[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.96' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 483.351902][ T35] audit: type=1400 audit(1613712600.401:8): avc: denied { execmem } for pid=8421 comm="syz-executor879" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 483.373706][ T8422] IPVS: ftp: loaded support on port[0] = 21 [ 483.424456][ T8444] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor879'. [ 483.435405][ T8444] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor879'. [ 721.478932][ T1647] INFO: task kworker/0:1:7 blocked for more than 143 seconds. [ 721.486670][ T1647] Not tainted 5.11.0-syzkaller #0 [ 721.494937][ T1647] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 721.504635][ T1647] task:kworker/0:1 state:D stack:28456 pid: 7 ppid: 2 flags:0x00004000 [ 721.515012][ T1647] Workqueue: ipv6_addrconf addrconf_verify_work [ 721.522546][ T1647] Call Trace: [ 721.525897][ T1647] __schedule+0x90c/0x21a0 [ 721.531912][ T1647] ? io_schedule_timeout+0x140/0x140 [ 721.537245][ T1647] ? _raw_spin_unlock_irq+0x1f/0x40 [ 721.544227][ T1647] ? lockdep_hardirqs_on+0x79/0x100 [ 721.550795][ T1647] schedule+0xcf/0x270 [ 721.554903][ T1647] schedule_preempt_disabled+0xf/0x20 [ 721.561969][ T1647] __mutex_lock+0x81a/0x1110 [ 721.566592][ T1647] ? addrconf_verify_work+0xa/0x20 [ 721.573248][ T1647] ? mutex_lock_io_nested+0xf60/0xf60 [ 721.578657][ T1647] ? lock_release+0x710/0x710 [ 721.585390][ T1647] ? lock_downgrade+0x6d0/0x6d0 [ 721.591363][ T1647] addrconf_verify_work+0xa/0x20 [ 721.596331][ T1647] process_one_work+0x98d/0x15f0 [ 721.603018][ T1647] ? pwq_dec_nr_in_flight+0x320/0x320 [ 721.608432][ T1647] ? rwlock_bug.part.0+0x90/0x90 [ 721.614947][ T1647] ? _raw_spin_lock_irq+0x41/0x50 [ 721.621128][ T1647] worker_thread+0x64c/0x1120 [ 721.625859][ T1647] ? process_one_work+0x15f0/0x15f0 [ 721.633795][ T1647] kthread+0x3b1/0x4a0 [ 721.637964][ T1647] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 721.645429][ T1647] ret_from_fork+0x1f/0x30 [ 721.651195][ T1647] [ 721.651195][ T1647] Showing all locks held in the system: [ 721.660143][ T1647] 3 locks held by kworker/0:1/7: [ 721.665104][ T1647] #0: ffff888147a0f938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x871/0x15f0 [ 721.678348][ T1647] #1: ffffc90000cdfda8 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x8a5/0x15f0 [ 721.689315][ T1647] #2: ffffffff8d45bce8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20 [ 721.699421][ T1647] 1 lock held by khungtaskd/1647: [ 721.704840][ T1647] #0: ffffffff8bd73da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 721.715545][ T1647] 1 lock held by in:imklog/8202: [ 721.721385][ T1647] #0: ffff8880147483f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 721.731432][ T1647] 1 lock held by syz-executor879/8444: [ 721.736993][ T1647] [ 721.739922][ T1647] ============================================= [ 721.739922][ T1647] [ 721.748400][ T1647] NMI backtrace for cpu 0 [ 721.752899][ T1647] CPU: 0 PID: 1647 Comm: khungtaskd Not tainted 5.11.0-syzkaller #0 [ 721.760899][ T1647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 721.771063][ T1647] Call Trace: [ 721.774356][ T1647] dump_stack+0x107/0x163 [ 721.778799][ T1647] nmi_cpu_backtrace.cold+0x44/0xd7 [ 721.784024][ T1647] ? lapic_can_unplug_cpu+0x80/0x80 [ 721.789282][ T1647] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 721.795320][ T1647] watchdog+0xd43/0xfa0 [ 721.799538][ T1647] ? reset_hung_task_detector+0x30/0x30 [ 721.805120][ T1647] kthread+0x3b1/0x4a0 [ 721.809208][ T1647] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 721.815122][ T1647] ret_from_fork+0x1f/0x30 [ 721.819898][ T1647] Sending NMI from CPU 0 to CPUs 1: [ 721.826023][ C1] NMI backtrace for cpu 1 [ 721.826034][ C1] CPU: 1 PID: 4856 Comm: systemd-journal Not tainted 5.11.0-syzkaller #0 [ 721.826044][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 721.826060][ C1] RIP: 0010:__lock_acquire+0x454/0x54f0 [ 721.826071][ C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 28 45 0f b7 ad b8 00 00 00 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e e4 10 00 00 <45> 0f b7 7c 24 20 66 41 81 e7 ff 1f 45 