Warning: Permanently added '10.128.0.149' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 489.795870][ T8509] IPVS: ftp: loaded support on port[0] = 21 [ 489.842725][ T8531] netlink: 20 bytes leftover after parsing attributes in process `syz-executor322'. [ 489.853604][ T8531] netlink: 24 bytes leftover after parsing attributes in process `syz-executor322'. [ 489.876574][ T8531] netlink: 24 bytes leftover after parsing attributes in process `syz-executor322'. [ 721.482196][ T1657] INFO: task kworker/0:2:8501 blocked for more than 143 seconds. [ 721.492586][ T1657] Not tainted 5.11.0-rc4-syzkaller #0 [ 721.499548][ T1657] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 721.513013][ T1657] task:kworker/0:2 state:D stack:29224 pid: 8501 ppid: 2 flags:0x00004000 [ 721.523390][ T1657] Workqueue: ipv6_addrconf addrconf_verify_work [ 721.529796][ T1657] Call Trace: [ 721.534544][ T1657] __schedule+0x90c/0x21a0 [ 721.539151][ T1657] ? io_schedule_timeout+0x140/0x140 [ 721.546477][ T1657] ? _raw_spin_unlock_irq+0x1f/0x40 [ 721.552863][ T1657] ? lockdep_hardirqs_on+0x79/0x100 [ 721.560985][ T1657] schedule+0xcf/0x270 [ 721.566719][ T1657] schedule_preempt_disabled+0xf/0x20 [ 721.573011][ T1657] __mutex_lock+0x81a/0x1110 [ 721.578574][ T1657] ? addrconf_verify_work+0xa/0x20 [ 721.586394][ T1657] ? mutex_lock_io_nested+0xf60/0xf60 [ 721.592817][ T1657] ? lock_release+0x710/0x710 [ 721.597571][ T1657] ? lock_downgrade+0x6d0/0x6d0 [ 721.604158][ T1657] addrconf_verify_work+0xa/0x20 [ 721.609952][ T1657] process_one_work+0x98d/0x15f0 [ 721.616952][ T1657] ? pwq_dec_nr_in_flight+0x320/0x320 [ 721.623163][ T1657] ? rwlock_bug.part.0+0x90/0x90 [ 721.628901][ T1657] ? _raw_spin_lock_irq+0x41/0x50 [ 721.636743][ T1657] worker_thread+0x64c/0x1120 [ 721.641524][ T1657] ? __kthread_parkme+0x13f/0x1e0 [ 721.648045][ T1657] ? process_one_work+0x15f0/0x15f0 [ 721.654149][ T1657] kthread+0x3b1/0x4a0 [ 721.660012][ T1657] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 721.669497][ T1657] ret_from_fork+0x1f/0x30 [ 721.675015][ T1657] INFO: task kworker/1:0:8536 blocked for more than 143 seconds. [ 721.683767][ T1657] Not tainted 5.11.0-rc4-syzkaller #0 [ 721.689714][ T1657] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 721.702276][ T1657] task:kworker/1:0 state:D stack:29440 pid: 8536 ppid: 2 flags:0x00004000 [ 721.714547][ T1657] Workqueue: events linkwatch_event [ 721.721419][ T1657] Call Trace: [ 721.726190][ T1657] __schedule+0x90c/0x21a0 [ 721.730689][ T1657] ? io_schedule_timeout+0x140/0x140 [ 721.737982][ T1657] ? _raw_spin_unlock_irq+0x1f/0x40 [ 721.744844][ T1657] ? lockdep_hardirqs_on+0x79/0x100 [ 721.750977][ T1657] schedule+0xcf/0x270 [ 721.756445][ T1657] schedule_preempt_disabled+0xf/0x20 [ 721.761861][ T1657] __mutex_lock+0x81a/0x1110 [ 721.767858][ T1657] ? linkwatch_event+0xb/0x60 [ 721.773585][ T1657] ? mutex_lock_io_nested+0xf60/0xf60 [ 721.779013][ T1657] ? lock_release+0x710/0x710 [ 721.785068][ T1657] linkwatch_event+0xb/0x60 [ 721.789624][ T1657] process_one_work+0x98d/0x15f0 [ 721.795999][ T1657] ? pwq_dec_nr_in_flight+0x320/0x320 [ 