[ 36.670552] audit: type=1400 audit(1584885111.711:42): avc: denied { map } for pid=6316 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 37.992334] audit: type=1400 audit(1584885113.031:43): avc: denied { integrity } for pid=6316 comm="syz-fuzzer" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 [ 38.164755] IPVS: ftp: loaded support on port[0] = 21 [ 38.196264] audit: type=1400 audit(1584885113.231:44): avc: denied { associate } for pid=6334 comm="syz-executor0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 38.547710] tipc: TX() has been purged, node left! [ 68.706517] can: request_module (can-proto-0) failed. [ 68.716392] can: request_module (can-proto-0) failed. [ 68.906218] audit: type=1400 audit(1584885143.941:45): avc: denied { create } for pid=6316 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 68.930227] audit: type=1400 audit(1584885143.941:46): avc: denied { create } for pid=6316 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 68.953810] audit: type=1400 audit(1584885143.941:47): avc: denied { create } for pid=6316 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.10.28' (ECDSA) to the list of known hosts. 2020/03/22 13:52:32 parsed 1 programs 2020/03/22 13:52:33 executed programs: 0 [ 78.446030] IPVS: ftp: loaded support on port[0] = 21 [ 78.470079] IPVS: ftp: loaded support on port[0] = 21 [ 78.491964] IPVS: ftp: loaded support on port[0] = 21 [ 78.496531] IPVS: ftp: loaded support on port[0] = 21 [ 78.540674] IPVS: ftp: loaded support on port[0] = 21 [ 78.558852] IPVS: ftp: loaded support on port[0] = 21 [ 79.453650] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.470748] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.478189] device bridge_slave_0 entered promiscuous mode [ 79.502245] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.508995] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.516181] device bridge_slave_0 entered promiscuous mode [ 79.523789] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.530645] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.538590] device bridge_slave_0 entered promiscuous mode [ 79.553724] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.561573] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.568830] device bridge_slave_1 entered promiscuous mode [ 79.577484] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.584440] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.592052] device bridge_slave_0 entered promiscuous mode [ 79.600482] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.606859] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.614054] device bridge_slave_1 entered promiscuous mode [ 79.622747] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.629466] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.640526] device bridge_slave_1 entered promiscuous mode [ 79.650083] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.656464] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.663798] device bridge_slave_0 entered promiscuous mode [ 79.670561] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.676913] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.685105] device bridge_slave_0 entered promiscuous mode [ 79.694443] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.700944] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.708397] device bridge_slave_1 entered promiscuous mode [ 79.721325] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.728410] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.736746] device bridge_slave_1 entered promiscuous mode [ 79.751128] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.757525] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.765501] device bridge_slave_1 entered promiscuous mode [ 79.916721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.961560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.974585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.989790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.014667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.028880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.041484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.060202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.078829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.105793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.125342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.145466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.161402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.170279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.207854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.216147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.251165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.259602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.281508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.289621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.307121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.318437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.346313] team0: Port device team_slave_0 added [ 80.383015] team0: Port device team_slave_0 added [ 80.416032] team0: Port device team_slave_1 added [ 80.446289] team0: Port device team_slave_1 added [ 80.457574] team0: Port device team_slave_0 added [ 80.468038] team0: Port device team_slave_0 added [ 80.485676] team0: Port device team_slave_0 added [ 80.499119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.522101] team0: Port device team_slave_0 added [ 80.534930] team0: Port device team_slave_1 added [ 80.543285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.560381] team0: Port device team_slave_1 added [ 80.569748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.585422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.604697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.618474] team0: Port device team_slave_1 added [ 80.630845] team0: Port device team_slave_1 added [ 80.655703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.665371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.680640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.694427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.707502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.715496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.723541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.740014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.761412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.769512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.777316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.789841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.798265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.807844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.821031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.832781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.848519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.856673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.869348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.877460