[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.11' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 487.113775][ T36] audit: type=1400 audit(1612853937.495:8): avc: denied { execmem } for pid=8458 comm="syz-executor733" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 487.118634][ T8460] netlink: 32 bytes leftover after parsing attributes in process `syz-executor733'. [ 715.971687][ T1637] INFO: task kworker/0:3:3214 blocked for more than 143 seconds. [ 715.979625][ T1637] Not tainted 5.11.0-rc7-syzkaller #0 [ 715.987156][ T1637] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 715.998086][ T1637] task:kworker/0:3 state:D stack:27232 pid: 3214 ppid: 2 flags:0x00004000 [ 716.009003][ T1637] Workqueue: ipv6_addrconf addrconf_verify_work [ 716.016442][ T1637] Call Trace: [ 716.019787][ T1637] __schedule+0x90c/0x21a0 [ 716.026694][ T1637] ? io_schedule_timeout+0x140/0x140 [ 716.032929][ T1637] ? _raw_spin_unlock_irq+0x1f/0x40 [ 716.038186][ T1637] ? lockdep_hardirqs_on+0x79/0x100 [ 716.044809][ T1637] schedule+0xcf/0x270 [ 716.049080][ T1637] schedule_preempt_disabled+0xf/0x20 [ 716.055888][ T1637] __mutex_lock+0x81a/0x1110 [ 716.060504][ T1637] ? addrconf_verify_work+0xa/0x20 [ 716.067088][ T1637] ? mutex_lock_io_nested+0xf60/0xf60 [ 716.073488][ T1637] ? lock_release+0x710/0x710 [ 716.078273][ T1637] ? lock_downgrade+0x6d0/0x6d0 [ 716.084500][ T1637] addrconf_verify_work+0xa/0x20 [ 716.089469][ T1637] process_one_work+0x98d/0x15f0 [ 716.095967][ T1637] ? pwq_dec_nr_in_flight+0x320/0x320 [ 716.101401][ T1637] ? rwlock_bug.part.0+0x90/0x90 [ 716.107914][ T1637] ? _raw_spin_lock_irq+0x41/0x50 [ 716.113959][ T1637] worker_thread+0x64c/0x1120 [ 716.118684][ T1637] ? __kthread_parkme+0x13f/0x1e0 [ 716.126302][ T1637] ? process_one_work+0x15f0/0x15f0 [ 716.132390][ T1637] kthread+0x3b1/0x4a0 [ 716.136477][ T1637] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 716.143746][ T1637] ret_from_fork+0x1f/0x30 [ 716.148356][ T1637] INFO: task syz-executor733:8460 blocked for more than 143 seconds. [ 716.158190][ T1637] Not tainted 5.11.0-rc7-syzkaller #0 [ 716.165065][ T1637] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 716.174760][ T1637] task:syz-executor733 state:D stack:25216 pid: 8460 ppid: 8458 flags:0x00004004 [ 716.185156][ T1637] Call Trace: [ 716.188472][ T1637] __schedule+0x90c/0x21a0 [ 716.194265][ T1637] ? io_schedule_timeout+0x140/0x140 [ 716.199581][ T1637] schedule+0xcf/0x270 [ 716.206027][ T1637] schedule_preempt_disabled+0xf/0x20 [ 716.211440][ T1637] __mutex_lock+0x81a/0x1110 [ 716.217339][ T1637] ? tcf_action_init_1+0x743/0x990 [ 716.223321][ T1637] ? mutex_lock_io_nested+0xf60/0xf60 [ 716.228721][ T1637] ? tc_lookup_action_n+0xcd/0xf0 [ 716.235116][ T1637] ? lock_downgrade+0x6d0/0x6d0 [ 716.239990][ T1637] ? generic_xdp_install+0x7b0/0x7b0 [ 716.247692][ T1637] tcf_action_init_1+0x743/0x990 [ 716.254610][ T1637] ? tcf_action_dump_old+0x80/0x80 [ 716.259745][ T1637] ? find_held_lock+0x2d/0x110 [ 716.265897][ T1637] tcf_action_init+0x265/0x4b0 [ 716.270785][ T1637] ? tcf_action_init_1+0x990/0x990 [ 716.277416][ T1637] ? avc_has_perm_noaudit+0x1ee/0x390 [ 716.283684][ T1637] tcf_action_add+0xd9/0x360 [ 716.288307][ T1637] ? tca_action_gd+0xe20/0xe20 [ 716.294476][ T1637] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 716.300803][ T1637] ? __nla_parse+0x3d/0x50 [ 716.306795][ T1637] tc_ctl_action+0x33a/0x440 [ 716.311431][ T1637] ? tcf_action_add+0x360/0x360 [ 716.317686][ T1637] ? rtnetlink_rcv_msg+0x3c3/0xad0 [ 716.323585][ T1637] ? tcf_action_add+0x360/0x360 [ 716.328457][ T1637] rtnetlink_rcv_msg+0x44e/0xad0 [ 716.334619][ T1637] ? rtnetlink_put_metrics+0x510/0x510 [ 716.340113][ T1637] netlink_rcv_skb+0x153/0x420 [ 716.346121][ T1637] ? rtnetlink_put_metrics+0x510/0x510 [ 716.352384][ T1637] ? netlink_ack+0xaa0/0xaa0 [ 716.356988][ T1637] ? netlink_deliver_tap+0x227/0xb70 [ 716.363603][ T1637] netlink_unicast+0x533/0x7d0 [ 716.368402][ T1637] ? netlink_attachskb+0x870/0x870 [ 716.375372][ T1637] ? _copy_from_iter_full+0x275/0x850 [ 716.381026][ T1637] netlink_sendmsg+0x856/0xd90 [ 716.388302][ T1637] ? netlink_unicast+0x7d0/0x7d0 [ 716.394106][ T1637] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 716.400465][ T1637] ? netlink_unicast+0x7d0/0x7d0 [ 716.406940][ T1637] sock_sendmsg+0xcf/0x120 [ 716.411422][ T1637] ____sys_sendmsg+0x6e8/0x810 [ 716.417619][ T1637] ? kernel_sendmsg+0x50/0x50 [ 716.423102][ T1637] ? do_recvmmsg+0x6c0/0x6c0 [ 716.427715][ T1637] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 716.435490][ T1637] ___sys_sendmsg+0xf3/0x170 [ 716.440108][ T1637] ? sendmsg_copy_msghdr+0x160/0x160 [ 716.446753][ T1637] ? __fget_files+0x266/0x3d0 [ 716.452379][ T1637] ? lock_downgrade+0x6d0/0x6d0 [ 716.457273][ T1637] ? do_huge_pmd_anonymous_page+0x8f1/0x2390 [ 716.465801][ T1637] ? __fget_files+0x288/0x3d0 [ 716.470514][ T1637] ? __fget_light+0xea/0x280 [ 716.476400][ T1637] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 716.483465][ T1637] __sys_sendmsg+0xe5/0x1b0 [ 716.487998][ T1637] ? __sys_sendmsg_sock+0xb0/0xb0 [ 716.494424][ T1637] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 716.500720][ T1637] ? syscall_enter_from_user_mode+0x1d/0x50 [ 716.508196][ T1637] do_syscall_64+0x2d/0x70 [ 716.514627][ T1637] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 716.520543][ T1637] RIP: 0033:0x445ac9 [ 716.525652][ T1637] RSP: 002b:00007f810bb32318 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.535060][ T1637] RAX: ffffffffffffffda RBX: 00000000004ca428 RCX: 0000000000445ac9 [ 716.543926][ T1637] RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000003 [ 716.552833][ T1637] RBP: 00000000004ca420 R08: 0000000000000009 R09: 0000000000000000 [ 716.560849][ T1637] R10: 0000000000000000 R11: 0000000000000246 R12: 6b72616d6e6e6f63 [ 716.570115][ T1637] R13: 00007ffd765cefff R14: 00007f810bb32400 R15: 0000000000022000 [ 716.579191][ T1637] [ 716.579191][ T1637] Showing all locks held in the system: [ 716.588135][ T1637] 1 lock held by khungtaskd/1637: [ 