721.801529][ T1657] ? rwlock_bug.part.0+0x90/0x90 [ 721.808059][ T1657] ? _raw_spin_lock_irq+0x41/0x50 [ 721.813940][ T1657] worker_thread+0x64c/0x1120 [ 721.818783][ T1657] ? __kthread_parkme+0x13f/0x1e0 [ 721.825346][ T1657] ? process_one_work+0x15f0/0x15f0 [ 721.830844][ T1657] kthread+0x3b1/0x4a0 [ 721.836669][ T1657] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 721.844602][ T1657] ret_from_fork+0x1f/0x30 [ 721.849154][ T1657] [ 721.849154][ T1657] Showing all locks held in the system: [ 721.858333][ T1657] 1 lock held by khungtaskd/1657: [ 721.864197][ T1657] #0: ffffffff8b373920 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 721.876229][ T1657] 1 lock held by in:imklog/8201: [ 721.883281][ T1657] #0: ffff888017a334f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 721.894013][ T1657] 3 locks held by kworker/0:2/8501: [ 721.899594][ T1657] #0: ffff88814789ed38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x871/0x15f0 [ 721.912943][ T1657] #1: ffffc9000182fda8 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x8a5/0x15f0 [ 721.924319][ T1657] #2: ffffffff8ca58da8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20 [ 721.935727][ T1657] 1 lock held by syz-executor322/8538: [ 721.941210][ T1657] 3 locks held by kworker/1:0/8536: [ 721.950718][ T1657] #0: ffff888010062d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x871/0x15f0 [ 721.961964][ T1657] #1: ffffc90001897da8 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8a5/0x15f0 [ 721.975224][ T1657] #2: ffffffff8ca58da8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xb/0x60 [ 721.985063][ T1657] [ 721.987475][ T1657] ============================================= [ 721.987475][ T1657] [ 721.998442][ T1657] NMI backtrace for cpu 0 [ 722.003062][ T1657] CPU: 0 PID: 1657 Comm: khungtaskd Not tainted 5.11.0-rc4-syzkaller #0 [ 722.011419][ T1657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 722.021509][ T1657] Call Trace: [ 722.024815][ T1657] dump_stack+0x107/0x163 [ 722.029264][ T1657] nmi_cpu_backtrace.cold+0x44/0xd7 [ 722.034487][ T1657] ? lapic_can_unplug_cpu+0x80/0x80 [ 722.039772][ T1657] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 722.045881][ T1657] watchdog+0xd43/0xfa0 [ 722.050165][ T1657] ? reset_hung_task_detector+0x30/0x30 [ 722.055746][ T1657] kthread+0x3b1/0x4a0 [ 722.059842][ T1657] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 722.065775][ T1657] ret_from_fork+0x1f/0x30 [ 722.070384][ T1657] Sending NMI from CPU 0 to CPUs 1: [ 722.077361][ C1] NMI backtrace for cpu 1 [ 722.077379][ C1] CPU: 1 PID: 8538 Comm: syz-executor322 Not tainted 5.11.0-rc4-syzkaller #0 [ 722.077390][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 722.077400][ C1] RIP: 0010:check_memory_region+0xd6/0x180 [ 722.077411][ C1] Code: 48 39 d0 74 7a 80 38 00 74 f2 48 89 c2 b8 01 00 00 00 48 85 d2 75 56 5b 5d 41 5c c3 48 85 d2 74 5e 48 01 ea eb 09 48 83 c0 01 <48> 39 d0 74 50 80 38 00 74 f2 eb d4 41 bc 08 00 00 00 48 89 ea 45 [ 722.077427][ C1] RSP: 0018:ffffc900018f6908 EFLAGS: 00000082 [ 722.077443][ C1] RAX: fffffbfff1da650d RBX: fffffbfff1da650d RCX: ffffffff815849c7 [ 722.077452][ C1] RDX: fffffbfff1da650d RSI: 0000000000000008 RDI: ffffffff8ed32860 [ 722.077461][ C1] RBP: fffffbfff1da650c R08: 0000000000000000 R09: ffffffff8ed32867 [ 722.077470][ C1] R10: fffffbfff1da650c R11: 0000000000000001 R12: 0000000000000006 [ 722.077479][ C1] R13: 0000000000000040 R14: 000000000000063d R15: ffff888020365cc8 [ 722.077489][ C1] FS: 00007fe016c4e700(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 722.077498][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 722.077506][ C1] CR2: 00007fe40244c000 CR3: 000000001124e000 CR4: 00000000001506e0 [ 722.077515][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 722.077524][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 722.077531][ C1] Call Trace: [ 722.077536][ C1] mark_lock+0xf7/0x1720 [ 722.077542][ C1] ? lock_chain_count+0x20/0x20 [ 722.077548][ C1] ? rcu_read_lock_sched_held+0x3a/0x70 [ 722.077555][ C1] ? find_held_lock+0x2d/0x110 [ 722.077561][ C1] ? finish_task_switch.isra.0+0x158/0x7e0 [ 722.077568][ C1] __lock_acquire+0x8a7/0x54f0 [ 722.077574][ C1] ? finish_task_switch.isra.0+0x234/0x7e0 [ 722.077581][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 722.077588][ C1] lock_acquire+0x29d/0x740 [ 722.077594][ C1] ? tcf_idr_check_alloc+0x78/0x3b0 [ 722.077600][ C1] ? lock_release+0x710/0x710 [ 722.077606][ C1] __mutex_lock+0x134/0x1110 [ 722.077612][ C1] ? tcf_idr_check_alloc+0x78/0x3b0 [ 722.077618][ C1] ? tcf_idr_check_alloc+0x78/0x3b0 [ 722.077625][ C1] ? mutex_lock_io_nested+0xf60/0xf60 [ 722.077631][ C1] ? __mutex_unlock_slowpath+0xe2/0x610 [ 722.077638][ C1] ? wait_for_completion_io+0x260/0x260 [ 722.077644][ C1] ? __radix_tree_lookup+0x211/0x2a0 [ 722.077651][ C1] tcf_idr_check_alloc+0x78/0x3b0 [ 722.077657][ C1] tcf_police_init+0x34f/0x1460 [ 722.077663][ C1] ? tcf_police_cleanup+0x60/0x60 [ 722.077670][ C1] ? find_held_lock+0x2d/0x110 [ 722.077676][ C1] ? tc_lookup_action_n+0xcd/0xf0 [ 722.077683][ C1] tcf_action_init_1+0x1a3/0x990 [ 722.077690][ C1] ? tcf_action_dump_old+0x80/0x80 [ 722.077697][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 722.077703][ C1] ? find_held_lock+0x2d/0x110 [ 722.077710][ C1] ? __mutex_unlock_slowpath+0xe2/0x610 [ 722.077717][ C1] ? wait_for_completion_io+0x260/0x260 [ 722.077724][ C1] tcf_exts_validate+0x138/0x420 [ 722.077731][ C1] ? tcf_exts_destroy+0xc0/0xc0 [ 722.077737][ C1] basic_change+0x47a/0x1310 [ 722.077744][ C1] ? basic_delete+0x680/0x680 [ 722.077750][ C1] tc_new_tfilter+0x1394/0x2120 [ 722.077757][ C1] ? basic_delete+0x680/0x680 [ 722.077764][ C1] ? tc_del_tfilter+0x15b0/0x15b0 [ 722.077771][ C1] ? lock_chain_count+0x20/0x20 [ 722.077777][ C1] ? kernel_text_address+0xbd/0xf0 [ 722.077784][ C1] ? tc_del_tfilter+0x15b0/0x15b0 [ 722.077791][ C1] rtnetlink_rcv_msg+0x80e/0xad0 [ 722.077798][ C1] ? rtnetlink_put_metrics+0x510/0x510 [ 722.077805][ C1] netlink_rcv_skb+0x153/0x420 [ 722.077812][ C1] ? rtnetlink_put_metrics+0x510/0x510 [ 722.077818][ C1] ? netlink_ack+0xaa0/0xaa0 [ 722.077825][ C1] ? netlink_deliver_tap+0x227/0xb70 [ 722.077832][ C1] netlink_unicast+0x533/0x7d0 [ 722.077839][ C1] ? netlink_attachskb+0x870/0x870 [ 722.077846][ C1] ? _copy_from_iter_full+0x275/0x850 [ 722.077853][ C1] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 722.077861][ C1] ? __phys_addr_symbol+0x2c/0x70 [ 722.077867][ C1] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 722.077874][ C1] ? __check_object_size+0x171/0x3f0 [ 722.077882][ C1] netlink_sendmsg+0x856/0xd90 [ 722.077888][ C1] ? netlink_unicast+0x7d0/0x7d0 [ 722.077895][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 722.077903][ C1] ? netlink_unicast+0x7d0/0x7d0 [ 722.077908][ C1] sock_sendmsg+0xcf/0x120 [ 722.077914][ C1] ____sys_sendmsg+0x331/0x810 [ 722.077919][ C1] ? kernel_sendmsg+0x50/0x50 [ 722.077922][ C1] ? do_recvmmsg+0x6c0/0x6c0 [ 722.077925][ C1] ? __lock_acquire+0x16c2/0x54f0 [ 722.077929][ C1] ___sys_sendmsg+0xf3/0x170 [ 722.077932][ C1] ? sendmsg_copy_msghdr+0x160/0x160 [ 722.077936][ C1] ? find_held_lock+0x2d/0x110 [ 722.077939][ C1] ? __might_fault+0xd3/0x180 [ 722.077943][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 722.077946][ C1] __sys_sendmmsg+0x195/0x470 [ 722.077950][ C1] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 722.077953][ C1] ? find_held_lock+0x2d/0x110 [ 722.077957][ C1] __x64_sys_sendmmsg+0x99/0x100 [ 722.077960][ C1] ? syscall_enter_from_user_mode+0x1d/0x50 [ 722.077964][ C1] do_syscall_64+0x2d/0x70 [ 722.077968][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 722.077972][ C1] RIP: 0033:0x44ac99 [ 722.077977][ C1] Code: e8 bc b4 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 722.077987][ C1] RSP: 002b:00007fe016c4dd98 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 722.077997][ C1] RAX: ffffffffffffffda RBX: 00000000006dfc88 RCX: 000000000044ac99 [ 722.078002][ C1] RDX: 010efe10675dec16 RSI: 0000000020000200 RDI: 0000000000000005 [ 722.078007][ C1] RBP: 00000000006dfc80 R08: 00007fe016c4e700 R09: 0000000000000000 [ 722.078012][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dfc8c [ 722.078018][ C1] R13: 0000000000000005 R14: 00a3a20740000000 R15: 0507002400000038 [ 722.078023][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.655 msecs [ 722.078350][ T1657] Kernel panic - not syncing: hung_task: blocked tasks [ 722.694321][ T1657] CPU: 0 PID: 1657 Comm: khungtaskd Not tainted 5.11.0-rc4-syzkaller #0 [ 722.702866][ T1657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 722.714217][ T1657] Call Trace: [ 722.718302][ T1657] dump_stack+0x107/0x163 [ 722.722805][ T1657] panic+0x306/0x73d [ 722.726894][ T1657] ? __warn_printk+0xf3/0xf3 [ 722.731577][ T1657] ? lapic_can_unplug_cpu+0x80/0x80 [ 722.738179][ T1657] ? preempt_schedule_thunk+0x16/0x18 [ 722.743881][ T1657] ? nmi_trigger_cpumask_backtrace+0x196/0x230 [ 722.751442][ T1657] ? watchdog.cold+0x5/0x158 [ 722.758667][ T1657] watchdog.cold+0x16/0x158 [ 722.763853][ T1657] ? reset_hung_task_detector+0x30/0x30 [ 722.769549][ T1657] kthread+0x3b1/0x4a0 [ 722.773755][ T1657] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 722.780117][ T1657] ret_from_fork+0x1f/0x30 [ 722.785906][ T1657] Kernel Offset: disabled [ 722.790359][ T1657] Rebooting in 86400 seconds..