[ 37.745946] audit: type=1400 audit(1580176339.504:42): avc: denied { map } for pid=6267 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 39.246614] audit: type=1400 audit(1580176341.004:43): avc: denied { integrity } for pid=6267 comm="syz-fuzzer" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 [ 39.412000] IPVS: ftp: loaded support on port[0] = 21 [ 39.434373] audit: type=1400 audit(1580176341.194:44): avc: denied { associate } for pid=6285 comm="syz-executor0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 39.744028] tipc: TX() has been purged, node left! [ 70.419689] can: request_module (can-proto-0) failed. [ 70.430578] can: request_module (can-proto-0) failed. [ 70.641841] audit: type=1400 audit(1580176372.394:45): avc: denied { create } for pid=6267 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 70.665536] audit: type=1400 audit(1580176372.394:46): avc: denied { create } for pid=6267 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 70.689438] audit: type=1400 audit(1580176372.394:47): avc: denied { create } for pid=6267 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.10.22' (ECDSA) to the list of known hosts. 2020/01/28 01:53:01 parsed 1 programs 2020/01/28 01:53:02 executed programs: 0 [ 80.409304] IPVS: ftp: loaded support on port[0] = 21 [ 80.410032] IPVS: ftp: loaded support on port[0] = 21 [ 80.455214] IPVS: ftp: loaded support on port[0] = 21 [ 80.457663] IPVS: ftp: loaded support on port[0] = 21 [ 80.465022] IPVS: ftp: loaded support on port[0] = 21 [ 80.486540] IPVS: ftp: loaded support on port[0] = 21 [ 81.360373] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.370569] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.382548] device bridge_slave_0 entered promiscuous mode [ 81.414718] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.421261] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.445175] device bridge_slave_0 entered promiscuous mode [ 81.459514] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.467308] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.474872] device bridge_slave_1 entered promiscuous mode [ 81.490908] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.501083] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.508658] device bridge_slave_1 entered promiscuous mode [ 81.531901] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.538827] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.546625] device bridge_slave_0 entered promiscuous mode [ 81.562813] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.569354] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.576777] device bridge_slave_0 entered promiscuous mode [ 81.586331] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.595731] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.602831] device bridge_slave_0 entered promiscuous mode [ 81.611783] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.621601] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.629454] device bridge_slave_0 entered promiscuous mode [ 81.646503] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.652906] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.663529] device bridge_slave_1 entered promiscuous mode [ 81.670657] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.678343] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.686142] device bridge_slave_1 entered promiscuous mode [ 81.694910] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.701420] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.709020] device bridge_slave_1 entered promiscuous mode [ 81.726469] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.733134] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.747077] device bridge_slave_1 entered promiscuous mode [ 81.832392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.913751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.935418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.950652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.992527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.007466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.019489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.052585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.068038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.081427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.097508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.116992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.130027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.150016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.167437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.190669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.200321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.230868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.255398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.270983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.302236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.313171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.336893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.359286] team0: Port device team_slave_0 added [ 82.375134] team0: Port device team_slave_0 added [ 82.405973] team0: Port device team_slave_0 added [ 82.432716] team0: Port device team_slave_1 added [ 82.448910] team0: Port device team_slave_1 added [ 82.469914] team0: Port device team_slave_0 added [ 82.477304] team0: Port device team_slave_0 added [ 82.486895] team0: Port device team_slave_1 added [ 82.493788] team0: Port device team_slave_0 added [ 82.514762] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.542460] team0: Port device team_slave_1 added [ 82.553023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.576871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.586313] team0: Port device team_slave_1 added [ 82.597964] team0: Port device team_slave_1 added [ 82.616728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.632676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.646381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.657480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.681074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.699332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.716556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.724620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.732420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.740556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.750336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.758393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.783402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.797351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.814703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.822717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.830987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.838832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.847098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.855010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.862828