syzkaller login: [ 33.268753] kauditd_printk_skb: 9 callbacks suppressed [ 33.268758] audit: type=1400 audit(1579221038.248:35): avc: denied { map } for pid=7081 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 39.669368] audit: type=1400 audit(1579221044.648:36): avc: denied { map } for pid=7092 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 40.975808] IPVS: ftp: loaded support on port[0] = 21 [ 41.403913] can: request_module (can-proto-0) failed. [ 42.434476] can: request_module (can-proto-0) failed. [ 42.597980] audit: type=1400 audit(1579221047.578:37): avc: denied { create } for pid=7092 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 42.623086] audit: type=1400 audit(1579221047.578:38): avc: denied { create } for pid=7092 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 42.647640] audit: type=1400 audit(1579221047.578:39): avc: denied { create } for pid=7092 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.0.88' (ECDSA) to the list of known hosts. 2020/01/17 00:30:54 parsed 1 programs 2020/01/17 00:30:55 executed programs: 0 [ 50.095212] IPVS: ftp: loaded support on port[0] = 21 [ 50.116198] IPVS: ftp: loaded support on port[0] = 21 [ 50.204572] IPVS: ftp: loaded support on port[0] = 21 [ 50.214846] IPVS: ftp: loaded support on port[0] = 21 [ 50.225183] IPVS: ftp: loaded support on port[0] = 21 [ 50.267138] chnl_net:caif_netlink_parms(): no params data found [ 50.297333] IPVS: ftp: loaded support on port[0] = 21 [ 50.312709] chnl_net:caif_netlink_parms(): no params data found [ 50.368287] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.375130] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.382169] device bridge_slave_0 entered promiscuous mode [ 50.391095] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.397658] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.404643] device bridge_slave_1 entered promiscuous mode [ 50.432449] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.442845] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.476643] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.483085] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.490185] device bridge_slave_0 entered promiscuous mode [ 50.498168] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.504680] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.511776] device bridge_slave_1 entered promiscuous mode [ 50.530115] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.538882] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.546586] team0: Port device team_slave_0 added [ 50.552420] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.569011] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.577221] team0: Port device team_slave_1 added [ 50.592684] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.600219] team0: Port device team_slave_0 added [ 50.611056] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.618483] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.626788] team0: Port device team_slave_1 added [ 50.634508] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.658912] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.675074] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.757308] device hsr_slave_0 entered promiscuous mode [ 50.806001] device hsr_slave_1 entered promiscuous mode [ 50.875436] chnl_net:caif_netlink_parms(): no params data found [ 50.894625] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.903634] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.947420] device hsr_slave_0 entered promiscuous mode [ 50.995724] device hsr_slave_1 entered promiscuous mode [ 51.038414] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.048485] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.074829] chnl_net:caif_netlink_parms(): no params data found [ 51.093798] chnl_net:caif_netlink_parms(): no params data found [ 51.177906] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.184587] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.191616] device bridge_slave_0 entered promiscuous mode [ 51.198371] chnl_net:caif_netlink_parms(): no params data found [ 51.212678] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.219142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.226125] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.232477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.248304] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.254684] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.262042] device bridge_slave_1 entered promiscuous mode [ 51.275089] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.283893] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.291042] device bridge_slave_0 entered promiscuous mode [ 51.299794] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.306175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.312823] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.319214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.330017] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.336460] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.343428] device bridge_slave_0 entered promiscuous mode [ 51.363109] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.369748] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.377364] device bridge_slave_0 entered promiscuous mode [ 51.389156] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.395734] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.402645] device bridge_slave_1 entered promiscuous mode [ 51.417708] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.424198] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.431833] device bridge_slave_1 entered promiscuous mode [ 51.439405] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.446439] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.453277] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.460094] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.469844] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.476612] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.483976] device bridge_slave_1 entered promiscuous mode [ 51.498440] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.507635] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.516802] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.541544] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.554523] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.562749] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.570503] team0: Port device team_slave_0 added [ 51.577903] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.586196] team0: Port device team_slave_1 added [ 51.592114] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.611580] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.629118] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.637387] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.644801] team0: Port device team_slave_0 added [ 51.650570] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.658019] team0: Port device team_slave_1 added [ 51.663940] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.676843] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.684179] team0: Port device team_slave_0 added [ 51.691650] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.704881] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.717329] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.739687] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.750814] team0: Port device team_slave_1 added [ 51.797225] device hsr_slave_0 entered promiscuous mode [ 51.835681] device hsr_slave_1 entered promiscuous mode [ 51.896039] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.936838] device hsr_slave_0 entered promiscuous mode [ 51.995654] device hsr_slave_1 entered promiscuous mode [ 