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.895357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.919559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.928739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.940081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.948709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.966665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.984133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.004133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.018156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.040327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.056273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.457924] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.464389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.471814] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.478209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.495679] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.502487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.509210] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.515581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.563986] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.570409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.577655] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.584022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.615309] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.622664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.629355] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.643457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.675595] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.682062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.688785] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.695162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.722155] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.728603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.735248] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.741689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.168166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.176168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.192563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.201171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.208815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.215884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.569327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.651570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.672579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.774208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.784855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.970868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.979495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.007364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.036322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.048161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.075995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.084988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.166984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.176183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.189308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.196760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.210949] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.225921] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.326307] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.353631] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.365600] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.440878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.453422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.599514] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.403246] audit: type=1400 audit(1584885160.441:48): avc: denied { write } for pid=7919 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2020/03/22 13:52:40 executed programs: 6 [ 85.528041] audit: type=1400 audit(1584885160.441:49): avc: denied { read } for pid=7919 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2020/03/22 13:52:45 executed programs: 205 2020/03/22 13:52:50 executed programs: 414 2020/03/22 13:52:55 executed programs: 622 2020/03/22 13:53:00 executed programs: 830 2020/03/22 13:53:05 executed programs: 1032 2020/03/22 13:53:10 executed programs: 1233 2020/03/22 13:53:15 executed programs: 1436 2020/03/22 13:53:20 executed programs: 1639 2020/03/22 13:53:25 executed programs: 1837 2020/03/22 13:53:30 executed programs: 2035 2020/03/22 13:53:35 executed programs: 2237 2020/03/22 13:53:40 executed programs: 2435 2020/03/22 13:53:45 executed programs: 2633 [ 153.814289] netlink: 2383148 bytes leftover after parsing attributes in process `syz-executor2'. 2020/03/22 13:53:50 executed programs: 2835 [ 311.207773] INFO: task syz-executor4:28120 blocked for more than 143 seconds. [ 311.215196] Not tainted 5.6.0-rc6-syzkaller #0 [ 311.221609] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 311.229814] syz-executor4 D27640 28120 6410 0x00004004 [ 311.235441] Call Trace: [ 311.241536] __schedule+0x856/0x1910 [ 311.245260] ? __sched_text_start+0x8/0x8 [ 311.249660] schedule+0xc3/0x2b0 [ 311.253023] schedule_preempt_disabled+0x13/0x20 [ 311.258776] __mutex_lock+0x8b5/0x1410 [ 311.262786] ? ctrl_getfamily+0x2c0/0x400 [ 311.267021] ? mutex_lock_io_nested+0x1280/0x1280 [ 311.272186] ? lock_acquire+0x194/0x410 [ 311.276158] ? ctrl_getfamily+0x2b2/0x400 [ 311.281290] ? down_read_killable+0x470/0x470 [ 311.285804] mutex_lock_nested+0x16/0x20 [ 311.290122] ? mutex_lock_nested+0x16/0x20 [ 311.294365] ctrl_getfamily+0x2c0/0x400 [ 311.298686] genl_rcv_msg+0x5e1/0x10f0 [ 311.302681] ? __kasan_check_read+0x11/0x20 [ 311.307023] ? genl_family_rcv_msg_attrs_parse+0x2f0/0x2f0 [ 311.313088] netlink_rcv_skb+0x13f/0x380 [ 311.317166] ? genl_family_rcv_msg_attrs_parse+0x2f0/0x2f0 [ 311.323108] ? netlink_ack+0x990/0x990 [ 311.327005] ? genl_pernet_exit+0x70/0x70 [ 311.331511] genl_rcv+0x23/0x40 [ 311.334805] netlink_unicast+0x479/0x6c0 [ 311.339310] ? netlink_attachskb+0x740/0x740 [ 311.343831] ? _copy_from_iter_full+0x18a/0x780 [ 311.348841] netlink_sendmsg+0x7ab/0xd50 [ 311.352910] ? netlink_unicast+0x6c0/0x6c0 [ 311.357230] ? selinux_socket_sendmsg+0x31/0x40 [ 311.362245] ? netlink_unicast+0x6c0/0x6c0 [ 311.366593] sock_sendmsg+0xe6/0x110 [ 311.370733] ____sys_sendmsg+0x603/0x980 [ 311.374799] ? copy_msghdr_from_user+0x209/0x420 [ 311.379855] ? kernel_sendmsg+0x30/0x30 [ 311.383858] ___sys_sendmsg+0xe4/0x160 [ 311.388753] ? sendmsg_copy_msghdr+0x30/0x30 [ 311.393190] ? __kasan_check_read+0x11/0x20 [ 311.397589] ? __fget_files+0x283/0x3e0 [ 311.401930] ? ksys_dup3+0x2e0/0x2e0 [ 311.405650] ? __fget_light+0x1a7/0x220 [ 311.409996] ? __fdget+0xe/0x10 [ 311.413283] __sys_sendmsg+0xd9/0x180 [ 311.417215] ? __sys_sendmsg_sock+0xa0/0xa0 [ 311.421867] ? __fd_install+0x174/0x4b0 [ 311.425966] ? fd_install+0x47/0x60 [ 