xt_NFQUEUE: number of total queues is 0 bridge0: port 2(bridge_slave_1) entered disabled state bridge0: port 1(bridge_slave_0) entered disabled state INFO: task syz-executor.5:32452 blocked for more than 140 seconds. Not tainted 4.19.142-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.5 D28952 32452 6486 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072 rtnl_lock net/core/rtnetlink.c:77 [inline] rtnetlink_rcv_msg+0x3fe/0xb80 net/core/rtnetlink.c:4775 netlink_rcv_skb+0x160/0x440 net/netlink/af_netlink.c:2455 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x4d5/0x690 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6bb/0xc40 net/netlink/af_netlink.c:1909 sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xc3/0x120 net/socket.c:632 ___sys_sendmsg+0x7bb/0x8e0 net/socket.c:2115 __sys_sendmsg net/socket.c:2153 [inline] __do_sys_sendmsg net/socket.c:2162 [inline] __se_sys_sendmsg net/socket.c:2160 [inline] __x64_sys_sendmsg+0x132/0x220 net/socket.c:2160 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45d5b9 Code: e8 bc 4d fa ff 0f b6 44 24 18 eb cd c6 44 24 40 00 48 8b 6c 24 20 48 83 c4 28 c3 e8 41 7b 00 00 e9 fc fe ff ff cc cc cc cc cc cc cc cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 RSP: 002b:00007f3bd6735c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000002ce80 RCX: 000000000045d5b9 RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c R13: 00007ffe7866d08f R14: 00007f3bd67369c0 R15: 000000000118cf4c Showing all locks held in the system: 1 lock held by khungtaskd/1090: #0: 0000000092cb0fe1 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 kernel/locking/lockdep.c:4440 1 lock held by in:imklog/6134: 2 locks held by agetty/6158: #0: 00000000f900f03a (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: 0000000032f483a2 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1950 drivers/tty/n_tty.c:2154 2 locks held by agetty/6162: #0: 000000003dc7ae45 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: 000000004ae4d323 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1950 drivers/tty/n_tty.c:2154 3 locks held by kworker/0:0/30359: #0: 00000000cff7b261 ((wq_completion)"events"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2126 #1: 0000000076deb766 ((linkwatch_work).work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2130 #2: 00000000fefae98b (rtnl_mutex){+.+.}, at: linkwatch_event+0xb/0x60 net/core/link_watch.c:236 4 locks held by kworker/u4:4/3602: #0: 000000005843f60e ((wq_completion)"%s""netns"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2126 #1: 00000000cad6bb90 (net_cleanup_work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2130 #2: 00000000ddb67278 (pernet_ops_rwsem){++++}, at: cleanup_net+0xa8/0x8b0 net/core/net_namespace.c:520 #3: 00000000fefae98b (rtnl_mutex){+.+.}, at: ip6gre_exit_batch_net+0x82/0x6c0 net/ipv6/ip6_gre.c:1624 3 locks held by kworker/0:1/23029: #0: 00000000cff7b261 ((wq_completion)"events"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2126 #1: 000000001b932424 (deferred_process_work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2130 #2: 00000000fefae98b (rtnl_mutex){+.+.