Warning: Permanently added '10.128.0.241' (ECDSA) to the list of known hosts. executing program executing program executing program syzkaller login: [ 484.654198][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 721.328565][ T1643] INFO: task kworker/1:2:3508 blocked for more than 143 seconds. [ 721.336555][ T1643] Not tainted 5.12.0-rc4-next-20210326-syzkaller #0 [ 721.346602][ T1643] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 721.356577][ T1643] task:kworker/1:2 state:D stack:26600 pid: 3508 ppid: 2 flags:0x00004000 [ 721.367051][ T1643] Workqueue: ipv6_addrconf addrconf_dad_work [ 721.374440][ T1643] Call Trace: [ 721.377815][ T1643] __schedule+0x911/0x2160 [ 721.385238][ T1643] ? io_schedule_timeout+0x140/0x140 [ 721.391722][ T1643] ? _raw_spin_unlock_irq+0x1f/0x40 [ 721.396975][ T1643] ? lockdep_hardirqs_on+0x79/0x100 [ 721.405878][ T1643] schedule+0xcf/0x270 [ 721.411115][ T1643] schedule_preempt_disabled+0xf/0x20 [ 721.416529][ T1643] __mutex_lock+0x81f/0x1120 [ 721.422727][ T1643] ? addrconf_dad_work+0xa3/0x12b0 [ 721.427880][ T1643] ? mutex_lock_io_nested+0xf70/0xf70 [ 721.434793][ T1643] ? debug_object_deactivate+0x264/0x300 [ 721.441764][ T1643] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 721.447873][ T1643] addrconf_dad_work+0xa3/0x12b0 [ 721.454455][ T1643] ? addrconf_dad_completed+0xce0/0xce0 [ 721.461217][ T1643] process_one_work+0x98d/0x1600 [ 721.466320][ T1643] ? pwq_dec_nr_in_flight+0x320/0x320 [ 721.473549][ T1643] ? rwlock_bug.part.0+0x90/0x90 [ 721.479496][ T1643] ? _raw_spin_lock_irq+0x41/0x50 [ 721.484577][ T1643] worker_thread+0x64c/0x1120 [ 721.490915][ T1643] ? __kthread_parkme+0x13f/0x1e0 [ 721.495996][ T1643] ? process_one_work+0x1600/0x1600 [ 721.502925][ T1643] kthread+0x3b1/0x4a0 [ 721.507048][ T1643] ? __kthread_bind_mask+0xc0/0xc0 [ 721.515058][ T1643] ret_from_fork+0x1f/0x30 [ 721.520708][ T1643] INFO: task syz-executor590:8454 can't die for more than 143 seconds. [ 721.530066][ T1643] task:syz-executor590 state:R running task stack:26936 pid: 8454 ppid: 8438 flags:0x00004006 [ 721.543125][ T1643] Call Trace: [ 721.546438][ T1643] ? __schedule+0x919/0x2160 [ 721.552624][ T1643] ? mark_held_locks+0x9f/0xe0 [ 721.557457][ T1643] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 721.565184][ T1643] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 721.572601][ T1643] ? lockdep_hardirqs_on+0x79/0x100 [ 721.577841][ T1643] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 721.585610][ T1643] ? ieee80211_chanctx_radar_detect+0x26a/0x420 [ 721.593039][ T1643] ? ieee80211_chanctx_radar_detect+0x2c9/0x420 [ 721.600524][ T1643] ? kcov_remote_stop+0x410/0x410 [ 721.605699][ T1643] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 721.613697][ T1643] ? ieee80211_chanctx_radar_detect+0x26a/0x420 [ 721.620975][ T1643] ? ieee80211_check_combinations+0x3b9/0x890 [ 721.627163][ T1643] ? ieee80211_recalc_dtim+0x240/0x240 [ 721.634262][ T1643] ? ieee80211_check_concurrent_iface+0x454/0x620 [ 721.643016][ T1643] ? ieee80211_if_change_type+0x288/0x6e0 [ 721.649802][ T1643] ? ieee80211_change_iface+0x26/0x210 [ 721.655302][ T1643] ? cfg80211_change_iface+0x335/0xf30 [ 721.662262][ T1643] ? nl80211_set_interface+0x65c/0x8d0 [ 721.667798][ T1643] ? nl80211_notify_iface+0x180/0x180 [ 721.674609][ T1643] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 721.682156][ T1643] ? nl80211_pre_doit+0xa6/0x620 [ 721.687141][ T1643] ? genl_family_rcv_msg_doit+0x228/0x320 [ 721.694267][ T1643] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 721.702704][ T1643] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 721.709936][ T1643] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 721.716258][ T1643] ? ns_capable+0xde/0x100 [ 721.722147][ T1643] ? genl_rcv_msg+0x328/0x580 [ 721.726855][ T1643] ? genl_get_cmd+0x480/0x480 [ 721.732904][ T1643] ? nl80211_notify_iface+0x180/0x180 [ 721.739244][ T1643] ? lock_release+0x720/0x720 [ 721.743967][ T1643] ? netlink_rcv_skb+0x153/0x420 [ 721.750450][ T1643] ? genl_get_cmd+0x480/0x480 [ 721.755154][ T1643] ? netlink_ack+0xaa0/0xaa0 [ 721.761157][ T1643] ? genl_rcv+0x24/0x40 [ 721.765337][ T1643] ? netlink_unicast+0x533/0x7d0 [ 721.772946][ T1643] ? netlink_attachskb+0x870/0x870 [ 721.778100][ T1643] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 721.785966][ T1643] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 721.793213][ T1643] ? __phys_addr_symbol+0x2c/0x70 [ 721.799380][ T1643] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 721.805140][ T1643] ? __check_object_size+0x171/0x3f0 [ 721.812183][ T1643] ? netlink_sendmsg+0x856/0xd90 [ 721.817313][ T1643] ? netlink_unicast+0x7d0/0x7d0 [ 721.823765][ T1643] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 721.831004][ T1643] ? netlink_unicast+0x7d0/0x7d0 [ 721.835976][ T1643] ? sock_sendmsg+0xcf/0x120 [ 721.842199][ T1643] ? ____sys_sendmsg+0x6e8/0x810 [ 721.847191][ T1643] ? kernel_sendmsg+0x50/0x50 [ 721.853377][ T1643] ? do_recvmmsg+0x6d0/0x6d0 [ 721.858008][ T1643] ? lock_chain_count+0x20/0x20 [ 721.864477][ T1643] ? find_held_lock+0x2d/0x110 [ 721.870194][ T1643] ? ___sys_sendmsg+0xf3/0x170 [ 721.874995][ T1643] ? sendmsg_copy_msghdr+0x160/0x160 [ 721.881764][ T1643] ? __lock_acquire+0x16a7/0x5230 [ 721.886836][ T1643] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 721.894301][ T1643] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 721.902711][ T1643] ? __fget_light+0x215/0x280 [ 721.907509][ T1643] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 721.915720][ T1643] ? __sys_sendmsg+0xe5/0x1b0 [ 721.921447][ T1643] ? __sys_sendmsg_sock+0x30/0x30 [ 721.926511][ T1643] ? __context_tracking_enter+0xef/0x100 [ 721.933779][ T1643] ? syscall_enter_from_user_mode+0x27/0x70 [ 721.940851][ T1643] ? do_syscall_64+0x2d/0x70 [ 721.945479][ T1643] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 721.953257][ T1643] INFO: task kworker/1:0:8459 blocked for more than 143 seconds. [ 721.961988][ T1643] Not tainted 5.12.0-rc4-next-20210326-syzkaller #0 [ 721.970089][ T1643] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 721.979748][ T1643] task:kworker/1:0 state:D