syzbot


INFO: task hung in do_arpt_get_ctl

Status: auto-closed as invalid on 2021/04/16 01:34
Subsystems: netfilter
[Documentation on labels]
First crash: 1196d, last: 1196d

Sample crash report:
INFO: task syz-executor.0:8452 blocked for more than 143 seconds.
      Not tainted 5.11.0-rc3-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0  state:D stack:19160 pid: 8452 ppid:     1 flags:0x00004004
Call Trace:
 context_switch kernel/sched/core.c:4313 [inline]
 __schedule+0xa4d/0xf80 kernel/sched/core.c:5064
 schedule+0x14b/0x200 kernel/sched/core.c:5143
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:5202
 __mutex_lock_common+0x11ef/0x2ef0 kernel/locking/mutex.c:1033
 __mutex_lock kernel/locking/mutex.c:1103 [inline]
 mutex_lock_nested+0x1a/0x20 kernel/locking/mutex.c:1118
 xt_find_table_lock+0x37/0x410 net/netfilter/x_tables.c:1206
 xt_request_find_table_lock+0x22/0xf0 net/netfilter/x_tables.c:1253
 get_info net/ipv4/netfilter/arp_tables.c:807 [inline]
 do_arpt_get_ctl+0x8a2/0x19c0 net/ipv4/netfilter/arp_tables.c:1441
 nf_getsockopt+0x2ab/0x2d0 net/netfilter/nf_sockopt.c:116
 ip_getsockopt+0x1b34/0x29f0 net/ipv4/ip_sockglue.c:1777
 tcp_getsockopt+0x26c/0x2aa0 net/ipv4/tcp.c:4141
 __sys_getsockopt+0x29b/0x4c0 net/socket.c:2156
 __do_sys_getsockopt net/socket.c:2171 [inline]
 __se_sys_getsockopt net/socket.c:2168 [inline]
 __x64_sys_getsockopt+0xb1/0xc0 net/socket.c:2168
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x460d2a
RSP: 002b:00007ffd211bdbc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
RAX: ffffffffffffffda RBX: 00007ffd211bdbe0 RCX: 0000000000460d2a
RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 0000000000000003 R08: 00007ffd211bdbdc R09: 000000000000000a
R10: 00007ffd211bdbe0 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000032 R15: 00000000000feafa
INFO: task syz-executor.1:8454 blocked for more than 143 seconds.
      Not tainted 5.11.0-rc3-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.1  state:D stack:18968 pid: 8454 ppid:     1 flags:0x00004004
Call Trace:
 context_switch kernel/sched/core.c:4313 [inline]
 __schedule+0xa4d/0xf80 kernel/sched/core.c:5064
 schedule+0x14b/0x200 kernel/sched/core.c:5143
 synchronize_rcu_expedited+0x571/0x6d0 kernel/rcu/tree_exp.h:852
 synchronize_rcu+0xfe/0x190 kernel/rcu/tree.c:3690
 xt_replace_table+0x3cc/0x630 net/netfilter/x_tables.c:1389
 __do_replace+0x195/0xcd0 net/ipv4/netfilter/arp_tables.c:911
 do_replace net/ipv4/netfilter/arp_tables.c:984 [inline]
 do_arpt_set_ctl+0x21fc/0x30d0 net/ipv4/netfilter/arp_tables.c:1418
 nf_setsockopt+0x29f/0x2d0 net/netfilter/nf_sockopt.c:101
 ip_setsockopt+0x2977/0x5450 net/ipv4/ip_sockglue.c:1435
 __sys_setsockopt+0x552/0x990 net/socket.c:2115
 __do_sys_setsockopt net/socket.c:2126 [inline]
 __se_sys_setsockopt net/socket.c:2123 [inline]
 __x64_sys_setsockopt+0xb1/0xc0 net/socket.c:2123
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x460d4a
RSP: 002b:00007ffcf9f61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00007ffcf9f610a0 RCX: 0000000000460d4a
RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 0000000000000003 R08: 0000000000000408 R09: 0000000000004000
R10: 000000000074a490 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000032 R15: 00000000000fea83
INFO: task syz-executor.2:8456 blocked for more than 144 seconds.