}, at: switchdev_deferred_process_work+0xa/0x20 net/switchdev/switchdev.c:150 3 locks held by kworker/1:2/11954: #0: 00000000ae7ef8c1 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2126 #1: 0000000035ddc3b8 ((addr_chk_work).work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2130 #2: 00000000fefae98b (rtnl_mutex){+.+.}, at: addrconf_verify_work+0xa/0x20 net/ipv6/addrconf.c:4475 2 locks held by syz-executor.5/32434: 1 lock held by syz-executor.5/32452: #0: 00000000fefae98b (rtnl_mutex){+.+.}, at: rtnl_lock net/core/rtnetlink.c:77 [inline] #0: 00000000fefae98b (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x3fe/0xb80 net/core/rtnetlink.c:4775 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 1090 Comm: khungtaskd Not tainted 4.19.142-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2fe lib/dump_stack.c:118 nmi_cpu_backtrace.cold+0x63/0xa2 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1a6/0x1eb lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline] watchdog+0x991/0xe60 kernel/hung_task.c:287 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 32434 Comm: syz-executor.5 Not tainted 4.19.142-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:rcu_read_unlock include/linux/rcupdate.h:677 [inline] RIP: 0010:__perf_event_output kernel/events/core.c:6600 [inline] RIP: 0010:perf_event_output_forward+0x1d6/0x270 kernel/events/core.c:6608 Code: 00 48 8b 84 24 b8 00 00 00 65 48 2b 04 25 28 00 00 00 0f 85 a0 00 00 00 48 81 c4 c0 00 00 00 5b 5d 41 5c 41 5d 41 5e 41 5f c3 55 e4 e8 ff e8 b0 9f d7 ff 31 ff 89 c5 89 c6 e8 75 e5 e8 ff 40 RSP: 0018:ffff8880ae606880 EFLAGS: 00000046 RAX: 0000000000010102 RBX: 1ffff11015cc0d10 RCX: ffffffff8180ccb5 RDX: 0000000000000000 RSI: ffff8880a8fb4040 RDI: 0000000000000001 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000001 R11: ffffffff8ad3801b R12: ffff88804aedc600 R13: ffff8880ae606a00 R14: 00000000ffffffe4 R15: ffff8880ae6068a0 FS: 00007f3bd6736700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f93806c3000 CR3: 0000000211259000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __perf_event_overflow+0x13c/0x370 kernel/events/core.c:7881 perf_swevent_hrtimer+0x272/0x3e0 kernel/events/core.c:9237 __run_hrtimer kernel/time/hrtimer.c:1401 [inline] __hrtimer_run_queues+0x3f6/0xe60 kernel/time/hrtimer.c:1463 hrtimer_interrupt+0x32a/0x930 kernel/time/hrtimer.c:1521 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1067 [inline] smp_apic_timer_interrupt+0x10c/0x550 arch/x86/kernel/apic/apic.c:1092 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:on_stack arch/x86/include/asm/stacktrace.h:45 [inline] RIP: 0010:stack_access_ok arch/x86/kernel/unwind_orc.c:328 [inline] RIP: 0010:deref_stack_reg+0xd0/0x1d0 arch/x86/kernel/unwind_orc.c:338 Code: 24 10 4d 8b 74 24 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 49 39 ee 49 8b 44 24 10 <77> 13 48 39 e8 76 0e 48 8d 55 08 48 39 d0 72 05 49 39 d6 72 3f 49 RSP: 0018:ffff8880ae606f20 EFLAGS: 00000297 ORIG_RAX: ffffffffffffff13 RAX: ffff8880ae608000 RBX: 1ffff11015cc0de5 RCX: 0000000000000000 RDX: 1ffff11015cc0e16 RSI: ffff8880ae607c78 RDI: ffff8880ae6070b0 RBP: ffff8880ae607c78 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000066061 R11: 0000000000000001 R12: ffff8880ae6070a0 R13: ffff8880ae6070e0 R14: ffff8880ae600000 R15: ffff8880ae6070a0 unwind_next_frame+0x1165/0x1c60 