716.594163][ T1637] #0: ffffffff8bd73da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 716.605215][ T1637] 3 locks held by kworker/0:3/3214: [ 716.610423][ T1637] #0: ffff888147c52138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x871/0x15f0 [ 716.623066][ T1637] #1: ffffc900020b7da8 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x8a5/0x15f0 [ 716.634290][ T1637] #2: ffffffff8d45c228 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20 [ 716.646010][ T1637] 1 lock held by in:imklog/8206: [ 716.650965][ T1637] #0: ffff8880144831b0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 716.661863][ T1637] 1 lock held by syz-executor733/8460: [ 716.667359][ T1637] #0: ffffffff8d45c228 (rtnl_mutex){+.+.}-{3:3}, at: tcf_action_init_1+0x743/0x990 [ 716.678417][ T1637] 2 locks held by syz-executor733/8462: [ 716.684949][ T1637] [ 716.687283][ T1637] ============================================= [ 716.687283][ T1637] [ 716.698291][ T1637] NMI backtrace for cpu 0 [ 716.702833][ T1637] CPU: 0 PID: 1637 Comm: khungtaskd Not tainted 5.11.0-rc7-syzkaller #0 [ 716.711164][ T1637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.721221][ T1637] Call Trace: [ 716.724521][ T1637] dump_stack+0x107/0x163 [ 716.728929][ T1637] nmi_cpu_backtrace.cold+0x44/0xd7 [ 716.734143][ T1637] ? lapic_can_unplug_cpu+0x80/0x80 [ 716.739376][ T1637] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 716.745383][ T1637] watchdog+0xd43/0xfa0 [ 716.749553][ T1637] ? reset_hung_task_detector+0x30/0x30 [ 716.755130][ T1637] kthread+0x3b1/0x4a0 [ 716.759205][ T1637] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 716.765198][ T1637] ret_from_fork+0x1f/0x30 [ 716.769740][ T1637] Sending NMI from CPU 0 to CPUs 1: [ 716.775671][ C1] NMI backtrace for cpu 1 [ 716.775681][ C1] CPU: 1 PID: 4882 Comm: systemd-journal Not tainted 5.11.0-rc7-syzkaller #0 [ 716.775690][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.775699][ C1] RIP: 0010:inode_permission.part.0+0x4/0x410 [ 716.775711][ C1] Code: b2 1c 3a 07 5b 5d e9 4b bf af ff e8 f6 58 f2 ff e9 79 ff ff ff e8 ec 58 f2 ff eb d5 e8 e5 58 f2 ff eb a0 0f 1f 00 41 57 41 56 <41> 55 41 89 f5 41 54 55 48 89 fd 53 44 89 eb e8 18 bf af ff 83 e3 [ 716.775726][ C1] RSP: 0018:ffffc90000f27af8 EFLAGS: 00000293 [ 716.775738][ C1] RAX: 0000000000000000 RBX: 0000000000000040 RCX: 0000000000000000 [ 716.775747][ C1] RDX: ffff8880160a0100 RSI: 0000000000000081 RDI: ffff88802deb26f8 [ 716.775755][ C1] RBP: ffff88802deb26f8 R08: 0000000000000000 R09: ffff888011033420 [ 716.775764][ C1] R10: ffffffff81c40773 R11: 0000000000000000 R12: 0000000080000000 [ 716.775773][ C1] R13: 392f009514538c24 R14: ffff888035d1e4e9 R15: 72756f6a2f676f6c [ 716.775782][ C1] FS: 00007ff9a9b188c0(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 716.775791][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 716.775799][ C1] CR2: 00007ff9a6f02000 CR3: 0000000014026000 CR4: 00000000001506e0 [ 716.775808][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 