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.881879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.894406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.902306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.919261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.927480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.935333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.945056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.953406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.980098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.006520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.046666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.064826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.489130] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.495824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.503001] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.509635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.539745] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.546234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.552883] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.559330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.576737] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.583163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.589847] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.596255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.611996] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.618978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.625673] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.632205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.666281] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.672716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.679474] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.685931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.704666] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.711079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.717957] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.724460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.054575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.063336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.076362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.085277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.092695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.100432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.666878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.674501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.768083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.790682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.919580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.044215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.055237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.062331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.099698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.121110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.179843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.190289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.210318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.227408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.302284] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.315967] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.363652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.375229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.389901] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.439584] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.515483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.528538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.557714] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.696365] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.551455] audit: type=1400 audit(1580176389.304:48): avc: denied { write } for pid=7868 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2020/01/28 01:53:09 executed programs: 6 [ 87.587288] audit: type=1400 audit(1580176389.344:49): avc: denied { read } for pid=7868 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2020/01/28 01:53:14 executed programs: 201 2020/01/28 01:53:19 executed programs: 405 2020/01/28 01:53:24 executed programs: 613 2020/01/28 01:53:29 executed programs: 818 2020/01/28 01:53:34 executed programs: 1026 2020/01/28 01:53:39 executed programs: 1235 2020/01/28 01:53:44 executed programs: 1441 2020/01/28 01:53:49 executed programs: 1645 2020/01/28 01:53:54 executed programs: 1851 [ 290.844145] INFO: task syz-executor1:21377 blocked for more than 143 seconds. [ 290.851620] Not tainted 5.5.0-syzkaller #0 [ 290.858253] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.866698] syz-executor1 D26472 21377 6367 0x00004004 [ 290.872871] Call Trace: [ 290.879939] __schedule+0x856/0x1910 [ 290.884134] ? __sched_text_start+0x8/0x8 [ 290.888586] schedule+0xc3/0x2b0 [ 290.892094] schedule_preempt_disabled+0x13/0x20 [ 290.897397] __mutex_lock+0x8b5/0x1410 [ 290.901452] ? ctrl_getfamily+0x2c0/0x400 [ 290.905903] ? mutex_lock_io_nested+0x1280/0x1280 [ 290.910789] ? lock_acquire+0x194/0x410 [ 290.915033] ? ctrl_getfamily+0x2b2/0x400 [ 290.919185] ? down_read_killable+0x470/0x470 [ 290.923691] mutex_lock_nested+0x16/0x20 [ 290.928213] ? mutex_lock_nested+0x16/0x20 [ 290.932466] ctrl_getfamily+0x2c0/0x400 [ 290.936953] genl_rcv_msg+0x5e1/0x10f0 [ 290.941268] ? __kasan_check_read+0x11/0x20 [ 290.946068] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 290.951989] netlink_rcv_skb+0x13f/0x380 [ 290.956535] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 290.962170] ? netlink_ack+0x980/0x980 [ 290.966390] ? netlink_deliver_tap+0x178/0xac0 [ 290.970972] ? __kasan_check_read+0x11/0x20 [ 290.975677] genl_rcv+0x23/0x40 [ 290.978979] netlink_unicast+0x463/0x6b0 [ 290.983073] ? netlink_attachskb+0x740/0x740 [ 290.988047] ? _copy_from_iter_full+0x18a/0x780 [ 290.992749] netlink_sendmsg+0x7b0/0xcb0 [ 290.997197] ? netlink_unicast+0x6b0/0x6b0 [ 291.001523] ? selinux_socket_sendmsg+0x31/0x40 [ 291.007603] ? netlink_unicast+0x6b0/0x6b0 [ 291.011896] sock_sendmsg+0xe6/0x110 [ 291.015887] ____sys_sendmsg+0x603/0x980 [ 291.019944] ? copy_msghdr_from_user+0x209/0x420 [ 291.024966] ? kernel_sendmsg+0x30/0x30 [ 291.028951] ___sys_sendmsg+0xe4/0x160 [ 291.032856] ? sendmsg_copy_msghdr+0x30/0x30 [ 291.037528] ? __kasan_check_read+0x11/0x20 [ 291.041903] ? __fget+0x2ac/0x410 [ 291.046071] ? ksys_dup3+0x2e0/0x2e0 [ 291.049925] ? __fget_light+0x179/0x1f0 [ 291.054271] ? __fdget+0xe/0x10 [ 291.057581] __sys_sendmsg+0xd9/0x180 [ 291.061392] ? __sys_sendmsg_sock+0xa0/0xa0 [ 291.066060] ? __fd_install+0x174/0x4b0 [ 291.070237] ? fd_install+0x47/0x60 [ 291.074429] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 291.079941] __x64_sys_sendmsg+0x73/0xb0 [ 291.084415] do_syscall_64+0xd0/0x600 [ 291.088437] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 291.094281] RIP: 0033:0x411231 [ 