311.430126] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 311.435511] __x64_sys_sendmsg+0x73/0xb0 [ 311.439878] do_syscall_64+0xd0/0x630 [ 311.443685] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 311.449275] RIP: 0033:0x411231 [ 311.452467] Code: 01 4c 89 54 24 28 e9 6f fa ff ff 49 8b 7c 24 70 8b 35 43 c4 24 00 ff 15 ed 83 24 00 85 c0 0f 85 b3 fe ff ff 49 8b 7c 24 70 be <20> 13 41 00 ff 15 dd 83 24 00 85 c0 0f 85 9b fe ff ff 49 8b 7c 24 [ 311.471691] RSP: 002b:00007fae4512b9c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 311.479809] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000411231 [ 311.487085] RDX: 0000000000000000 RSI: 00007fae4512ba00 RDI: 0000000000000007 [ 311.494729] RBP: 0000000000000007 R08: 00007fae4512b9d0 R09: 000000000072bf00 [ 311.502447] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fae4512ba40 [ 311.510021] R13: 00000000004cc538 R14: 00000000004d9a08 R15: 00000000ffffffff [ 311.517531] INFO: task syz-executor5:28131 blocked for more than 143 seconds. [ 311.525907] Not tainted 5.6.0-rc6-syzkaller #0 [ 311.531250] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 311.539488] syz-executor5 D26440 28131 6413 0x00000004 [ 311.545219] Call Trace: [ 311.548115] __schedule+0x856/0x1910 [ 311.552086] ? __sched_text_start+0x8/0x8 [ 311.556251] schedule+0xc3/0x2b0 [ 311.560638] schedule_preempt_disabled+0x13/0x20 [ 311.565778] __mutex_lock+0x8b5/0x1410 [ 311.569968] ? genl_rcv_msg+0x66e/0x10f0 [ 311.574033] ? mutex_lock_io_nested+0x1280/0x1280 [ 311.579140] ? arch_stack_walk+0xa0/0xf0 [ 311.583206] ? __kasan_check_read+0x11/0x20 [ 311.587537] ? mark_lock+0xc5/0x11d0 [ 311.591746] ? stack_trace_consume_entry+0x170/0x170 [ 311.596912] ? __kmalloc_reserve.isra.47+0x2c/0xc0 [ 311.602171] mutex_lock_nested+0x16/0x20 [ 311.606232] ? mutex_lock_nested+0x16/0x20 [ 311.611791] genl_rcv_msg+0x66e/0x10f0 [ 311.615689] ? __kasan_check_read+0x11/0x20 [ 311.620248] ? __lock_acquire+0x100f/0x4ef0 [ 311.624581] ? genl_family_rcv_msg_attrs_parse+0x2f0/0x2f0 [ 311.630458] ? mark_held_locks+0x130/0x130 [ 311.634708] netlink_rcv_skb+0x13f/0x380 [ 311.638992] ? genl_family_rcv_msg_attrs_parse+0x2f0/0x2f0 [ 311.644633] ? netlink_ack+0x990/0x990 [ 311.649508] ? netlink_deliver_tap+0x178/0xac0 [ 311.654082] ? __kasan_check_read+0x11/0x20 [ 311.658695] genl_rcv+0x23/0x40 [ 311.661975] netlink_unicast+0x479/0x6c0 [ 311.666032] ? netlink_attachskb+0x740/0x740 [ 311.670666] ? _copy_from_iter_full+0x18a/0x780 [ 311.675342] netlink_sendmsg+0x7ab/0xd50 [ 311.679623] ? netlink_unicast+0x6c0/0x6c0 [ 311.683858] ? selinux_socket_sendmsg+0x31/0x40 [ 311.689359] ? netlink_unicast+0x6c0/0x6c0 [ 311.693775] sock_sendmsg+0xe6/0x110 [ 311.697484] ____sys_sendmsg+0x603/0x980 [ 311.701786] ? copy_msghdr_from_user+0x209/0x420 [ 311.706552] ? kernel_sendmsg+0x30/0x30 [ 311.710945] ___sys_sendmsg+0xe4/0x160 [ 311.714830] ? sendmsg_copy_msghdr+0x30/0x30 [ 311.719561] ? __kasan_check_read+0x11/0x20 [ 311.723898] ? __fget_files+0x283/0x3e0 [ 311.728146] ? ksys_dup3+0x2e0/0x2e0 [ 311.731884] ? __fget_light+0x1a7/0x220 [ 311.735857] ? __fdget+0xe/0x10 [ 311.739458] __sys_sendmsg+0xd9/0x180 [ 311.743261] ? __sys_sendmsg_sock+0xa0/0xa0 [ 311.748013] ? __fd_install+0x174/0x4b0 [ 311.751999] ? fd_install+0x47/0x60 [ 311.755642] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 311.761300] __x64_sys_sendmsg+0x73/0xb0 [ 311.765390] do_syscall_64+0xd0/0x630 [ 311.769492] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 311.774677] RIP: 0033:0x411231 [ 311.778882] Code: 01 4c 89 54 24 28 e9 6f fa ff ff 49 8b 7c 24 70 8b 35 43 c4 24 00 ff 15 ed 83 24 00 85 c0 0f 85 b3 fe ff ff 49 8b 7c 24 70 be <20> 13 41 00 ff 15 dd 83 24 00 85 c0 0f 85 9b fe ff ff 49 8b 7c 24 [ 311.798234] RSP: 002b:00007fda855a19c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 311.805964] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000411231 [ 311.813698] RDX: 0000000000000000 RSI: 00007fda855a1a00 RDI: 0000000000000008 [ 311.821206] RBP: 0000000000000008 R08: 00007fda855a19d0 R09: 000000000072bf00 [ 311.828844] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fda855a1a40 [ 311.836128] R13: 00000000004cc538 R14: 00000000004d9a08 R15: 00000000ffffffff [ 311.843782] INFO: task syz-executor5:28144 blocked for more than 143 seconds. [ 311.867657] Not tainted 5.6.0-rc6-syzkaller #0 [ 311.872799] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 311.881587] syz-executor5 D28544 28144 6413 0x00000004 [ 311.887316] Call Trace: [ 311.890393] __schedule+0x856/0x1910 [ 311.894120] ? __sched_text_start+0x8/0x8 [ 311.898520] schedule+0xc3/0x2b0 [ 311.901912] schedule_preempt_disabled+0x13/0x20 [ 311.906686] __mutex_lock+0x8b5/0x1410 [ 311.911763] ? genl_rcv_msg+0x66e/0x10f0 [ 311.916459] ? mutex_lock_io_nested+0x1280/0x1280 [ 311.921632] ? arch_stack_walk+0xa0/0xf0 [ 311.925744] ? __kasan_check_read+0x11/0x20 [ 311.930461] ? mark_lock+0xc5/0x11d0 [ 311.934191] ? stack_trace_consume_entry+0x170/0x170 [ 311.939896] ? __kmalloc_reserve.isra.47+0x2c/0xc0 [ 311.944838] mutex_lock_nested+0x16/0x20 [ 311.949211] ? mutex_lock_nested+0x16/0x20 [ 311.953450] genl_rcv_msg+0x66e/0x10f0 [ 311.957335] ? __kasan_check_read+0x11/0x20 [ 311.962052] ? __lock_acquire+0x100f/0x4ef0 [ 311.966406] ? genl_family_rcv_msg_attrs_parse+0x2f0/0x2f0 [ 311.972512] ? mark_held_locks+0x130/0x130 [ 311.976786] netlink_rcv_skb+0x13f/0x380 [ 311.982957] ? genl_family_rcv_msg_attrs_parse+0x2f0/0x2f0 [ 311.988971] ? netlink_ack+0x990/0x990 [ 311.992885] ? netlink_deliver_tap+0x178/0xac0 [ 311.997557] ? __kasan_check_read+0x11/0x20 [ 312.002207] genl_rcv+0x23/0x40 [ 312.005495] netlink_unicast+0x479/0x6c0 [ 312.009793] ? netlink_attachskb+0x740/0x740 [ 312.014804] ? _copy_from_iter_full+0x18a/0x780 [ 312.019705] netlink_sendmsg+0x7ab/0xd50 [ 312.024052] ? netlink_unicast+0x6c0/0x6c0 [ 312.028731] ? selinux_socket_sendmsg+0x31/0x40 [ 312.033534] ? netlink_unicast+0x6c0/0x6c0 [ 312.039128] sock_sendmsg+0xe6/0x110 [ 312.042855] ____sys_sendmsg+0x603/0x980 [ 312.047302] ? copy_msghdr_from_user+0x209/0x420 [ 312.052434] ? kernel_sendmsg+0x30/0x30 [ 312.056432] ___sys_sendmsg+0xe4/0x160 [ 312.060594] ? sendmsg_copy_msghdr+0x30/0x30 [ 312.065017] ? __kasan_check_read+0x11/0x20 [ 312.069626] ? __fget_files+0x283/0x3e0 [ 312.073624] ? ksys_dup3+0x2e0/0x2e0 [ 312.077344] ? __fget_light+0x1a7/0x220 [ 312.081713] ? __fdget+0xe/0x10 [ 312.085008] __sys_sendmsg+0xd9/0x180 [ 312.089410] ? __sys_sendmsg_sock+0xa0/0xa0 [ 312.093738] ? __fd_install+0x174/0x4b0 [ 312.098006] ? fd_install+0x47/0x60 [ 312.101665] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 312.107032] __x64_sys_sendmsg+0x73/0xb0 [ 312.111516] do_syscall_64+0xd0/0x630 [ 312.115336] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 312.120847] RIP: 0033:0x411231 [ 312.124067] Code: 01 4c 89 54 24 28 e9 6f fa ff ff 49 8b 7c 24 70 8b 35 43 c4 24 00 ff 15 ed 83 24 00 85 c0 0f 85 b3 fe ff ff 49 8b 7c 24 70 be <20> 13 41 00 ff 15 dd 83 24 00 85 c0 0f 85 9b fe ff ff 49 8b 7c 24 [ 312.143929] RSP: 002b:00007fda855809c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 312.152344] RAX: ffffffffffffffda RBX: 00007fda85580a58 RCX: 