[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.20' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 67.234140][ T6833] netlink: 'syz-executor157': attribute type 2 has an invalid length. [ 67.246006][ T6833] [ 67.248393][ T6833] ============================= [ 67.254962][ T6833] WARNING: suspicious RCU usage [ 67.260615][ T6833] 5.8.0-rc7-syzkaller #0 Not tainted [ 67.267083][ T6833] ----------------------------- [ 67.273117][ T6833] net/openvswitch/flow_table.c:521 suspicious rcu_dereference_check() usage! [ 67.282333][ T6833] [ 67.282333][ T6833] other info that might help us debug this: [ 67.282333][ T6833] [ 67.294393][ T6833] [ 67.294393][ T6833] rcu_scheduler_active = 2, debug_locks = 1 [ 67.303716][ T6833] 1 lock held by syz-executor157/6833: [ 67.309194][ T6833] #0: ffffffff8a832390 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 67.318510][ T6833] [ 67.318510][ T6833] stack backtrace: [ 67.325415][ T6833] CPU: 1 PID: 6833 Comm: syz-executor157 Not tainted 5.8.0-rc7-syzkaller #0 [ 67.334734][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.346156][ T6833] Call Trace: [ 67.349620][ T6833] dump_stack+0x18f/0x20d [ 67.354138][ T6833] ovs_flow_tbl_destroy+0x1d6/0x210 [ 67.360079][ T6833] ovs_dp_cmd_new+0x8ca/0xea0 [ 67.365170][ T6833] ? ovs_vport_cmd_new+0xc60/0xc60 [ 67.370412][ T6833] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 67.378154][ T6833] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 67.386673][ T6833] genl_rcv_msg+0x61d/0x980 [ 67.391260][ T6833] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 67.399004][ T6833] ? lock_release+0x8d0/0x8d0 [ 67.404343][ T6833] netlink_rcv_skb+0x15a/0x430 [ 67.409346][ T6833] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 67.416883][ T6833] ? netlink_ack+0xa10/0xa10 [ 67.421689][ T6833] genl_rcv+0x24/0x40 [ 67.425676][ T6833] netlink_unicast+0x533/0x7d0 [ 67.430687][ T6833] ? netlink_attachskb+0x810/0x810 [ 67.436086][ T6833] ? _copy_from_iter_full+0x247/0x890 [ 67.441471][ T6833] ? __phys_addr+0x9a/0x110 [ 67.446169][ T6833] ? __phys_addr_symbol+0x2c/0x70 [ 67.451334][ T6833] ? __check_object_size+0x171/0x3e4 [ 67.457097][ T6833] netlink_sendmsg+0x856/0xd90 [ 67.461884][ T6833] ? netlink_unicast+0x7d0/0x7d0 [ 67.466814][ T6833] ? netlink_unicast+0x7d0/0x7d0 [ 67.471750][ T6833] sock_sendmsg+0xcf/0x120 [ 67.476471][ T6833] ____sys_sendmsg+0x6e8/0x810 [ 67.482468][ T6833] ? kernel_sendmsg+0x50/0x50 [ 67.487375][ T6833] ? do_recvmmsg+0x6d0/0x6d0 [ 67.493229][ T6833] ? lock_acquire+0x1f1/0xad0 [ 67.497936][ T6833] ? do_huge_pmd_anonymous_page+0x120d/0x2230 [ 67.504364][ T6833] ? find_held_lock+0x2d/0x110 [ 67.509255][ T6833] ___sys_sendmsg+0xf3/0x170 [ 67.514229][ T6833] ? sendmsg_copy_msghdr+0x160/0x160 [ 67.519948][ T6833] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 67.526138][ T6833] ? do_huge_pmd_anonymous_page+0x8ef/0x2230 [ 67.532563][ T6833] ? handle_mm_fault+0xad9/0x43f0 [ 67.538299][ T6833] ? find_held_lock+0x2d/0x110 [ 67.543500][ T6833] ? __fget_light+0x215/0x280 [ 67.548623][ T6833] __sys_sendmsg+0xe5/0x1b0 [ 67.553579][ T6833] ? __sys_sendmsg_sock+0xb0/0xb0 [ 67.559255][ T6833] ? do_syscall_64+0x1c/0xe0 [ 67.564132][ T6833] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 67.570338][ T6833] do_syscall_64+0x60/0xe0 [ 67.575687][ T6833] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 67.582877][ T6833] RIP: 0033:0x4402d9 [ 67.586971][ T6833] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 67.610140][ T6833] RSP: 002b:00007fff373c1e48 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.618977][ T6833] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004402d9 [ 67.627181][ T6833] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 