stack:30032 pid: 8459 ppid: 2 flags:0x00004000 [ 721.989987][ T1643] Workqueue: events linkwatch_event [ 721.995293][ T1643] Call Trace: [ 722.000028][ T1643] __schedule+0x911/0x2160 [ 722.004485][ T1643] ? io_schedule_timeout+0x140/0x140 [ 722.011264][ T1643] ? _raw_spin_unlock_irq+0x1f/0x40 [ 722.016519][ T1643] ? lockdep_hardirqs_on+0x79/0x100 [ 722.023141][ T1643] schedule+0xcf/0x270 [ 722.027243][ T1643] schedule_preempt_disabled+0xf/0x20 [ 722.035369][ T1643] __mutex_lock+0x81f/0x1120 [ 722.040880][ T1643] ? linkwatch_event+0xb/0x60 [ 722.045770][ T1643] ? mutex_lock_io_nested+0xf70/0xf70 [ 722.052712][ T1643] ? lock_release+0x720/0x720 [ 722.057446][ T1643] linkwatch_event+0xb/0x60 [ 722.063552][ T1643] process_one_work+0x98d/0x1600 [ 722.069447][ T1643] ? pwq_dec_nr_in_flight+0x320/0x320 [ 722.074855][ T1643] ? rwlock_bug.part.0+0x90/0x90 [ 722.081160][ T1643] ? _raw_spin_lock_irq+0x41/0x50 [ 722.086225][ T1643] worker_thread+0x64c/0x1120 [ 722.092288][ T1643] ? __kthread_parkme+0x13f/0x1e0 [ 722.097355][ T1643] ? process_one_work+0x1600/0x1600 [ 722.103960][ T1643] kthread+0x3b1/0x4a0 [ 722.108063][ T1643] ? __kthread_bind_mask+0xc0/0xc0 [ 722.114670][ T1643] ret_from_fork+0x1f/0x30 [ 722.120162][ T1643] [ 722.120162][ T1643] Showing all locks held in the system: [ 722.127950][ T1643] 1 lock held by khungtaskd/1643: [ 722.134830][ T1643] #0: ffffffff8bf753a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 722.146171][ T1643] 3 locks held by kworker/1:2/3508: [ 722.152352][ T1643] #0: ffff888144c87d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x871/0x1600 [ 722.165675][ T1643] #1: ffffc90002c9fda8 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600 [ 722.178733][ T1643] #2: ffffffff8d688de8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xa3/0x12b0 [ 722.188206][ T1643] 1 lock held by in:imklog/8123: [ 722.194323][ T1643] #0: ffff888023538ff0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 722.204218][ T1643] 4 locks held by syz-executor590/8454: [ 722.210546][ T1643] 3 locks held by kworker/1:0/8459: [ 722.215757][ T1643] #0: ffff888010864d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x871/0x1600 [ 722.227381][ T1643] #1: ffffc90001a0fda8 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600 [ 722.238592][ T1643] #2: ffffffff8d688de8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xb/0x60 [ 722.247711][ T1643] [ 722.252417][ T1643] ============================================= [ 722.252417][ T1643] [ 722.262316][ T1643] NMI backtrace for cpu 1 [ 722.266663][ T1643] CPU: 1 PID: 1643 Comm: khungtaskd Not tainted 5.12.0-rc4-next-20210326-syzkaller #0 [ 722.276212][ T1643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 722.286275][ T1643] Call Trace: [ 722.289562][ T1643] dump_stack+0x141/0x1d7 [ 722.293990][ T1643] nmi_cpu_backtrace.cold+0x44/0xd7 [ 722.299199][ T1643] ? lapic_can_unplug_cpu+0x80/0x80 [ 722.304460][ T1643] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 722.310500][ T1643] watchdog+0xd8e/0xf40 [ 722.314672][ T1643] ? trace_sched_process_hang+0x280/0x280 [ 722.320420][ T1643] kthread+0x3b1/0x4a0 [ 722.324509][ T1643] ? __kthread_bind_mask+0xc0/0xc0 [ 722.329635][ T1643] ret_from_fork+0x1f/0x30 [ 722.334316][ T1643] Sending NMI from CPU 1 to CPUs 0: [ 722.340669][ C0] NMI backtrace for cpu 0 [ 722.340680][ C0] CPU: 0 PID: 8454 Comm: syz-executor590 Not tainted 5.12.0-rc4-next-20210326-syzkaller #0 [ 722.340691][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 722.340701][ C0] RIP: 0010:ieee80211_chanctx_radar_detect+0x2c9/0x420 [ 722.340713][ C0] Code: 44 89 fe e8 99 51 07 f9 41 83 ff 3f 0f 87 20 8e 9c 00 e8 da 49 07 f9 b8 01 00 00 00 44 89 f9 48 d3 e0 41 09 c4 e8 c7 49 07 f9 <48> 8d bb 58 09 00 00 48 89 f8 48 c1 e8 03 42 80 3c 30 00 0f 85 d4 [ 722.340729][ C0] RSP: 0018:ffffc900019ff2e0 EFLAGS: 00000293 [ 722.340743][ C0] RAX: 0000000000000000 RBX: ffff888012ac4c00 RCX: 0000000000000000 [ 722.340752][ C0] RDX: ffff888023555580 RSI: ffffffff886cdf09 RDI: 0000000000000003 [ 722.340761][ C0] RBP: 0000000000000000 R08: 0000000000000002 R09: 0000000000000000 [ 722.340770][ C0] R10: ffffffff886cdeaa R11: 0000000000000000 R12: 0000000000000000 [ 722.340779][ C0] R13: ffff888014ca3220 R14: dffffc0000000000 R15: 0000000000000000 [ 722.340789][ C0] FS: 0000000001fe6300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 722.340798][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 722.340806][ C0] CR2: 0000558192607988 CR3: 000000001c7d7000 CR4: 00000000001506f0 [ 722.340815][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 722.340824][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 722.340832][ C0] Call Trace: [ 722.340837][ C0] ieee80211_check_combinations+0x3b9/0x890 [ 722.340844][ C0] ? ieee80211_recalc_dtim+0x240/0x240 [ 722.340851][ C0] ieee80211_check_concurrent_iface+0x454/0x620 [ 722.340858][ C0] ieee80211_if_change_type+0x288/0x6e0 [ 722.340865][ C0] ieee80211_change_iface+0x26/0x210 [ 722.340871][ C0] cfg80211_change_iface+0x335/0xf30 [ 722.340878][ C0] nl80211_set_interface+0x65c/0x8d0 [ 722.340884][ C0] ? nl80211_notify_iface+0x180/0x180 [ 722.340891][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 722.340898][ C0] ? nl80211_pre_doit+0xa6/0x620 [ 722.340905][ C0] genl_family_rcv_msg_doit+0x228/0x320 [ 722.340912][ C0] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 722.340920][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 722.340933][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 722.340940][ C0] ? ns_capable+0xde/0x100 [ 722.340946][ C0] genl_rcv_msg+0x328/0x580 [ 722.340952][ C0] ? genl_get_cmd+0x480/0x480 [ 722.340958][ C0] ? nl80211_notify_iface+0x180/0x180 [ 722.340964][ C0] ? lock_release+0x720/0x720 [ 722.340970][ C0] netlink_rcv_skb+0x153/0x420 [ 722.340976][ C0] ? genl_get_cmd+0x480/0x480 [ 722.340982][ C0] ? netlink_ack+0xaa0/0xaa0 [ 722.340988][ C0] genl_rcv+0x24/0x40 [ 722.340993][ C0] netlink_unicast+0x533/0x7d0 [ 722.340999][ C0] ? netlink_attachskb+0x870/0x870 [ 722.341006][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 722.341013][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 