0000000000411231 [ 312.159930] RDX: 0000000000000000 RSI: 00007fda85580a00 RDI: 0000000000000007 [ 312.167213] RBP: 0000000000000007 R08: 000000000000000b R09: 0000000000000000 [ 312.175642] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fda85580a40 [ 312.184226] R13: 00000000004cc510 R14: 00000000004d99f0 R15: 00000000ffffffff [ 312.191866] INFO: task syz-executor3:28145 blocked for more than 144 seconds. [ 312.199447] Not tainted 5.6.0-rc6-syzkaller #0 [ 312.204554] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 312.212838] syz-executor3 D27648 28145 6412 0x00004004 [ 312.218940] Call Trace: [ 312.221631] __schedule+0x856/0x1910 [ 312.225530] ? __sched_text_start+0x8/0x8 [ 312.230009] schedule+0xc3/0x2b0 [ 312.233380] schedule_preempt_disabled+0x13/0x20 [ 312.238502] __mutex_lock+0x8b5/0x1410 [ 312.242406] ? ctrl_getfamily+0x2c0/0x400 [ 312.246572] ? mutex_lock_io_nested+0x1280/0x1280 [ 312.251764] ? lock_acquire+0x194/0x410 [ 312.255873] ? ctrl_getfamily+0x2b2/0x400 [ 312.260407] ? down_read_killable+0x470/0x470 [ 312.264929] mutex_lock_nested+0x16/0x20 [ 312.269311] ? mutex_lock_nested+0x16/0x20 [ 312.273553] ctrl_getfamily+0x2c0/0x400 [ 312.277546] genl_rcv_msg+0x5e1/0x10f0 [ 312.281806] ? __kasan_check_read+0x11/0x20 [ 312.286140] ? genl_family_rcv_msg_attrs_parse+0x2f0/0x2f0 [ 312.292188] netlink_rcv_skb+0x13f/0x380 [ 312.296259] ? genl_family_rcv_msg_attrs_parse+0x2f0/0x2f0 [ 312.302986] ? netlink_ack+0x990/0x990 [ 312.306886] ? netlink_deliver_tap+0x178/0xac0 [ 312.311717] ? __kasan_check_read+0x11/0x20 [ 312.316149] genl_rcv+0x23/0x40 [ 312.319773] netlink_unicast+0x479/0x6c0 [ 312.323840] ? netlink_attachskb+0x740/0x740 [ 312.328552] ? _copy_from_iter_full+0x18a/0x780 [ 312.333252] netlink_sendmsg+0x7ab/0xd50 [ 312.337330] ? netlink_unicast+0x6c0/0x6c0 [ 312.342299] ? selinux_socket_sendmsg+0x31/0x40 [ 312.347241] ? netlink_unicast+0x6c0/0x6c0 [ 312.351793] sock_sendmsg+0xe6/0x110 [ 312.355509] ____sys_sendmsg+0x603/0x980 [ 312.359792] ? copy_msghdr_from_user+0x209/0x420 [ 312.365350] ? kernel_sendmsg+0x30/0x30 [ 312.369737] ___sys_sendmsg+0xe4/0x160 [ 312.373636] ? sendmsg_copy_msghdr+0x30/0x30 [ 312.378317] ? __kasan_check_read+0x11/0x20 [ 312.382650] ? __fget_files+0x283/0x3e0 [ 312.386633] ? ksys_dup3+0x2e0/0x2e0 [ 312.390783] ? __fget_light+0x1a7/0x220 [ 312.394761] ? __fdget+0xe/0x10 [ 312.398278] __sys_sendmsg+0xd9/0x180 [ 312.402074] ? __sys_sendmsg_sock+0xa0/0xa0 [ 312.406408] ? __fd_install+0x174/0x4b0 [ 312.410637] ? fd_install+0x47/0x60 [ 312.414275] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 312.419879] __x64_sys_sendmsg+0x73/0xb0 [ 312.423940] do_syscall_64+0xd0/0x630 [ 312.428731] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 312.433925] RIP: 0033:0x411231 [ 312.437109] Code: 01 4c 89 54 24 28 e9 6f fa ff ff 49 8b 7c 24 70 8b 35 43 c4 24 00 ff 15 ed 83 24 00 85 c0 0f 85 b3 fe ff ff 49 8b 7c 24 70 be <20> 13 41 00 ff 15 dd 83 24 00 85 c0 0f 85 9b fe ff ff 49 8b 7c 24 [ 312.456304] RSP: 002b:00007fcf58fc59c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 312.464225] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000411231 [ 312.471718] RDX: 0000000000000000 RSI: 00007fcf58fc5a00 RDI: 0000000000000005 [ 312.479203] RBP: 0000000000000005 R08: 00007fcf58fc59d0 R09: 000000000072bf00 [ 312.486471] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fcf58fc5a40 [ 312.493975] R13: 00000000004cc538 R14: 00000000004d9a08 R15: 00000000ffffffff [ 312.501678] INFO: task syz-executor3:28152 blocked for more than 144 seconds. [ 312.514711] Not tainted 5.6.0-rc6-syzkaller #0 [ 312.521124] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 312.529357] syz-executor3 D28544 28152 6412 0x00004004 [ 312.534995] Call Trace: [ 312.537864] __schedule+0x856/0x1910 [ 312.541587] ? __sched_text_start+0x8/0x8 [ 312.545740] schedule+0xc3/0x2b0 [ 312.549364] schedule_preempt_disabled+0x13/0x20 [ 312.554117] __mutex_lock+0x8b5/0x1410 [ 312.559002] ? genl_rcv_msg+0x66e/0x10f0 [ 312.563075] ? mutex_lock_io_nested+0x1280/0x1280 [ 312.568219] ? arch_stack_walk+0xa0/0xf0 [ 312.572285] ? __kasan_check_read+0x11/0x20 [ 312.576599] ? mark_lock+0xc5/0x11d0 [ 312.580558] ? stack_trace_consume_entry+0x170/0x170 [ 312.585668] ? __kmalloc_reserve.isra.47+0x2c/0xc0 [ 312.590869] mutex_lock_nested+0x16/0x20 [ 312.594922] ? mutex_lock_nested+0x16/0x20 [ 312.599435] genl_rcv_msg+0x66e/0x10f0 [ 312.603324] ? __kasan_check_read+0x11/0x20 [ 312.607877] ? __lock_acquire+0x100f/0x4ef0 [ 312.612217] ? genl_family_rcv_msg_attrs_parse+0x2f0/0x2f0 [ 312.618435] ? mark_held_locks+0x130/0x130 [ 312.622689] netlink_rcv_skb+0x13f/0x380 [ 312.626742] ? genl_family_rcv_msg_attrs_parse+0x2f0/0x2f0 [ 312.632679] ? netlink_ack+0x990/0x990 [ 312.636607] ? netlink_deliver_tap+0x178/0xac0 [ 312.641460] ? __kasan_check_read+0x11/0x20 [ 312.645790] genl_rcv+0x23/0x40 [ 312.649353] netlink_unicast+0x479/0x6c0 [ 312.653419] ? netlink_attachskb+0x740/0x740 [ 312.658063] ? _copy_from_iter_full+0x18a/0x780 [ 312.662738] netlink_sendmsg+0x7ab/0xd50 [ 312.666802] ? netlink_unicast+0x6c0/0x6c0 [ 312.671546] ? selinux_socket_sendmsg+0x31/0x40 [ 312.676239] ? netlink_unicast+0x6c0/0x6c0 [ 312.680760] sock_sendmsg+0xe6/0x110 [ 312.684477] ____sys_sendmsg+0x603/0x980 [ 312.689643] ? copy_msghdr_from_user+0x209/0x420 [ 312.694431] ? kernel_sendmsg+0x30/0x30 [ 312.698679] ___sys_sendmsg+0xe4/0x160 [ 312.702572] ? sendmsg_copy_msghdr+0x30/0x30 [ 312.706979] ? __kasan_check_read+0x11/0x20 [ 312.711553] ? __fget_files+0x283/0x3e0 [ 312.715561] ? ksys_dup3+0x2e0/0x2e0 [ 312.719506] ? __fget_light+0x1a7/0x220 [ 312.723478] ? __fdget+0xe/0x10 [ 312.726785] __sys_sendmsg+0xd9/0x180 [ 312.731104] ? __sys_sendmsg_sock+0xa0/0xa0 [ 312.735429] ? __fd_install+0x174/0x4b0 [ 312.739727] ? fd_install+0x47/0x60 [ 312.743543] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 312.749161] __x64_sys_sendmsg+0x73/0xb0 [ 312.753221] do_syscall_64+0xd0/0x630 [ 312.757015] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 312.762437] RIP: 0033:0x411231 [ 312.765623] Code: 01 4c 89 54 24 28 e9 6f fa ff ff 49 8b 7c 24 70 8b 35 43 c4 24 00 ff 15 ed 83 24 00 85 c0 0f 85 b3 fe ff ff 49 8b 7c 24 70 be <20> 13 41 00 ff 15 dd 83 24 00 85 c0 0f 85 9b fe ff ff 49 8b 7c 24 [ 312.784786] RSP: 002b:00007fcf58fa49c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 312.792814] RAX: ffffffffffffffda RBX: 00007fcf58fa4a58 RCX: 0000000000411231 [ 312.800305] RDX: 0000000000000000 RSI: 00007fcf58fa4a00 RDI: 0000000000000006 [ 312.807792] RBP: 0000000000000006 R08: 000000000000000b R09: 0000000000000000 [ 312.815063] R10: ffffffffffffffff R11: 0000000000000293 R12: 00007fcf58fa4a40 [ 312.823357] R13: 00000000004cc510 R14: 00000000004d99f0 R15: 00000000ffffffff [ 312.831233] INFO: task syz-executor3:28156 blocked for more than 144 seconds. [ 312.839977] Not tainted 5.6.0-rc6-syzkaller #0 [ 312.845125] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 312.853441] syz-executor3 D27744 28156 6412 0x00004004 [ 312.859482] Call Trace: [ 312.862167] __schedule+0x856/0x1910 [ 312.865881] ? __sched_text_start+0x8/0x8 [ 312.870305] schedule+0xc3/0x2b0 [ 