52.035812] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.042975] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.052355] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.059772] team0: Port device team_slave_0 added [ 52.074961] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.082019] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.089042] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.096418] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.103674] team0: Port device team_slave_1 added [ 52.109244] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.119480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.129197] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.146394] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.167455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.174306] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.183571] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.190364] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.217800] device hsr_slave_0 entered promiscuous mode [ 52.255690] device hsr_slave_1 entered promiscuous mode [ 52.299911] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.310635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.318651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.377688] device hsr_slave_0 entered promiscuous mode [ 52.415649] device hsr_slave_1 entered promiscuous mode [ 52.486102] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.493293] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.502902] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.514745] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.525702] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.533549] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.543742] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.552130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.560395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.568764] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.575137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.591650] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.602793] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.612393] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.626764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.635105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.643932] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.650466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.657992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.664914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.673873] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.691920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.701691] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.708441] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.717526] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.726670] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.736271] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.749360] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.756442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.764348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.774638] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.781049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.788844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.796773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.804640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.812715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.820829] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.830345] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.848252] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.854717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.862718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.870770] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.877276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.886442] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.896307] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.906927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.916647] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.926581] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.932783] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.939168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.947178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.955057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.963366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.971057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.978488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.985455] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.999416] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.008251] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.021987] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.031940] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.038916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.046945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.054619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.062401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.070138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.077837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.085863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.093319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.104235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.114282] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.127252] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.133330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.143725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.151821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.159498] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.166024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.177760] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.191043] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.204966] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.212297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.220074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.228264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.235958] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.242463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.250294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.258120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.267162] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.277310] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.286642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.293745] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.305248] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.312366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.320677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.328570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.336445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.344697] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.351405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.367455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.374681] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.382898] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.392667] audit: type=1400 audit(1579221058.368:40): avc: denied { associate } for pid=7186 comm="syz-executor.3" name="syz3" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 