291.097505] Code: 01 4c 89 54 24 28 e9 6f fa ff ff 49 8b 7c 24 70 8b 35 43 c4 24 00 ff 15 ed 83 24 00 85 c0 0f 85 b3 fe ff ff 49 8b 7c 24 70 be <20> 13 41 00 ff 15 dd 83 24 00 85 c0 0f 85 9b fe ff ff 49 8b 7c 24 [ 291.116890] RSP: 002b:00007ff5bc3649c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 291.125876] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000411231 [ 291.135563] RDX: 0000000000000000 RSI: 00007ff5bc364a00 RDI: 0000000000000007 [ 291.142982] RBP: 0000000000000007 R08: 00007ff5bc3649d0 R09: 000000000072bf00 [ 291.150701] R10: 0000000000000000 R11: 0000000000000293 R12: 00007ff5bc364a40 [ 291.158494] R13: 00000000004cc538 R14: 00000000004d9a08 R15: 00000000ffffffff [ 291.166181] INFO: task syz-executor2:21385 blocked for more than 143 seconds. [ 291.173570] Not tainted 5.5.0-syzkaller #0 [ 291.178836] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.187133] syz-executor2 D27648 21385 6368 0x00004004 [ 291.193416] Call Trace: [ 291.196367] __schedule+0x856/0x1910 [ 291.200094] ? __sched_text_start+0x8/0x8 [ 291.204544] schedule+0xc3/0x2b0 [ 291.207912] schedule_preempt_disabled+0x13/0x20 [ 291.212684] __mutex_lock+0x8b5/0x1410 [ 291.217180] ? ctrl_getfamily+0x2c0/0x400 [ 291.221380] ? mutex_lock_io_nested+0x1280/0x1280 [ 291.226593] ? lock_acquire+0x194/0x410 [ 291.230585] ? ctrl_getfamily+0x2b2/0x400 [ 291.235118] ? down_read_killable+0x470/0x470 [ 291.239691] mutex_lock_nested+0x16/0x20 [ 291.243837] ? mutex_lock_nested+0x16/0x20 [ 291.248474] ctrl_getfamily+0x2c0/0x400 [ 291.252448] genl_rcv_msg+0x5e1/0x10f0 [ 291.256733] ? __kasan_check_read+0x11/0x20 [ 291.261071] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 291.267867] netlink_rcv_skb+0x13f/0x380 [ 291.272190] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 291.278190] ? netlink_ack+0x980/0x980 [ 291.282108] ? netlink_deliver_tap+0x178/0xac0 [ 291.287060] ? __kasan_check_read+0x11/0x20 [ 291.291508] genl_rcv+0x23/0x40 [ 291.295046] netlink_unicast+0x463/0x6b0 [ 291.299370] ? netlink_attachskb+0x740/0x740 [ 291.304351] ? _copy_from_iter_full+0x18a/0x780 [ 291.309587] netlink_sendmsg+0x7b0/0xcb0 [ 291.313708] ? netlink_unicast+0x6b0/0x6b0 [ 291.318523] ? selinux_socket_sendmsg+0x31/0x40 [ 291.323330] ? netlink_unicast+0x6b0/0x6b0 [ 291.327985] sock_sendmsg+0xe6/0x110 [ 291.331887] ____sys_sendmsg+0x603/0x980 [ 291.336591] ? copy_msghdr_from_user+0x209/0x420 [ 291.341538] ? kernel_sendmsg+0x30/0x30 [ 291.345981] ___sys_sendmsg+0xe4/0x160 [ 291.349916] ? sendmsg_copy_msghdr+0x30/0x30 [ 291.354693] ? __kasan_check_read+0x11/0x20 [ 291.359042] ? __fget+0x2ac/0x410 [ 291.362505] ? ksys_dup3+0x2e0/0x2e0 [ 291.366577] ? __fget_light+0x179/0x1f0 [ 291.370682] ? __fdget+0xe/0x10 [ 291.374308] __sys_sendmsg+0xd9/0x180 [ 291.378116] ? __sys_sendmsg_sock+0xa0/0xa0 [ 291.382523] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 291.387756] ? rcu_read_lock_any_held.part.10+0x50/0x50 [ 291.393312] ? fd_install+0x47/0x60 [ 291.398122] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 291.403684] __x64_sys_sendmsg+0x73/0xb0 [ 291.408332] do_syscall_64+0xd0/0x600 [ 291.412171] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 291.417745] RIP: 0033:0x411231 [ 291.420950] Code: 01 4c 89 54 24 28 e9 6f fa ff ff 49 8b 7c 24 70 8b 35 43 c4 24 00 ff 15 ed 83 24 00 85 c0 0f 85 b3 fe ff ff 49 8b 7c 24 70 be <20> 13 41 00 ff 15 dd 83 24 00 85 c0 0f 85 9b fe ff ff 49 8b 7c 24 [ 291.440325] RSP: 002b:00007f9868bc99c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 291.448512] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000411231 [ 291.456121] RDX: 0000000000000000 RSI: 00007f9868bc9a00 RDI: 0000000000000005 [ 291.463621] RBP: 0000000000000005 R08: 00007f9868bc99d0 R09: 000000000072bf00 [ 291.471398] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f9868bc9a40 [ 291.479140] R13: 00000000004cc538 R14: 00000000004d9a08 R15: 00000000ffffffff [ 291.486986] INFO: task syz-executor2:21402 blocked for more than 144 seconds. [ 291.494733] Not tainted 5.5.0-syzkaller #0 [ 291.499623] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.508093] syz-executor2 D28536 21402 6368 0x00000004 [ 291.513763] Call Trace: [ 291.516872] __schedule+0x856/0x1910 [ 291.520742] ? __sched_text_start+0x8/0x8 [ 291.526308] schedule+0xc3/0x2b0 [ 291.529695] schedule_preempt_disabled+0x13/0x20 [ 291.535223] __mutex_lock+0x8b5/0x1410 [ 291.539128] ? genl_rcv_msg+0x66e/0x10f0 [ 291.543187] ? mutex_lock_io_nested+0x1280/0x1280 [ 291.548549] ? __kasan_check_read+0x11/0x20 [ 291.552961] ? mark_lock+0xc5/0x11d0 [ 291.557050] ? stack_trace_consume_entry+0x170/0x170 [ 291.562165] ? __kmalloc_reserve.isra.46+0x2c/0xc0 [ 291.567463] mutex_lock_nested+0x16/0x20 [ 291.571522] ? mutex_lock_nested+0x16/0x20 [ 291.576043] genl_rcv_msg+0x66e/0x10f0 [ 291.579932] ? __kasan_check_read+0x11/0x20 [ 291.584601] ? __lock_acquire+0x100f/0x4ef0 [ 291.588930] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 291.594863] ? mark_held_locks+0x130/0x130 [ 291.599109] netlink_rcv_skb+0x13f/0x380 [ 291.603250] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 291.609218] ? netlink_ack+0x980/0x980 [ 291.613106] ? netlink_deliver_tap+0x178/0xac0 [ 291.617969] ? __kasan_check_read+0x11/0x20 [ 291.622304] genl_rcv+0x23/0x40 [ 291.625817] netlink_unicast+0x463/0x6b0 [ 291.629877] ? netlink_attachskb+0x740/0x740 [ 291.634526] ? _copy_from_iter_full+0x18a/0x780 [ 291.639198] netlink_sendmsg+0x7b0/0xcb0 [ 291.643254] ? netlink_unicast+0x6b0/0x6b0 [ 291.647842] ? selinux_socket_sendmsg+0x31/0x40 [ 291.652605] ? netlink_unicast+0x6b0/0x6b0 [ 291.657937] sock_sendmsg+0xe6/0x110 [ 291.661659] ____sys_sendmsg+0x603/0x980 [ 291.665973] ? copy_msghdr_from_user+0x209/0x420 [ 291.670732] ? kernel_sendmsg+0x30/0x30 [ 291.675189] ___sys_sendmsg+0xe4/0x160 [ 291.679075] ? sendmsg_copy_msghdr+0x30/0x30 [ 291.683483] ? __kasan_check_read+0x11/0x20 [ 291.688080] ? __fget+0x2ac/0x410 [ 291.697275] ? ksys_dup3+0x2e0/0x2e0 [ 291.700999] ? __fget_light+0x179/0x1f0 [ 291.705238] ? __fdget+0xe/0x10 [ 291.708522] __sys_sendmsg+0xd9/0x180 [ 291.712601] ? __sys_sendmsg_sock+0xa0/0xa0 [ 291.717386] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 291.722239] ? rcu_read_lock_any_held.part.10+0x50/0x50 [ 291.727948] ? fd_install+0x47/0x60 [ 291.731580] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 291.737236] __x64_sys_sendmsg+0x73/0xb0 [ 291.741301] do_syscall_64+0xd0/0x600 [ 291.745372] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 291.750557] RIP: 0033:0x411231 [ 291.753743] Code: 01 4c 89 54 24 28 e9 6f fa ff ff 49 8b 7c 24 70 8b 35 43 c4 24 00 ff 15 ed 83 24 00 85 c0 0f 85 b3 fe ff ff 49 8b 7c 24 70 be <20> 13 41 00 ff 15 dd 83 24 00 85 c0 0f 85 9b fe ff ff 49 8b 7c 24 [ 291.773156] RSP: 002b:00007f9868ba89c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 291.781203] RAX: ffffffffffffffda RBX: 00007f9868ba8a58 RCX: 0000000000411231 [ 291.789509] RDX: 0000000000000000 RSI: 00007f9868ba8a00 RDI: 0000000000000006 [ 291.797015] RBP: 0000000000000006 R08: 000000000000000b R09: 0000000000000000 [ 291.804580] R10: ffffffffffffffff R11: 0000000000000293 R12: 00007f9868ba8a40 [ 291.812032] R13: 00000000004cc510 