arch/x86/kernel/unwind_orc.c:562 __save_stack_trace+0x9f/0x190 arch/x86/kernel/stacktrace.c:44 save_stack mm/kasan/kasan.c:448 [inline] set_track mm/kasan/kasan.c:460 [inline] kasan_kmalloc+0xeb/0x160 mm/kasan/kasan.c:553 kmem_cache_alloc_node+0x146/0x3b0 mm/slab.c:3649 __alloc_skb+0x71/0x560 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:995 [inline] __tcp_send_ack.part.0+0x66/0x5c0 net/ipv4/tcp_output.c:3619 __tcp_send_ack net/ipv4/tcp_output.c:3646 [inline] tcp_send_ack+0x7d/0xa0 net/ipv4/tcp_output.c:3646 __tcp_ack_snd_check+0x152/0x890 net/ipv4/tcp_input.c:5205 tcp_ack_snd_check net/ipv4/tcp_input.c:5251 [inline] tcp_rcv_established+0x96d/0x1e20 net/ipv4/tcp_input.c:5672 tcp_v4_do_rcv+0x5d6/0x870 net/ipv4/tcp_ipv4.c:1544 tcp_v4_rcv+0x2c03/0x3b80 net/ipv4/tcp_ipv4.c:1829 ip_local_deliver_finish+0x495/0xc00 net/ipv4/ip_input.c:215 NF_HOOK include/linux/netfilter.h:289 [inline] ip_local_deliver+0x188/0x500 net/ipv4/ip_input.c:256 dst_input include/net/dst.h:461 [inline] ip_rcv_finish+0x1ca/0x2e0 net/ipv4/ip_input.c:414 NF_HOOK include/linux/netfilter.h:289 [inline] ip_rcv+0xca/0x3c0 net/ipv4/ip_input.c:524 __netif_receive_skb_one_core+0x114/0x180 net/core/dev.c:4954 __netif_receive_skb+0x27/0x1c0 net/core/dev.c:5066 netif_receive_skb_internal+0xf0/0x3f0 net/core/dev.c:5156 napi_skb_finish net/core/dev.c:5600 [inline] napi_gro_receive+0x2e6/0x450 net/core/dev.c:5631 receive_buf+0xefc/0x5e50 drivers/net/virtio_net.c:1072 virtnet_receive drivers/net/virtio_net.c:1336 [inline] virtnet_poll+0x568/0xd70 drivers/net/virtio_net.c:1441 napi_poll net/core/dev.c:6271 [inline] net_rx_action+0x4ac/0xfb0 net/core/dev.c:6337 __do_softirq+0x26c/0x9a0 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:544 [inline] do_IRQ+0x10c/0x1c0 arch/x86/kernel/irq.c:258 common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:670 RIP: 0010:should_resched arch/x86/include/asm/preempt.h:99 [inline] RIP: 0010:__local_bh_enable_ip+0x18d/0x270 kernel/softirq.c:196 Code: 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 dd 00 00 00 48 83 3d 68 29 93 07 00 0f 84 8d 00 00 00 fb 66 0f 1f 44 00 00 <65> 8b 05 cc bb c2 7e 85 c0 74 7d 5b 5d 41 5c c3 80 3d 8f b9 68 08 RSP: 0018:ffff888211386b78 EFLAGS: 00000282 ORIG_RAX: ffffffffffffffd7 RAX: 1ffffffff11a4b6b RBX: 0000000000000200 RCX: 1ffff110151f691d RDX: dffffc0000000000 RSI: ffff8880a8fb48c8 RDI: ffff8880a8fb48c4 RBP: ffffffff85e6f1b2 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a8fb4040 R13: 00000000000086d8 R14: 0000000000000000 R15: 0000000000000001 local_bh_enable include/linux/bottom_half.h:32 [inline] get_next_corpse net/netfilter/nf_conntrack_core.c:1928 [inline] nf_ct_iterate_cleanup+0x239/0x520 net/netfilter/nf_conntrack_core.c:1951 nf_ct_iterate_cleanup_net net/netfilter/nf_conntrack_core.c:2036 [inline] nf_ct_iterate_cleanup_net+0x113/0x170 net/netfilter/nf_conntrack_core.c:2021 masq_device_event+0xae/0xe0 net/ipv6/netfilter/nf_nat_masquerade_ipv6.c:77 notifier_call_chain+0xc0/0x230 kernel/notifier.c:93 call_netdevice_notifiers net/core/dev.c:1762 [inline] __dev_notify_flags+0x1da/0x2b0 net/core/dev.c:7710 dev_change_flags+0xf0/0x140 net/core/dev.c:7744 do_setlink+0x14f1/0x3540 net/core/rtnetlink.c:2449 Lost 65 message(s)!