      Not tainted 5.11.0-rc3-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.2  state:D stack:19288 pid: 8456 ppid:     1 flags:0x00004004
Call Trace:
 context_switch kernel/sched/core.c:4313 [inline]
 __schedule+0xa4d/0xf80 kernel/sched/core.c:5064
 schedule+0x14b/0x200 kernel/sched/core.c:5143
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:5202
 __mutex_lock_common+0x11ef/0x2ef0 kernel/locking/mutex.c:1033
 __mutex_lock kernel/locking/mutex.c:1103 [inline]
 mutex_lock_nested+0x1a/0x20 kernel/locking/mutex.c:1118
 xt_find_table_lock+0x37/0x410 net/netfilter/x_tables.c:1206
 xt_request_find_table_lock+0x22/0xf0 net/netfilter/x_tables.c:1253
 get_info net/ipv4/netfilter/arp_tables.c:807 [inline]
 do_arpt_get_ctl+0x8a2/0x19c0 net/ipv4/netfilter/arp_tables.c:1441
 nf_getsockopt+0x2ab/0x2d0 net/netfilter/nf_sockopt.c:116
 ip_getsockopt+0x1b34/0x29f0 net/ipv4/ip_sockglue.c:1777
 tcp_getsockopt+0x26c/0x2aa0 net/ipv4/tcp.c:4141
 __sys_getsockopt+0x29b/0x4c0 net/socket.c:2156
 __do_sys_getsockopt net/socket.c:2171 [inline]
 __se_sys_getsockopt net/socket.c:2168 [inline]
 __x64_sys_getsockopt+0xb1/0xc0 net/socket.c:2168
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x460d2a
RSP: 002b:00007ffc63f87d28 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
RAX: ffffffffffffffda RBX: 00007ffc63f87d40 RCX: 0000000000460d2a
RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 0000000000000003 R08: 00007ffc63f87d3c R09: 000000000000000a
R10: 00007ffc63f87d40 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000032 R15: 00000000000fea87
INFO: task syz-executor.4:8460 blocked for more than 145 seconds.
      Not tainted 5.11.0-rc3-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.4  state:D stack:18840 pid: 8460 ppid:     1 flags:0x00004004
Call Trace:
 context_switch kernel/sched/core.c:4313 [inline]
 __schedule+0xa4d/0xf80 kernel/sched/core.c:5064
 schedule+0x14b/0x200 kernel/sched/core.c:5143
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:5202
 __mutex_lock_common+0x11ef/0x2ef0 kernel/locking/mutex.c:1033
 __mutex_lock kernel/locking/mutex.c:1103 [inline]
 mutex_lock_nested+0x1a/0x20 kernel/locking/mutex.c:1118
 xt_find_table_lock+0x37/0x410 net/netfilter/x_tables.c:1206
 xt_request_find_table_lock+0x22/0xf0 net/netfilter/x_tables.c:1253
 get_info net/ipv4/netfilter/arp_tables.c:807 [inline]
 do_arpt_get_ctl+0x8a2/0x19c0 net/ipv4/netfilter/arp_tables.c:1441
 nf_getsockopt+0x2ab/0x2d0 net/netfilter/nf_sockopt.c:116
 ip_getsockopt+0x1b34/0x29f0 net/ipv4/ip_sockglue.c:1777
 tcp_getsockopt+0x26c/0x2aa0 net/ipv4/tcp.c:4141
 __sys_getsockopt+0x29b/0x4c0 net/socket.c:2156
 __do_sys_getsockopt net/socket.c:2171 [inline]
 __se_sys_getsockopt net/socket.c:2168 [inline]
 __x64_sys_getsockopt+0xb1/0xc0 net/socket.c:2168
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x460d2a
RSP: 002b:00007ffea1bde018 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
RAX: ffffffffffffffda RBX: 00007ffea1bde030 RCX: 0000000000460d2a
RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 0000000000000003 R08: 00007ffea1bde02c R09: 000000000000000a
R10: 00007ffea1bde030 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000032 R15: 00000000000fea87
INFO: task syz-executor.5:8473 blocked for more than 145 seconds.