722.341020][ C0] ? __phys_addr_symbol+0x2c/0x70 [ 722.341027][ C0] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 722.341034][ C0] ? __check_object_size+0x171/0x3f0 [ 722.341040][ C0] netlink_sendmsg+0x856/0xd90 [ 722.341046][ C0] ? netlink_unicast+0x7d0/0x7d0 [ 722.341053][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 722.341059][ C0] ? netlink_unicast+0x7d0/0x7d0 [ 722.341065][ C0] sock_sendmsg+0xcf/0x120 [ 722.341071][ C0] ____sys_sendmsg+0x6e8/0x810 [ 722.341077][ C0] ? kernel_sendmsg+0x50/0x50 [ 722.341083][ C0] ? do_recvmmsg+0x6d0/0x6d0 [ 722.341089][ C0] ? lock_chain_count+0x20/0x20 [ 722.341095][ C0] ? find_held_lock+0x2d/0x110 [ 722.341101][ C0] ___sys_sendmsg+0xf3/0x170 [ 722.341107][ C0] ? sendmsg_copy_msghdr+0x160/0x160 [ 722.341114][ C0] ? __lock_acquire+0x16a7/0x5230 [ 722.341120][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 722.341128][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 722.341135][ C0] ? __fget_light+0x215/0x280 [ 722.341141][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 722.341148][ C0] __sys_sendmsg+0xe5/0x1b0 [ 722.341154][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 722.341160][ C0] ? __context_tracking_enter+0xef/0x100 [ 722.341167][ C0] ? syscall_enter_from_user_mode+0x27/0x70 [ 722.341174][ C0] do_syscall_64+0x2d/0x70 [ 722.341180][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 722.341186][ C0] RIP: 0033:0x441119 [ 722.341197][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 722.341212][ C0] RSP: 002b:00007ffff1e1a368 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 722.341227][ C0] RAX: ffffffffffffffda RBX: 0000000000076506 RCX: 0000000000441119 [ 722.341236][ C0] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000004 [ 722.341245][ C0] RBP: 0000000000000000 R08: 00007ffff1e1a508 R09: 00007ffff1e1a508 [ 722.341254][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff1e1a37c [ 722.341263][ C0] R13: 431bde82d7b634db R14: 00000000004b5018 R15: 00000000004004b8 [ 722.341273][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.060 msecs [ 722.358331][ T1643] Kernel panic - not syncing: hung_task: blocked tasks [ 722.859312][ T1643] CPU: 1 PID: 1643 Comm: khungtaskd Not tainted 5.12.0-rc4-next-20210326-syzkaller #0 [ 722.868958][ T1643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 722.879388][ T1643] Call Trace: [ 722.882851][ T1643] dump_stack+0x141/0x1d7 [ 722.887200][ T1643] panic+0x306/0x73d [ 722.891103][ T1643] ? __warn_printk+0xf3/0xf3 [ 722.899265][ T1643] ? lapic_can_unplug_cpu+0x80/0x80 [ 722.904472][ T1643] ? preempt_schedule_thunk+0x16/0x18 [ 722.910633][ T1643] ? nmi_trigger_cpumask_backtrace+0x196/0x230 [ 722.916803][ T1643] ? watchdog.cold+0x22d/0x248 [ 722.921625][ T1643] watchdog.cold+0x23e/0x248 [ 722.926247][ T1643] ? trace_sched_process_hang+0x280/0x280 [ 722.931980][ T1643] kthread+0x3b1/0x4a0 [ 722.936076][ T1643] ? __kthread_bind_mask+0xc0/0xc0 [ 722.941203][ T1643] ret_from_fork+0x1f/0x30 [ 722.945864][ T1643] Kernel Offset: disabled [ 722.950185][ T1643] Rebooting in 86400 seconds..