[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.60' (ECDSA) to the list of known hosts. syzkaller login: [ 477.387621][ T37] audit: type=1400 audit(1618686051.527:8): avc: denied { execmem } for pid=8372 comm="syz-executor446" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 477.407765][ T8373] IPVS: ftp: loaded support on port[0] = 21 [ 477.518106][ T8382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.533739][ T8382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.543817][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program executing program [ 477.621614][ T8382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.630452][ T8382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.644676][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 722.182229][ T1619] INFO: task kworker/0:2:8 blocked for more than 143 seconds. [ 722.190024][ T1619] Not tainted 5.12.0-rc7-syzkaller #0 [ 722.207306][ T1619] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 722.217065][ T1619] task:kworker/0:2 state:D stack:26664 pid: 8 ppid: 2 flags:0x00004000 [ 722.227629][ T1619] Workqueue: ipv6_addrconf addrconf_dad_work [ 722.234903][ T1619] Call Trace: [ 722.238210][ T1619] __schedule+0x911/0x21b0 [ 722.244523][ T1619] ? io_schedule_timeout+0x140/0x140 [ 722.249839][ T1619] ? _raw_spin_unlock_irq+0x1f/0x40 [ 722.256672][ T1619] ? lockdep_hardirqs_on+0x79/0x100 [ 722.261923][ T1619] schedule+0xcf/0x270 [ 722.267446][ T1619] schedule_preempt_disabled+0xf/0x20 [ 722.273900][ T1619] __mutex_lock+0x81f/0x1120 [ 722.278523][ T1619] ? addrconf_dad_work+0xa3/0x12b0 [ 722.285016][ T1619] ? mutex_lock_io_nested+0xf70/0xf70 [ 722.291044][ T1619] ? debug_object_deactivate+0x264/0x300 [ 722.298141][ T1619] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 722.305365][ T1619] addrconf_dad_work+0xa3/0x12b0 [ 722.310348][ T1619] ? addrconf_dad_completed+0xc70/0xc70 [ 722.317468][ T1619] process_one_work+0x98d/0x1600 [ 722.323234][ T1619] ? pwq_dec_nr_in_flight+0x320/0x320 [ 722.328638][ T1619] ? rwlock_bug.part.0+0x90/0x90 [ 722.335032][ T1619] ? _raw_spin_lock_irq+0x41/0x50 [ 722.340091][ T1619] worker_thread+0x64c/0x1120 [ 722.346344][ T1619] ? __kthread_parkme+0x13f/0x1e0 [ 722.351391][ T1619] ? process_one_work+0x1600/0x1600 [ 722.358310][ T1619] kthread+0x3b1/0x4a0 [ 722.363536][ T1619] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 722.369481][ T1619] ret_from_fork+0x1f/0x30 [ 722.375873][ T1619] INFO: task kworker/0:3:3128 blocked for more than 143 seconds. [ 722.387454][ T1619] Not tainted 5.12.0-rc7-syzkaller #0 [ 722.394675][ T1619] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 722.404414][ T1619] task:kworker/0:3 state:D stack:27896 pid: 3128 ppid: 2 flags:0x00004000 [ 722.414586][ T1619] Workqueue: events linkwatch_event [ 722.419848][ T1619] Call Trace: [ 722.424600][ T1619] __schedule+0x911/0x21b0 [ 722.429047][ T1619] ? io_schedule_timeout+0x140/0x140 [ 722.435710][ T1619] ? _raw_spin_unlock_irq+0x1f/0x40 [ 722.440943][ T1619] ? lockdep_hardirqs_on+0x79/0x100 [ 722.447458][ T1619] schedule+0xcf/0x270 [ 722.451551][ T1619] schedule_preempt_disabled+0xf/0x20 [ 722.458576][ T1619] __mutex_lock+0x81f/0x1120 [ 722.463986][ T1619] ? linkwatch_event+0xb/0x60 [ 722.468691][ T1619] ? mutex_lock_io_nested+0xf70/0xf70 [ 722.475471][ T1619] ? lock_release+0x720/0x720 [ 722.480190][ T1619] linkwatch_event+0xb/0x60 [ 722.486231][ T1619] process_one_work+0x98d/0x1600 [ 722.491196][ T1619] ? pwq_dec_nr_in_flight+0x320/0x320 [ 722.498096][ T1619] ? rwlock_bug.part.0+0x90/0x90 [ 722.504107][ T1619] ? _raw_spin_lock_irq+0x41/0x50 [ 722.509374][ T1619] worker_thread+0x64c/0x1120 [ 722.515513][ T1619] ? process_one_work+0x1600/0x1600 [ 722.520736][ T1619] kthread+0x3b1/0x4a0 [ 722.526131][ T1619] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 722.532753][ T1619] ret_from_fork+0x1f/0x30 [ 722.537376][ T1619] INFO: task kworker/1:3:8173 blocked for more than 143 seconds. [ 722.546892][ T1619] Not tainted 5.12.0-rc7-syzkaller #0 [ 722.553856][ T1619] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 722.563497][ T1619] task:kworker/1:3 state:D stack:29160 pid: 8173 ppid: 2 flags:0x00004000 [ 722.573729][ T1619] Workqueue: events disconnect_work [ 722.579007][ T1619] Call Trace: [ 722.583897][ T1619] __schedule+0x911/0x21b0 [ 722.588340][ T1619] ? io_schedule_timeout+0x140/0x140 [ 722.594981][ T1619] ? _raw_spin_unlock_irq+0x1f/0x40 [ 722.600209][ T1619] ? lockdep_hardirqs_on+0x79/0x100 [ 722.610569][ T1619] schedule+0xcf/0x270 [ 722.615785][ T1619] schedule_preempt_disabled+0xf/0x20 [ 722.621185][ T1619] __mutex_lock+0x81f/0x1120 [ 722.627219][ T1619] ? disconnect_work+0x18/0x200 [ 722.633119][ T1619] ? mutex_lock_io_nested+0xf70/0xf70 [ 722.638522][ T1619] ? lock_downgrade+0x6e0/0x6e0 [ 722.644684][ T1619] disconnect_work+0x18/0x200 [ 722.649394][ T1619] process_one_work+0x98d/0x1600 [ 722.655847][ T1619] ? pwq_dec_nr_in_flight+0x320/0x320 [ 722.661253][ T1619] ? rwlock_bug.part.0+0x90/0x90 [ 722.667629][ T1619] ? _raw_spin_lock_irq+0x41/0x50 [ 722.673527][ T1619] worker_thread+0x64c/0x1120 [ 722.678234][ T1619] ? __kthread_parkme+0x13f/0x1e0 [ 722.684588][ T1619] ? process_one_work+0x1600/0x1600 [ 722.689817][ T1619] kthread+0x3b1/0x4a0 [ 722.695436][ T1619] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 722.701363][ T1619] ret_from_fork+0x1f/0x30 [ 722.707295][ T1619] INFO: task kworker/1:0:8418 blocked for more than 143 seconds. [ 722.716313][ T1619] Not tainted 5.12.0-rc7-syzkaller #0 [ 722.723236][ T1619] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 722.731937][ T1619] task:kworker/1:0 state:D stack:29536 pid: 8418 ppid: 2 flags:0x00004000 [ 722.742791][ T1619] Workqueue: ipv6_addrconf addrconf_verify_work [ 722.749512][ T1619] Call Trace: [ 722.754396][ T1619] __schedule+0x911/0x21b0 [ 722.758845][ T1619] ? io_schedule_timeout+0x140/0x140 [ 722.765829][ T1619] ? _raw_spin_unlock_irq+0x25/0x40 [ 722.771055][ T1619] schedule+0xcf/0x270 [ 722.776768][ T1619] schedule_preempt_disabled+0xf/0x20 [ 722.782962][ T1619] __mutex_lock+0x81f/0x1120 [ 722.787579][ T1619] ? addrconf_verify_work+0xa/0x20 [ 722.794088][ T1619] ? mutex_lock_io_nested+0xf70/0xf70 [ 722.799491][ T1619] ? lock_release+0x720/0x720 [ 722.805586][ T1619] ? lock_downgrade+0x6e0/0x6e0 [ 722.810467][ T1619] addrconf_verify_work+0xa/0x20 [ 722.817074][ T1619] process_one_work+0x98d/0x1600 [ 722.822847][ T1619] ? pwq_dec_nr_in_flight+0x320/0x320 [ 722.828254][ T1619] ? rwlock_bug.part.0+0x90/0x90 [ 722.837076][ T1619] ? _raw_spin_lock_irq+0x41/0x50 [ 722.842894][ T1619] worker_thread+0x64c/0x1120 [ 722.847597][ T1619] ? __kthread_parkme+0x13f/0x1e0 [ 722.853861][ T1619] ? process_one_work+0x1600/0x1600 [ 722.859092][ T1619] kthread+0x3b1/0x4a0 [ 722.864427][ T1619] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 722.870350][ T1619] ret_from_fork+0x1f/0x30 [ 722.876168][ T1619] [ 722.876168][ T1619] Showing all locks held in the system: [ 722.885843][ T1619] 3 locks held by kworker/0:2/8: [ 722.890799][ T1619] #0: ffff8880237af938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x871/0x1600 [ 722.904048][ T1619] #1: ffffc90000cefda8 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600 [ 722.917578][ T1619] #2: ffffffff8d669ae8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xa3/0x12b0 [ 722.928003][ T1619] 1 lock held by khungtaskd/1619: [ 722.934082][ T1619] #0: ffffffff8bf718a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 722.945091][ T1619] 3 locks held by kworker/0:3/3128: [ 722.950326][ T1619] #0: ffff888010863d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x871/0x1600 [ 722.962272][ T1619] #1: ffffc90001e47da8 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600 [ 722.973944][ T1619] #2: ffffffff8d669ae8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xb/0x60 [ 722.983843][ T1619] 1 lock held by in:imklog/8131: [ 722.988814][ T1619] #0: ffff88801e8fb5f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 722.999677][ T1619] 3 locks held by kworker/1:3/8173: [ 723.005782][ T1619] #0: ffff888010863d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x871/0x1600 [ 723.017351][ T1619] #1: ffffc9000bf5fda8 (cfg80211_disconnect_work){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600 [ 723.029621][ T1619] #2: ffffffff8d669ae8 (rtnl_mutex){+.+.}-{3:3}, at: disconnect_work+0x18/0x200 [ 723.039986][ T1619] 4 locks held by syz-executor446/8417: [ 723.046813][ T1619] 3 locks held by kworker/1:0/8418: [ 723.052697][ T1619] #0: ffff8880237af938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x871/0x1600 [ 723.064363][ T1619] #1: ffffc900019d7da8 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600 [ 723.075480][ T1619] #2: ffffffff8d669ae8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20 [ 723.085796][ T1619] [ 723.088137][ T1619] ============================================= [ 723.088137][ T1619] [ 723.098038][ T1619] NMI backtrace for cpu 0 [ 723.102469][ T1619] CPU: 0 PID: 1619 Comm: khungtaskd Not tainted 5.12.0-rc7-syzkaller #0 [ 723.110941][ T1619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 723.121014][ T1619] Call Trace: [ 723.124306][ T1619] dump_stack+0x141/0x1d7 [ 723.128685][ T1619] nmi_cpu_backtrace.cold+0x44/0xd7 [ 723.133893][ T1619] ? lapic_can_unplug_cpu+0x80/0x80 [ 723.139116][ T1619] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 723.145125][ T1619] watchdog+0xd48/0xfb0 [ 723.149317][ T1619] ? reset_hung_task_detector+0x30/0x30 [ 723.154872][ T1619] kthread+0x3b1/0x4a0 [ 723.158954][ T1619] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 723.164875][ T1619] ret_from_fork+0x1f/0x30 [ 723.169698][ T1619] Sending NMI from CPU 0 to CPUs 1: [ 723.175742][ C1] NMI backtrace for cpu 1 [ 723.175751][ C1] CPU: 1 PID: 4810 Comm: systemd-journal Not tainted 5.12.0-rc7-syzkaller #0 [ 723.175761][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 723.175771][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x60 [ 723.175782][ C1] Code: 81 e1 00 01 00 00 65 48 8b 14 25 00 f0 01 00 a9 00 01 ff 00 74 0e 85 c9 74 35 8b 82 34 15 00 00 85 c0 74 2b 8b 82 10 15 00 00 <83> f8 02 75 20 48 8b 8a 18 15 00 00 8b 92 14 15 00 00 48 8b 01 48 [ 723.175797][ C1] RSP: 0018:ffffc900011178c8 EFLAGS: 00000246 [ 723.175810][ C1] RAX: 0000000000000000 RBX: 1ffff92000222f1d RCX: 0000000000000000 [ 723.175819][ C1] RDX: ffff888014bbe000 RSI: ffffffff838e7dca RDI: 0000000000000003 [ 723.175827][ C1] RBP: 0000000010000000 R08: 0000000000000000 R09: ffffffff8fa9f8a7 [ 723.175836][ C1] R10: ffffffff838e7c6d R11: 0000000000000001 R12: ffffffff8ffb4000 [ 723.175844][ C1] R13: ffffc900011179f8 R14: 0000000000000005 R15: 0000000000000008 [ 723.175853][ C1] FS: 00007fc514b848c0(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 723.175861][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 723.175869][ C1] CR2: 00007fc511f73018 CR3: 000000001438c000 