312.873694] schedule_preempt_disabled+0x13/0x20 [ 312.878744] __mutex_lock+0x8b5/0x1410 [ 312.882654] ? genl_rcv_msg+0x66e/0x10f0 [ 312.886718] ? mutex_lock_io_nested+0x1280/0x1280 [ 312.891931] ? arch_stack_walk+0xa0/0xf0 [ 312.896005] ? __kasan_check_read+0x11/0x20 [ 312.900580] ? mark_lock+0xc5/0x11d0 [ 312.904302] ? stack_trace_consume_entry+0x170/0x170 [ 312.909647] ? __kmalloc_reserve.isra.47+0x2c/0xc0 [ 312.914585] mutex_lock_nested+0x16/0x20 [ 312.918885] ? mutex_lock_nested+0x16/0x20 [ 312.923130] genl_rcv_msg+0x66e/0x10f0 [ 312.927008] ? __kasan_check_read+0x11/0x20 [ 312.931575] ? __lock_acquire+0x100f/0x4ef0 [ 312.935909] ? genl_family_rcv_msg_attrs_parse+0x2f0/0x2f0 [ 312.941772] ? mark_held_locks+0x130/0x130 [ 312.946026] netlink_rcv_skb+0x13f/0x380 [ 312.951263] ? genl_family_rcv_msg_attrs_parse+0x2f0/0x2f0 [ 312.956888] ? netlink_ack+0x990/0x990 [ 312.960995] ? netlink_deliver_tap+0x178/0xac0 [ 312.965711] ? __kasan_check_read+0x11/0x20 [ 312.970340] genl_rcv+0x23/0x40 [ 312.973622] netlink_unicast+0x479/0x6c0 [ 312.977921] ? netlink_attachskb+0x740/0x740 [ 312.982327] ? _copy_from_iter_full+0x18a/0x780 [ 312.987005] netlink_sendmsg+0x7ab/0xd50 [ 312.991348] ? netlink_unicast+0x6c0/0x6c0 [ 312.995592] ? selinux_socket_sendmsg+0x31/0x40 [ 313.000497] ? netlink_unicast+0x6c0/0x6c0 [ 313.004904] sock_sendmsg+0xe6/0x110 [ 313.008842] ____sys_sendmsg+0x603/0x980 [ 313.012907] ? copy_msghdr_from_user+0x209/0x420 [ 313.018022] ? kernel_sendmsg+0x30/0x30 [ 313.022038] ___sys_sendmsg+0xe4/0x160 [ 313.025918] ? sendmsg_copy_msghdr+0x30/0x30 [ 313.030579] ? __kasan_check_read+0x11/0x20 [ 313.035095] ? __fget_files+0x283/0x3e0 [ 313.039413] ? ksys_dup3+0x2e0/0x2e0 [ 313.043194] ? __fget_light+0x1a7/0x220 [ 313.047291] ? __fdget+0xe/0x10 [ 313.050918] __sys_sendmsg+0xd9/0x180 [ 313.054731] ? __sys_sendmsg_sock+0xa0/0xa0 [ 313.059315] ? __fd_install+0x174/0x4b0 [ 313.063305] ? fd_install+0x47/0x60 [ 313.066940] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.072642] __x64_sys_sendmsg+0x73/0xb0 [ 313.076707] do_syscall_64+0xd0/0x630 [ 313.081628] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.086828] RIP: 0033:0x411231 [ 313.090257] Code: 01 4c 89 54 24 28 e9 6f fa ff ff 49 8b 7c 24 70 8b 35 43 c4 24 00 ff 15 ed 83 24 00 85 c0 0f 85 b3 fe ff ff 49 8b 7c 24 70 be <20> 13 41 00 ff 15 dd 83 24 00 85 c0 0f 85 9b fe ff ff 49 8b 7c 24 [ 313.109582] RSP: 002b:00007fcf58f839c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 313.117304] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000411231 [ 313.124947] RDX: 0000000000000000 RSI: 00007fcf58f83a00 RDI: 0000000000000009 [ 313.132591] RBP: 0000000000000009 R08: 00007fcf58f839d0 R09: 000000000072c040 [ 313.140334] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fcf58f83a40 [ 313.147849] R13: 00000000004cc538 R14: 00000000004d9a08 R15: 00000000ffffffff [ 313.155145] INFO: task syz-executor3:28160 blocked for more than 145 seconds. [ 313.162718] Not tainted 5.6.0-rc6-syzkaller #0 [ 313.168012] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 313.175987] syz-executor3 D28544 28160 6412 0x00004004 [ 313.181930] Call Trace: [ 313.184527] __schedule+0x856/0x1910 [ 313.188463] ? __sched_text_start+0x8/0x8 [ 313.192627] schedule+0xc3/0x2b0 [ 313.195990] schedule_preempt_disabled+0x13/0x20 [ 313.200983] __mutex_lock+0x8b5/0x1410 [ 313.204870] ? genl_rcv_msg+0x66e/0x10f0 [ 313.209966] ? mutex_lock_io_nested+0x1280/0x1280 [ 313.214809] ? arch_stack_walk+0xa0/0xf0 [ 313.219108] ? __kasan_check_read+0x11/0x20 [ 313.223427] ? mark_lock+0xc5/0x11d0 [ 313.227146] ? stack_trace_consume_entry+0x170/0x170 [ 313.232493] ? __kmalloc_reserve.isra.47+0x2c/0xc0 [ 313.237431] mutex_lock_nested+0x16/0x20 [ 313.241698] ? mutex_lock_nested+0x16/0x20 [ 313.245925] genl_rcv_msg+0x66e/0x10f0 [ 313.250043] ? __kasan_check_read+0x11/0x20 [ 313.254363] ? __lock_acquire+0x100f/0x4ef0 [ 313.258880] ? genl_family_rcv_msg_attrs_parse+0x2f0/0x2f0 [ 313.264508] ? mark_held_locks+0x130/0x130 [ 313.268973] netlink_rcv_skb+0x13f/0x380 [ 313.273029] ? genl_family_rcv_msg_attrs_parse+0x2f0/0x2f0 [ 313.278844] ? netlink_ack+0x990/0x990 [ 313.282742] ? netlink_deliver_tap+0x178/0xac0 [ 313.287491] ? __kasan_check_read+0x11/0x20 [ 313.292083] genl_rcv+0x23/0x40 [ 313.295356] netlink_unicast+0x479/0x6c0 [ 313.299639] ? netlink_attachskb+0x740/0x740 [ 313.304167] ? _copy_from_iter_full+0x18a/0x780 [ 313.309233] netlink_sendmsg+0x7ab/0xd50 [ 313.313321] ? netlink_unicast+0x6c0/0x6c0 [ 313.317580] ? selinux_socket_sendmsg+0x31/0x40 [ 313.322558] ? netlink_unicast+0x6c0/0x6c0 [ 313.326786] sock_sendmsg+0xe6/0x110 [ 313.330793] ____sys_sendmsg+0x603/0x980 [ 313.334857] ? copy_msghdr_from_user+0x209/0x420 [ 313.340627] ? kernel_sendmsg+0x30/0x30 [ 313.344620] ___sys_sendmsg+0xe4/0x160 [ 313.348817] ? sendmsg_copy_msghdr+0x30/0x30 [ 313.353237] ? __kasan_check_read+0x11/0x20 [ 313.357560] ? __fget_files+0x283/0x3e0 [ 313.361784] ? ksys_dup3+0x2e0/0x2e0 [ 313.365549] ? __fget_light+0x1a7/0x220 [ 313.369739] ? __fdget+0xe/0x10 [ 313.373022] __sys_sendmsg+0xd9/0x180 [ 313.376811] ? __sys_sendmsg_sock+0xa0/0xa0 [ 313.381506] ? __fd_install+0x174/0x4b0 [ 313.385483] ? fd_install+0x47/0x60 [ 313.389328] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.394695] __x64_sys_sendmsg+0x73/0xb0 [ 313.398960] do_syscall_64+0xd0/0x630 [ 313.402763] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.408158] RIP: 0033:0x411231 [ 313.411344] Code: 01 4c 89 54 24 28 e9 6f fa ff ff 49 8b 7c 24 70 8b 35 43 c4 24 00 ff 15 ed 83 24 00 85 c0 0f 85 b3 fe ff ff 49 8b 7c 24 70 be <20> 13 41 00 ff 15 dd 83 24 00 85 c0 0f 85 9b fe ff ff 49 8b 7c 24 [ 313.430843] RSP: 002b:00007fcf58f629c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 313.439168] RAX: ffffffffffffffda RBX: 00007fcf58f62a58 RCX: 0000000000411231 [ 313.446448] RDX: 0000000000000000 RSI: 00007fcf58f62a00 RDI: 000000000000000a [ 313.454065] RBP: 000000000000000a R08: 000000000000000b R09: 0000000000000000 [ 313.461580] R10: ffffffffffffffff R11: 0000000000000293 R12: 00007fcf58f62a40 [ 313.469856] R13: 00000000004cc510 R14: 00000000004d99f0 R15: 00000000ffffffff [ 313.477157] INFO: task syz-executor1:28147 blocked for more than 145 seconds. [ 313.484673] Not tainted 5.6.0-rc6-syzkaller #0 [ 313.490044] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 313.498311] syz-executor1 D28544 28147 6415 0x00004004 [ 313.504117] Call Trace: [ 313.506701] __schedule+0x856/0x1910 [ 313.510987] ? __sched_text_start+0x8/0x8 [ 313.515163] schedule+0xc3/0x2b0 [ 313.518784] schedule_preempt_disabled+0x13/0x20 [ 313.523596] __mutex_lock+0x8b5/0x1410 [ 313.527490] ? genl_rcv_msg+0x66e/0x10f0 [ 313.531926] ? mutex_lock_io_nested+0x1280/0x1280 [ 313.536774] ? arch_stack_walk+0xa0/0xf0 [ 313.541091] ? __kasan_check_read+0x11/0x20 [ 313.545410] ? mark_lock+0xc5/0x11d0 [ 313.549440] ? stack_trace_consume_entry+0x170/0x170 [ 313.554541] ? __kmalloc_reserve.isra.47+0x2c/0xc0 [ 313.559708] mutex_lock_nested+0x16/0x20 [ 313.563763] ? mutex_lock_nested+0x16/0x20 [ 313.568218] genl_rcv_msg+0x66e/0x10f0 [ 313.572100] ? __kasan_check_read+0x11/0x20 [ 313.576768] ? __lock_acquire+0x100f/0x4ef0 [ 