R14: 00000000004d99f0 R15: 00000000ffffffff [ 291.819661] INFO: task syz-executor2:21408 blocked for more than 144 seconds. [ 291.827153] Not tainted 5.5.0-syzkaller #0 [ 291.831900] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.840312] syz-executor2 D28408 21408 6368 0x00004004 [ 291.846243] Call Trace: [ 291.848832] __schedule+0x856/0x1910 [ 291.852542] ? __sched_text_start+0x8/0x8 [ 291.857046] schedule+0xc3/0x2b0 [ 291.860426] schedule_preempt_disabled+0x13/0x20 [ 291.865500] __mutex_lock+0x8b5/0x1410 [ 291.869383] ? genl_rcv_msg+0x66e/0x10f0 [ 291.873438] ? mutex_lock_io_nested+0x1280/0x1280 [ 291.878598] ? __kasan_check_read+0x11/0x20 [ 291.882928] ? mark_lock+0xc5/0x11d0 [ 291.886910] ? stack_trace_consume_entry+0x170/0x170 [ 291.892021] ? __kmalloc_reserve.isra.46+0x2c/0xc0 [ 291.897558] mutex_lock_nested+0x16/0x20 [ 291.901638] ? mutex_lock_nested+0x16/0x20 [ 291.906266] genl_rcv_msg+0x66e/0x10f0 [ 291.910205] ? __kasan_check_read+0x11/0x20 [ 291.915747] ? __lock_acquire+0x100f/0x4ef0 [ 291.920105] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 291.926105] ? mark_held_locks+0x130/0x130 [ 291.930368] netlink_rcv_skb+0x13f/0x380 [ 291.934838] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 291.940572] ? netlink_ack+0x980/0x980 [ 291.944823] ? netlink_deliver_tap+0x178/0xac0 [ 291.949438] ? __kasan_check_read+0x11/0x20 [ 291.954317] genl_rcv+0x23/0x40 [ 291.957633] netlink_unicast+0x463/0x6b0 [ 291.961725] ? netlink_attachskb+0x740/0x740 [ 291.967235] ? _copy_from_iter_full+0x18a/0x780 [ 291.972637] netlink_sendmsg+0x7b0/0xcb0 [ 291.977103] ? netlink_unicast+0x6b0/0x6b0 [ 291.981895] ? selinux_socket_sendmsg+0x31/0x40 [ 291.987261] ? netlink_unicast+0x6b0/0x6b0 [ 291.991505] sock_sendmsg+0xe6/0x110 [ 291.995605] ____sys_sendmsg+0x603/0x980 [ 291.999692] ? copy_msghdr_from_user+0x209/0x420 [ 292.004905] ? kernel_sendmsg+0x30/0x30 [ 292.008953] ___sys_sendmsg+0xe4/0x160 [ 292.012850] ? sendmsg_copy_msghdr+0x30/0x30 [ 292.017739] ? __kasan_check_read+0x11/0x20 [ 292.022072] ? __fget+0x2ac/0x410 [ 292.025954] ? ksys_dup3+0x2e0/0x2e0 [ 292.029798] ? __fget_light+0x179/0x1f0 [ 292.034270] ? __fdget+0xe/0x10 [ 292.037794] __sys_sendmsg+0xd9/0x180 [ 292.041775] ? __sys_sendmsg_sock+0xa0/0xa0 [ 292.047369] ? __fd_install+0x174/0x4b0 [ 292.051370] ? fd_install+0x47/0x60 [ 292.055350] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 292.060761] __x64_sys_sendmsg+0x73/0xb0 [ 292.065188] do_syscall_64+0xd0/0x600 [ 292.069104] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 292.074786] RIP: 0033:0x411231 [ 292.077982] Code: 01 4c 89 54 24 28 e9 6f fa ff ff 49 8b 7c 24 70 8b 35 43 c4 24 00 ff 15 ed 83 24 00 85 c0 0f 85 b3 fe ff ff 49 8b 7c 24 70 be <20> 13 41 00 ff 15 dd 83 24 00 85 c0 0f 85 9b fe ff ff 49 8b 7c 24 [ 292.097563] RSP: 002b:00007f9868b879c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 292.106238] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000411231 [ 292.113611] RDX: 0000000000000000 RSI: 00007f9868b87a00 RDI: 0000000000000009 [ 292.121380] RBP: 0000000000000009 R08: 00007f9868b879d0 R09: 000000000072c040 [ 292.129303] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f9868b87a40 [ 292.137087] R13: 00000000004cc538 R14: 00000000004d9a08 R15: 00000000ffffffff [ 292.144933] INFO: task syz-executor2:21417 blocked for more than 144 seconds. [ 292.152835] Not tainted 5.5.0-syzkaller #0 [ 292.157962] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 292.166320] syz-executor2 D28536 21417 6368 0x00004004 [ 292.171970] Call Trace: [ 292.175790] __schedule+0x856/0x1910 [ 292.179716] ? __sched_text_start+0x8/0x8 [ 292.184266] schedule+0xc3/0x2b0 [ 292.187731] schedule_preempt_disabled+0x13/0x20 [ 292.192609] __mutex_lock+0x8b5/0x1410 [ 292.196925] ? genl_rcv_msg+0x66e/0x10f0 [ 292.201018] ? mutex_lock_io_nested+0x1280/0x1280 [ 292.206370] ? __kasan_check_read+0x11/0x20 [ 292.210695] ? mark_lock+0xc5/0x11d0 [ 292.214655] ? stack_trace_consume_entry+0x170/0x170 [ 292.219872] ? __kmalloc_reserve.isra.46+0x2c/0xc0 [ 292.225334] mutex_lock_nested+0x16/0x20 [ 292.229413] ? mutex_lock_nested+0x16/0x20 [ 292.234967] genl_rcv_msg+0x66e/0x10f0 [ 292.239435] ? __kasan_check_read+0x11/0x20 [ 292.244310] ? __lock_acquire+0x100f/0x4ef0 [ 292.248935] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 292.254953] ? mark_held_locks+0x130/0x130 [ 292.259223] netlink_rcv_skb+0x13f/0x380 [ 292.263303] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 292.269414] ? netlink_ack+0x980/0x980 [ 292.273324] ? netlink_deliver_tap+0x178/0xac0 [ 292.278299] ? __kasan_check_read+0x11/0x20 [ 292.282740] genl_rcv+0x23/0x40 [ 292.286512] netlink_unicast+0x463/0x6b0 [ 292.290588] ? netlink_attachskb+0x740/0x740 [ 292.295490] ? _copy_from_iter_full+0x18a/0x780 [ 292.300538] netlink_sendmsg+0x7b0/0xcb0 [ 292.305866] ? netlink_unicast+0x6b0/0x6b0 [ 292.310303] ? selinux_socket_sendmsg+0x31/0x40 [ 292.315442] ? netlink_unicast+0x6b0/0x6b0 [ 292.319893] sock_sendmsg+0xe6/0x110 [ 292.323609] ____sys_sendmsg+0x603/0x980 [ 292.328077] ? copy_msghdr_from_user+0x209/0x420 [ 292.332999] ? kernel_sendmsg+0x30/0x30 [ 292.338498] ___sys_sendmsg+0xe4/0x160 [ 292.342577] ? sendmsg_copy_msghdr+0x30/0x30 [ 292.347434] ? __kasan_check_read+0x11/0x20 [ 292.352047] ? __fget+0x2ac/0x410 [ 292.355892] ? ksys_dup3+0x2e0/0x2e0 [ 292.359698] ? __fget_light+0x179/0x1f0 [ 292.364236] ? __fdget+0xe/0x10 [ 292.368089] __sys_sendmsg+0xd9/0x180 [ 292.371928] ? __sys_sendmsg_sock+0xa0/0xa0 [ 292.376715] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 292.381850] ? rcu_read_lock_any_held.part.10+0x50/0x50 [ 292.387597] ? fd_install+0x47/0x60 [ 292.391365] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 292.397289] __x64_sys_sendmsg+0x73/0xb0 [ 292.401371] do_syscall_64+0xd0/0x600 [ 292.405618] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 292.410957] RIP: 0033:0x411231 [ 292.414511] Code: 01 4c 89 54 24 28 e9 6f fa ff ff 49 8b 7c 24 70 8b 35 43 c4 24 00 ff 15 ed 83 24 00 85 c0 0f 85 b3 fe ff ff 49 8b 7c 24 70 be <20> 13 41 00 ff 15 dd 83 24 00 85 c0 0f 85 9b fe ff ff 49 8b 7c 24 [ 292.435177] RSP: 002b:00007f9868b669c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 292.442915] RAX: ffffffffffffffda RBX: 00007f9868b66a58 RCX: 0000000000411231 [ 292.450712] RDX: 0000000000000000 RSI: 00007f9868b66a00 RDI: 000000000000000a [ 292.458220] RBP: 000000000000000a R08: 000000000000000b R09: 0000000000000000 [ 292.465926] R10: ffffffffffffffff R11: 0000000000000293 R12: 00007f9868b66a40 [ 292.473393] R13: 00000000004cc510 R14: 00000000004d99f0 R15: 00000000ffffffff [ 292.481571] INFO: task syz-executor3:21400 blocked for more than 144 seconds. [ 292.489315] Not tainted 5.5.0-syzkaller #0 [ 292.494507] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 292.502773] syz-executor3 D28536 21400 6363 0x00000004 [ 292.508923] Call Trace: [ 292.511523] __schedule+0x856/0x1910 [ 292.515532] ? __sched_text_start+0x8/0x8 [ 292.519838] schedule+0xc3/0x2b0 [ 292.523201] schedule_preempt_disabled+0x13/0x20 [ 292.528375] __mutex_lock+0x8b5/0x1410 [ 292.532275] ? genl_rcv_msg+0x66e/0x10f0 [ 292.536722] ? mutex_lock_io_nested+0x1280/0x1280 [ 