INFO: task syz-executor.0:14111 blocked for more than 143 seconds. Not tainted 5.4.0-rc1+ #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.0 D28320 14111 8816 0x00000004 Call Trace: context_switch kernel/sched/core.c:3384 [inline] __schedule+0x94f/0x1e70 kernel/sched/core.c:4069 schedule+0xd9/0x260 kernel/sched/core.c:4136 exp_funnel_lock kernel/rcu/tree_exp.h:308 [inline] synchronize_rcu_expedited+0x57f/0x5f0 kernel/rcu/tree_exp.h:817 synchronize_net+0x3b/0x60 net/core/dev.c:9319 __unregister_prot_hook net/packet/af_packet.c:341 [inline] __unregister_prot_hook+0x274/0x2f0 net/packet/af_packet.c:324 packet_do_bind+0x6be/0xc50 net/packet/af_packet.c:3116 packet_bind+0x15d/0x1c0 net/packet/af_packet.c:3199 __sys_bind+0x239/0x290 net/socket.c:1647 __do_sys_bind net/socket.c:1658 [inline] __se_sys_bind net/socket.c:1656 [inline] __x64_sys_bind+0x73/0xb0 net/socket.c:1656 do_syscall_64+0xfa/0x760 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x459a59 Code: Bad RIP value. RSP: 002b:00007ff772cbbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 RDX: 0000000000000014 RSI: 0000000020000040 RDI: 0000000000000003 RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff772cbc6d4 R13: 00000000004bfc55 R14: 00000000004d1d60 R15: 00000000ffffffff INFO: task syz-executor.5:14109 blocked for more than 143 seconds. Not tainted 5.4.0-rc1+ #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.5 D28656 14109 8830 0x00000004 Call Trace: context_switch kernel/sched/core.c:3384 [inline] __schedule+0x94f/0x1e70 kernel/sched/core.c:4069 schedule+0xd9/0x260 kernel/sched/core.c:4136 exp_funnel_lock kernel/rcu/tree_exp.h:308 [inline] synchronize_rcu_expedited+0x57f/0x5f0 kernel/rcu/tree_exp.h:817 synchronize_net+0x3b/0x60 net/core/dev.c:9319 __unregister_prot_hook net/packet/af_packet.c:341 [inline] __unregister_prot_hook+0x274/0x2f0 net/packet/af_packet.c:324 packet_do_bind+0x6be/0xc50 net/packet/af_packet.c:3116 packet_bind+0x15d/0x1c0 net/packet/af_packet.c:3199 __sys_bind+0x239/0x290 net/socket.c:1647 __do_sys_bind net/socket.c:1658 [inline] __se_sys_bind net/socket.c:1656 [inline] __x64_sys_bind+0x73/0xb0 net/socket.c:1656 do_syscall_64+0xfa/0x760 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x459a59 Code: Bad RIP value. RSP: 002b:00007f7ebcaf7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 RDX: 0000000000000014 RSI: 0000000020000640 RDI: 0000000000000006 RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ebcaf86d4 R13: 00000000004bfc55 R14: 00000000004d1d60 R15: 00000000ffffffff INFO: task syz-executor.3:14108 blocked for more than 143 seconds. Not tainted 5.4.0-rc1+ #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.3 D29712 14108 8824 0x00000004 Call Trace: context_switch kernel/sched/core.c:3384 [inline] __schedule+0x94f/0x1e70 kernel/sched/core.c:4069 schedule+0xd9/0x260 kernel/sched/core.c:4136 exp_funnel_lock kernel/rcu/tree_exp.h:308 [inline] synchronize_rcu_expedited+0x57f/0x5f0 kernel/rcu/tree_exp.h:817 synchronize_net+0x3b/0x60 net/core/dev.c:9319 __unregister_prot_hook net/packet/af_packet.c:341 [inline] __unregister_prot_hook+0x274/0x2f0 net/packet/af_packet.c:324 packet_do_bind+0x6be/0xc50 net/packet/af_packet.c:3116 packet_bind+0x15d/0x1c0 net/packet/af_packet.c:3199 __sys_bind+0x239/0x290 net/socket.c:1647 __do_sys_bind net/socket.c:1658 [inline] __se_sys_bind net/socket.c:1656 [inline] __x64_sys_bind+0x73/0xb0 net/socket.c:1656 do_syscall_64+0xfa/0x760 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x459a59 Code: Bad RIP value. RSP: 002b:00007f8c9d02cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 RDX: 0000000000000014 RSI: 0000000020000040 RDI: 0000000000000003 RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8c9d02d6d4 R13: 00000000004bfc55 R14: 00000000004d1d60 R15: 00000000ffffffff Showing all locks held in the system: 1 lock held by khungtaskd/1065: #0: ffffffff88faae00 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e kernel/locking/lockdep.c:5337 2 locks held by getty/8778: #0: ffff888094953450 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f252e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8779: #0: ffff888091994e50 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f312e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8780: #0: ffff8880a1cb2dd0 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f1d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8781: #0: ffff888094952350 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f2d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8782: #0: ffff888094952bd0 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f292e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8783: #0: ffff8880a1cb3650 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f112e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8784: #0: ffff8880919945d0 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005ef92e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 1 lock held by syz-executor.0/14111: #0: ffff88805fa206d0 (sk_lock-AF_PACKET){+.+.}, at: lock_sock include/net/sock.h:1527 [inline] #0: ffff88805fa206d0 (sk_lock-AF_PACKET){+.+.}, at: packet_do_bind+0x33/0xc50 net/packet/af_packet.c:3078 1 lock held by syz-executor.5/14109: #0: ffff888099566610 (sk_lock-AF_PACKET){+.+.}, at: lock_sock include/net/sock.h:1527 [inline] #0: ffff888099566610 (sk_lock-AF_PACKET){+.+.}, at: packet_do_bind+0x33/0xc50 net/packet/af_packet.c:3078 1 lock held by syz-executor.3/14108: #0: ffff88809613c510 (sk_lock-AF_PACKET){+.+.}, at: lock_sock include/net/sock.h:1527 [inline] #0: ffff88809613c510 (sk_lock-AF_PACKET){+.+.}, at: packet_do_bind+0x33/0xc50 net/packet/af_packet.c:3078 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 1065 Comm: khungtaskd Not tainted 5.4.0-rc1+ #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x172/0x1f0 lib/dump_stack.c:113 nmi_cpu_backtrace.cold+0x70/0xb2 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x23b/0x28b lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:205 [inline] watchdog+0x9d0/0xef0 kernel/hung_task.c:289 kthread+0x361/0x430 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 34 Comm: kworker/u4:3 Not tainted 5.4.0-rc1+ #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: bat_events batadv_nc_worker RIP: 0010:__kasan_check_read+0x8/0x20 mm/kasan/common.c:92 Code: c5 9d ff ff 48 8b 73 58 89 c2 48 c7 c7 d0 3c a8 88 f7 da e8 ce 61 ae ff e9 0e ef ff ff 90 90 90 90 90 55 89 f6 31 d2 48 89 e5 <48> 8b 4d 08 e8 cf 26 00 00 5d c3 0f 1f 00 66 2e 0f 1f 84 00 00 00 RSP: 0018:ffff8880a9bbfb10 EFLAGS: 00000046 RAX: 0000000000000016 RBX: 0000000000000586 RCX: 0000000000000002 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8a770a10 RBP: ffff8880a9bbfb10 R08: 1ffffffff14ee142 R09: fffffbfff14ee143 R10: fffffbfff14ee142 R11: ffffffff8a770a17 R12: 0000000000000006 R13: ffff8880a9baca98 R14: dffffc0000000000 R15: ffff8880a9baca98 FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000459a2f CR3: 0000000086b1c000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: test_bit include/asm-generic/bitops-instrumented.h:237 [inline] hlock_class kernel/locking/lockdep.c:163 [inline] mark_lock+0xc2/0x1220 kernel/locking/lockdep.c:3643 mark_held_locks+0xa4/0xf0 kernel/locking/lockdep.c:3360 __trace_hardirqs_on_caller kernel/locking/lockdep.c:3389 [inline] lockdep_hardirqs_on+0x421/0x5e0 kernel/locking/lockdep.c:3434 trace_hardirqs_on+0x67/0x240 kernel/trace/trace_preemptirq.c:31 __local_bh_enable_ip+0x15a/0x270 kernel/softirq.c:194 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:176 [inline] _raw_spin_unlock_bh+0x31/0x40 kernel/locking/spinlock.c:207 spin_unlock_bh include/linux/spinlock.h:383 [inline] batadv_nc_purge_paths+0x265/0x370 net/batman-adv/network-coding.c:470 batadv_nc_worker+0x2cf/0x760 net/batman-adv/network-coding.c:721 process_one_work+0x9af/0x1740 kernel/workqueue.c:2269 worker_thread+0x98/0xe40 kernel/workqueue.c:2415 kthread+0x361/0x430 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352