313.581335] ? genl_family_rcv_msg_attrs_parse+0x2f0/0x2f0 [ 313.587084] ? mark_held_locks+0x130/0x130 [ 313.591726] netlink_rcv_skb+0x13f/0x380 [ 313.595796] ? genl_family_rcv_msg_attrs_parse+0x2f0/0x2f0 [ 313.602568] ? netlink_ack+0x990/0x990 [ 313.606479] ? netlink_deliver_tap+0x178/0xac0 [ 313.611351] ? __kasan_check_read+0x11/0x20 [ 313.615683] genl_rcv+0x23/0x40 [ 313.619191] netlink_unicast+0x479/0x6c0 [ 313.623603] ? netlink_attachskb+0x740/0x740 [ 313.628485] ? _copy_from_iter_full+0x18a/0x780 [ 313.633209] netlink_sendmsg+0x7ab/0xd50 [ 313.637298] ? netlink_unicast+0x6c0/0x6c0 [ 313.641937] ? selinux_socket_sendmsg+0x31/0x40 [ 313.646623] ? netlink_unicast+0x6c0/0x6c0 [ 313.651114] sock_sendmsg+0xe6/0x110 [ 313.654834] ____sys_sendmsg+0x603/0x980 [ 313.659121] ? copy_msghdr_from_user+0x209/0x420 [ 313.663877] ? kernel_sendmsg+0x30/0x30 [ 313.668079] ___sys_sendmsg+0xe4/0x160 [ 313.671964] ? sendmsg_copy_msghdr+0x30/0x30 [ 313.676368] ? __kasan_check_read+0x11/0x20 [ 313.680915] ? __fget_files+0x283/0x3e0 [ 313.684903] ? ksys_dup3+0x2e0/0x2e0 [ 313.689475] ? __fget_light+0x1a7/0x220 [ 313.693460] ? __fdget+0xe/0x10 [ 313.696742] __sys_sendmsg+0xd9/0x180 [ 313.700775] ? __sys_sendmsg_sock+0xa0/0xa0 [ 313.705094] ? __fd_install+0x174/0x4b0 [ 313.709274] ? fd_install+0x47/0x60 [ 313.712910] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.718479] __x64_sys_sendmsg+0x73/0xb0 [ 313.722547] do_syscall_64+0xd0/0x630 [ 313.726342] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.732514] RIP: 0033:0x411231 [ 313.735702] Code: 01 4c 89 54 24 28 e9 6f fa ff ff 49 8b 7c 24 70 8b 35 43 c4 24 00 ff 15 ed 83 24 00 85 c0 0f 85 b3 fe ff ff 49 8b 7c 24 70 be <20> 13 41 00 ff 15 dd 83 24 00 85 c0 0f 85 9b fe ff ff 49 8b 7c 24 [ 313.755151] RSP: 002b:00007f4c0aac49c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 313.763145] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000411231 [ 313.770801] RDX: 0000000000000000 RSI: 00007f4c0aac4a00 RDI: 0000000000000005 [ 313.778546] RBP: 0000000000000005 R08: 00007f4c0aac49d0 R09: 000000000072bf00 [ 313.785821] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f4c0aac4a40 [ 313.793467] R13: 00000000004cc538 R14: 00000000004d9a08 R15: 00000000ffffffff [ 313.801073] INFO: task syz-executor1:28153 blocked for more than 145 seconds. [ 313.808548] Not tainted 5.6.0-rc6-syzkaller #0 [ 313.813637] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 313.821811] syz-executor1 D28544 28153 6415 0x00000004 [ 313.827450] Call Trace: [ 313.830417] __schedule+0x856/0x1910 [ 313.834144] ? __sched_text_start+0x8/0x8 [ 313.838534] schedule+0xc3/0x2b0 [ 313.841906] schedule_preempt_disabled+0x13/0x20 [ 313.846658] __mutex_lock+0x8b5/0x1410 [ 313.850829] ? genl_rcv_msg+0x66e/0x10f0 [ 313.854892] ? mutex_lock_io_nested+0x1280/0x1280 [ 313.860729] ? arch_stack_walk+0xa0/0xf0 [ 313.864793] ? __kasan_check_read+0x11/0x20 [ 313.869341] ? mark_lock+0xc5/0x11d0 [ 313.873061] ? stack_trace_consume_entry+0x170/0x170 [ 313.878368] ? __kmalloc_reserve.isra.47+0x2c/0xc0 [ 313.883301] mutex_lock_nested+0x16/0x20 [ 313.887349] ? mutex_lock_nested+0x16/0x20 [ 313.891867] genl_rcv_msg+0x66e/0x10f0 [ 313.895839] ? __kasan_check_read+0x11/0x20 [ 313.900374] ? __lock_acquire+0x100f/0x4ef0 [ 313.904703] ? genl_family_rcv_msg_attrs_parse+0x2f0/0x2f0 [ 313.910555] ? mark_held_locks+0x130/0x130 [ 313.914945] netlink_rcv_skb+0x13f/0x380 [ 313.919303] ? genl_family_rcv_msg_attrs_parse+0x2f0/0x2f0 [ 313.924946] ? netlink_ack+0x990/0x990 [ 313.929156] ? netlink_deliver_tap+0x178/0xac0 [ 313.933739] ? __kasan_check_read+0x11/0x20 [ 313.938350] genl_rcv+0x23/0x40 [ 313.941629] netlink_unicast+0x479/0x6c0 [ 313.945719] ? netlink_attachskb+0x740/0x740 [ 313.950496] ? _copy_from_iter_full+0x18a/0x780 [ 313.955188] netlink_sendmsg+0x7ab/0xd50 [ 313.959504] ? netlink_unicast+0x6c0/0x6c0 [ 313.963844] ? selinux_socket_sendmsg+0x31/0x40 [ 313.968791] ? netlink_unicast+0x6c0/0x6c0 [ 313.973113] sock_sendmsg+0xe6/0x110 [ 313.976894] ____sys_sendmsg+0x603/0x980 [ 313.981283] ? copy_msghdr_from_user+0x209/0x420 [ 313.986051] ? kernel_sendmsg+0x30/0x30 [ 313.991062] ___sys_sendmsg+0xe4/0x160 [ 313.994952] ? sendmsg_copy_msghdr+0x30/0x30 [ 313.999616] ? __kasan_check_read+0x11/0x20 [ 314.003942] ? __fget_files+0x283/0x3e0 [ 314.008174] ? ksys_dup3+0x2e0/0x2e0 [ 314.011905] ? __fget_light+0x1a7/0x220 [ 314.015963] ? __fdget+0xe/0x10 [ 314.019571] __sys_sendmsg+0xd9/0x180 [ 314.023369] ? __sys_sendmsg_sock+0xa0/0xa0 [ 314.027920] ? __fd_install+0x174/0x4b0 [ 314.031892] ? fd_install+0x47/0x60 [ 314.035524] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.041169] __x64_sys_sendmsg+0x73/0xb0 [ 314.045230] do_syscall_64+0xd0/0x630 [ 314.050745] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.055929] RIP: 0033:0x411231 [ 314.059428] Code: 01 4c 89 54 24 28 e9 6f fa ff ff 49 8b 7c 24 70 8b 35 43 c4 24 00 ff 15 ed 83 24 00 85 c0 0f 85 b3 fe ff ff 49 8b 7c 24 70 be <20> 13 41 00 ff 15 dd 83 24 00 85 c0 0f 85 9b fe ff ff 49 8b 7c 24 [ 314.079283] RSP: 002b:00007f4c0aaa39c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 314.086985] RAX: ffffffffffffffda RBX: 00007f4c0aaa3a58 RCX: 0000000000411231 [ 314.094492] RDX: 0000000000000000 RSI: 00007f4c0aaa3a00 RDI: 0000000000000006 [ 314.102211] RBP: 0000000000000006 R08: 000000000000000b R09: 0000000000000000 [ 314.109731] R10: ffffffffffffffff R11: 0000000000000293 R12: 00007f4c0aaa3a40 [ 314.117067] R13: 00000000004cc510 R14: 00000000004d99f0 R15: 00000000ffffffff [ 314.125542] INFO: task syz-executor1:28157 blocked for more than 146 seconds. [ 314.133073] Not tainted 5.6.0-rc6-syzkaller #0 [ 314.138565] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.146538] syz-executor1 D28376 28157 6415 0x00000004 [ 314.152430] Call Trace: [ 314.155025] __schedule+0x856/0x1910 [ 314.159025] ? __sched_text_start+0x8/0x8 [ 314.163181] schedule+0xc3/0x2b0 [ 314.166541] schedule_preempt_disabled+0x13/0x20 [ 314.171531] __mutex_lock+0x8b5/0x1410 [ 314.175417] ? genl_rcv_msg+0x66e/0x10f0 [ 314.179686] ? mutex_lock_io_nested+0x1280/0x1280 [ 314.184520] ? arch_stack_walk+0xa0/0xf0 [ 314.188874] ? __kasan_check_read+0x11/0x20 [ 314.193196] ? mark_lock+0xc5/0x11d0 [ 314.196913] ? stack_trace_consume_entry+0x170/0x170 [ 314.202356] ? __kmalloc_reserve.isra.47+0x2c/0xc0 [ 314.207311] mutex_lock_nested+0x16/0x20 [ 314.211655] ? mutex_lock_nested+0x16/0x20 [ 314.215890] genl_rcv_msg+0x66e/0x10f0 [ 314.220023] ? __kasan_check_read+0x11/0x20 [ 314.224345] ? __lock_acquire+0x100f/0x4ef0 [ 314.228894] ? genl_family_rcv_msg_attrs_parse+0x2f0/0x2f0 [ 314.234568] ? mark_held_locks+0x130/0x130 [ 314.239133] netlink_rcv_skb+0x13f/0x380 [ 314.243203] ? genl_family_rcv_msg_attrs_parse+0x2f0/0x2f0 [ 314.250031] ? netlink_ack+0x990/0x990 [ 314.253937] ? netlink_deliver_tap+0x178/0xac0 [ 314.258867] ? __kasan_check_read+0x11/0x20 [ 314.263208] genl_rcv+0x23/0x40 [ 314.266482] netlink_unicast+0x479/0x6c0 [ 314.270812] ? netlink_attachskb+0x740/0x740 [ 314.275216] ? _copy_from_iter_full+0x18a/0x780 [ 314.280337] netlink_sendmsg+0x7ab/0xd50 [ 314.284414] ? netlink_unicast+0x6c0/0x6c0 [ 314.288965] ? selinux_socket_sendmsg+0x31/0x40 [ 314.293643] ? netlink_unicast+0x6c0/0x6c0 [ 314.298178] sock_sendmsg+0xe6/0x110 [ 314.301893] ____sys_sendmsg+0x603/0x980 [ 314.305943] ? copy_msghdr_from_user+0x209/0x420 [ 314.310946] ? kernel_sendmsg+0x30/0x30 [ 314.314947] ___sys_sendmsg+0xe4/0x160 [ 314.319054] ? sendmsg_copy_msghdr+0x30/0x30 [ 314.323469] ? __kasan_check_read+0x11/0x20 [ 314.328006] ? __fget_files+0x283/0x3e0 [ 314.331983] ? ksys_dup3+0x2e0/0x2e0 [ 314.335702] ? __fget_light+0x1a7/0x220 [ 314.339901] ? __fdget+0xe/0x10 [ 314.343183] __sys_sendmsg+0xd9/0x180 [ 314.346973] ? __sys_sendmsg_sock+0xa0/0xa0 [ 314.351555] ? __fd_install+0x174/0x4b0 [ 314.355544] ? fd_install+0x47/0x60 [ 314.359416] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.364791] __x64_sys_sendmsg+0x73/0xb0 [ 314.369069] do_syscall_64+0xd0/0x630 [ 314.372887] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.379230] RIP: 0033:0x411231 [ 314.382540] Code: 01 4c 89 54 24 28 e9 6f fa ff ff 49 8b 7c 24 70 8b 35 43 c4 24 00 ff 15 ed 83 24 00 85 c0 0f 85 b3 fe ff ff 49 8b 7c 24 70 be <20> 13 41 00 ff 15 dd 83 24 00 85 c0 0f 85 9b fe ff ff 49 8b 7c 24 [ 314.401865] RSP: 002b:00007f4c0aa829c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 314.409813] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000411231 [ 314.417078] RDX: 0000000000000000 RSI: 00007f4c0aa82a00 RDI: 0000000000000009 [ 314.424620] RBP: 0000000000000009 R08: 00007f4c0aa829d0 R09: 000000000072c040 [ 314.432136] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f4c0aa82a40 [ 314.439621] R13: 00000000004cc538 R14: 00000000004d9a08 R15: 00000000ffffffff [ 314.446923] [ 314.446923] Showing all locks held in the system: [ 314.453526] 1 lock held by khungtaskd/572: [ 314.457976] #0: ffffffff885a4a80 (rcu_read_lock){....}, at: debug_show_all_locks+0x5b/0x275 [ 314.466597] 1 lock held by rsyslogd/6166: [ 314.470960] #0: ffff8881cf94b3e0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xa3/0xc0 [ 314.479002] 2 locks held by getty/6288: [ 314.482984] #0: ffff8881b54eb090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 314.491431] #1: ffffc90004d0d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x17d0 [ 314.500747] 2 locks held by getty/6289: [ 314.504719] #0: ffff8881ce4fc090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 314.514060] #1: ffffc90004d112e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x17d0 [ 314.523175] 2 locks held by getty/6290: [ 314.527148] #0: ffff8881cef30090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 314.535669] #1: ffffc90004cf12e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x17d0 [ 314.544814] 2 locks held by getty/6291: [ 314.549013] #0: ffff8881bf0b2090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 314.557335] #1: ffffc90004d152e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x17d0 [ 314.566427] 2 locks held by getty/6292: [ 314.570606] #0: ffff8881d16d1090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 314.579044] #1: ffffc90004d052e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x17d0 [ 314.588791] 2 locks held by getty/6293: [ 314.592758] #0: ffff8881c49a6090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 314.601230] #1: ffffc90004ce52e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x17d0 [ 314.610396] 2 locks held by getty/6294: [ 314.614360] #0: ffff8881c4a5f090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 314.622818] #1: ffffc90004cdd2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x17d0 [ 314.632024] 2 locks held by syz-executor4/28120: [ 314.637217] #0: ffffffff88fcf4a8 (cb_lock){++++}, at: ctrl_getfamily+0x2b2/0x400 [ 314.645964] #1: ffffffff88fcf560 (genl_mutex){+.+.}, at: ctrl_getfamily+0x2c0/0x400 [ 314.654175] 2 locks held by syz-executor4/28136: [ 314.659123] 2 locks held by syz-executor5/28131: [ 314.663954] #0: ffffffff88fcf4a8 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 314.671195] #1: ffffffff88fcf560 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 314.679323] 2 locks held by syz-executor5/28144: [ 314.684070] #0: ffffffff88fcf4a8 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 314.691314] #1: ffffffff88fcf560 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 314.699350] 2 locks held by syz-executor3/28145: [ 314.704280] #0: ffffffff88fcf4a8 (cb_lock){++++}, at: ctrl_getfamily+0x2b2/0x400 [ 314.712158] #1: ffffffff88fcf560 (genl_mutex){+.+.}, at: ctrl_getfamily+0x2c0/0x400 [ 314.720244] 2 locks held by syz-executor3/28152: [ 314.724989] #0: ffffffff88fcf4a8 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 314.732263] #1: ffffffff88fcf560 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 314.740269] 2 locks held by syz-executor3/28156: [ 314.745030] #0: ffffffff88fcf4a8 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 314.752187] #1: ffffffff88fcf560 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 314.760255] 2 locks held by syz-executor3/28160: [ 314.765004] #0: ffffffff88fcf4a8 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 314.772954] #1: ffffffff88fcf560 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 314.781002] 2 locks held by syz-executor1/28147: [ 314.785748] #0: ffffffff88fcf4a8 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 314.792911] #1: ffffffff88fcf560 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 314.800923] 2 locks held by syz-executor1/28153: [ 314.805684] #0: ffffffff88fcf4a8 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 314.812946] #1: ffffffff88fcf560 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 314.820968] 2 locks held by syz-executor1/28157: [ 314.825727] #0: ffffffff88fcf4a8 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 314.833031] #1: ffffffff88fcf560 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 314.841111] 2 locks held by syz-executor1/28162: [ 314.845862] #0: ffffffff88fcf4a8 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 314.853185] #1: ffffffff88fcf560 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 314.861338] 2 locks held by syz-executor0/28149: [ 314.866091] #0: ffffffff88fcf4a8 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 314.873252] #1: ffffffff88fcf560 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 314.881273] 2 locks held by syz-executor0/28154: [ 314.886018] #0: ffffffff88fcf4a8 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 314.893167] #1: ffffffff88fcf560 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 314.901950] 2 locks held by syz-executor0/28158: [ 314.906695] #0: ffffffff88fcf4a8 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 314.913936] #1: ffffffff88fcf560 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 314.921960] 2 locks held by syz-executor0/28164: [ 314.926707] #0: ffffffff88fcf4a8 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 314.933865] #1: ffffffff88fcf560 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 314.942573] 2 locks held by syz-executor2/28151: [ 314.947440] #0: ffffffff88fcf4a8 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 314.954718] #1: ffffffff88fcf560 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 314.962755] 2 locks held by syz-executor2/28155: [ 314.967503] #0: ffffffff88fcf4a8 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 314.974769] #1: ffffffff88fcf560 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 314.982780] 2 locks held by syz-executor2/28159: [ 314.987525] #0: ffffffff88fcf4a8 (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 314.994687] #1: ffffffff88fcf560 (genl_mutex){+.