[ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.45' (ECDSA) to the list of known hosts. executing program executing program syzkaller login: [ 486.237964][ T8462] IPVS: ftp: loaded support on port[0] = 21 [ 716.264741][ T1655] INFO: task kworker/0:0:8454 blocked for more than 143 seconds. [ 716.272893][ T1655] Not tainted 5.11.0-rc2-syzkaller #0 [ 716.281528][ T1655] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 716.291241][ T1655] task:kworker/0:0 state:D stack:29936 pid: 8454 ppid: 2 flags:0x00004000 [ 716.302262][ T1655] Workqueue: ipv6_addrconf addrconf_verify_work [ 716.309591][ T1655] Call Trace: [ 716.312947][ T1655] __schedule+0x90c/0x21a0 [ 716.319137][ T1655] ? io_schedule_timeout+0x140/0x140 [ 716.325798][ T1655] ? _raw_spin_unlock_irq+0x1f/0x40 [ 716.331134][ T1655] ? lockdep_hardirqs_on+0x79/0x100 [ 716.337642][ T1655] schedule+0xcf/0x270 [ 716.341754][ T1655] schedule_preempt_disabled+0xf/0x20 [ 716.350888][ T1655] __mutex_lock+0x81a/0x1110 [ 716.357748][ T1655] ? addrconf_verify_work+0xa/0x20 [ 716.362903][ T1655] ? mutex_lock_io_nested+0xf60/0xf60 [ 716.369585][ T1655] ? lock_release+0x710/0x710 [ 716.374332][ T1655] ? lock_downgrade+0x6d0/0x6d0 [ 716.380456][ T1655] addrconf_verify_work+0xa/0x20 [ 716.386271][ T1655] process_one_work+0x98d/0x15f0 [ 716.391316][ T1655] ? pwq_dec_nr_in_flight+0x320/0x320 [ 716.397926][ T1655] ? rwlock_bug.part.0+0x90/0x90 [ 716.402949][ T1655] ? _raw_spin_lock_irq+0x41/0x50 [ 716.409298][ T1655] worker_thread+0x64c/0x1120 [ 716.414025][ T1655] ? __kthread_parkme+0x13f/0x1e0 [ 716.420723][ T1655] ? process_one_work+0x15f0/0x15f0 [ 716.426917][ T1655] kthread+0x3b1/0x4a0 [ 716.431133][ T1655] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 716.438417][ T1655] ret_from_fork+0x1f/0x30 [ 716.443071][ T1655] [ 716.443071][ T1655] Showing all locks held in the system: [ 716.452073][ T1655] 1 lock held by khungtaskd/1655: [ 716.457977][ T1655] #0: ffffffff8b373a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 716.469718][ T1655] 1 lock held by in:imklog/8164: [ 716.475440][ T1655] #0: ffff888017d0bc70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 716.486735][ T1655] 3 locks held by kworker/0:0/8454: [ 716.491957][ T1655] #0: ffff888021270538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x871/0x15f0 [ 716.504359][ T1655] #1: ffffc900019bfda8 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x8a5/0x15f0 [ 716.515550][ T1655] #2: ffffffff8ca585e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20 [ 716.525834][ T1655] 1 lock held by syz-executor613/8484: [ 716.531352][ T1655] [ 716.533688][ T1655] ============================================= [ 716.533688][ T1655] [ 716.544766][ T1655] NMI backtrace for cpu 1 [ 716.549119][ T1655] CPU: 1 PID: 1655 Comm: khungtaskd Not tainted 5.11.0-rc2-syzkaller #0 [ 716.557634][ T1655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.567821][ T1655] Call Trace: [ 716.571114][ T1655] dump_stack+0x107/0x163 [ 716.575703][ T1655] nmi_cpu_backtrace.cold+0x44/0xd7 [ 716.581138][ T1655] ? lapic_can_unplug_cpu+0x80/0x80 [ 716.586478][ T1655] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 716.592616][ T1655] watchdog+0xd43/0xfa0 [ 