292.541587] ? __kasan_check_read+0x11/0x20 [ 292.546209] ? mark_lock+0xc5/0x11d0 [ 292.549935] ? stack_trace_consume_entry+0x170/0x170 [ 292.555392] ? __kmalloc_reserve.isra.46+0x2c/0xc0 [ 292.560483] mutex_lock_nested+0x16/0x20 [ 292.565701] ? mutex_lock_nested+0x16/0x20 [ 292.569943] genl_rcv_msg+0x66e/0x10f0 [ 292.574306] ? __kasan_check_read+0x11/0x20 [ 292.578636] ? __lock_acquire+0x100f/0x4ef0 [ 292.582978] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 292.589138] ? mark_held_locks+0x130/0x130 [ 292.593403] netlink_rcv_skb+0x13f/0x380 [ 292.597873] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 292.603517] ? netlink_ack+0x980/0x980 [ 292.607901] ? netlink_deliver_tap+0x178/0xac0 [ 292.612499] ? __kasan_check_read+0x11/0x20 [ 292.617405] genl_rcv+0x23/0x40 [ 292.620691] netlink_unicast+0x463/0x6b0 [ 292.625031] ? netlink_attachskb+0x740/0x740 [ 292.629570] ? _copy_from_iter_full+0x18a/0x780 [ 292.634704] netlink_sendmsg+0x7b0/0xcb0 [ 292.638937] ? netlink_unicast+0x6b0/0x6b0 [ 292.643177] ? selinux_socket_sendmsg+0x31/0x40 [ 292.648251] ? netlink_unicast+0x6b0/0x6b0 [ 292.652495] sock_sendmsg+0xe6/0x110 [ 292.656613] ____sys_sendmsg+0x603/0x980 [ 292.660711] ? copy_msghdr_from_user+0x209/0x420 [ 292.665843] ? kernel_sendmsg+0x30/0x30 [ 292.669830] ___sys_sendmsg+0xe4/0x160 [ 292.673713] ? sendmsg_copy_msghdr+0x30/0x30 [ 292.678473] ? __kasan_check_read+0x11/0x20 [ 292.682860] ? __fget+0x2ac/0x410 [ 292.686661] ? ksys_dup3+0x2e0/0x2e0 [ 292.690405] ? __fget_light+0x179/0x1f0 [ 292.695516] ? __fdget+0xe/0x10 [ 292.698811] __sys_sendmsg+0xd9/0x180 [ 292.702609] ? __sys_sendmsg_sock+0xa0/0xa0 [ 292.707305] ? __fd_install+0x174/0x4b0 [ 292.711315] ? fd_install+0x47/0x60 [ 292.715295] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 292.720670] __x64_sys_sendmsg+0x73/0xb0 [ 292.724994] do_syscall_64+0xd0/0x600 [ 292.728812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 292.734338] RIP: 0033:0x411231 [ 292.737626] Code: 01 4c 89 54 24 28 e9 6f fa ff ff 49 8b 7c 24 70 8b 35 43 c4 24 00 ff 15 ed 83 24 00 85 c0 0f 85 b3 fe ff ff 49 8b 7c 24 70 be <20> 13 41 00 ff 15 dd 83 24 00 85 c0 0f 85 9b fe ff ff 49 8b 7c 24 [ 292.756947] RSP: 002b:00007fe09f8669c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 292.765525] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000411231 [ 292.772964] RDX: 0000000000000000 RSI: 00007fe09f866a00 RDI: 0000000000000005 [ 292.780604] RBP: 0000000000000005 R08: 00007fe09f8669d0 R09: 000000000072bf00 [ 292.788350] R10: ffffffffffffffff R11: 0000000000000293 R12: 00007fe09f866a40 [ 292.795861] R13: 00000000004cc538 R14: 00000000004d9a08 R15: 00000000ffffffff [ 292.803155] INFO: task syz-executor3:21409 blocked for more than 145 seconds. [ 292.810809] Not tainted 5.5.0-syzkaller #0 [ 292.815987] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 292.825140] syz-executor3 D28536 21409 6363 0x00004004 [ 292.830802] Call Trace: [ 292.833392] __schedule+0x856/0x1910 [ 292.837484] ? __sched_text_start+0x8/0x8 [ 292.841672] schedule+0xc3/0x2b0 [ 292.845529] schedule_preempt_disabled+0x13/0x20 [ 292.850298] __mutex_lock+0x8b5/0x1410 [ 292.854658] ? genl_rcv_msg+0x66e/0x10f0 [ 292.858832] ? mutex_lock_io_nested+0x1280/0x1280 [ 292.863677] ? __kasan_check_read+0x11/0x20 [ 292.868418] ? mark_lock+0xc5/0x11d0 [ 292.872173] ? stack_trace_consume_entry+0x170/0x170 [ 292.877764] ? __kmalloc_reserve.isra.46+0x2c/0xc0 [ 292.882723] mutex_lock_nested+0x16/0x20 [ 292.887154] ? mutex_lock_nested+0x16/0x20 [ 292.891499] genl_rcv_msg+0x66e/0x10f0 [ 292.895834] ? __kasan_check_read+0x11/0x20 [ 292.900171] ? __lock_acquire+0x100f/0x4ef0 [ 292.904861] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 292.910499] ? mark_held_locks+0x130/0x130 [ 292.915259] netlink_rcv_skb+0x13f/0x380 [ 292.919329] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 292.925295] ? netlink_ack+0x980/0x980 [ 292.929191] ? netlink_deliver_tap+0x178/0xac0 [ 292.933766] ? __kasan_check_read+0x11/0x20 [ 292.938504] genl_rcv+0x23/0x40 [ 292.941813] netlink_unicast+0x463/0x6b0 [ 292.946271] ? netlink_attachskb+0x740/0x740 [ 292.950710] ? _copy_from_iter_full+0x18a/0x780 [ 292.956723] netlink_sendmsg+0x7b0/0xcb0 [ 292.960807] ? netlink_unicast+0x6b0/0x6b0 [ 292.965525] ? selinux_socket_sendmsg+0x31/0x40 [ 292.970223] ? netlink_unicast+0x6b0/0x6b0 [ 292.974893] sock_sendmsg+0xe6/0x110 [ 292.978640] ____sys_sendmsg+0x603/0x980 [ 292.982703] ? copy_msghdr_from_user+0x209/0x420 [ 292.987927] ? kernel_sendmsg+0x30/0x30 [ 292.991917] ___sys_sendmsg+0xe4/0x160 [ 292.996168] ? sendmsg_copy_msghdr+0x30/0x30 [ 293.000598] ? __kasan_check_read+0x11/0x20 [ 293.005238] ? __fget+0x2ac/0x410 [ 293.008723] ? ksys_dup3+0x2e0/0x2e0 [ 293.012460] ? __fget_light+0x179/0x1f0 [ 293.016847] ? __fdget+0xe/0x10 [ 293.020238] __sys_sendmsg+0xd9/0x180 [ 293.024400] ? __sys_sendmsg_sock+0xa0/0xa0 [ 293.028864] ? __fd_install+0x174/0x4b0 [ 293.032866] ? fd_install+0x47/0x60 [ 293.036940] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 293.042434] __x64_sys_sendmsg+0x73/0xb0 [ 293.046894] do_syscall_64+0xd0/0x600 [ 293.050726] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 293.056362] RIP: 0033:0x411231 [ 293.059566] Code: 01 4c 89 54 24 28 e9 6f fa ff ff 49 8b 7c 24 70 8b 35 43 c4 24 00 ff 15 ed 83 24 00 85 c0 0f 85 b3 fe ff ff 49 8b 7c 24 70 be <20> 13 41 00 ff 15 dd 83 24 00 85 c0 0f 85 9b fe ff ff 49 8b 7c 24 [ 293.078984] RSP: 002b:00007fe09f8459c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 293.087860] RAX: ffffffffffffffda RBX: 00007fe09f845a58 RCX: 0000000000411231 [ 293.095629] RDX: 0000000000000000 RSI: 00007fe09f845a00 RDI: 0000000000000006 [ 293.102914] RBP: 0000000000000006 R08: 000000000000000b R09: 0000000000000000 [ 293.110682] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fe09f845a40 [ 293.118425] R13: 00000000004cc510 R14: 00000000004d99f0 R15: 00000000ffffffff [ 293.126078] INFO: task syz-executor3:21413 blocked for more than 145 seconds. [ 293.133390] Not tainted 5.5.0-syzkaller #0 [ 293.138533] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.146851] syz-executor3 D28224 21413 6363 0x00004004 [ 293.152599] Call Trace: [ 293.155558] __schedule+0x856/0x1910 [ 293.159299] ? __sched_text_start+0x8/0x8 [ 293.163452] schedule+0xc3/0x2b0 [ 293.167323] schedule_preempt_disabled+0x13/0x20 [ 293.172090] __mutex_lock+0x8b5/0x1410 [ 293.176375] ? genl_rcv_msg+0x66e/0x10f0 [ 293.180443] ? mutex_lock_io_nested+0x1280/0x1280 [ 293.185802] ? __kasan_check_read+0x11/0x20 [ 293.190137] ? mark_lock+0xc5/0x11d0 [ 293.194229] ? stack_trace_consume_entry+0x170/0x170 [ 293.199348] ? __kmalloc_reserve.isra.46+0x2c/0xc0 [ 293.204593] mutex_lock_nested+0x16/0x20 [ 293.208655] ? mutex_lock_nested+0x16/0x20 [ 293.212898] genl_rcv_msg+0x66e/0x10f0 [ 293.217956] ? __kasan_check_read+0x11/0x20 [ 293.222288] ? __lock_acquire+0x100f/0x4ef0 [ 293.227104] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 293.232745] ? mark_held_locks+0x130/0x130 [ 293.237369] netlink_rcv_skb+0x13f/0x380 [ 293.241438] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 293.247408] ? netlink_ack+0x980/0x980 [ 293.251322] ? netlink_deliver_tap+0x178/0xac0 [ 293.256395] ? __kasan_check_read+0x11/0x20 [ 293.260734] genl_rcv+0x23/0x40 [ 293.264373] netlink_unicast+0x463/0x6b0 [ 293.268445] ? netlink_attachskb+0x740/0x740 [ 293.272967] ? _copy_from_iter_full+0x18a/0x780 [ 293.278069] netlink_sendmsg+0x7b0/0xcb0 [ 293.282167] ? netlink_unicast+0x6b0/0x6b0 [ 293.286933] ? selinux_socket_sendmsg+0x31/0x40 [ 293.291646] ? netlink_unicast+0x6b0/0x6b0 [ 293.296230] sock_sendmsg+0xe6/0x110 [ 293.299950] ____sys_sendmsg+0x603/0x980 [ 293.304537] ? copy_msghdr_from_user+0x209/0x420 [ 293.309320] ? kernel_sendmsg+0x30/0x30 [ 293.313312] ___sys_sendmsg+0xe4/0x160 [ 293.317578] ? sendmsg_copy_msghdr+0x30/0x30 [ 293.322025] ? __kasan_check_read+0x11/0x20 [ 293.326724] ? __fget+0x2ac/0x410 [ 293.330205] ? ksys_dup3+0x2e0/0x2e0 [ 293.334456] ? __fget_light+0x179/0x1f0 [ 293.338463] ? __fdget+0xe/0x10 [ 293.341745] __sys_sendmsg+0xd9/0x180 [ 293.346819] ? __sys_sendmsg_sock+0xa0/0xa0 [ 293.351183] ? __fd_install+0x174/0x4b0 [ 293.355492] ? fd_install+0x47/0x60 [ 293.359141] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 293.364939] __x64_sys_sendmsg+0x73/0xb0 [ 293.369028] do_syscall_64+0xd0/0x600 [ 293.372836] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 293.378419] RIP: 0033:0x411231 [ 293.381615] Code: 01 4c 89 54 24 28 e9 6f fa ff ff 49 8b 7c 24 70 8b 35 43 c4 24 00 ff 15 ed 83 24 00 85 c0 0f 85 b3 fe ff ff 49 8b 7c 24 70 be <20> 13 41 00 ff 15 dd 83 24 00 85 c0 0f 85 9b fe ff ff 49 8b 7c 24 [ 293.400884] RSP: 002b:00007fe09f8249c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 293.408995] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000411231 [ 293.416755] RDX: 0000000000000000 RSI: 00007fe09f824a00 RDI: 0000000000000009 [ 293.424450] RBP: 0000000000000009 R08: 00007fe09f8249d0 R09: 000000000072c040 [ 293.431733] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fe09f824a40 [ 293.439596] R13: 00000000004cc538 R14: 00000000004d9a08 R15: 00000000ffffffff [ 293.447153] INFO: task syz-executor3:21419 blocked for more than 145 seconds. [ 293.454744] Not tainted 5.5.0-syzkaller #0 [ 293.459514] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.467824] syz-executor3 D28536 21419 6363 0x00004004 [ 293.473485] Call Trace: [ 293.477246] __schedule+0x856/0x1910 [ 293.481002] ? __sched_text_start+0x8/0x8 [ 293.485696] schedule+0xc3/0x2b0 [ 293.489177] schedule_preempt_disabled+0x13/0x20 [ 293.494336] __mutex_lock+0x8b5/0x1410 [ 293.498256] ? genl_rcv_msg+0x66e/0x10f0 [ 293.502337] ? mutex_lock_io_nested+0x1280/0x1280 [ 293.507579] ? __kasan_check_read+0x11/0x20 [ 293.511908] ? mark_lock+0xc5/0x11d0 [ 293.515908] ? stack_trace_consume_entry+0x170/0x170 [ 293.521027] ? __kmalloc_reserve.isra.46+0x2c/0xc0 [ 293.526453] mutex_lock_nested+0x16/0x20 [ 293.530582] ? mutex_lock_nested+0x16/0x20 [ 293.535234] genl_rcv_msg+0x66e/0x10f0 [ 293.539154] ? __kasan_check_read+0x11/0x20 [ 293.543477] ? __lock_acquire+0x100f/0x4ef0 [ 293.548261] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 293.554166] ? mark_held_locks+0x130/0x130 [ 293.558417] netlink_rcv_skb+0x13f/0x380 [ 293.562585] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 293.568578] ? netlink_ack+0x980/0x980 [ 293.572477] ? netlink_deliver_tap+0x178/0xac0 [ 293.577530] ? __kasan_check_read+0x11/0x20 [ 293.582000] genl_rcv+0x23/0x40 [ 293.585649] netlink_unicast+0x463/0x6b0 [ 293.589723] ? netlink_attachskb+0x740/0x740 [ 293.594536] ? _copy_from_iter_full+0x18a/0x780 [ 293.599226] netlink_sendmsg+0x7b0/0xcb0 [ 293.603312] ? netlink_unicast+0x6b0/0x6b0 [ 293.608739] ? selinux_socket_sendmsg+0x31/0x40 [ 293.613558] ? netlink_unicast+0x6b0/0x6b0 [ 293.618162] sock_sendmsg+0xe6/0x110 [ 293.621906] ____sys_sendmsg+0x603/0x980 [ 293.626402] ? copy_msghdr_from_user+0x209/0x420 [ 293.631203] ? kernel_sendmsg+0x30/0x30 [ 293.635562] ___sys_sendmsg+0xe4/0x160 [ 293.639457] ? sendmsg_copy_msghdr+0x30/0x30 [ 293.644411] ? __kasan_check_read+0x11/0x20 [ 293.648778] ? __fget+0x2ac/0x410 [ 293.652322] ? ksys_dup3+0x2e0/0x2e0 [ 293.656582] ? __fget_light+0x179/0x1f0 [ 293.660582] ? __fdget+0xe/0x10 [ 293.664254] __sys_sendmsg+0xd9/0x180 [ 293.668082] ? __sys_sendmsg_sock+0xa0/0xa0 [ 293.672415] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 293.677662] ? rcu_read_lock_any_held.part.10+0x50/0x50 [ 293.683202] ? fd_install+0x47/0x60 [ 293.687180] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 293.692660] __x64_sys_sendmsg+0x73/0xb0 [ 293.697088] do_syscall_64+0xd0/0x600 [ 293.700904] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 293.706473] RIP: 0033:0x411231 [ 293.709669] Code: 01 4c 89 54 24 28 e9 6f fa ff ff 49 8b 7c 24 70 8b 35 43 c4 24 00 ff 15 ed 83 24 00 85 c0 0f 85 b3 fe ff ff 49 8b 7c 24 70 be <20> 13 41 00 ff 15 dd 83 24 00 85 c0 0f 85 9b fe ff ff 49 8b 7c 24 [ 293.729025] RSP: 002b:00007fe09f8039c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 293.737877] RAX: ffffffffffffffda RBX: 00007fe09f803a58 RCX: 0000000000411231 [ 293.745625] RDX: 0000000000000000 RSI: 00007fe09f803a00 RDI: 000000000000000a [ 293.752934] RBP: 000000000000000a R08: 000000000000000b R09: 0000000000000000 [ 293.760603] R10: ffffffffffffffff R11: 0000000000000293 R12: 00007fe09f803a40 [ 293.768239] R13: 00000000004cc510 R14: 00000000004d99f0 R15: 00000000ffffffff [ 293.776326] INFO: task syz-executor4:21404 blocked for more than 146 seconds. [ 293.783617] Not tainted 5.5.0-syzkaller #0 [ 293.788774] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.797180] syz-executor4 D28536 21404 6359 0x00000004 [ 293.802835] Call Trace: [ 293.805871] __schedule+0x856/0x1910 [ 293.809605] ? __sched_text_start+0x8/0x8 [ 293.813780] schedule+0xc3/0x2b0 [ 293.817563] schedule_preempt_disabled+0x13/0x20 [ 293.822343] __mutex_lock+0x8b5/0x1410 [ 293.826606] ? genl_rcv_msg+0x66e/0x10f0 [ 293.830677] ? mutex_lock_io_nested+0x1280/0x1280 [ 293.835956] ? __kasan_check_read+0x11/0x20 [ 293.840298] ? mark_lock+0xc5/0x11d0 [ 293.844376] ? stack_trace_consume_entry+0x170/0x170 [ 293.849500] ? __kmalloc_reserve.isra.46+0x2c/0xc0 [ 293.854833] mutex_lock_nested+0x16/0x20 [ 293.858903] ? mutex_lock_nested+0x16/0x20 [ 293.863259] genl_rcv_msg+0x66e/0x10f0 [ 293.868339] ? __kasan_check_read+0x11/0x20 [ 293.872666] ? __lock_acquire+0x100f/0x4ef0 [ 293.877380] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 293.883029] ? mark_held_locks+0x130/0x130 [ 293.887682] netlink_rcv_skb+0x13f/0x380 [ 293.891767] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 293.897897] ? netlink_ack+0x980/0x980 [ 293.901804] ? netlink_deliver_tap+0x178/0xac0 [ 293.906674] ? __kasan_check_read+0x11/0x20 [ 293.911019] genl_rcv+0x23/0x40 [ 293.914821] netlink_unicast+0x463/0x6b0 [ 293.918910] ? netlink_attachskb+0x740/0x740 [ 293.923325] ? _copy_from_iter_full+0x18a/0x780 [ 293.928373] netlink_sendmsg+0x7b0/0xcb0 [ 293.932572] ? netlink_unicast+0x6b0/0x6b0 [ 293.937243] ? selinux_socket_sendmsg+0x31/0x40 [ 293.941971] ? netlink_unicast+0x6b0/0x6b0 [ 293.946631] sock_sendmsg+0xe6/0x110 [ 293.950373] ____sys_sendmsg+0x603/0x980 [ 293.954923] ? copy_msghdr_from_user+0x209/0x420 [ 293.959706] ? kernel_sendmsg+0x30/0x30 [ 293.963686] ___sys_sendmsg+0xe4/0x160 [ 