366869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 987.366872] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 987.366876] R13: ffff8880a8994620 R14: dffffc0000000000 R15: 0000000000000000 [ 987.366880] FS: 00000000006f8880(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 987.366883] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 987.366886] CR2: 00005634ffb589f8 CR3: 00000000a9cc4000 CR4: 00000000001406f0 [ 987.366890] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 987.366893] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 987.366895] Call Trace: [ 987.366898] ieee80211_chanctx_radar_detect+0x21e/0x390 [ 987.366901] ieee80211_check_combinations+0x3b8/0x810 [ 987.366903] ? ieee80211_recalc_dtim+0x240/0x240 [ 987.366906] ieee80211_check_concurrent_iface+0x46d/0x650 [ 987.366909] ieee80211_if_change_type+0x27b/0x5f0 [ 987.366912] ieee80211_change_iface+0x26/0x220 [ 987.366914] cfg80211_change_iface+0x2e1/0x1530 [ 987.366917] nl80211_set_interface+0x661/0x830 [ 987.366919] ? nl80211_nan_del_func+0x8b0/0x8b0 [ 987.366922] ? nl80211_dump_interface+0x6e0/0x6e0 [ 987.366925] ? nl80211_pre_doit+0xa2/0x620 [ 987.366927] ? __cfg80211_rdev_from_attrs+0x700/0x700 [ 987.366930] genl_family_rcv_msg+0x642/0xc40 [ 987.366932] ? genl_rcv+0x40/0x40 [ 987.366934] ? genl_rcv_msg+0x12f/0x160 [ 987.366937] ? __mutex_add_waiter+0x160/0x160 [ 987.366939] ? __radix_tree_lookup+0x216/0x370 [ 987.366942] genl_rcv_msg+0xbf/0x160 [ 987.366944] netlink_rcv_skb+0x160/0x440 [ 987.366947] ? genl_family_rcv_msg+0xc40/0xc40 [ 987.366949] ? netlink_ack+0xae0/0xae0 [ 987.366951] ? genl_rcv+0x15/0x40 [ 987.366953] genl_rcv+0x24/0x40 [ 987.366955] netlink_unicast+0x4d5/0x690 [ 987.366958] ? netlink_sendskb+0x110/0x110 [ 987.366961] ? _copy_from_iter_full+0x229/0x7c0 [ 987.366963] ? __phys_addr_symbol+0x2c/0x70 [ 987.366966] ? __check_object_size+0x17b/0x3d1 [ 987.366968] netlink_sendmsg+0x6bb/0xc40 [ 987.366970] ? aa_af_perm+0x230/0x230 [ 987.366973] ? nlmsg_notify+0x1a0/0x1a0 [ 987.366975] ? kernel_recvmsg+0x220/0x220 [ 987.366977] ? nlmsg_notify+0x1a0/0x1a0 [ 987.366979] sock_sendmsg+0xc3/0x120 [ 987.366982] ___sys_sendmsg+0x7bb/0x8e0 [ 987.366984] ? copy_msghdr_from_user+0x440/0x440 [ 987.366987] ? sock_ioctl+0x30e/0x5d0 [ 987.366990] ? dlci_ioctl_set+0x30/0x30 [ 987.366993] ? lock_downgrade+0x720/0x720 [ 987.366995] ? lock_acquire+0x170/0x3c0 [ 987.366998] ? debug_object_active_state+0x104/0x330 [ 987.367001] ? mark_held_locks+0xf0/0xf0 [ 987.367003] ? dlci_ioctl_set+0x30/0x30 [ 987.367005] ? do_vfs_ioctl+0x110/0x12e0 [ 987.367008] ? ioctl_preallocate+0x200/0x200 [ 987.367010] ? __fdget+0x1a0/0x230 [ 987.367012] __x64_sys_sendmsg+0x132/0x220 [ 987.367015] ? __sys_sendmsg+0x1b0/0x1b0 [ 987.367018] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 987.367020] ? trace_hardirqs_off_caller+0x6e/0x210 [ 987.367023] ? do_syscall_64+0x21/0x620 [ 987.367025] do_syscall_64+0xf9/0x620 [ 987.367028] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 987.367030] RIP: 0033:0x442209 [ 987.367038] Code: e8 ac 00 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 987.367041] RSP: 002b:00007ffc8e6184c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 987.367047] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000442209 [ 987.367051] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 987.367055] RBP: 000000306e616c77 R08: 0000001d00000000 R09: 0000001d00000000 [ 987.367059] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000ca879 [ 987.367063] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 987.401048] Kernel panic - not syncing: hung_task: blocked tasks [ 987.799883] CPU: 1 PID: 1566 Comm: khungtaskd Not tainted 4.19.155-syzkaller #0 [ 987.807452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.816805] Call Trace: [ 987.819410] dump_stack+0x1fc/0x2fe [ 987.823152] panic+0x26a/0x50e [ 987.826369] ? __warn_printk+0xf3/0xf3 [ 987.830258] ? lapic_can_unplug_cpu.cold+0x39/0x39 [ 987.835189] ? ___preempt_schedule+0x16/0x18 [ 987.839599] ? watchdog+0x991/0xe60 [ 987.843227] ? nmi_trigger_cpumask_backtrace+0x15e/0x1eb [ 987.848696] watchdog+0x9a2/0xe60 [ 987.852168] ? reset_hung_task_detector+0x30/0x30 [ 987.857007] kthread+0x33f/0x460 [ 987.860463] ? kthread_park+0x180/0x180 [ 987.864434] ret_from_fork+0x24/0x30 [ 987.869124] Kernel Offset: disabled [ 987.872749] Rebooting in 86400 seconds..