CR4: 00000000001506e0 [ 723.175877][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 723.175885][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 723.175893][ C1] Call Trace: [ 723.175897][ C1] avc_has_perm_noaudit+0x23a/0x390 [ 723.175903][ C1] ? avc_has_extended_perms+0xed0/0xed0 [ 723.175909][ C1] ? find_held_lock+0x2d/0x110 [ 723.175915][ C1] selinux_inode_permission+0x3ff/0x670 [ 723.175921][ C1] ? __inode_security_revalidate+0x140/0x140 [ 723.175927][ C1] ? set_root+0x3cf/0x5a0 [ 723.175932][ C1] security_inode_permission+0x92/0xf0 [ 723.175938][ C1] inode_permission.part.0+0x119/0x440 [ 723.175944][ C1] link_path_walk.part.0+0x26e/0xc90 [ 723.175950][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 723.175957][ C1] ? walk_component+0x6a0/0x6a0 [ 723.175962][ C1] ? __lock_acquire+0x16b3/0x54c0 [ 723.175967][ C1] path_parentat+0xa8/0x1b0 [ 723.175973][ C1] filename_parentat+0x19a/0x570 [ 723.175983][ C1] ? getname+0xd0/0xd0 [ 723.175988][ C1] ? __might_fault+0xd3/0x180 [ 723.175993][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 723.176000][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 723.176006][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 723.176013][ C1] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 723.176019][ C1] ? __phys_addr_symbol+0x2c/0x70 [ 723.176025][ C1] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 723.176031][ C1] ? __check_object_size+0x171/0x3f0 [ 723.176037][ C1] filename_create+0x9e/0x490 [ 723.176042][ C1] ? filename_parentat+0x570/0x570 [ 723.176048][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 723.176055][ C1] ? getname_flags.part.0+0x1dd/0x4f0 [ 723.176060][ C1] do_mkdirat+0xa0/0x310 [ 723.176066][ C1] ? user_path_create+0xf0/0xf0 [ 723.176071][ C1] ? __secure_computing+0x104/0x360 [ 723.176077][ C1] do_syscall_64+0x2d/0x70 [ 723.176082][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 723.176088][ C1] RIP: 0033:0x7fc513e3f687 [ 723.176098][ C1] Code: 00 b8 ff ff ff ff c3 0f 1f 40 00 48 8b 05 09 d8 2b 00 64 c7 00 5f 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 d7 2b 00 f7 d8 64 89 01 48 [ 723.176117][ C1] RSP: 002b:00007fff347f74d8 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 723.176130][ C1] RAX: ffffffffffffffda RBX: 00007fff347fa540 RCX: 00007fc513e3f687 [ 723.176142][ C1] RDX: 0000000000000000 RSI: 00000000000001ed RDI: 000055e4d93a88c0 [ 723.176150][ C1] RBP: 00007fff347f7510 R08: 000055e4d86cb3e5 R09: 0000000000000018 [ 723.176158][ C1] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 723.176165][ C1] R13: 0000000000000001 R14: 000055e4d93a88c0 R15: 00007fff347f7b50 [ 723.559439][ T1619] Kernel panic - not syncing: hung_task: blocked tasks [ 723.566328][ T1619] CPU: 0 PID: 1619 Comm: khungtaskd Not tainted 5.12.0-rc7-syzkaller #0 [ 723.574676][ T1619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 723.584745][ T1619] Call Trace: [ 723.588033][ T1619] dump_stack+0x141/0x1d7 [ 723.592374][ T1619] panic+0x306/0x73d [ 723.596288][ T1619] ? __warn_printk+0xf3/0xf3 [ 723.600990][ T1619] ? lapic_can_unplug_cpu+0x80/0x80 [ 723.606208][ T1619] ? preempt_schedule_thunk+0x16/0x18 [ 723.611599][ T1619] ? nmi_trigger_cpumask_backtrace+0x196/0x230 [ 723.617787][ T1619] ? watchdog.cold+0x5/0x158 [ 723.622416][ T1619] watchdog.cold+0x16/0x158 [ 723.626940][ T1619] ? reset_hung_task_detector+0x30/0x30 [ 723.633719][ T1619] kthread+0x3b1/0x4a0 [ 723.637813][ T1619] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 723.643768][ T1619] ret_from_fork+0x1f/0x30 [ 723.649260][ T1619] Kernel Offset: disabled [ 723.653637][ T1619] Rebooting in 86400 seconds..