53.393277] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.425126] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.433891] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.441318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.449101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.456706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.465090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.473283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.481746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.489814] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.501973] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.512807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.523560] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.531852] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.541745] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.555583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.563217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.569255] audit: type=1400 audit(1579221058.538:41): avc: denied { write } for pid=7207 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 53.571466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.600478] audit: type=1400 audit(1579221058.538:42): avc: denied { read } for pid=7207 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 53.603639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.635142] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.646363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.659231] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.670807] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.679739] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.692025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.706415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.714027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.723043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.731026] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.737428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.749862] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.757168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.767199] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.776000] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.784478] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.800068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.812132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.835045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.869756] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.876390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.884855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.901053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.908963] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.915340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.932044] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.943769] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.956241] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.964067] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.983373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.000649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.007718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.014716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.023501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.031547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.039224] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.045724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.054673] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.061238] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.070198] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.080558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.088475] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.101363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.109197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.119336] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.129076] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.138663] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.146878] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.153889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.161972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.169717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.177913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.185690] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.192128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.199020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.207645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.215200] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.221582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.228431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.237263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.245001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.254305] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.267970] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.287817] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.299737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.308700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.316522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.324116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.332684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.340596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.348602] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.357143] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.366034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.376849] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.384592] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.392690] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.404343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.412479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.420642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.428464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.436116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.445647] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.457237] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.464624] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.470853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.478453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.486268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.493808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.501571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.509862] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.527391] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.535831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.543462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.558834] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.566326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.574075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.589360] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.600813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.613907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.621218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.629529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.637881] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.648783] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.656971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.664832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.675906] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.682168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.700536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.720990] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.743994] 8021q: adding VLAN 0 to HW filter on device batadv0 2020/01/17 00:31:00 executed programs: 30 2020/01/17 00:31:05 executed programs: 304 2020/01/17 00:31:10 executed programs: 598 