293.967945] ? sendmsg_copy_msghdr+0x30/0x30 [ 293.972383] ? __kasan_check_read+0x11/0x20 [ 293.977114] ? __fget+0x2ac/0x410 [ 293.980586] ? ksys_dup3+0x2e0/0x2e0 [ 293.984653] ? __fget_light+0x179/0x1f0 [ 293.988650] ? __fdget+0xe/0x10 [ 293.991932] __sys_sendmsg+0xd9/0x180 [ 293.996922] ? __sys_sendmsg_sock+0xa0/0xa0 [ 294.001284] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 294.006489] ? rcu_read_lock_any_held.part.10+0x50/0x50 [ 294.011879] ? fd_install+0x47/0x60 [ 294.015863] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 294.021249] __x64_sys_sendmsg+0x73/0xb0 [ 294.025737] do_syscall_64+0xd0/0x600 [ 294.029704] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 294.035264] RIP: 0033:0x411231 [ 294.038469] Code: 01 4c 89 54 24 28 e9 6f fa ff ff 49 8b 7c 24 70 8b 35 43 c4 24 00 ff 15 ed 83 24 00 85 c0 0f 85 b3 fe ff ff 49 8b 7c 24 70 be <20> 13 41 00 ff 15 dd 83 24 00 85 c0 0f 85 9b fe ff ff 49 8b 7c 24 [ 294.057988] RSP: 002b:00007f1e41b029c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 294.066067] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000411231 [ 294.073350] RDX: 0000000000000000 RSI: 00007f1e41b02a00 RDI: 0000000000000005 [ 294.081274] RBP: 0000000000000005 R08: 00007f1e41b029d0 R09: 000000000072bf00 [ 294.088778] R10: ffffffffffffffff R11: 0000000000000293 R12: 00007f1e41b02a40 [ 294.096500] R13: 00000000004cc538 R14: 00000000004d9a08 R15: 00000000ffffffff [ 294.103827] [ 294.103827] Showing all locks held in the system: [ 294.110562] 1 lock held by khungtaskd/752: [ 294.115303] #0: ffffffff8839bd00 (rcu_read_lock){....}, at: debug_show_all_locks+0x5b/0x275 [ 294.125272] 1 lock held by rsyslogd/6118: [ 294.129517] #0: ffff8881d1ee1860 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xa3/0xc0 [ 294.137764] 2 locks held by getty/6240: [ 294.141752] #0: ffff8881bfc11090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 294.150391] #1: ffffc90004cd52e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x17d0 [ 294.159692] 2 locks held by getty/6241: [ 294.163668] #0: ffff8881c1cce090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 294.172298] #1: ffffc90004d052e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x17d0 [ 294.181649] 2 locks held by getty/6242: [ 294.185992] #0: ffff8881c3af5090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 294.194793] #1: ffffc90004cdd2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x17d0 [ 294.203677] 2 locks held by getty/6243: [ 294.208027] #0: ffff8881c2784090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 294.216662] #1: ffffc90004ce52e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x17d0 [ 294.225888] 2 locks held by getty/6244: [ 294.229869] #0: ffff8881bc67e090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 294.239386] #1: ffffc90004cf12e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x17d0 [ 294.248767] 2 locks held by getty/6245: [ 294.252744] #0: ffff8881c3871090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 294.262210] #1: ffffc90004d012e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x17d0 [ 294.271479] 2 locks held by getty/6246: [ 294.276020] #0: ffff8881cf58f090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 294.284673] #1: ffffc90004ccd2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x17d0 [ 294.294493] 2 locks held by syz-executor1/21377: [ 294.299265] #0: ffffffff88d6ad68 (cb_lock){++++}, at: ctrl_getfamily+0x2b2/0x400 [ 294.307475] #1: ffffffff88d6ae20 (genl_mutex){+.+.}, at: ctrl_getfamily+0x2c0/0x400 [ 294.315840] 3 locks held by syz-executor1/21390: [ 294.320616] 2 locks held by syz-executor2/21385: [ 294.325743] #0: ffffffff88d6ad68 (cb_lock){++++}, at: ctrl_getfamily+0x2b2/0x400 [ 294.333398] #1: ffffffff88d6ae20 (genl_mutex){+.+.}, at: ctrl_getfamily+0x2c0/0x400 [ 294.341806] 2 locks held by syz-executor2/21402: [ 294.346931] #0: ffffffff88d6ad68 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 294.354254] #1: ffffffff88d6ae20 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 294.362089] 2 locks held by syz-executor2/21408: [ 294.367213] #0: ffffffff88d6ad68 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 294.374527] #1: ffffffff88d6ae20 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 294.382354] 2 locks held by syz-executor2/21417: [ 294.388351] #0: ffffffff88d6ad68 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 294.395810] #1: ffffffff88d6ae20 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 294.403742] 2 locks held by syz-executor3/21400: [ 294.408980] #0: ffffffff88d6ad68 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 294.416293] #1: ffffffff88d6ae20 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 294.424479] 2 locks held by syz-executor3/21409: [ 294.429346] #0: ffffffff88d6ad68 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 294.436669] #1: ffffffff88d6ae20 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 294.444825] 2 locks held by syz-executor3/21413: [ 294.449585] #0: ffffffff88d6ad68 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 294.456911] #1: ffffffff88d6ae20 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 294.465130] 2 locks held by syz-executor3/21419: [ 294.469895] #0: ffffffff88d6ad68 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 294.477337] #1: ffffffff88d6ae20 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 294.485735] 2 locks held by syz-executor4/21404: [ 294.490497] #0: ffffffff88d6ad68 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 294.497733] #1: ffffffff88d6ae20 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 294.505907] 2 locks held by syz-executor4/21410: [ 294.510664] #0: ffffffff88d6ad68 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 294.518780] #1: ffffffff88d6ae20 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 294.526943] 2 locks held by syz-executor4/21414: [ 294.531714] #0: ffffffff88d6ad68 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 294.539039] #1: ffffffff88d6ae20 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 294.547208] 2 locks held by syz-executor4/21421: [ 294.551971] #0: ffffffff88d6ad68 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 294.559375] #1: ffffffff88d6ae20 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 294.567584] 2 locks held by syz-executor5/21407: [ 294.572467] #0: ffffffff88d6ad68 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 294.579778] #1: ffffffff88d6ae20 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 294.588097] 2 locks held by syz-executor5/21412: [ 294.593122] #0: ffffffff88d6ad68 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 294.600532] #1: ffffffff88d6ae20 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 294.608865] 2 locks held by syz-executor5/21416: [ 294.613633] #0: ffffffff88d6ad68 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 294.620963] #1: ffffffff88d6ae20 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 294.629270] 2 locks held by syz-executor5/21425: [ 294.634288] #0: ffffffff88d6ad68 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 294.641239] #1: ffffffff88d6ae20 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 