      Not tainted 5.11.0-rc3-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.5  state:D stack:19728 pid: 8473 ppid:     1 flags:0x00004004
Call Trace:
 context_switch kernel/sched/core.c:4313 [inline]
 __schedule+0xa4d/0xf80 kernel/sched/core.c:5064
 schedule+0x14b/0x200 kernel/sched/core.c:5143
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:5202
 __mutex_lock_common+0x11ef/0x2ef0 kernel/locking/mutex.c:1033
 __mutex_lock kernel/locking/mutex.c:1103 [inline]
 mutex_lock_nested+0x1a/0x20 kernel/locking/mutex.c:1118
 xt_find_table_lock+0x37/0x410 net/netfilter/x_tables.c:1206
 xt_request_find_table_lock+0x22/0xf0 net/netfilter/x_tables.c:1253
 get_info net/ipv4/netfilter/arp_tables.c:807 [inline]
 do_arpt_get_ctl+0x8a2/0x19c0 net/ipv4/netfilter/arp_tables.c:1441
 nf_getsockopt+0x2ab/0x2d0 net/netfilter/nf_sockopt.c:116
 ip_getsockopt+0x1b34/0x29f0 net/ipv4/ip_sockglue.c:1777
 tcp_getsockopt+0x26c/0x2aa0 net/ipv4/tcp.c:4141
 __sys_getsockopt+0x29b/0x4c0 net/socket.c:2156
 __do_sys_getsockopt net/socket.c:2171 [inline]
 __se_sys_getsockopt net/socket.c:2168 [inline]
 __x64_sys_getsockopt+0xb1/0xc0 net/socket.c:2168
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x460d2a
RSP: 002b:00007fffd05f00f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
RAX: ffffffffffffffda RBX: 00007fffd05f0110 RCX: 0000000000460d2a
RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 0000000000000003 R08: 00007fffd05f010c R09: 000000000000000a
R10: 00007fffd05f0110 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000032 R15: 00000000000fea84
INFO: task syz-executor.3:10072 blocked for more than 146 seconds.
      Not tainted 5.11.0-rc3-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3  state:D stack:25232 pid:10072 ppid:  8458 flags:0x00004004
Call Trace:
 context_switch kernel/sched/core.c:4313 [inline]
 __schedule+0xa4d/0xf80 kernel/sched/core.c:5064
 schedule+0x14b/0x200 kernel/sched/core.c:5143
 schedule_timeout+0x98/0x2b0 kernel/time/timer.c:1854
 do_wait_for_common+0x2dd/0x450 kernel/sched/completion.c:85
 __wait_for_common kernel/sched/completion.c:106 [inline]
 wait_for_common kernel/sched/completion.c:117 [inline]
 wait_for_completion+0x43/0x50 kernel/sched/completion.c:138
 __synchronize_srcu+0x218/0x2c0 kernel/rcu/srcutree.c:924
 kvm_io_bus_register_dev+0x4ee/0x650 arch/x86/kvm/../../../virt/kvm/kvm_main.c:4448
 kvm_pic_init+0x1a7/0x2e0 arch/x86/kvm/i8259.c:607
 kvm_arch_vm_ioctl+0x13f6/0x21a0 arch/x86/kvm/x86.c:5462
 kvm_vm_ioctl+0x7f3/0x2ef0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3977
 vfs_ioctl fs/ioctl.c:48 [inline]
 __do_sys_ioctl fs/ioctl.c:753 [inline]
 __se_sys_ioctl+0xfb/0x170 fs/ioctl.c:739
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x45e219
RSP: 002b:00007f165f5f1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 000000000045e219
RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000004
RBP: 000000000119bfb8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c
R13: 00007ffcd288960f R14: 00007f165f5f29c0 R15: 000000000119bf8c
INFO: task syz-executor.3:10080 blocked for more than 146 seconds.
      Not tainted 5.11.0-rc3-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3  state:D stack:27632 pid:10080 ppid:  8458 flags:0x00004004
Call Trace:
 context_switch kernel/sched/core.c:4313 [inline]
 __schedule+0xa4d/0xf80 kernel/sched/core.c:5064
 schedule+0x14b/0x200 kernel/sched/core.c:5143
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:5202
 __mutex_lock_common+0x11ef/0x2ef0 kernel/locking/mutex.c:1033
 __mutex_lock kernel/locking/mutex.c:1103 [inline]
 mutex_lock_nested+0x1a/0x20 kernel/locking/mutex.c:1118
 kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:3138 [inline]
 kvm_vm_ioctl+0x85a/0x2ef0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3805
 vfs_ioctl fs/ioctl.c:48 [inline]
 __do_sys_ioctl fs/ioctl.c:753 [inline]
 __se_sys_ioctl+0xfb/0x170 fs/ioctl.c:739
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x45e219
RSP: 002b:00007f165f5d0c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219
RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004
RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034
R13: 00007ffcd288960f R14: 00007f165f5d19c0 R15: 000000000119c034
INFO: task syz-executor.3:10082 blocked for more than 147 seconds.