716.775817][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 716.775824][ C1] Call Trace: [ 716.775829][ C1] link_path_walk.part.0+0x23d/0xc70 [ 716.775835][ C1] ? walk_component+0x6a0/0x6a0 [ 716.775841][ C1] ? __lock_acquire+0x16c2/0x54f0 [ 716.775846][ C1] path_parentat+0xa8/0x1b0 [ 716.775852][ C1] filename_parentat+0x188/0x560 [ 716.775857][ C1] ? getname+0xd0/0xd0 [ 716.775862][ C1] ? __might_fault+0xd3/0x180 [ 716.775868][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 716.775874][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 716.775881][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 716.775888][ C1] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 716.775894][ C1] ? __phys_addr_symbol+0x2c/0x70 [ 716.775900][ C1] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 716.775907][ C1] ? __check_object_size+0x171/0x3f0 [ 716.775912][ C1] filename_create+0x9e/0x490 [ 716.775918][ C1] ? filename_parentat+0x560/0x560 [ 716.775924][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 716.775931][ C1] ? getname_flags.part.0+0x1dd/0x4f0 [ 716.775936][ C1] do_mkdirat+0xa0/0x2d0 [ 716.775942][ C1] ? user_path_create+0xf0/0xf0 [ 716.775947][ C1] ? __secure_computing+0x104/0x360 [ 716.775953][ C1] do_syscall_64+0x2d/0x70 [ 716.775959][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 716.775965][ C1] RIP: 0033:0x7ff9a8dd3687 [ 716.775975][ C1] Code: 00 b8 ff ff ff ff c3 0f 1f 40 00 48 8b 05 09 d8 2b 00 64 c7 00 5f 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 d7 2b 00 f7 d8 64 89 01 48 [ 716.775990][ C1] RSP: 002b:00007ffeab11fdd8 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 716.776010][ C1] RAX: ffffffffffffffda RBX: 00007ffeab122cf0 RCX: 00007ff9a8dd3687 [ 716.776018][ C1] RDX: 00007ff9a9844a00 RSI: 00000000000001ed RDI: 00005600b8a658c0 [ 716.776027][ C1] RBP: 00007ffeab11fe10 R08: 0000000000000000 R09: 0000000000000000 [ 716.776035][ C1] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 716.776044][ C1] R13: 0000000000000000 R14: 00007ffeab122cf0 R15: 00007ffeab120300 [ 716.777285][ T1637] Kernel panic - not syncing: hung_task: blocked tasks [ 717.111495][ T1637] CPU: 0 PID: 1637 Comm: khungtaskd Not tainted 5.11.0-rc7-syzkaller #0 [ 717.119822][ T1637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.129872][ T1637] Call Trace: [ 717.133149][ T1637] dump_stack+0x107/0x163 [ 717.137499][ T1637] panic+0x306/0x73d [ 717.141429][ T1637] ? __warn_printk+0xf3/0xf3 [ 717.146035][ T1637] ? lapic_can_unplug_cpu+0x80/0x80 [ 717.151241][ T1637] ? preempt_schedule_thunk+0x16/0x18 [ 717.156618][ T1637] ? nmi_trigger_cpumask_backtrace+0x196/0x230 [ 717.162789][ T1637] ? watchdog.cold+0x5/0x158 [ 717.167423][ T1637] watchdog.cold+0x16/0x158 [ 717.171973][ T1637] ? reset_hung_task_detector+0x30/0x30 [ 717.177530][ T1637] kthread+0x3b1/0x4a0 [ 717.181625][ T1637] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 717.187534][ T1637] ret_from_fork+0x1f/0x30 [ 717.193040][ T1637] Kernel Offset: disabled [ 717.197389][ T1637] Rebooting in 86400 seconds..