716.596863][ T1655] ? reset_hung_task_detector+0x30/0x30 [ 716.602434][ T1655] kthread+0x3b1/0x4a0 [ 716.606523][ T1655] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 716.612529][ T1655] ret_from_fork+0x1f/0x30 [ 716.617252][ T1655] Sending NMI from CPU 1 to CPUs 0: [ 716.623792][ C0] NMI backtrace for cpu 0 [ 716.623801][ C0] CPU: 0 PID: 8484 Comm: syz-executor613 Not tainted 5.11.0-rc2-syzkaller #0 [ 716.623811][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.623821][ C0] RIP: 0010:__radix_tree_lookup+0x17/0x2a0 [ 716.623832][ C0] Code: 89 ff e8 cc c1 dc fd e9 c1 fe ff ff 0f 1f 80 00 00 00 00 41 57 41 56 49 89 f6 41 55 41 54 55 48 bd 00 00 00 00 00 fc ff df 53 <48> 89 fb 48 83 ec 28 48 89 7c 24 10 48 89 14 24 48 89 4c 24 08 e8 [ 716.623848][ C0] RSP: 0018:ffffc900015fef18 EFLAGS: 00000246 [ 716.623860][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 716.623869][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888013e95890 [ 716.623878][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffff888013e95807 [ 716.623886][ C0] R10: ffffffff8715d149 R11: 0000000000000001 R12: ffffc900015ff190 [ 716.623895][ C0] R13: 0000000000000001 R14: 0000000000000001 R15: ffff888013e95890 [ 716.623904][ C0] FS: 00000000023c8880(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 716.623913][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 716.623921][ C0] CR2: 00000000200001c0 CR3: 0000000012f8c000 CR4: 00000000001506f0 [ 716.623930][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 716.623938][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 716.623945][ C0] Call Trace: [ 716.623950][ C0] tcf_idr_check_alloc+0xb0/0x3b0 [ 716.623955][ C0] tcf_police_init+0x34f/0x1460 [ 716.623961][ C0] ? tcf_police_cleanup+0x60/0x60 [ 716.623967][ C0] ? find_held_lock+0x2d/0x110 [ 716.623972][ C0] ? tc_lookup_action_n+0xcd/0xf0 [ 716.623978][ C0] tcf_action_init_1+0x1a3/0x990 [ 716.623983][ C0] ? tcf_action_dump_old+0x80/0x80 [ 716.623989][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 716.623994][ C0] ? find_held_lock+0x2d/0x110 [ 716.624000][ C0] ? __mutex_unlock_slowpath+0xe2/0x610 [ 716.624006][ C0] ? wait_for_completion_io+0x260/0x260 [ 716.624012][ C0] tcf_exts_validate+0x138/0x420 [ 716.624018][ C0] ? tcf_exts_destroy+0xc0/0xc0 [ 716.624023][ C0] basic_change+0x47a/0x1310 [ 716.624028][ C0] ? basic_delete+0x680/0x680 [ 716.624034][ C0] tc_new_tfilter+0x1394/0x2120 [ 716.624039][ C0] ? basic_delete+0x680/0x680 [ 716.624050][ C0] ? tc_del_tfilter+0x15b0/0x15b0 [ 716.624056][ C0] ? lock_chain_count+0x20/0x20 [ 716.624061][ C0] ? kernel_text_address+0xbd/0xf0 [ 716.624067][ C0] ? tc_del_tfilter+0x15b0/0x15b0 [ 716.624073][ C0] rtnetlink_rcv_msg+0x80e/0xad0 [ 716.624079][ C0] ? rtnetlink_put_metrics+0x510/0x510 [ 716.624085][ C0] netlink_rcv_skb+0x153/0x420 [ 716.624091][ C0] ? rtnetlink_put_metrics+0x510/0x510 [ 716.624096][ C0] ? netlink_ack+0xaa0/0xaa0 [ 716.624102][ C0] ? netlink_deliver_tap+0x227/0xb70 [ 716.624107][ C0] netlink_unicast+0x533/0x7d0 [ 716.624113][ C0] ? netlink_attachskb+0x870/0x870 [ 716.624119][ C0] ? _copy_from_iter_full+0x275/0x850 [ 716.624125][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 716.624132][ C0] ? __phys_addr_symbol+0x2c/0x70 [ 716.624138][ C0] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 716.624144][ C0] ? __check_object_size+0x171/0x3f0 [ 716.624149][ C0] netlink_sendmsg+0x856/0xd90 [ 716.624155][ C0] ? netlink_unicast+0x7d0/0x7d0 [ 716.624161][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 716.624167][ C0] ? netlink_unicast+0x7d0/0x7d0 [ 716.624173][ C0] sock_sendmsg+0xcf/0x120 [ 716.624178][ C0] ____sys_sendmsg+0x6e8/0x810 [ 716.624183][ C0] ? kernel_sendmsg+0x50/0x50 [ 716.624188][ C0] ? do_recvmmsg+0x6c0/0x6c0 [ 716.624194][ C0] ? rcu_read_lock_sched_held+0x3a/0x70 [ 716.624199][ C0] ? kfree+0x2ec/0x3b0 [ 716.624204][ C0] ___sys_sendmsg+0xf3/0x170 [ 716.624210][ C0] ? sendmsg_copy_msghdr+0x160/0x160 [ 716.624215][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 716.624221][ C0] ? _copy_to_user+0xdc/0x150 [ 716.624227][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 716.624233][ C0] ? move_addr_to_user+0xad/0x1e0 [ 716.624239][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 716.624246][ C0] ? __fget_light+0x215/0x280 [ 716.624251][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 716.624258][ C0] __sys_sendmsg+0xe5/0x1b0 [ 716.624263][ C0] ? __sys_sendmsg_sock+0xb0/0xb0 [ 716.624269][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 716.624276][ C0] ? syscall_enter_from_user_mode+0x1d/0x50 [ 716.624282][ C0] do_syscall_64+0x2d/0x70 [ 716.624287][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 716.624293][ C0] RIP: 0033:0x441829 [ 716.624303][ C0] Code: e8 5c ad 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 bb 09 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 716.624319][ C0] RSP: 002b:00007fff45714d88 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.624333][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441829 [ 716.624341][ C0] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 716.624350][ C0] RBP: 00007fff45714d90 R08: 0000000100000000 R09: 0000000100000000 [ 716.624359][ C0] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000076bac [ 716.624367][ C0] R13: 0000000000402700 R14: 0000000000000000 R15: 0000000000000000 [ 716.624377][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.285 msecs [ 716.635531][ T1655] Kernel panic - not syncing: hung_task: blocked tasks [ 717.161277][ T1655] CPU: 1 PID: 1655 Comm: khungtaskd Not tainted 5.11.0-rc2-syzkaller #0 [ 717.169620][ T1655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.179860][ T1655] Call Trace: [ 717.183151][ T1655] dump_stack+0x107/0x163 [ 717.187506][ T1655] panic+0x306/0x73d [ 717.191457][ T1655] ? __warn_printk+0xf3/0xf3 [ 717.196094][ T1655] ? lapic_can_unplug_cpu+0x80/0x80 [ 717.201309][ T1655] ? preempt_schedule_thunk+0x16/0x18 [ 717.206702][ T1655] ? nmi_trigger_cpumask_backtrace+0x196/0x230 [ 717.212881][ T1655] ? watchdog.cold+0x5/0x158 [ 717.217526][ T1655] watchdog.cold+0x16/0x158 [ 717.222144][ T1655] ? reset_hung_task_detector+0x30/0x30 [ 717.227713][ T1655] kthread+0x3b1/0x4a0 [ 717.231799][ T1655] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 717.237714][ T1655] ret_from_fork+0x1f/0x30 [ 717.243063][ T1655] Kernel Offset: disabled [ 717.247488][ T1655] Rebooting in 86400 seconds..