294.650297] 2 locks held by syz-executor0/21406: [ 294.655321] #0: ffffffff88d6ad68 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 294.662268] #1: ffffffff88d6ae20 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 294.670528] 2 locks held by syz-executor0/21411: [ 294.675513] #0: ffffffff88d6ad68 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 294.682460] #1: ffffffff88d6ae20 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 294.690781] 2 locks held by syz-executor0/21415: [ 294.695890] #0: ffffffff88d6ad68 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 294.702847] #1: ffffffff88d6ae20 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 294.711253] 2 locks held by syz-executor0/21423: [ 294.716375] #0: ffffffff88d6ad68 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 294.724387] #1: ffffffff88d6ae20 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 294.732228] [ 294.733858] ============================================= [ 294.733858] [ 294.741253] NMI backtrace for cpu 1 [ 294.744954] CPU: 1 PID: 752 Comm: khungtaskd Not tainted 5.5.0-syzkaller #0 [ 294.752222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.761698] Call Trace: [ 294.764384] dump_stack+0x12d/0x187 [ 294.768013] nmi_cpu_backtrace.cold.7+0x4b/0x84 [ 294.772748] ? lapic_can_unplug_cpu.cold.29+0x3f/0x3f [ 294.777948] nmi_trigger_cpumask_backtrace+0x18b/0x1b7 [ 294.783247] arch_trigger_cpumask_backtrace+0x14/0x20 [ 294.788513] watchdog+0x611/0xc50 [ 294.792062] kthread+0x334/0x3f0 [ 294.795434] ? hungtask_pm_notify+0x40/0x40 [ 294.799754] ? kthread_mod_delayed_work+0x190/0x190 [ 294.804880] ret_from_fork+0x3a/0x50 [ 294.808873] Sending NMI from CPU 1 to CPUs 0: [ 294.813867] NMI backtrace for cpu 0 [ 294.813870] CPU: 0 PID: 21390 Comm: syz-executor1 Not tainted 5.5.0-syzkaller #0 [ 294.813872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.813873] RIP: 0010:tipc_nl_publ_dump+0x289/0xca0 [ 294.813876] Code: 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 ce 09 00 00 41 8b 47 04 89 85 9c fe ff ff 31 c0 45 85 ed 74 48 <48> ba 00 00 00 00 00 fc ff df 48 03 95 a0 fe ff ff 48 c7 02 00 00 [ 294.813878] RSP: 0018:ffff8881d75a6d90 EFLAGS: 00000246 [ 294.813881] RAX: 00000000ffffffea RBX: ffff8881bb74b480 RCX: 0000000000000000 [ 294.813882] RDX: 1ffffffff1065b8b RSI: ffffffff8839bd00 RDI: 0000000000000286 [ 294.813884] RBP: ffff8881d75a6f38 R08: 0000000000000003 R09: ffff8881da27e950 [ 294.813886] R10: fffffbfff11ef780 R11: ffffffff88f7bc07 R12: 0000000000000000 [ 294.813887] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8881b51e0018 [ 294.813889] FS: 00007ff5bc323700(0000) GS:ffff8881db000000(0000) knlGS:0000000000000000 [ 294.813891] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 294.813892] CR2: 0000000020000440 CR3: 00000001c030d000 CR4: 00000000001406f0 [ 294.813894] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 294.813895] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 294.813896] Call Trace: [ 294.813898] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 294.813899] ? trace_hardirqs_on_caller+0x28/0x1a0 [ 294.813900] ? tipc_nl_sk_dump+0x20/0x20 [ 294.813902] ? retint_kernel+0x2b/0x2b [ 294.813903] ? tipc_nl_publ_dump+0x21/0xca0 [ 294.813905] __tipc_nl_compat_dumpit.isra.11+0x327/0xc10 [ 294.813906] ? tipc_nl_compat_link_stat_dump+0x2080/0x2080 [ 294.813907] ? __nla_put+0x20/0x30 [ 294.813908] tipc_nl_compat_sk_dump+0x4ed/0x990 [ 294.813910] ? __tipc_nl_compat_dumpit.isra.11+0xc10/0xc10 [ 294.813911] ? tipc_nl_sk_dump+0x20/0x20 [ 294.813912] ? tipc_tlv_sprintf+0x2c0/0x2c0 [ 294.813913] ? memset+0x31/0x40 [ 294.813915] ? __nla_validate_parse+0xa1/0x1d80 [ 294.813916] ? rcu_read_lock_held+0x9c/0xb0 [ 294.813917] __tipc_nl_compat_dumpit.isra.11+0x44c/0xc10 [ 294.813918] ? tipc_nl_compat_link_stat_dump+0x2080/0x2080 [ 294.813920] tipc_nl_compat_dumpit+0x1e6/0x4c0 [ 294.813921] tipc_nl_compat_recv+0x45a/0xa70 [ 294.813922] ? tipc_nl_compat_doit+0x550/0x550 [ 294.813923] ? mark_lock+0xc5/0x11d0 [ 294.813924] ? tipc_dump_start+0x90/0x90 [ 294.813926] ? __tipc_nl_compat_dumpit.isra.11+0xc10/0xc10 [ 294.813927] ? __kasan_check_read+0x11/0x20 [ 294.813928] ? __lock_acquire+0x96a/0x4ef0 [ 294.813929] genl_rcv_msg+0x5e1/0x10f0 [ 294.813930] ? __kasan_check_read+0x11/0x20 [ 294.813931] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 294.813933] netlink_rcv_skb+0x13f/0x380 [ 294.813934] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 294.813935] ? netlink_ack+0x980/0x980 [ 294.813936] ? netlink_deliver_tap+0x178/0xac0 [ 294.813937] ? __kasan_check_read+0x11/0x20 [ 294.813938] genl_rcv+0x23/0x40 [ 294.813939] netlink_unicast+0x463/0x6b0 [ 294.813941] ? netlink_attachskb+0x740/0x740 [ 294.813942] ? _copy_from_iter_full+0x18a/0x780 [ 294.813943] netlink_sendmsg+0x7b0/0xcb0 [ 294.813944] ? netlink_unicast+0x6b0/0x6b0 [ 294.813945] ? selinux_socket_sendmsg+0x31/0x40 [ 294.813947] ? netlink_unicast+0x6b0/0x6b0 [ 294.813948] sock_sendmsg+0xe6/0x110 [ 294.813949] ____sys_sendmsg+0x603/0x980 [ 294.813950] ? copy_msghdr_from_user+0x209/0x420 [ 294.813951] ? kernel_sendmsg+0x30/0x30 [ 294.813952] ___sys_sendmsg+0xe4/0x160 [ 294.813953] ? sendmsg_copy_msghdr+0x30/0x30 [ 294.813955] ? __kasan_check_read+0x11/0x20 [ 294.813956] ? __fget+0x2ac/0x410 [ 294.813957] ? ksys_dup3+0x2e0/0x2e0 [ 294.813958] ? __might_fault+0xf1/0x1b0 [ 294.813959] ? __fget_light+0x179/0x1f0 [ 294.813960] ? lock_acquire+0x194/0x410 [ 294.813961] ? __fdget+0xe/0x10 [ 294.813962] __sys_sendmsg+0xd9/0x180 [ 294.813963] ? __sys_sendmsg_sock+0xa0/0xa0 [ 294.813965] ? __kasan_check_read+0x11/0x20 [ 294.813966] ? _copy_to_user+0xcb/0xf0 [ 294.813967] ? put_timespec64+0xa9/0x100 [ 294.813968] ? nsecs_to_jiffies+0x20/0x20 [ 294.813969] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 294.813970] __x64_sys_sendmsg+0x73/0xb0 [ 294.813971] do_syscall_64+0xd0/0x600 [ 294.813973] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 294.813974] RIP: 0033:0x4577a9 [ 294.813977] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 294.813978] RSP: 002b:00007ff5bc322c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.813981] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004577a9 [ 294.813982] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000005 [ 294.813984] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 294.813985] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff5bc3236d4 [ 294.813994] R13: 00000000004c4211 R14: 00000000004d70f8 R15: 00000000ffffffff [ 294.817180] Kernel panic - not syncing: hung_task: blocked tasks [ 295.291938] CPU: 1 PID: 752 Comm: khungtaskd Not tainted 5.5.0-syzkaller #0 [ 295.299163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.308531] Call Trace: [ 295.311138] dump_stack+0x12d/0x187 [ 295.314841] panic+0x22a/0x4f5 [ 295.318032] ? add_taint.cold.7+0x11/0x11 [ 295.322190] ? ___preempt_schedule+0x16/0x18 [ 295.326621] watchdog+0x622/0xc50 [ 295.330085] kthread+0x334/0x3f0 [ 295.333464] ? hungtask_pm_notify+0x40/0x40 [ 295.337790] ? kthread_mod_delayed_work+0x190/0x190 [ 295.342805] ret_from_fork+0x3a/0x50 [ 295.351708] Kernel Offset: disabled [ 295.355361] Rebooting in 86400 seconds..