+.}, at: genl_rcv_msg+0x66e/0x10f0 [ 315.002843] [ 315.004496] ============================================= [ 315.004496] [ 315.011840] NMI backtrace for cpu 0 [ 315.015474] CPU: 0 PID: 572 Comm: khungtaskd Not tainted 5.6.0-rc6-syzkaller #0 [ 315.022920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.032269] Call Trace: [ 315.034951] dump_stack+0x12d/0x187 [ 315.038587] nmi_cpu_backtrace.cold.7+0x4b/0x84 [ 315.043335] ? lapic_can_unplug_cpu.cold.29+0x3f/0x3f [ 315.048525] nmi_trigger_cpumask_backtrace+0x18b/0x1b7 [ 315.053968] arch_trigger_cpumask_backtrace+0x14/0x20 [ 315.059251] watchdog+0x611/0xc50 [ 315.062772] kthread+0x334/0x3f0 [ 315.066157] ? hungtask_pm_notify+0x40/0x40 [ 315.070709] ? kthread_mod_delayed_work+0x190/0x190 [ 315.075750] ret_from_fork+0x3a/0x50 [ 315.079792] Sending NMI from CPU 0 to CPUs 1: [ 315.084916] NMI backtrace for cpu 1 [ 315.084919] CPU: 1 PID: 28136 Comm: syz-executor4 Not tainted 5.6.0-rc6-syzkaller #0 [ 315.084921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.084923] RIP: 0010:__rcu_read_unlock+0x94/0x700 [ 315.084926] Code: fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 23 01 00 00 83 ab 78 03 00 00 01 65 48 8b 1c 25 c0 1e 02 00 <48> 8d bb 78 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 315.084927] RSP: 0018:ffff8881bfe66c30 EFLAGS: 00000246 [ 315.084930] RAX: 0000000000000000 RBX: ffff8881be2ee400 RCX: 1ffff11037c5dcef [ 315.084932] RDX: 1ffff11037c5dcef RSI: 0000000000000000 RDI: ffff8881be2ee778 [ 315.084933] RBP: ffff8881bfe66c68 R08: ffffed103b626fec R09: ffffed103b626fec [ 315.084935] R10: ffffed103b626feb R11: ffff8881db137f5b R12: ffff8881d6ea8000 [ 315.084936] R13: ffff8881bfe66d60 R14: 0000000000000001 R15: ffff8881be2ee400 [ 315.084938] FS: 00007fae4510b700(0000) GS:ffff8881db100000(0000) knlGS:0000000000000000 [ 315.084939] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 315.084941] CR2: ffffffffff600400 CR3: 00000001cc824000 CR4: 00000000001406e0 [ 315.084942] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 315.084944] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 315.084945] Call Trace: [ 315.084947] ? rcu_dynticks_curr_cpu_in_eqs+0x54/0xb0 [ 315.084948] tipc_sk_lookup+0x4bd/0x8c0 [ 315.084949] ? __nla_validate_parse+0xa1/0x1d80 [ 315.084950] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 315.084952] ? tipc_getname+0x5e0/0x5e0 [ 315.084953] ? nla_memcpy+0xa0/0xa0 [ 315.084954] tipc_nl_publ_dump+0x2df/0xca0 [ 315.084955] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 315.084956] ? trace_hardirqs_on_caller+0x28/0x1a0 [ 315.084958] ? tipc_nl_sk_dump+0x20/0x20 [ 315.084959] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 315.084960] ? rcu_irq_exit+0x182/0x330 [ 315.084961] ? tipc_nl_sk_dump+0x20/0x20 [ 315.084963] __tipc_nl_compat_dumpit.isra.11+0x327/0xc10 [ 315.084964] ? tipc_nl_compat_link_stat_dump+0x2080/0x2080 [ 315.084965] ? __nla_put+0x20/0x30 [ 315.084966] tipc_nl_compat_sk_dump+0x4ed/0x990 [ 315.084968] ? __tipc_nl_compat_dumpit.isra.11+0xc10/0xc10 [ 315.084969] ? tipc_nl_sk_dump+0x20/0x20 [ 315.084970] ? tipc_tlv_sprintf+0x2c0/0x2c0 [ 315.084971] ? memset+0x31/0x40 [ 315.084972] ? __nla_validate_parse+0xa1/0x1d80 [ 315.084974] ? rcu_read_lock_held+0x9c/0xb0 [ 315.084975] __tipc_nl_compat_dumpit.isra.11+0x44c/0xc10 [ 315.084976] ? tipc_nl_compat_link_stat_dump+0x2080/0x2080 [ 315.084977] tipc_nl_compat_dumpit+0x1e6/0x4c0 [ 315.084979] tipc_nl_compat_recv+0x45a/0xa70 [ 315.084980] ? mutex_lock_io_nested+0x1280/0x1280 [ 315.084981] ? tipc_nl_compat_doit+0x550/0x550 [ 315.084982] ? mark_lock+0xc5/0x11d0 [ 315.084983] ? tipc_dump_start+0x90/0x90 [ 315.084985] ? __tipc_nl_compat_dumpit.isra.11+0xc10/0xc10 [ 315.084986] ? __kasan_check_read+0x11/0x20 [ 315.084987] ? __lock_acquire+0x96a/0x4ef0 [ 315.084988] genl_rcv_msg+0x5e1/0x10f0 [ 315.084990] ? __kasan_check_read+0x11/0x20 [ 315.084991] ? genl_family_rcv_msg_attrs_parse+0x2f0/0x2f0 [ 315.084992] netlink_rcv_skb+0x13f/0x380 [ 315.084993] ? genl_family_rcv_msg_attrs_parse+0x2f0/0x2f0 [ 315.084995] ? netlink_ack+0x990/0x990 [ 315.084996] ? netlink_deliver_tap+0x178/0xac0 [ 315.084997] ? __kasan_check_read+0x11/0x20 [ 315.084998] genl_rcv+0x23/0x40 [ 315.084999] netlink_unicast+0x479/0x6c0 [ 315.085000] ? netlink_attachskb+0x740/0x740 [ 315.085002] ? _copy_from_iter_full+0x18a/0x780 [ 315.085003] netlink_sendmsg+0x7ab/0xd50 [ 315.085004] ? netlink_unicast+0x6c0/0x6c0 [ 315.085005] ? selinux_socket_sendmsg+0x31/0x40 [ 315.085006] ? netlink_unicast+0x6c0/0x6c0 [ 315.085007] sock_sendmsg+0xe6/0x110 [ 315.085009] ____sys_sendmsg+0x603/0x980 [ 315.085010] ? copy_msghdr_from_user+0x209/0x420 [ 315.085011] ? kernel_sendmsg+0x30/0x30 [ 315.085012] ___sys_sendmsg+0xe4/0x160 [ 315.085013] ? sendmsg_copy_msghdr+0x30/0x30 [ 315.085015] ? __kasan_check_read+0x11/0x20 [ 315.085016] ? __fget_files+0x283/0x3e0 [ 315.085017] ? ksys_dup3+0x2e0/0x2e0 [ 315.085018] ? __might_fault+0xf1/0x1b0 [ 315.085019] ? __fget_light+0x1a7/0x220 [ 315.085020] ? lock_acquire+0x194/0x410 [ 315.085021] ? __fdget+0xe/0x10 [ 315.085023] __sys_sendmsg+0xd9/0x180 [ 315.085024] ? __sys_sendmsg_sock+0xa0/0xa0 [ 315.085025] ? __kasan_check_read+0x11/0x20 [ 315.085026] ? _copy_to_user+0xcb/0xf0 [ 315.085027] ? put_timespec64+0xa9/0x100 [ 315.085028] ? nsecs_to_jiffies+0x20/0x20 [ 315.085030] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 315.085031] __x64_sys_sendmsg+0x73/0xb0 [ 315.085032] do_syscall_64+0xd0/0x630 [ 315.085033] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 315.085034] RIP: 0033:0x4577a9 [ 315.085037] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 315.085039] RSP: 002b:00007fae4510ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.085042] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004577a9 [ 315.085043] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000005 [ 315.085045] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 315.085046] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fae4510b6d4 [ 315.085048] R13: 00000000004c4211 R14: 00000000004d70f8 R15: 00000000ffffffff [ 315.087625] Kernel panic - not syncing: hung_task: blocked tasks [ 315.602177] CPU: 0 PID: 572 Comm: khungtaskd Not tainted 5.6.0-rc6-syzkaller #0 [ 315.609614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.618955] Call Trace: [ 315.621537] dump_stack+0x12d/0x187 [ 315.625329] panic+0x22a/0x4f5 [ 315.628513] ? add_taint.cold.7+0x11/0x11 [ 315.632906] ? ___preempt_schedule+0x16/0x18 [ 315.637320] watchdog+0x622/0xc50 [ 315.640797] kthread+0x334/0x3f0 [ 315.644158] ? hungtask_pm_notify+0x40/0x40 [ 315.648469] ? kthread_mod_delayed_work+0x190/0x190 [ 315.653485] ret_from_fork+0x3a/0x50 [ 315.658884] Kernel Offset: disabled [ 315.662519] Rebooting in 86400 seconds..