2020/01/17 00:31:15 executed programs: 877 2020/01/17 00:31:20 executed programs: 1158 2020/01/17 00:31:25 executed programs: 1438 [ 233.035605] INFO: task syz-executor.1:13684 blocked for more than 140 seconds. [ 233.043287] Not tainted 4.19.96-syzkaller #0 [ 233.054096] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 233.062799] syz-executor.1 D28424 13684 7194 0x00000004 [ 233.076484] Call Trace: [ 233.079100] __schedule+0x78c/0x1c10 [ 233.082824] ? pci_mmcfg_check_reserved+0x120/0x120 [ 233.092944] ? kasan_check_read+0x11/0x20 [ 233.097424] schedule+0x7f/0x1b0 [ 233.100826] schedule_preempt_disabled+0x13/0x20 [ 233.110498] __mutex_lock+0x806/0x1210 [ 233.114548] ? genl_rcv_msg+0x10e/0x140 [ 233.118993] ? mutex_trylock+0x1e0/0x1e0 [ 233.123066] ? netdev_pick_tx+0x2b0/0x2b0 [ 233.133025] ? memcpy+0x45/0x50 [ 233.136600] mutex_lock_nested+0x16/0x20 [ 233.140675] ? mutex_lock_nested+0x16/0x20 [ 233.144912] genl_rcv_msg+0x10e/0x140 [ 233.153715] netlink_rcv_skb+0x142/0x390 [ 233.158057] ? genl_family_rcv_msg+0xe80/0xe80 [ 233.162642] ? netlink_ack+0x990/0x990 [ 233.171783] genl_rcv+0x23/0x40 [ 233.175099] netlink_unicast+0x445/0x640 [ 233.179520] ? netlink_attachskb+0x6d0/0x6d0 [ 233.183971] netlink_sendmsg+0x765/0xc50 [ 233.193197] ? netlink_unicast+0x640/0x640 [ 233.198907] ? copy_msghdr_from_user+0x20b/0x3e0 [ 233.204299] ? selinux_socket_sendmsg+0x31/0x40 [ 233.213867] ? netlink_unicast+0x640/0x640 [ 233.218470] sock_sendmsg+0xb5/0xf0 [ 233.222628] ___sys_sendmsg+0x647/0x950 [ 233.231525] ? find_held_lock+0x36/0x1d0 [ 233.235954] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 233.240863] ? __fget+0x278/0x400 [ 233.244329] ? kasan_check_read+0x11/0x20 [ 233.253775] ? __fget+0x295/0x400 [ 233.258269] ? ksys_dup3+0x2e0/0x2e0 [ 233.262004] ? __fget_light+0x174/0x1e0 [ 233.270943] ? __fdget+0xe/0x10 [ 233.274261] ? lock_downgrade+0x860/0x860 [ 233.280583] __sys_sendmsg+0xd9/0x180 [ 233.284399] ? __ia32_sys_shutdown+0x70/0x70 [ 233.294023] ? __fd_install+0x179/0x4b0 [ 233.298392] ? fd_install+0x47/0x60 [ 233.302058] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 233.312783] __x64_sys_sendmsg+0x73/0xb0 [ 233.317172] do_syscall_64+0xd0/0x4e0 [ 233.320987] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 233.331202] RIP: 0033:0x413bf1 [ 233.334420] Code: f8 ff 89 c3 66 41 89 84 24 c8 00 00 00 75 86 66 2e 0f 1f 84 00 00 00 00 00 ba 29 f8 ff ff eb 95 66 0f 1f 84 00 00 00 00 00 e8 73 ff ff 8b 18 ba 00 04 00 00 48 89 e6 48 89 c5 89 df e8 c7 c8 [ 233.360223] RSP: 002b:00007f263ab639c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 233.369903] RAX: ffffffffffffffda RBX: 00007f263ab63a58 RCX: 0000000000413bf1 [ 233.380910] RDX: 0000000000000000 RSI: 00007f263ab63a00 RDI: 0000000000000005 [ 233.390907] RBP: 0000000000000005 R08: 000000000000000b R09: 0000000000000000 [ 233.401623] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f263ab63a40 [ 233.411002] R13: 00000000004d17d0 R14: 00000000004e0b68 R15: 00000000ffffffff [ 233.421804] INFO: task syz-executor.1:13695 blocked for more than 140 seconds. [ 233.431112] Not tainted 4.19.96-syzkaller #0 [ 233.439434] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 233.449276] syz-executor.1 D27720 13695 7194 0x00000004 [ 233.454923] Call Trace: [ 233.461051] __schedule+0x78c/0x1c10 [ 233.464797] ? pci_mmcfg_check_reserved+0x120/0x120 [ 233.471790] ? kasan_check_read+0x11/0x20 [ 233.479358] schedule+0x7f/0x1b0 [ 233.482771] schedule_preempt_disabled+0x13/0x20 [ 233.489674] __mutex_lock+0x806/0x1210 [ 233.493583] ? genl_rcv_msg+0x10e/0x140 [ 233.501313] ? mutex_trylock+0x1e0/0x1e0 [ 233.507225] ? netdev_pick_tx+0x2b0/0x2b0 [ 233.511409] ? memcpy+0x45/0x50 [ 233.514695] mutex_lock_nested+0x16/0x20 [ 233.523116] ? mutex_lock_nested+0x16/0x20 [ 233.529233] genl_rcv_msg+0x10e/0x140 [ 233.533049] netlink_rcv_skb+0x142/0x390 [ 233.540649] ? genl_family_rcv_msg+0xe80/0xe80 [ 233.547162] ? netlink_ack+0x990/0x990 [ 233.551084] genl_rcv+0x23/0x40 [ 233.554476] netlink_unicast+0x445/0x640 [ 233.561993] ? netlink_attachskb+0x6d0/0x6d0 [ 233.568250] netlink_sendmsg+0x765/0xc50 [ 233.572349] ? netlink_unicast+0x640/0x640 [ 233.580410] ? copy_msghdr_from_user+0x20b/0x3e0 [ 233.585199] ? selinux_socket_sendmsg+0x31/0x40 [ 233.591754] ? netlink_unicast+0x640/0x640 [ 233.600121] sock_sendmsg+0xb5/0xf0 [ 233.603887] ___sys_sendmsg+0x647/0x950 [ 233.609838] ? find_held_lock+0x36/0x1d0 [ 233.613933] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 233.622584] ? __fget+0x278/0x400 [ 233.628055] ? kasan_check_read+0x11/0x20 [ 233.632225] ? __fget+0x295/0x400 [ 233.639422] ? ksys_dup3+0x2e0/0x2e0 [ 233.643163] ? __fget_light+0x174/0x1e0 [ 233.649707] ? __fdget+0xe/0x10 [ 233.653018] ? lock_downgrade+0x860/0x860 [ 233.660708] __sys_sendmsg+0xd9/0x180 [ 233.664536] ? __ia32_sys_shutdown+0x70/0x70 [ 233.670811] ? __fd_install+0x179/0x4b0 [ 233.674792] ? fd_install+0x47/0x60 [ 233.682103] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 233.689551] __x64_sys_sendmsg+0x73/0xb0 [ 233.693633] do_syscall_64+0xd0/0x4e0 [ 233.700896] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 233.708259] RIP: 0033:0x413bf1 [ 233.711468] Code: f8 ff 89 c3 66 41 89 84 24 c8 00 00 00 75 86 66 2e 0f 1f 84 00 00 00 00 00 ba 29 f8 ff ff eb 95 66 0f 1f 84 00 00 00 00 00 e8 73 ff ff 8b 18 ba 00 04 00 00 48 89 e6 48 89 c5 89 df e8 c7 c8 [ 233.736459] RSP: 002b:00007f263ab429c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 233.744640] RAX: ffffffffffffffda RBX: 00007f263ab42a58 RCX: 0000000000413bf1 [ 233.757118] RDX: 0000000000000000 RSI: 00007f263ab42a00 RDI: 0000000000000005 [ 233.764442] RBP: 0000000000000005 R08: 000000000000000b R09: 0000000000000000 [ 233.775078] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f263ab42a40 [ 233.784920] R13: 00000000004d17d0 R14: 00000000004e0b68 R15: 00000000ffffffff [ 233.797175] INFO: task syz-executor.3:13687 blocked for more than 140 seconds. [ 233.804575] Not tainted 4.19.96-syzkaller #0 [ 233.812305] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 233.823403] syz-executor.3 D26536 13687 7186 0x00000004 [ 233.832046] Call Trace: [ 233.834696] __schedule+0x78c/0x1c10 [ 233.841219] ? pci_mmcfg_check_reserved+0x120/0x120 [ 233.848862] ? kasan_check_read+0x11/0x20 [ 233.853031] schedule+0x7f/0x1b0 [ 233.859018] schedule_preempt_disabled+0x13/0x20 [ 233.863802] __mutex_lock+0x806/0x1210 [ 233.870353] ? genl_rcv_msg+0x10e/0x140 [ 233.874341] ? mutex_trylock+0x1e0/0x1e0 [ 233.881172] ? netdev_pick_tx+0x2b0/0x2b0 [ 233.887973] ? memcpy+0x45/0x50 [ 233.891283] mutex_lock_nested+0x16/0x20 [ 233.898076] ? mutex_lock_nested+0x16/0x20 [ 233.902326] genl_rcv_msg+0x10e/0x140 [ 233.909689] netlink_rcv_skb+0x142/0x390 [ 233.913785] ? genl_family_rcv_msg+0xe80/0xe80 [ 233.921833] ? netlink_ack+0x990/0x990 [ 233.928456] genl_rcv+0x23/0x40 [ 233.931758] netlink_unicast+0x445/0x640 [ 233.938512] ? netlink_attachskb+0x6d0/0x6d0 [ 233.942958] netlink_sendmsg+0x765/0xc50 [ 233.949625] ? netlink_unicast+0x640/0x640 [ 233.953872] ? copy_msghdr_from_user+0x20b/0x3e0 [ 233.961128] ? selinux_socket_sendmsg+0x31/0x40 [ 233.970512] ? netlink_unicast+0x640/0x640 [ 233.974748] sock_sendmsg+0xb5/0xf0 [ 233.981174] ___sys_sendmsg+0x647/0x950 [ 233.985183] ? find_held_lock+0x36/0x1d0 [ 233.991875] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 233.999277] ? __fget+0x278/0x400 [ 234.002760] ? kasan_check_read+0x11/0x20 [ 234.009620] ? __fget+0x295/0x400 [ 234.013098] ? ksys_dup3+0x2e0/0x2e0 [ 234.019316] ? __fget_light+0x174/0x1e0 [ 234.023333] ? __fdget+0xe/0x10 [ 234.029266] ? lock_downgrade+0x860/0x860 [ 234.033450] __sys_sendmsg+0xd9/0x180 [ 234.040670] ? __ia32_sys_shutdown+0x70/0x70 [ 234.045120] ? __fd_install+0x179/0x4b0 [ 234.051827] ? fd_install+0x47/0x60 [ 234.058033] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 234.063427] __x64_sys_sendmsg+0x73/0xb0 [ 234.070251] do_syscall_64+0xd0/0x4e0 [ 234.074078] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 234.081824] RIP: 0033:0x413bf1 [ 234.085025] Code: f8 ff 89 c3 66 41 89 84 24 c8 00 00 00 75 86 66 2e 0f 1f 84 00 00 00 00 00 ba 29 f8 ff ff eb 95 66 0f 1f 84 00 00 00 00 00 e8 73 ff ff 8b 18 ba 00 04 00 00 48 89 e6 48 89 c5 89 df e8 c7 c8 [ 234.108956] RSP: 002b:00007f66476ff9c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 234.117843] RAX: ffffffffffffffda RBX: 00007f66476ffa58 RCX: 0000000000413bf1 [ 234.125160] RDX: 0000000000000000 RSI: 00007f66476ffa00 RDI: 0000000000000005 [ 234.137566] RBP: 0000000000000005 R08: 000000000000000b R09: 0000000000000000 [ 234.144895] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f66476ffa40 [ 234.155164] R13: 00000000004d17d0 R14: 00000000004e0b68 R15: 00000000ffffffff [ 234.168425] INFO: task syz-executor.3:13690 blocked for more than 140 seconds. [ 234.178384] Not tainted 4.19.96-syzkaller #0 [ 234.183320] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 234.193938] syz-executor.3 D28424 13690 7186 0x00000004 [ 234.202274] Call Trace: [ 234.204928] __schedule+0x78c/0x1c10 [ 234.211448] ? pci_mmcfg_check_reserved+0x120/0x120 [ 234.219293] ? kasan_check_read+0x11/0x20 [ 234.223473] schedule+0x7f/0x1b0 [ 234.229477] schedule_preempt_disabled+0x13/0x20 [ 234.234347] __mutex_lock+0x806/0x1210 [ 234.242004] ? genl_rcv_msg+0x10e/0x140 [ 234.248800] ? mutex_trylock+0x1e0/0x1e0 [ 234.252887] ? netdev_pick_tx+0x2b0/0x2b0 [ 234.259806] ? memcpy+0x45/0x50 [ 234.263134] mutex_lock_nested+0x16/0x20 [ 234.269780] ? mutex_lock_nested+0x16/0x20 [ 234.274212] genl_rcv_msg+0x10e/0x140 [ 234.280657] netlink_rcv_skb+0x142/0x390 [ 234.284740] ? genl_family_rcv_msg+0xe80/0xe80 [ 234.292015] ? netlink_ack+0x990/0x990 [ 234.299242] genl_rcv+0x23/0x40 [ 234.302555] netlink_unicast+0x445/0x640 [ 234.309442] ? netlink_attachskb+0x6d0/0x6d0 [ 234.314046] netlink_sendmsg+0x765/0xc50 [ 234.322755] ? netlink_unicast+0x640/0x640 [ 234.329640] ? copy_msghdr_from_user+0x20b/0x3e0 [ 234.334673] ? selinux_socket_sendmsg+0x31/0x40 [ 234.342061] ? netlink_unicast+0x640/0x640 [ 234.348930] sock_sendmsg+0xb5/0xf0 [ 234.352708] ___sys_sendmsg+0x647/0x950 [ 234.359280] ? find_held_lock+0x36/0x1d0 [ 234.363381] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 234.370931] ? __fget+0x278/0x400 [ 234.374422] ? kasan_check_read+0x11/0x20 [ 234.381141] ? __fget+0x295/0x400 [ 234.384619] ? ksys_dup3+0x2e0/0x2e0 [ 234.390901] ? find_held_lock+0x36/0x1d0 [ 234.395091] ? __fget_light+0x174/0x1e0 [ 234.403609] ? lock_downgrade+0x860/0x860 [ 234.410393] ? __fdget+0xe/0x10 [ 234.413700] __sys_sendmsg+0xd9/0x180 [ 234.420090] ? __ia32_sys_shutdown+0x70/0x70 [ 234.424635] ? kasan_check_read+0x11/0x20 [ 234.432095] ? _copy_to_user+0x91/0xb0 [ 234.438675] ? put_timespec64+0xa9/0x100 [ 234.442761] ? nsecs_to_jiffies+0x20/0x20 [ 234.449835] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 234.458124] __x64_sys_sendmsg+0x73/0xb0 [ 234.462211] do_syscall_64+0xd0/0x4e0 [ 234.468829] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 234.474134] RIP: 0033:0x459f39 [ 234.480236] Code: Bad RIP value. [ 234.483730] RSP: 002b:00007f66476dec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.494192] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 234.504163] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 234.514201] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 234.524218] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66476df6d4 [ 234.534178] R13: 00000000004cf980 R14: 00000000004de090 R15: 00000000ffffffff [ 234.544321] INFO: task syz-executor.2:13689 blocked for more than 140 seconds. [ 234.554269] Not tainted 4.19.96-syzkaller #0 [ 234.562663] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 234.573446] syz-executor.2 D28424 13689 7190 0x00000004 [ 234.582013] Call Trace: [ 234.584626] __schedule+0x78c/0x1c10 [ 234.591027] ? pci_mmcfg_check_reserved+0x120/0x120 [ 234.598759] ? kasan_check_read+0x11/0x20 [ 234.602940] schedule+0x7f/0x1b0 [ 234.609008] schedule_preempt_disabled+0x13/0x20 [ 234.613794] __mutex_lock+0x806/0x1210 [ 234.620316] ? genl_rcv_msg+0x10e/0x140 [ 234.624308] ? mutex_trylock+0x1e0/0x1e0 [ 234.631076] ? netdev_pick_tx+0x2b0/0x2b0 [ 234.638430] ? memcpy+0x45/0x50 [ 234.642607] mutex_lock_nested+0x16/0x20 [ 234.649279] ? mutex_lock_nested+0x16/0x20 [ 234.653527] genl_rcv_msg+0x10e/0x140 [ 234.660231] netlink_rcv_skb+0x142/0x390 [ 234.664308] ? genl_family_rcv_msg+0xe80/0xe80 [ 234.671495] ? netlink_ack+0x990/0x990 [ 234.678163] genl_rcv+0x23/0x40 [ 234.681590] netlink_unicast+0x445/0x640 [ 234.689095] ? netlink_attachskb+0x6d0/0x6d0 [ 234.693543] netlink_sendmsg+0x765/0xc50 [ 234.700231] ? netlink_unicast+0x640/0x640 [ 234.704486] ? copy_msghdr_from_user+0x20b/0x3e0 [ 234.711941] ? selinux_socket_sendmsg+0x31/0x40 [ 234.719409] ? netlink_unicast+0x640/0x640 [ 234.723669] sock_sendmsg+0xb5/0xf0 [ 234.730067] ___sys_sendmsg+0x647/0x950 [ 234.734061] ? find_held_lock+0x36/0x1d0 [ 234.740814] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 234.748250] ? __fget+0x278/0x400 [ 234.751716] ? kasan_check_read+0x11/0x20 [ 234.758391] ? __fget+0x295/0x400 [ 234.761868] ? ksys_dup3+0x2e0/0x2e0 [ 234.768326] ? __fget_light+0x174/0x1e0 [ 234.772329] ? __fdget+0xe/0x10 [ 234.778196] ? lock_downgrade+0x860/0x860 [ 234.782367] __sys_sendmsg+0xd9/0x180 [ 234.788856] ? __ia32_sys_shutdown+0x70/0x70 [ 234.793298] ? __fd_install+0x179/0x4b0 [ 234.799902] ? fd_install+0x47/0x60 [ 234.803555] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 234.811571] __x64_sys_sendmsg+0x73/0xb0 [ 234.818787] do_syscall_64+0xd0/0x4e0 [ 234.822606] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 234.830589] RIP: 0033:0x413bf1 [ 234.833832] Code: f8 ff 89 c3 66 41 89 84 24 c8 00 00 00 75 86 66 2e 0f 1f 84 00 00 00 00 00 ba 29 f8 ff ff eb 95 66 0f 1f 84 00 00 00 00 00 e8 73 ff ff 8b 18 ba 00 04 00 00 48 89 e6 48 89 c5 89 df e8 c7 c8 [ 234.857568] RSP: 002b:00007f4e933569c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 234.867026] RAX: ffffffffffffffda RBX: 00007f4e93356a58 RCX: 0000000000413bf1 [ 234.874331] RDX: 0000000000000000 RSI: 00007f4e93356a00 RDI: 0000000000000005 [ 234.884826] RBP: 0000000000000005 R08: 000000000000000b R09: 0000000000000000 [ 234.894039] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f4e93356a40 [ 234.904888] R13: 00000000004d17d0 R14: 00000000004e0b68 R15: 00000000ffffffff [ 234.913930] INFO: task syz-executor.2:13698 blocked for more than 140 seconds. [ 234.924584] Not tainted 4.19.96-syzkaller #0 [ 234.931247] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 234.942495] syz-executor.2 D27720 13698 7190 0x00000004 [ 234.950482] Call Trace: [ 234.953099] __schedule+0x78c/0x1c10 [ 234.962779] ? pci_mmcfg_check_reserved+0x120/0x120 [ 234.969650] ? kasan_check_read+0x11/0x20 [ 234.973823] schedule+0x7f/0x1b0 [ 234.980500] schedule_preempt_disabled+0x13/0x20 [ 234.986960] __mutex_lock+0x806/0x1210 [ 234.990863] ? genl_rcv_msg+0x10e/0x140 [ 234.994850] ? mutex_trylock+0x1e0/0x1e0 [ 235.002448] ? netdev_pick_tx+0x2b0/0x2b0 [ 235.008701] ? memcpy+0x45/0x50 [ 235.012024] mutex_lock_nested+0x16/0x20 [ 235.019313] ? mutex_lock_nested+0x16/0x20 [ 235.023678] genl_rcv_msg+0x10e/0x140 [ 235.029293] netlink_rcv_skb+0x142/0x390 [ 235.033372] ? genl_family_rcv_msg+0xe80/0xe80 [ 235.041200] ? netlink_ack+0x990/0x990 [ 235.045111] genl_rcv+0x23/0x40 [ 235.050403] netlink_unicast+0x445/0x640 [ 235.054504] ? netlink_attachskb+0x6d0/0x6d0 [ 235.062246] netlink_sendmsg+0x765/0xc50 [ 235.068108] ? netlink_unicast+0x640/0x640 [ 235.073610] ? copy_msghdr_from_user+0x20b/0x3e0 [ 235.082304] ? selinux_socket_sendmsg+0x31/0x40 [ 235.088770] ? netlink_unicast+0x640/0x640 [ 235.093030] sock_sendmsg+0xb5/0xf0 [ 235.099924] ___sys_sendmsg+0x647/0x950 [ 235.103918] ? find_held_lock+0x36/0x1d0 [ 235.109721] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 