0f b7 ff be 08 00 00 00 4c [ 721.826087][ C1] RSP: 0018:ffffc900090bf9c0 EFLAGS: 00000046 [ 721.826102][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81587143 [ 721.826111][ C1] RDX: 1ffff1100286813d RSI: 0000000000000008 RDI: ffffffff8f875c78 [ 721.826120][ C1] RBP: ffff888014340040 R08: 0000000000000000 R09: ffffffff8f8757a7 [ 721.826129][ C1] R10: fffffbfff1f0eaf4 R11: 0000000000000000 R12: ffff8880143409c8 [ 721.826139][ C1] R13: 0000000000000002 R14: ffffffff8fe6f190 R15: 0000000000040000 [ 721.826150][ C1] FS: 00007ff9a9df78c0(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 721.826160][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 721.826169][ C1] CR2: 00007ff9a71d9000 CR3: 00000000148a4000 CR4: 00000000001506e0 [ 721.826178][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 721.826188][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 721.826197][ C1] Call Trace: [ 721.826203][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 721.826210][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 721.826217][ C1] lock_acquire+0x1a8/0x720 [ 721.826224][ C1] ? debug_check_no_obj_freed+0xc7/0x420 [ 721.826231][ C1] ? lock_release+0x710/0x710 [ 721.826241][ C1] ? debug_check_no_obj_freed+0x20c/0x420 [ 721.826248][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 721.826254][ C1] ? unlazy_walk+0x158/0x3a0 [ 721.826261][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 721.826267][ C1] _raw_spin_lock_irqsave+0x39/0x50 [ 721.826274][ C1] ? debug_check_no_obj_freed+0xc7/0x420 [ 721.826282][ C1] debug_check_no_obj_freed+0xc7/0x420 [ 721.826289][ C1] ? lockdep_hardirqs_off+0x90/0xd0 [ 721.826296][ C1] kmem_cache_free+0x13f/0x1c0 [ 721.826302][ C1] putname+0xe1/0x120 [ 721.826308][ C1] filename_lookup+0x3b1/0x560 [ 721.826314][ C1] ? may_linkat+0x2b0/0x2b0 [ 721.826321][ C1] ? __check_object_size+0x171/0x3f0 [ 721.826328][ C1] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 721.826336][ C1] ? strncpy_from_user+0x2a0/0x3e0 [ 721.826343][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 721.826351][ C1] ? getname_flags.part.0+0x1dd/0x4f0 [ 721.826358][ C1] ? security_prepare_creds+0xe2/0x180 [ 721.826364][ C1] do_faccessat+0x129/0x820 [ 721.826369][ C1] ? stream_open+0x60/0x60 [ 721.826375][ C1] ? __secure_computing+0x104/0x360 [ 721.826379][ C1] do_syscall_64+0x2d/0x70 [ 721.826382][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 721.826386][ C1] RIP: 0033:0x7ff9a90b29c7 [ 721.826397][ C1] Code: 83 c4 08 48 3d 01 f0 ff ff 73 01 c3 48 8b 0d c8 d4 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 15 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d a1 d4 2b 00 f7 d8 64 89 01 48 [ 721.826407][ C1] RSP: 002b:00007ffd74167788 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 721.826416][ C1] RAX: ffffffffffffffda RBX: 00007ffd7416a7b0 RCX: 00007ff9a90b29c7 [ 721.826421][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055e9da3679a3 [ 721.826427][ C1] RBP: 00007ffd741678d0 R08: 000055e9da35d3e5 R09: 0000000000000018 [ 721.826432][ C1] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 721.826438][ C1] R13: 0000000000000000 R14: 000055e9db90a8c0 R15: 00007ffd74167dc0 [ 721.827205][ T1647] Kernel panic - not syncing: hung_task: blocked tasks [ 722.191081][ T1647] CPU: 0 PID: 1647 Comm: khungtaskd Not tainted 5.11.0-syzkaller #0 [ 722.199099][ T1647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 722.209175][ T1647] Call Trace: [ 722.212471][ T1647] dump_stack+0x107/0x163 [ 722.216830][ T1647] panic+0x306/0x73d [ 722.220770][ T1647] ? __warn_printk+0xf3/0xf3 [ 722.225402][ T1647] ? lapic_can_unplug_cpu+0x80/0x80 [ 722.230616][ T1647] ? preempt_schedule_thunk+0x16/0x18 [ 722.236008][ T1647] ? nmi_trigger_cpumask_backtrace+0x196/0x230 [ 722.242180][ T1647] ? watchdog.cold+0x5/0x158 [ 722.247700][ T1647] watchdog.cold+0x16/0x158 [ 722.252227][ T1647] ? reset_hung_task_detector+0x30/0x30 [ 722.257794][ T1647] kthread+0x3b1/0x4a0 [ 722.262329][ T1647] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 722.268239][ T1647] ret_from_fork+0x1f/0x30 [ 722.274538][ T1647] Kernel Offset: disabled [ 722.278873][ T1647] Rebooting in 86400 seconds..