      Not tainted 5.11.0-rc3-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3  state:D stack:27216 pid:10082 ppid:  8458 flags:0x00004004
Call Trace:
 context_switch kernel/sched/core.c:4313 [inline]
 __schedule+0xa4d/0xf80 kernel/sched/core.c:5064
 schedule+0x14b/0x200 kernel/sched/core.c:5143
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:5202
 __mutex_lock_common+0x11ef/0x2ef0 kernel/locking/mutex.c:1033
 __mutex_lock kernel/locking/mutex.c:1103 [inline]
 mutex_lock_nested+0x1a/0x20 kernel/locking/mutex.c:1118
 kvm_set_memory_region arch/x86/kvm/../../../virt/kvm/kvm_main.c:1396 [inline]
 kvm_vm_ioctl_set_memory_region arch/x86/kvm/../../../virt/kvm/kvm_main.c:1409 [inline]
 kvm_vm_ioctl+0xee0/0x2ef0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3824
 vfs_ioctl fs/ioctl.c:48 [inline]
 __do_sys_ioctl fs/ioctl.c:753 [inline]
 __se_sys_ioctl+0xfb/0x170 fs/ioctl.c:739
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x45e219
RSP: 002b:00007f165f5afc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219
RDX: 0000000020bf7000 RSI: 000000004020ae46 RDI: 0000000000000004
RBP: 000000000119c110 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c0dc
R13: 00007ffcd288960f R14: 00007f165f5b09c0 R15: 000000000119c0dc

Showing all locks held in the system:
3 locks held by kworker/u4:1/24:
 #0: ffff8880b9c34758 (&rq->lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1319 [inline]
 #0: ffff8880b9c34758 (&rq->lock){-.-.}-{2:2}, at: __schedule+0x144/0xf80 kernel/sched/core.c:4981
 #1: ffff8880b9c1ff48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x224/0x5c0 kernel/sched/psi.c:833
 #2: ffff8880b9c246d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x12a/0x270 kernel/time/timer.c:944
1 lock held by khungtaskd/1645:
 #0: ffffffff8c311580 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 arch/x86/pci/mmconfig_64.c:151
1 lock held by kcompactd0/1650:
 #0: ffffffff8c3cb048 (pcpu_drain_mutex){+.+.}-{3:3}, at: __drain_all_pages+0x58/0x680 mm/page_alloc.c:3070
1 lock held by khugepaged/1653:
 #0: ffffffff8c3a1048 (lock#5){+.+.}-{3:3}, at: lru_add_drain_all+0x63/0x930 mm/swap.c:787
1 lock held by in:imklog/8125:
 #0: ffff8880186fcaf0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x2f0 fs/file.c:947
1 lock held by syz-executor.0/8452:
 #0: ffff888147484458 (&xt[i].mutex){+.+.}-{3:3}, at: xt_find_table_lock+0x37/0x410 net/netfilter/x_tables.c:1206
2 locks held by syz-executor.1/8454:
 #0: ffff888147484458 (&xt[i].mutex){+.+.}-{3:3}, at: xt_find_table_lock+0x37/0x410 net/netfilter/x_tables.c:1206
 #1: ffffffff8c315928 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:290 [inline]
 #1: ffffffff8c315928 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x255/0x6d0 kernel/rcu/tree_exp.h:836
1 lock held by syz-executor.2/8456:
 #0: ffff888147484458 (&xt[i].mutex){+.+.}-{3:3}, at: xt_find_table_lock+0x37/0x410 net/netfilter/x_tables.c:1206
1 lock held by syz-executor.4/8460:
 #0: ffff888147484458 (&xt[i].mutex){+.+.}-{3:3}, at: xt_find_table_lock+0x37/0x410 net/netfilter/x_tables.c:1206
1 lock held by syz-executor.5/8473:
 #0: ffff888147484458 (&xt[i].mutex){+.+.}-{3:3}, at: xt_find_table_lock+0x37/0x410 net/netfilter/x_tables.c:1206
2 locks held by kworker/0:5/9808:
2 locks held by syz-executor.3/10072:
 #0: ffffc900011b5a70 (&kvm->lock){+.+.}-{3:3}, at: kvm_arch_vm_ioctl+0x4c7/0x21a0 arch/x86/kvm/x86.c:5452
 #1: ffffc900011b50a8 (&kvm->slots_lock){+.+.}-{3:3}, at: kvm_pic_init+0x18d/0x2e0 arch/x86/kvm/i8259.c:606
1 lock held by syz-executor.3/10080:
 #0: ffffc900011b5a70 (&kvm->lock){+.+.}-{3:3}, at: kvm_vm_ioctl_create_vcpu arch/x86/kvm/../../../virt/kvm/kvm_main.c:3138 [inline]
 #0: ffffc900011b5a70 (&kvm->lock){+.+.}-{3:3}, at: kvm_vm_ioctl+0x85a/0x2ef0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3805
1 lock held by syz-executor.3/10082:
 #0: ffffc900011b50a8 (&kvm->slots_lock){+.+.}-{3:3}, at: kvm_set_memory_region arch/x86/kvm/../../../virt/kvm/kvm_main.c:1396 [inline]
 #0: ffffc900011b50a8 (&kvm->slots_lock){+.+.}-{3:3}, at: kvm_vm_ioctl_set_memory_region arch/x86/kvm/../../../virt/kvm/kvm_main.c:1409 [inline]
 #0: ffffc900011b50a8 (&kvm->slots_lock){+.+.}-{3:3}, at: kvm_vm_ioctl+0xee0/0x2ef0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3824

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 1645 Comm: khungtaskd Not tainted 5.11.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x183/0x22e lib/dump_stack.c:120
 nmi_cpu_backtrace+0x16c/0x190 lib/nmi_backtrace.c:105
 nmi_trigger_cpumask_backtrace+0x191/0x2f0 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:209 [inline]
 watchdog+0xce9/0xd30 kernel/hung_task.c:294
 kthread+0x39a/0x3c0 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 10169 Comm: kworker/u4:6 Not tainted 5.11.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: bat_events batadv_nc_worker
RIP: 0010:__lock_acquire+0x42be/0x5e40 kernel/locking/lockdep.c:4859
Code: 00 00 00 00 49 b8 00 00 00 00 00 fc ff df 48 c7 84 24 00 01 00 00 0e 36 e0 45 48 8b 84 24 f8 00 00 00 41 c7 04 00 00 00 00 00 <49> c7 44 00 14 00 00 00 00 41 c7 44 00 2c 00 00 00 00 49 c7 44 00
RSP: 0018:ffffc90018d97660 EFLAGS: 00000083
RAX: 1ffff920031b2eec RBX: ffff888016f70980 RCX: ffffffff815f6dbe
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8f2a0480
RBP: ffffc90018d979f0 R08: dffffc0000000000 R09: fffffbfff1e54091
R10: fffffbfff1e54091 R11: 0000000000000000 R12: 1d13e53585cb414b
R13: 1ffff11002dee13f R14: 0000000085cb414b R15: ffff888016f70978
FS:  0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f74af5f9000 CR3: 0000000011868000 CR4: 00000000001526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 lock_acquire+0x174/0x6c0 kernel/locking/lockdep.c:5437
 rcu_lock_acquire+0x2a/0x30 include/linux/rcupdate.h:259
 rcu_read_lock include/linux/rcupdate.h:648 [inline]
 batadv_nc_process_nc_paths+0xc6/0x380 net/batman-adv/network-coding.c:683
 batadv_nc_worker+0x4e5/0x5c0 net/batman-adv/network-coding.c:731
 process_one_work+0x833/0x10c0 kernel/workqueue.c:2275
 worker_thread+0xaa4/0x1460 kernel/workqueue.c:2421
 kthread+0x39a/0x3c0 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/01/16 01:33 upstream f4e087c666f5 65a7a854 .config console log report info ci-upstream-kasan-gce-smack-root
* Struck through repros no longer work on HEAD.