67.635982][ T6833] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 67.644186][ T6833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401ae0 [ 67.652408][ T6833] R13: 0000000000401b70 R14: 0000000000000000 R15: 0000000000000000 [ 67.661971][ T6833] [ 67.664475][ T6833] ============================= [ 67.669656][ T6833] WARNING: suspicious RCU usage [ 67.674653][ T6833] 5.8.0-rc7-syzkaller #0 Not tainted [ 67.680043][ T6833] ----------------------------- [ 67.685128][ T6833] net/openvswitch/flow_table.c:522 suspicious rcu_dereference_check() usage! [ 67.695520][ T6833] [ 67.695520][ T6833] other info that might help us debug this: [ 67.695520][ T6833] [ 67.706482][ T6833] [ 67.706482][ T6833] rcu_scheduler_active = 2, debug_locks = 1 [ 67.715081][ T6833] 1 lock held by syz-executor157/6833: [ 67.720543][ T6833] #0: ffffffff8a832390 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 67.728804][ T6833] [ 67.728804][ T6833] stack backtrace: [ 67.735333][ T6833] CPU: 1 PID: 6833 Comm: syz-executor157 Not tainted 5.8.0-rc7-syzkaller #0 [ 67.744651][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.755032][ T6833] Call Trace: [ 67.758530][ T6833] dump_stack+0x18f/0x20d [ 67.762899][ T6833] ovs_flow_tbl_destroy+0x190/0x210 [ 67.768117][ T6833] ovs_dp_cmd_new+0x8ca/0xea0 [ 67.773063][ T6833] ? ovs_vport_cmd_new+0xc60/0xc60 [ 67.778528][ T6833] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 67.785939][ T6833] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 67.793222][ T6833] genl_rcv_msg+0x61d/0x980 [ 67.797809][ T6833] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 67.805128][ T6833] ? lock_release+0x8d0/0x8d0 [ 67.810578][ T6833] netlink_rcv_skb+0x15a/0x430 [ 67.815644][ T6833] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 67.823248][ T6833] ? netlink_ack+0xa10/0xa10 [ 67.828127][ T6833] genl_rcv+0x24/0x40 [ 67.832953][ T6833] netlink_unicast+0x533/0x7d0 [ 67.838970][ T6833] ? netlink_attachskb+0x810/0x810 [ 67.844611][ T6833] ? _copy_from_iter_full+0x247/0x890 [ 67.849999][ T6833] ? __phys_addr+0x9a/0x110 [ 67.854484][ T6833] ? __phys_addr_symbol+0x2c/0x70 [ 67.859583][ T6833] ? __check_object_size+0x171/0x3e4 [ 67.865176][ T6833] netlink_sendmsg+0x856/0xd90 [ 67.870240][ T6833] ? netlink_unicast+0x7d0/0x7d0 [ 67.875985][ T6833] ? netlink_unicast+0x7d0/0x7d0 [ 67.883368][ T6833] sock_sendmsg+0xcf/0x120 [ 67.887814][ T6833] ____sys_sendmsg+0x6e8/0x810 [ 67.892599][ T6833] ? kernel_sendmsg+0x50/0x50 [ 67.897547][ T6833] ? do_recvmmsg+0x6d0/0x6d0 [ 67.902255][ T6833] ? lock_acquire+0x1f1/0xad0 [ 67.907513][ T6833] ? do_huge_pmd_anonymous_page+0x120d/0x2230 [ 67.914253][ T6833] ? find_held_lock+0x2d/0x110 [ 67.919388][ T6833] ___sys_sendmsg+0xf3/0x170 [ 67.924546][ T6833] ? sendmsg_copy_msghdr+0x160/0x160 [ 67.930138][ T6833] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 67.936394][ T6833] ? do_huge_pmd_anonymous_page+0x8ef/0x2230 [ 67.942403][ T6833] ? handle_mm_fault+0xad9/0x43f0 [ 67.947454][ T6833] ? find_held_lock+0x2d/0x110 [ 67.952298][ T6833] ? __fget_light+0x215/0x280 [ 67.957139][ T6833] __sys_sendmsg+0xe5/0x1b0 [ 67.961661][ T6833] ? __sys_sendmsg_sock+0xb0/0xb0 [ 67.967508][ T6833] ? do_syscall_64+0x1c/0xe0 [ 67.972279][ T6833] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 67.978757][ T6833] do_syscall_64+0x60/0xe0 [ 67.983327][ T6833] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 67.989427][ T6833] RIP: 0033:0x4402d9 [ 67.993500][ T6833] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 68.015051][ T6833] RSP: 002b:00007fff373c1e48 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.023742][ T6833] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004402d9 [ 68.033981][ T6833] RDX: 0000000000000