Warning: Permanently added '10.128.1.56' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 472.954085][ T6870] netlink: 32 bytes leftover after parsing attributes in process `syz-executor717'. [ 636.739731][ T1174] INFO: task syz-executor717:6870 blocked for more than 143 seconds. [ 636.747914][ T1174] Not tainted 5.9.0-rc8-syzkaller #0 [ 636.755823][ T1174] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 636.765347][ T1174] task:syz-executor717 state:D stack:25816 pid: 6870 ppid: 6868 flags:0x00004004 [ 636.775197][ T1174] Call Trace: [ 636.778574][ T1174] __schedule+0xec9/0x2280 [ 636.783970][ T1174] ? io_schedule_timeout+0x140/0x140 [ 636.789283][ T1174] schedule+0xd0/0x2a0 [ 636.795236][ T1174] schedule_preempt_disabled+0xf/0x20 [ 636.801185][ T1174] __mutex_lock+0x3e2/0x10e0 [ 636.805823][ T1174] ? tcf_action_init_1+0x747/0x990 [ 636.812949][ T1174] ? mutex_lock_io_nested+0xf60/0xf60 [ 636.818345][ T1174] ? lock_downgrade+0x830/0x830 [ 636.824197][ T1174] ? generic_xdp_install+0x7b0/0x7b0 [ 636.829518][ T1174] tcf_action_init_1+0x747/0x990 [ 636.835428][ T1174] ? tcf_action_dump_old+0x80/0x80 [ 636.841143][ T1174] ? find_held_lock+0x2d/0x110 [ 636.845933][ T1174] tcf_action_init+0x265/0x4b0 [ 636.851669][ T1174] ? tcf_action_init_1+0x990/0x990 [ 636.856828][ T1174] tcf_action_add+0xd9/0x360 [ 636.862430][ T1174] ? tca_action_gd+0xe20/0xe20 [ 636.867196][ T1174] ? lock_acquire+0x1f3/0xaf0 [ 636.872828][ T1174] ? bpf_lsm_capable+0x5/0x10 [ 636.877587][ T1174] ? __nla_parse+0x3d/0x4a [ 636.882973][ T1174] tc_ctl_action+0x33a/0x439 [ 636.887565][ T1174] ? tcf_action_add+0x360/0x360 [ 636.893371][ T1174] ? lock_is_held_type+0xbb/0xf0 [ 636.898420][ T1174] ? tcf_action_add+0x360/0x360 [ 636.904288][ T1174] rtnetlink_rcv_msg+0x44e/0xad0 [ 636.909229][ T1174] ? rtnetlink_put_metrics+0x510/0x510 [ 636.915652][ T1174] ? lock_acquire+0x1f3/0xaf0 [ 636.920991][ T1174] ? netlink_deliver_tap+0x146/0xb70 [ 636.926287][ T1174] netlink_rcv_skb+0x15a/0x430 [ 636.931992][ T1174] ? rtnetlink_put_metrics+0x510/0x510 [ 636.937455][ T1174] ? netlink_ack+0xa10/0xa10 [ 636.944136][ T1174] ? __kmalloc_node_track_caller+0x38/0x60 [ 636.950529][ T1174] netlink_unicast+0x533/0x7d0 [ 636.955301][ T1174] ? netlink_attachskb+0x810/0x810 [ 636.961384][ T1174] ? __phys_addr_symbol+0x2c/0x70 [ 636.966411][ T1174] ? __check_object_size+0x171/0x3e4 [ 636.972818][ T1174] netlink_sendmsg+0x856/0xd90 [ 636.977584][ T1174] ? netlink_unicast+0x7d0/0x7d0 [ 636.983564][ T1174] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 636.988850][ T1174] ? netlink_unicast+0x7d0/0x7d0 [ 636.994728][ T1174] sock_sendmsg+0xcf/0x120 [ 636.999143][ T1174] ____sys_sendmsg+0x6e8/0x810 [ 637.006052][ T1174] ? kernel_sendmsg+0x50/0x50 [ 637.011330][ T1174] ? do_recvmmsg+0x6d0/0x6d0 [ 637.015931][ T1174] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 637.022882][ T1174] ? lock_is_held_type+0xbb/0xf0 [ 637.027821][ T1174] ? find_held_lock+0x2d/0x110 [ 637.033515][ T1174] ___sys_sendmsg+0xf3/0x170 [ 637.038105][ T1174] ? sendmsg_copy_msghdr+0x160/0x160 [ 637.044372][ T1174] ? __fget_files+0x272/0x400 [ 637.049053][ T1174] ? lock_downgrade+0x830/0x830 [ 637.054718][ T1174] ? do_huge_pmd_anonymous_page+0x8f2/0x2200 [ 637.061303][ T1174] ? __fget_files+0x294/0x400 [ 637.065989][ T1174] ? __fget_light+0xea/0x280 [ 637.072568][ T1174] __sys_sendmsg+0xe5/0x1b0 [ 637.077123][ T1174] ? __sys_sendmsg_sock+0xb0/0xb0 [ 637.083172][ T1174] ? check_preemption_disabled+0x50/0x130 [ 637.088903][ T1174] ? syscall_enter_from_user_mode+0x1d/0x60 [ 637.095764][ T1174] do_syscall_64+0x2d/0x70 [ 637.100786][ T1174] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 637.106672][ T1174] RIP: 0033:0x446b59 [ 637.111461][ T1174] Code: Bad RIP value. [ 637.115525][ T1174] RSP: 002b:00007f70c4236d98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 637.125005][ T1174] RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446b59 [ 637.133591][ T1174] RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000003 [ 637.142190][ T1174] RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000 [ 637.150731][ T1174] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c [ 637.158703][ T1174] R13: 0001008400000000 R14: 0000000000000000 R15: 053b003000000098 [ 637.167722][ T1174] [ 637.167722][ T1174] Showing all locks held in the system: [ 637.176041][ T1174] 1 lock held by khungtaskd/1174: [ 637.183109][ T1174] #0: ffffffff8a068480 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 637.193517][ T1174] 3 locks held by kworker/0:2/2637: [ 637.198705][ T1174] #0: ffff888099db1538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x82b/0x1670 [ 637.211777][ T1174] #1: ffffc90009567da8 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x85f/0x1670 [ 637.222581][ T1174] #2: ffffffff8b17a448 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20 [ 637.233866][ T1174] 1 lock held by in:imklog/6649: [ 637.238807][ T1174] #0: ffff8880a18f7870 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 637.248954][ T1174] 1 lock held by syz-executor717/6870: [ 637.255073][ T1174] #0: ffffffff8b17a448 (rtnl_mutex){+.+.}-{3:3}, at: tcf_action_init_1+0x747/0x990 [ 637.265213][ T1174] 2 locks held by syz-executor717/6872: [ 637.271372][ T1174] [ 637.273703][ T1174] ============================================= [ 637.273703][ T1174] [ 637.283073][ T1174] NMI backtrace for cpu 0 [ 637.287402][ T1174] CPU: 0 PID: 1174 Comm: khungtaskd Not tainted 5.9.0-rc8-syzkaller #0 [ 637.295632][ T1174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.305680][ T1174] Call Trace: [ 637.309023][ T1174] dump_stack+0x198/0x1fd [ 637.313351][ T1174] nmi_cpu_backtrace.cold+0x70/0xb1 [ 637.318551][ T1174] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 637.324176][ T1174] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 637.330150][ T1174] watchdog+0xd7d/0x1000 [ 637.334389][ T1174] ? reset_hung_task_detector+0x30/0x30 [ 637.339947][ T1174] kthread+0x3b5/0x4a0 [ 637.344009][ T1174] ? __kthread_bind_mask+0xc0/0xc0 [ 637.349118][ T1174] ret_from_fork+0x1f/0x30 [ 637.353678][ T1174] Sending NMI from CPU 0 to CPUs 1: [ 637.359812][ C1] NMI backtrace for cpu 1 [ 637.359818][ C1] CPU: 1 PID: 6872 Comm: syz-executor717 Not tainted 5.9.0-rc8-syzkaller #0 [ 637.359825][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.359828][ C1] RIP: 0010:__kasan_check_read+0x4/0x10 [ 637.359840][ C1] Code: 19 09 00 48 8b 73 58 89 c2 48 c7 c7 a8 71 b5 89 f7 da e8 ce 43 a7 ff e9 81 f5 ff ff cc cc cc cc cc cc cc cc cc cc 48 8b 0c 24 <89> f6 31 d2 e9 a3 2a 00 00 0f 1f 00 48 8b 0c 24 89 f6 ba 01 00 00 [ 637.359844][ C1] RSP: 0018:ffffc9000167eb00 EFLAGS: 00000006 [ 637.359851][ C1] RAX: 0000000000000018 RBX: 0000000000000605 RCX: ffffffff815b9ea2 [ 637.359857][ C1] RDX: 1ffff1101201113a RSI: 0000000000000008 RDI: ffffffff8d10faa0 [ 637.359862][ C1] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffffff8d10faa7 [ 637.359867][ C1] R10: fffffbfff1a21f54 R11: 0000000000000000 R12: ffff8880900889d0 [ 637.359872][ C1] R13: ffff8880900889d2 R14: 0000000000000040 R15: ffff8880900889b0 [ 637.359877][ C1] FS: 00007f70c4216700(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000 [ 637.359881][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 637.359885][ C1] CR2: 0000000020000800 CR3: 00000000997df000 CR4: 00000000001506e0 [ 637.359890][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 637.359894][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 637.359896][ C1] Call Trace: [ 637.359899][ C1] mark_lock+0x82/0x1660 [ 637.359902][ C1] ? lock_is_held_type+0xbb/0xf0 [ 637.359905][ C1] __lock_acquire+0x8a0/0x5780 [ 637.359909][ C1] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 637.359912][ C1] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 637.359916][ C1] ? check_preemption_disabled+0x50/0x130 [ 637.359919][ C1] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 637.359922][ C1] lock_acquire+0x1f3/0xaf0 [ 637.359925][ C1] ? tcf_idr_check_alloc+0x78/0x3b0 [ 637.359928][ C1] ? lock_release+0x8f0/0x8f0 [ 637.359931][ C1] ? arch_local_irq_save+0x1b/0x90 [ 637.359935][ C1] ? lock_is_held_type+0xbb/0xf0 [ 637.359938][ C1] __mutex_lock+0x134/0x10e0 [ 637.359941][ C1] ? tcf_idr_check_alloc+0x78/0x3b0 [ 637.359944][ C1] ? tcf_idr_check_alloc+0x78/0x3b0 [ 637.359947][ C1] ? mutex_lock_io_nested+0xf60/0xf60 [ 637.359951][ C1] ? __mutex_unlock_slowpath+0xe2/0x610 [ 637.359954][ C1] ? wait_for_completion+0x260/0x260 [ 637.359957][ C1] tcf_idr_check_alloc+0x78/0x3b0 [ 637.359960][ C1] tcf_connmark_init+0x2de/0x910 [ 637.359963][ C1] ? tcf_connmark_act+0xb40/0xb40 [ 637.359966][ C1] ? lock_downgrade+0x830/0x830 [ 637.359969][ C1] ? __kmalloc_track_caller+0x38/0x360 [ 637.359972][ C1] tcf_action_init_1+0x63f/0x990 [ 637.359975][ C1] ? tcf_action_dump_old+0x80/0x80 [ 637.359978][ C1] tcf_action_init+0x265/0x4b0 [ 637.359982][ C1] ? tcf_action_init_1+0x990/0x990 [ 637.359984][ C1] tcf_action_add+0xd9/0x360 [ 637.359987][ C1] ? tca_action_gd+0xe20/0xe20 [ 637.359990][ C1] ? lock_acquire+0x1f3/0xaf0 [ 637.359993][ C1] ? bpf_lsm_capable+0x5/0x10 [ 637.360001][ C1] ? __nla_parse+0x3d/0x4a [ 637.360004][ C1] tc_ctl_action+0x33a/0x439 [ 637.360007][ C1] ? tcf_action_add+0x360/0x360 [ 637.360010][ C1] ? lock_is_held_type+0xbb/0xf0 [ 637.360013][ C1] ? tcf_action_add+0x360/0x360 [ 637.360016][ C1] rtnetlink_rcv_msg+0x44e/0xad0 [ 637.360019][ C1] ? rtnetlink_put_metrics+0x510/0x510 [ 637.360022][ C1] ? lock_acquire+0x1f3/0xaf0 [ 637.360025][ C1] ? netlink_deliver_tap+0x146/0xb70 [ 637.360028][ C1] netlink_rcv_skb+0x15a/0x430 [ 637.360032][ C1] ? rtnetlink_put_metrics+0x510/0x510 [ 637.360034][ C1] ? netlink_ack+0xa10/0xa10 [ 637.360038][ C1] ? __kmalloc_node_track_caller+0x38/0x60 [ 637.360041][ C1] netlink_unicast+0x533/0x7d0 [ 637.360044][ C1] ? netlink_attachskb+0x810/0x810 [ 637.360047][ C1] ? __phys_addr_symbol+0x2c/0x70 [ 637.360050][ C1] ? __check_object_size+0x171/0x3e4 [ 637.360053][ C1] netlink_sendmsg+0x856/0xd90 [ 637.360056][ C1] ? netlink_unicast+0x7d0/0x7d0 [ 637.360060][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 637.360063][ C1] ? netlink_unicast+0x7d0/0x7d0 [ 637.360065][ C1] sock_sendmsg+0xcf/0x120 [ 637.360068][ C1] ____sys_sendmsg+0x6e8/0x810 [ 637.360071][ C1] ? kernel_sendmsg+0x50/0x50 [ 637.360074][ C1] ? do_recvmmsg+0x6d0/0x6d0 [ 637.360078][ C1] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 637.360081][ C1] ? __lock_acquire+0xb92/0x5780 [ 637.360084][ C1] ___sys_sendmsg+0xf3/0x170 [ 637.360087][ C1] ? sendmsg_copy_msghdr+0x160/0x160 [ 637.360090][ C1] ? __fget_files+0x272/0x400 [ 637.360093][ C1] ? lock_downgrade+0x830/0x830 [ 637.360096][ C1] ? percpu_counter_add_batch+0x126/0x180 [ 637.360099][ C1] ? __fget_files+0x294/0x400 [ 637.360102][ C1] ? __fget_light+0xea/0x280 [ 637.360105][ C1] __sys_sendmsg+0xe5/0x1b0 [ 637.360108][ C1] ? __sys_sendmsg_sock+0xb0/0xb0 [ 637.360111][ C1] ? __x64_sys_futex+0x382/0x4e0 [ 637.360114][ C1] ? check_preemption_disabled+0x50/0x130 [ 637.360118][ C1] ? syscall_enter_from_user_mode+0x1d/0x60 [ 637.360121][ C1] do_syscall_64+0x2d/0x70 [ 637.360124][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 637.360127][ C1] RIP: 0033:0x446b59 [ 637.360139][ C1] Code: e8 5c b3 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 637.360143][ C1] RSP: 002b:00007f70c4215d98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 637.360150][ C1] RAX: ffffffffffffffda RBX: 00000000006dbc38 RCX: 0000000000446b59 [ 637.360155][ C1] RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000004 [ 637.360159][ C1] RBP: 00000000006dbc30 R08: 000000000000000d R09: 0000000000000000 [ 637.360164][ C1] R10: 0000000000000050 R11: 0000000000000246 R12: 00000000006dbc3c [ 637.360169][ C1] R13: 0001008400000000 R14: 0000000000000000 R15: 053b003000000098 [ 637.379518][ T1174] Kernel panic - not syncing: hung_task: blocked tasks [ 637.935423][ T1174] CPU: 0 PID: 1174 Comm: khungtaskd Not tainted 5.9.0-rc8-syzkaller #0 [ 637.943747][ T1174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.953877][ T1174] Call Trace: [ 637.957175][ T1174] dump_stack+0x198/0x1fd [ 637.961502][ T1174] panic+0x382/0x7fb [ 637.965390][ T1174] ? __warn_printk+0xf3/0xf3 [ 637.969977][ T1174] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 637.975602][ T1174] ? preempt_schedule_thunk+0x16/0x18 [ 637.980966][ T1174] ? watchdog.cold+0x5/0x16b [ 637.985543][ T1174] ? watchdog+0xa82/0x1000 [ 637.989952][ T1174] watchdog.cold+0x16/0x16b [ 637.994450][ T1174] ? reset_hung_task_detector+0x30/0x30 [ 637.999985][ T1174] kthread+0x3b5/0x4a0 [ 638.004051][ T1174] ? __kthread_bind_mask+0xc0/0xc0 [ 638.009176][ T1174] ret_from_fork+0x1f/0x30 [ 638.015201][ T1174] Kernel Offset: disabled [ 638.019563][ T1174] Rebooting in 86400 seconds..