235.114492] ? __fget+0x278/0x400 [ 235.121677] ? kasan_check_read+0x11/0x20 [ 235.127573] ? __fget+0x295/0x400 [ 235.131232] ? ksys_dup3+0x2e0/0x2e0 [ 235.134956] ? __fget_light+0x174/0x1e0 [ 235.142129] ? __fdget+0xe/0x10 [ 235.147097] ? lock_downgrade+0x860/0x860 [ 235.151260] __sys_sendmsg+0xd9/0x180 [ 235.155165] ? __ia32_sys_shutdown+0x70/0x70 [ 235.162780] ? __fd_install+0x179/0x4b0 [ 235.168525] ? fd_install+0x47/0x60 [ 235.172165] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.181135] __x64_sys_sendmsg+0x73/0xb0 [ 235.185214] do_syscall_64+0xd0/0x4e0 [ 235.190702] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.199193] RIP: 0033:0x413bf1 [ 235.202395] Code: f8 ff 89 c3 66 41 89 84 24 c8 00 00 00 75 86 66 2e 0f 1f 84 00 00 00 00 00 ba 29 f8 ff ff eb 95 66 0f 1f 84 00 00 00 00 00 e8 73 ff ff 8b 18 ba 00 04 00 00 48 89 e6 48 89 c5 89 df e8 c7 c8 [ 235.226918] RSP: 002b:00007f4e933359c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 235.234752] RAX: ffffffffffffffda RBX: 00007f4e93335a58 RCX: 0000000000413bf1 [ 235.246902] RDX: 0000000000000000 RSI: 00007f4e93335a00 RDI: 0000000000000005 [ 235.254299] RBP: 0000000000000005 R08: 000000000000000b R09: 0000000000000000 [ 235.264132] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f4e93335a40 [ 235.273815] R13: 00000000004d17d0 R14: 00000000004e0b68 R15: 00000000ffffffff [ 235.284465] INFO: task syz-executor.4:13694 blocked for more than 140 seconds. [ 235.299592] Not tainted 4.19.96-syzkaller #0 [ 235.304547] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 235.312991] syz-executor.4 D28424 13694 7188 0x00000004 [ 235.323759] Call Trace: [ 235.326622] __schedule+0x78c/0x1c10 [ 235.330345] ? pci_mmcfg_check_reserved+0x120/0x120 [ 235.340492] ? kasan_check_read+0x11/0x20 [ 235.344670] schedule+0x7f/0x1b0 [ 235.348389] schedule_preempt_disabled+0x13/0x20 [ 235.353159] __mutex_lock+0x806/0x1210 [ 235.364365] ? genl_rcv_msg+0x10e/0x140 [ 235.368609] ? mutex_trylock+0x1e0/0x1e0 [ 235.372677] ? netdev_pick_tx+0x2b0/0x2b0 [ 235.381791] ? memcpy+0x45/0x50 [ 235.385108] mutex_lock_nested+0x16/0x20 [ 235.389745] ? mutex_lock_nested+0x16/0x20 [ 235.394001] genl_rcv_msg+0x10e/0x140 [ 235.402890] netlink_rcv_skb+0x142/0x390 [ 235.407264] ? genl_family_rcv_msg+0xe80/0xe80 [ 235.411847] ? netlink_ack+0x990/0x990 [ 235.420650] genl_rcv+0x23/0x40 [ 235.423967] netlink_unicast+0x445/0x640 [ 235.428383] ? netlink_attachskb+0x6d0/0x6d0 [ 235.432916] netlink_sendmsg+0x765/0xc50 [ 235.443728] ? netlink_unicast+0x640/0x640 [ 235.448314] ? copy_msghdr_from_user+0x20b/0x3e0 [ 235.453086] ? selinux_socket_sendmsg+0x31/0x40 [ 235.462768] ? netlink_unicast+0x640/0x640 [ 235.467364] sock_sendmsg+0xb5/0xf0 [ 235.471004] ___sys_sendmsg+0x647/0x950 [ 235.474981] ? find_held_lock+0x36/0x1d0 [ 235.484083] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 235.490068] ? __fget+0x278/0x400 [ 235.493543] ? kasan_check_read+0x11/0x20 [ 235.502558] ? __fget+0x295/0x400 [ 235.506376] ? ksys_dup3+0x2e0/0x2e0 [ 235.510197] ? __fget_light+0x174/0x1e0 [ 235.514178] ? __fdget+0xe/0x10 [ 235.522483] ? lock_downgrade+0x860/0x860 [ 235.526976] __sys_sendmsg+0xd9/0x180 [ 235.530784] ? __ia32_sys_shutdown+0x70/0x70 [ 235.535195] ? __fd_install+0x179/0x4b0 [ 235.544196] ? fd_install+0x47/0x60 [ 235.548179] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.553648] __x64_sys_sendmsg+0x73/0xb0 [ 235.563082] do_syscall_64+0xd0/0x4e0 [ 235.567253] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.572467] RIP: 0033:0x413bf1 [ 235.580766] Code: f8 ff 89 c3 66 41 89 84 24 c8 00 00 00 75 86 66 2e 0f 1f 84 00 00 00 00 00 ba 29 f8 ff ff eb 95 66 0f 1f 84 00 00 00 00 00 e8 73 ff ff 8b 18 ba 00 04 00 00 48 89 e6 48 89 c5 89 df e8 c7 c8 [ 235.608492] RSP: 002b:00007f5688eed9c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 235.618971] RAX: ffffffffffffffda RBX: 00007f5688eeda58 RCX: 0000000000413bf1 [ 235.629669] RDX: 0000000000000000 RSI: 00007f5688eeda00 RDI: 0000000000000005 [ 235.639096] RBP: 0000000000000005 R08: 000000000000000b R09: 0000000000000000 [ 235.649803] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f5688eeda40 [ 235.659165] R13: 00000000004d17d0 R14: 00000000004e0b68 R15: 00000000ffffffff [ 235.669810] INFO: task syz-executor.4:13699 blocked for more than 140 seconds. [ 235.679303] Not tainted 4.19.96-syzkaller #0 [ 235.684251] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 235.697280] syz-executor.4 D27720 13699 7188 0x00000004 [ 235.702963] Call Trace: [ 235.708291] __schedule+0x78c/0x1c10 [ 235.712055] ? pci_mmcfg_check_reserved+0x120/0x120 [ 235.719832] ? kasan_check_read+0x11/0x20 [ 235.724133] schedule+0x7f/0x1b0 [ 235.730317] schedule_preempt_disabled+0x13/0x20 [ 235.735096] __mutex_lock+0x806/0x1210 [ 235.741626] ? genl_rcv_msg+0x10e/0x140 [ 235.748852] ? mutex_trylock+0x1e0/0x1e0 [ 235.752934] ? netdev_pick_tx+0x2b0/0x2b0 [ 235.760144] ? memcpy+0x45/0x50 [ 235.763439] mutex_lock_nested+0x16/0x20 [ 235.770126] ? mutex_lock_nested+0x16/0x20 [ 235.774383] genl_rcv_msg+0x10e/0x140 [ 235.781087] netlink_rcv_skb+0x142/0x390 [ 235.785183] ? genl_family_rcv_msg+0xe80/0xe80 [ 235.792497] ? netlink_ack+0x990/0x990 [ 235.799144] genl_rcv+0x23/0x40 [ 235.802883] netlink_unicast+0x445/0x640 [ 235.809542] ? netlink_attachskb+0x6d0/0x6d0 [ 235.813972] netlink_sendmsg+0x765/0xc50 [ 235.820679] ? netlink_unicast+0x640/0x640 [ 235.824928] ? copy_msghdr_from_user+0x20b/0x3e0 [ 235.832256] ? selinux_socket_sendmsg+0x31/0x40 [ 235.839806] ? netlink_unicast+0x640/0x640 [ 235.844066] sock_sendmsg+0xb5/0xf0 [ 235.850311] ___sys_sendmsg+0x647/0x950 [ 235.854306] ? find_held_lock+0x36/0x1d0 [ 235.861116] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 235.868612] ? __fget+0x278/0x400 [ 235.872087] ? kasan_check_read+0x11/0x20 [ 235.879597] ? __fget+0x295/0x400 [ 235.883080] ? ksys_dup3+0x2e0/0x2e0 [ 235.889472] ? __fget_light+0x174/0x1e0 [ 235.893462] ? __fdget+0xe/0x10 [ 235.899523] ? lock_downgrade+0x860/0x860 [ 235.903700] __sys_sendmsg+0xd9/0x180 [ 235.910074] ? __ia32_sys_shutdown+0x70/0x70 [ 235.914518] ? __fd_install+0x179/0x4b0 [ 235.921086] ? fd_install+0x47/0x60 [ 235.924837] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.932834] __x64_sys_sendmsg+0x73/0xb0 [ 235.939455] do_syscall_64+0xd0/0x4e0 [ 235.943274] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.951227] RIP: 0033:0x413bf1 [ 235.954438] Code: f8 ff 89 c3 66 41 89 84 24 c8 00 00 00 75 86 66 2e 0f 1f 84 00 00 00 00 00 ba 29 f8 ff ff eb 95 66 0f 1f 84 00 00 00 00 00 e8 73 ff ff 8b 18 ba 00 04 00 00 48 89 e6 48 89 c5 89 df e8 c7 c8 [ 235.978229] RSP: 002b:00007f5688ecc9c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 235.987818] RAX: ffffffffffffffda RBX: 00007f5688ecca58 RCX: 0000000000413bf1 [ 235.995118] RDX: 0000000000000000 RSI: 00007f5688ecca00 RDI: 0000000000000005 [ 236.010312] RBP: 0000000000000005 R08: 000000000000000b R09: 0000000000000000 [ 236.017844] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f5688ecca40 [ 236.025120] R13: 00000000004d17d0 R14: 00000000004e0b68 R15: 00000000ffffffff [ 236.037847] INFO: task syz-executor.0:13697 blocked for more than 140 seconds. [ 236.047090] Not tainted 4.19.96-syzkaller #0 [ 236.052035] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.063257] syz-executor.0 D28424 13697 7196 0x00000004 [ 236.070710] Call Trace: [ 236.073318] __schedule+0x78c/0x1c10 [ 236.080261] ? pci_mmcfg_check_reserved+0x120/0x120 [ 236.087089] ? kasan_check_read+0x11/0x20 [ 236.091264] schedule+0x7f/0x1b0 [ 236.094635] schedule_preempt_disabled+0x13/0x20 [ 236.102782] __mutex_lock+0x806/0x1210 [ 236.108516] ? mark_held_locks+0x130/0x130 [ 236.112867] ? genl_rcv_msg+0x10e/0x140 [ 236.120212] ? mutex_trylock+0x1e0/0x1e0 [ 236.124301] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 236.131208] ? rcu_read_unlock_special+0x67b/0xe90 [ 236.140095] mutex_lock_nested+0x16/0x20 [ 236.144220] ? mutex_lock_nested+0x16/0x20 [ 236.150167] genl_rcv_msg+0x10e/0x140 [ 236.154151] netlink_rcv_skb+0x142/0x390 [ 236.161427] ? genl_family_rcv_msg+0xe80/0xe80 [ 236.167695] ? netlink_ack+0x990/0x990 [ 236.171611] genl_rcv+0x23/0x40 [ 236.174900] netlink_unicast+0x445/0x640 [ 236.182398] ? netlink_attachskb+0x6d0/0x6d0 [ 236.188789] netlink_sendmsg+0x765/0xc50 [ 236.192901] ? netlink_unicast+0x640/0x640 [ 236.200839] ? copy_msghdr_from_user+0x20b/0x3e0 [ 236.207490] ? selinux_socket_sendmsg+0x31/0x40 [ 236.212194] ? netlink_unicast+0x640/0x640 [ 236.219597] sock_sendmsg+0xb5/0xf0 [ 236.223278] ___sys_sendmsg+0x647/0x950 [ 236.228949] ? find_held_lock+0x36/0x1d0 [ 236.233032] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 236.241102] ? __fget+0x278/0x400 [ 236.244581] ? kasan_check_read+0x11/0x20 [ 236.250385] ? __fget+0x295/0x400 [ 236.253993] ? ksys_dup3+0x2e0/0x2e0 [ 236.260883] ? __fget_light+0x174/0x1e0 [ 236.264919] ? __fdget+0xe/0x10 [ 236.270540] ? lock_downgrade+0x860/0x860 [ 236.274714] __sys_sendmsg+0xd9/0x180 [ 236.281988] ? __ia32_sys_shutdown+0x70/0x70 [ 236.288148] ? __fd_install+0x179/0x4b0 [ 236.292151] ? fd_install+0x47/0x60 [ 236.299048] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.304459] __x64_sys_sendmsg+0x73/0xb0 [ 236.310222] do_syscall_64+0xd0/0x4e0 [ 236.314198] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.323732] RIP: 0033:0x413bf1 [ 236.328814] Code: f8 ff 89 c3 66 41 89 84 24 c8 00 00 00 75 86 66 2e 0f 1f 84 00 00 00 00 00 ba 29 f8 ff ff eb 95 66 0f 1f 84 00 00 00 00 00 e8 73 ff ff 8b 18 ba 00 04 00 00 48 89 e6 48 89 c5 89 df e8 c7 c8 [ 236.352915] RSP: 002b:00007f9cc1c1d9c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 236.361166] RAX: ffffffffffffffda RBX: 00007f9cc1c1da58 RCX: 0000000000413bf1 [ 236.373646] RDX: 0000000000000000 RSI: 00007f9cc1c1da00 RDI: 0000000000000005 [ 236.381459] RBP: 0000000000000005 R08: 000000000000000b R09: 0000000000000000 [ 236.393662] R10: 0000000000000004 R11: 0000000000000293 R12: 00007f9cc1c1da40 [ 236.403607] R13: 00000000004d17d0 R14: 00000000004e0b68 R15: 00000000ffffffff [ 236.416170] INFO: task syz-executor.0:13700 blocked for more than 140 seconds. [ 236.423704] Not tainted 4.19.96-syzkaller #0 [ 236.432820] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.442078] syz-executor.0 D27720 13700 7196 0x00000004 [ 236.452084] Call Trace: [ 236.454711] __schedule+0x78c/0x1c10 [ 236.459545] ? pci_mmcfg_check_reserved+0x120/0x120 [ 236.464590] ? kasan_check_read+0x11/0x20 [ 236.472858] schedule+0x7f/0x1b0 [ 236.479273] schedule_preempt_disabled+0x13/0x20 [ 236.484842] __mutex_lock+0x806/0x1210 [ 236.492828] ? genl_rcv_msg+0x10e/0x140 [ 236.498264] ? mutex_trylock+0x1e0/0x1e0 [ 236.502363] ? netdev_pick_tx+0x2b0/0x2b0 [ 236.510755] ? memcpy+0x45/0x50 [ 236.514083] mutex_lock_nested+0x16/0x20 [ 236.519661] ? mutex_lock_nested+0x16/0x20 [ 236.523925] genl_rcv_msg+0x10e/0x140 [ 236.532608] netlink_rcv_skb+0x142/0x390 [ 236.537803] ? genl_family_rcv_msg+0xe80/0xe80 [ 236.542651] ? netlink_ack+0x990/0x990 [ 236.550816] genl_rcv+0x23/0x40 [ 236.554136] netlink_unicast+0x445/0x640 [ 236.559576] ? netlink_attachskb+0x6d0/0x6d0 [ 236.564026] netlink_sendmsg+0x765/0xc50 [ 236.572202] ? netlink_unicast+0x640/0x640 [ 236.577589] ? copy_msghdr_from_user+0x20b/0x3e0 [ 236.582511] ? selinux_socket_sendmsg+0x31/0x40 [ 236.591323] ? netlink_unicast+0x640/0x640 [ 236.596727] sock_sendmsg+0xb5/0xf0 [ 236.600362] ___sys_sendmsg+0x647/0x950 [ 236.604340] ? find_held_lock+0x36/0x1d0 [ 236.612631] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 236.618443] ? __fget+0x278/0x400 [ 236.621899] ? kasan_check_read+0x11/0x20 [ 236.630273] ? __fget+0x295/0x400 [ 236.633756] ? ksys_dup3+0x2e0/0x2e0 [ 236.639985] ? __fget_light+0x174/0x1e0 [ 236.644130] ? __fdget+0xe/0x10 [ 236.651777] ? lock_downgrade+0x860/0x860 [ 236.657810] __sys_sendmsg+0xd9/0x180 [ 236.661632] ? __ia32_sys_shutdown+0x70/0x70 [ 236.670202] ? __fd_install+0x179/0x4b0 [ 236.674219] ? fd_install+0x47/0x60 [ 236.679010] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.684416] __x64_sys_sendmsg+0x73/0xb0 [ 236.692835] do_syscall_64+0xd0/0x4e0 [ 236.697907] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.703218] RIP: 0033:0x413bf1 [ 236.710551] Code: f8 ff 89 c3 66 41 89 84 24 c8 00 00 00 75 86 66 2e 0f 1f 84 00 00 00 00 00 ba 29 f8 ff ff eb 95 66 0f 1f 84 00 00 00 00 00 e8 73 ff ff 8b 18 ba 00 04 00 00 48 89 e6 48 89 c5 89 df e8 c7 c8 [ 236.734953] RSP: 002b:00007f9cc1bfc9c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 236.743050] RAX: ffffffffffffffda RBX: 00007f9cc1bfca58 RCX: 0000000000413bf1 [ 236.755169] RDX: 0000000000000000 RSI: 00007f9cc1bfca00 RDI: 0000000000000005 [ 236.762789] RBP: 0000000000000005 R08: 000000000000000b R09: 0000000000000000 [ 236.775491] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f9cc1bfca40 [ 236.782892] R13: 00000000004d17d0 R14: 00000000004e0b68 R15: 00000000ffffffff [ 236.799088] [ 236.799088] Showing all locks held in the system: [ 236.810174] 1 lock held by khungtaskd/1041: [ 236.814508] #0: 00000000452db395 (rcu_read_lock){....}, at: debug_show_all_locks+0x5b/0x27a [ 236.823420] 1 lock held by rsyslogd/6946: [ 236.832175] #0: 0000000003537d6a (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xa7/0xd0 [ 236.840197] 2 locks held by getty/7068: [ 236.844163] #0: 000000006fcfe25a (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 236.857552] #1: 0000000001377054 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 236.869003] 2 locks held by getty/7069: [ 236.872978] #0: 000000008c96ebb9 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 236.888679] #1: 00000000a3ef8133 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 236.900017] 2 locks held by getty/7070: [ 236.903988] #0: 000000006a38fc68 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 236.918291] #1: 00000000b78c2806 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 236.929525] 2 locks held by getty/7071: [ 236.933496] #0: 000000004938c458 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 236.945003] #1: 000000006bc95bd1 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 236.958475] 2 locks held by getty/7072: [ 236.962449] #0: 000000005c009a4b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 236.971567] #1: 000000003e94a28a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 236.984321] 2 locks held by getty/7073: [ 236.989163] #0: 00000000dabc7b4a (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 237.001196] #1: 0000000068a2a778 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 237.010915] 2 locks held by getty/7074: [ 237.014893] #0: 00000000ac071f08 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 237.025338] #1: 000000005032086b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x1ee/0x1910 [ 237.034303] 3 locks held by syz-executor.5/13679: [ 237.039422] 2 locks held by syz-executor.1/13684: [ 237.044259] #0: 000000004a1f8dec (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 237.051482] #1: 00000000abb28573 (genl_mutex){+.+.}, at: genl_rcv_msg+0x10e/0x140 [ 237.059501] 2 locks held by syz-executor.1/13695: [ 237.064345] #0: 000000004a1f8dec (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 237.071591] #1: 00000000abb28573 (genl_mutex){+.+.}, at: genl_rcv_msg+0x10e/0x140 [ 237.079546] 2 locks held by syz-executor.3/13687: [ 237.084390] #0: 000000004a1f8dec (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 237.091563] #1: 00000000abb28573 (genl_mutex){+.+.}, at: genl_rcv_msg+0x10e/0x140 [ 237.099502] 2 locks held by syz-executor.3/13690: [ 237.104354] #0: 000000004a1f8dec (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 237.111613] #1: 00000000abb28573 (genl_mutex){+.+.}, at: genl_rcv_msg+0x10e/0x140 [ 237.119530] 2 locks held by syz-executor.2/13689: [ 237.124379] #0: 000000004a1f8dec (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 237.131630] #1: 00000000abb28573 (genl_mutex){+.+.}, at: genl_rcv_msg+0x10e/0x140 [ 237.139652] 2 locks held by syz-executor.2/13698: [ 237.144488] #0: 000000004a1f8dec (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 237.151698] #1: 00000000abb28573 (genl_mutex){+.+.}, at: genl_rcv_msg+0x10e/0x140 [ 237.159636] 2 locks held by syz-executor.4/13694: [ 237.164468] #0: 000000004a1f8dec (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 237.171632] #1: 00000000abb28573 (genl_mutex){+.+.}, at: genl_rcv_msg+0x10e/0x140 [ 237.179572] 2 locks held by syz-executor.4/13699: [ 237.184539] #0: 000000004a1f8dec (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 237.191790] #1: 00000000abb28573 (genl_mutex){+.+.}, at: genl_rcv_msg+0x10e/0x140 [ 237.199765] 2 locks held by syz-executor.0/13697: [ 237.204604] #0: 000000004a1f8dec (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 237.211785] #1: 00000000abb28573 (genl_mutex){+.+.}, at: genl_rcv_msg+0x10e/0x140 [ 237.219699] 2 locks held by syz-executor.0/13700: [ 237.224552] #0: 000000004a1f8dec (cb_lock){++++}, at: genl_rcv+0x14/0x40 [ 237.231745] #1: 00000000abb28573 (genl_mutex){+.+.}, at: genl_rcv_msg+0x10e/0x140 [ 237.239678] [ 237.241302] ============================================= [ 237.241302] [ 237.248554] NMI backtrace for cpu 1 [ 237.252186] CPU: 1 PID: 1041 Comm: khungtaskd Not tainted 4.19.96-syzkaller #0 [ 237.259787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.269143] Call Trace: [ 237.271736] dump_stack+0x123/0x177 [ 237.275356] nmi_cpu_backtrace.cold.4+0x3e/0x76 [ 237.280022] ? lapic_can_unplug_cpu.cold.29+0x3f/0x3f [ 237.285210] nmi_trigger_cpumask_backtrace+0xe6/0x11a [ 237.290426] arch_trigger_cpumask_backtrace+0x14/0x20 [ 237.295637] watchdog+0x5c3/0xb40 [ 237.299089] kthread+0x324/0x3e0 [ 237.302456] ? hungtask_pm_notify+0x40/0x40 [ 237.306768] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 237.312314] ret_from_fork+0x24/0x30 [ 237.316099] Sending NMI from CPU 1 to CPUs 0: [ 237.320948] NMI backtrace for cpu 0 [ 237.320951] CPU: 0 PID: 13679 Comm: syz-executor.5 Not tainted 4.19.96-syzkaller #0 [ 237.320952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.320954] RIP: 0010:lock_is_held_type+0x141/0x210 [ 237.320956] Code: ff 65 4c 8b 24 25 40 ee 01 00 49 8d bc 24 7c 08 00 00 41 89 c5 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 <48> 89 fa 83 e2 07 83 c2 03 38 c2 7c 04 84 c0 75 76 48 c7 c7 48 07 [ 237.320958] RSP: 0018:ffff88808cedec98 EFLAGS: 00000803 [ 237.320960] RAX: 0000000000000000 RBX: 0000000000000282 RCX: 0000000000000000 [ 237.320962] RDX: 1ffff1101243e54f RSI: ffffffff87f98320 RDI: ffff8880921f2a7c [ 237.320963] RBP: ffff88808cedecb8 R08: ffffed1015d44733 R09: ffffed1015d44732 [ 237.320964] R10: ffffed1015d44732 R11: ffff8880aea23993 R12: ffff8880921f2200 [ 237.320966] R13: 0000000000000001 R14: 0000000000000000 R15: 000000000000009a [ 237.320967] FS: 00007fbd58923700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 237.320968] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.320970] CR2: 0000000000752000 CR3: 000000009f2c7000 CR4: 00000000001406f0 [ 237.320971] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 237.320972] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 237.320973] Call Trace: [ 237.320975] rcu_read_lock_held+0xa9/0xc0 [ 237.320976] tipc_sk_lookup+0x838/0x950 [ 237.320977] ? __lock_is_held+0xb5/0x140 [ 237.320978] ? __tipc_nl_add_sk+0x3e0/0x3e0 [ 237.320979] ? nla_parse+0x197/0x280 [ 237.320980] tipc_nl_publ_dump+0x1bf/0xcce [ 237.320981] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 237.320982] ? tipc_nl_sk_dump+0x20/0x20 [ 237.320984] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 237.320985] ? trace_hardirqs_on_caller+0x28/0x180 [ 237.320986] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 237.320987] __tipc_nl_compat_dumpit.isra.11+0x1e0/0x960 [ 237.320988] ? kasan_unpoison_shadow+0x35/0x50 [ 237.320989] ? kasan_kmalloc+0xc7/0xe0 [ 237.320991] ? __tipc_add_link_prop.isra.9+0x1c0/0x1c0 [ 237.320992] ? __nla_put+0x20/0x30 [ 237.320993] tipc_nl_compat_sk_dump+0x4ea/0x990 [ 237.320994] ? __tipc_nl_compat_dumpit.isra.11+0x960/0x960 [ 237.320995] ? find_held_lock+0x36/0x1d0 [ 237.320996] ? tipc_nl_sk_dump+0x20/0x20 [ 237.320998] ? tipc_tlv_sprintf+0x2c0/0x2c0 [ 237.320999] ? rcu_read_lock_held+0xa9/0xc0 [ 237.321000] ? rhashtable_walk_stop+0x100/0x2b0 [ 237.321001] ? lock_downgrade+0x860/0x860 [ 237.321002] __tipc_nl_compat_dumpit.isra.11+0x2b0/0x960 [ 237.321004] ? kasan_unpoison_shadow+0x35/0x50 [ 237.321005] ? __tipc_add_link_prop.isra.9+0x1c0/0x1c0 [ 237.321006] ? mark_held_locks+0x130/0x130 [ 237.321007] tipc_nl_compat_dumpit+0x1e3/0x4c0 [ 237.321008] tipc_nl_compat_recv+0x460/0xa70 [ 237.321009] ? tipc_nl_compat_doit+0x540/0x540 [ 237.321011] ? genl_rcv_msg+0x10e/0x140 [ 237.321012] ? tipc_dump_start+0x90/0x90 [ 237.321013] ? __tipc_nl_compat_dumpit.isra.11+0x960/0x960 [ 237.321014] ? lock_acquire+0x173/0x3d0 [ 237.321015] ? genl_rcv_msg+0x10e/0x140 [ 237.321016] genl_family_rcv_msg+0x591/0xe80 [ 237.321017] ? genl_unregister_family+0x660/0x660 [ 237.321018] ? netdev_pick_tx+0x2b0/0x2b0 [ 237.321020] ? mark_held_locks+0x130/0x130 [ 237.321021] genl_rcv_msg+0xa7/0x140 [ 237.321022] netlink_rcv_skb+0x142/0x390 [ 237.321023] ? genl_family_rcv_msg+0xe80/0xe80 [ 237.321024] ? netlink_ack+0x990/0x990 [ 237.321025] genl_rcv+0x23/0x40 [ 237.321026] netlink_unicast+0x445/0x640 [ 237.321027] ? netlink_attachskb+0x6d0/0x6d0 [ 237.321028] netlink_sendmsg+0x765/0xc50 [ 237.321029] ? netlink_unicast+0x640/0x640 [ 237.321030] ? copy_msghdr_from_user+0x20b/0x3e0 [ 237.321032] ? selinux_socket_sendmsg+0x31/0x40 [ 237.321033] ? netlink_unicast+0x640/0x640 [ 237.321034] sock_sendmsg+0xb5/0xf0 [ 237.321035] ___sys_sendmsg+0x647/0x950 [ 237.321036] ? find_held_lock+0x36/0x1d0 [ 237.321037] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 237.321038] ? __fget+0x278/0x400 [ 237.321039] ? kasan_check_read+0x11/0x20 [ 237.321040] ? __fget+0x295/0x400 [ 237.321042] ? ksys_dup3+0x2e0/0x2e0 [ 237.321043] ? find_held_lock+0x36/0x1d0 [ 237.321044] ? __fget_light+0x174/0x1e0 [ 237.321045] ? lock_downgrade+0x860/0x860 [ 237.321046] ? __fdget+0xe/0x10 [ 237.321047] __sys_sendmsg+0xd9/0x180 [ 237.321048] ? __ia32_sys_shutdown+0x70/0x70 [ 237.321049] ? kasan_check_read+0x11/0x20 [ 237.321050] ? _copy_to_user+0x91/0xb0 [ 237.321051] ? put_timespec64+0xa9/0x100 [ 237.321052] ? nsecs_to_jiffies+0x20/0x20 [ 237.321054] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 237.321055] __x64_sys_sendmsg+0x73/0xb0 [ 237.321056] do_syscall_64+0xd0/0x4e0 [ 237.321057] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 237.321058] RIP: 0033:0x459f39 [ 237.321060] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 237.321062] RSP: 002b:00007fbd58922c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.321064] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 237.321065] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 237.321067] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 237.321068] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbd589236d4 [ 237.321069] R13: 00000000004cf980 R14: 00000000004de090 R15: 00000000ffffffff [ 237.323331] Kernel panic - not syncing: hung_task: blocked tasks [ 237.837445] CPU: 1 PID: 1041 Comm: khungtaskd Not tainted 4.19.96-syzkaller #0 [ 237.844793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.854136] Call Trace: [ 237.856719] dump_stack+0x123/0x177 [ 237.860341] panic+0x1cd/0x375 [ 237.863527] ? __warn_printk+0xd6/0xd6 [ 237.867414] watchdog+0x5d4/0xb40 [ 237.870864] kthread+0x324/0x3e0 [ 237.874214] ? hungtask_pm_notify+0x40/0x40 [ 237.878525] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 237.884060] ret_from_fork+0x24/0x30 [ 237.889398] Kernel Offset: disabled [ 237.893231] Rebooting in 86400 seconds..