IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready NOHZ: local_softirq_pending 08 NOHZ: local_softirq_pending 08 NOHZ: local_softirq_pending 08 INFO: task kworker/0:3:8065 blocked for more than 140 seconds. Not tainted 4.19.112-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/0:3 D26040 8065 2 0x80000000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: schedule+0x8d/0x1b0 kernel/sched/core.c:3559 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3617 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072 addrconf_dad_work+0xa9/0x1110 net/ipv6/addrconf.c:3984 process_one_work+0x91f/0x1640 kernel/workqueue.c:2155 worker_thread+0x96/0xe20 kernel/workqueue.c:2298 kthread+0x34a/0x420 kernel/kthread.c:246 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 INFO: task kworker/1:3:8066 blocked for more than 140 seconds. Not tainted 4.19.112-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/1:3 D26544 8066 2 0x80000000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: schedule+0x8d/0x1b0 kernel/sched/core.c:3559 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3617 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072 addrconf_dad_work+0xa9/0x1110 net/ipv6/addrconf.c:3984 process_one_work+0x91f/0x1640 kernel/workqueue.c:2155 worker_thread+0x96/0xe20 kernel/workqueue.c:2298 kthread+0x34a/0x420 kernel/kthread.c:246 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 INFO: task syz-executor.3:13488 blocked for more than 140 seconds. Not tainted 4.19.112-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.3 D28720 13488 8019 0x00000004 Call Trace: schedule+0x8d/0x1b0 kernel/sched/core.c:3559 exp_funnel_lock kernel/rcu/tree_exp.h:320 [inline] _synchronize_rcu_expedited+0x64f/0x750 kernel/rcu/tree_exp.h:667 synchronize_net+0x37/0x50 net/core/dev.c:9249 dev_deactivate_many+0x456/0xb30 net/sched/sch_generic.c:1202 __dev_close_many+0x128/0x2e0 net/core/dev.c:1476 __dev_close net/core/dev.c:1501 [inline] __dev_change_flags+0x253/0x620 net/core/dev.c:7661 dev_change_flags+0x7e/0x140 net/core/dev.c:7732 devinet_ioctl+0x1355/0x1c20 net/ipv4/devinet.c:1100 inet_ioctl+0x1f4/0x370 net/ipv4/af_inet.c:954 packet_ioctl+0xb9/0x2a0 net/packet/af_packet.c:4126 sock_do_ioctl+0xd8/0x2f0 net/socket.c:950 sock_ioctl+0x325/0x610 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcda/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45c849 Code: 0f 85 19 01 00 00 48 8b 84 24 d8 00 00 00 48 89 48 18 48 8d 7c 24 68 0f 57 c0 48 8d 7f e0 48 89 6c 24 f0 48 8d 6c 24 f0 e8 95 <84> ff ff 48 8b 6d 00 48 8d 05 29 46 18 00 48 89 04 24 48 8b 4c 24 RSP: 002b:00007fa6f5c92c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fa6f5c936d4 RCX: 000000000045c849 RDX: 0000000020000000 RSI: 0000000000008914 RDI: 0000000000000003 RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000000004a5 R14: 00000000004c7693 R15: 000000000076bf0c INFO: task syz-executor.0:13492 blocked for more than 140 seconds. Not tainted 4.19.112-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.0 D26928 13492 8022 0x00000004 Call Trace: schedule+0x8d/0x1b0 kernel/sched/core.c:3559 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3617 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072 devinet_ioctl+0x1c0/0x1c20 net/ipv4/devinet.c:1027 inet_ioctl+0x1f4/0x370 net/ipv4/af_inet.c:954 packet_ioctl+0xb9/0x2a0 net/packet/af_packet.c:4126 sock_do_ioctl+0xd8/0x2f0 net/socket.c:950 sock_ioctl+0x325/0x610 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcda/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45c849 Code: 0f 85 19 01 00 00 48 8b 84 24 d8 00 00 00 48 89 48 18 48 8d 7c 24 68 0f 57 c0 48 8d 7f e0 48 89 6c 24 f0 48 8d 6c 24 f0 e8 95 <84> ff ff 48 8b 6d 00 48 8d 05 29 46 18 00 48 89 04 24 48 8b 4c 24 RSP: 002b:00007fe6c35f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fe6c35f66d4 RCX: 000000000045c849 RDX: 0000000020000000 RSI: 0000000000008914 RDI: 0000000000000003 RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000000004a5 R14: 00000000004c7693 R15: 000000000076bf0c INFO: task syz-executor.5:13499 blocked for more than 140 seconds. Not tainted 4.19.112-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.5 D26928 13499 8024 0x00000004 Call Trace: schedule+0x8d/0x1b0 kernel/sched/core.c:3559 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3617 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072 devinet_ioctl+0x1c0/0x1c20 net/ipv4/devinet.c:1027 inet_ioctl+0x1f4/0x370 net/ipv4/af_inet.c:954 packet_ioctl+0xb9/0x2a0 net/packet/af_packet.c:4126 sock_do_ioctl+0xd8/0x2f0 net/socket.c:950 sock_ioctl+0x325/0x610 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcda/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45c849 Code: 0f 85 19 01 00 00 48 8b 84 24 d8 00 00 00 48 89 48 18 48 8d 7c 24 68 0f 57 c0 48 8d 7f e0 48 89 6c 24 f0 48 8d 6c 24 f0 e8 95 <84> ff ff 48 8b 6d 00 48 8d 05 29 46 18 00 48 89 04 24 48 8b 4c 24 RSP: 002b:00007f99aa1c5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f99aa1c66d4 RCX: 000000000045c849 RDX: 0000000020000000 RSI: 0000000000008914 RDI: 0000000000000003 RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000000004a5 R14: 00000000004c7693 R15: 000000000076bf0c INFO: task syz-executor.5:13501 blocked for more than 140 seconds. Not tainted 4.19.112-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.5 D29344 13501 8024 0x00000004 Call Trace: schedule+0x8d/0x1b0 kernel/sched/core.c:3559 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3617 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072 devinet_ioctl+0x1c0/0x1c20 net/ipv4/devinet.c:1027 inet_ioctl+0x1f4/0x370 net/ipv4/af_inet.c:954 packet_ioctl+0xb9/0x2a0 net/packet/af_packet.c:4126 sock_do_ioctl+0xd8/0x2f0 net/socket.c:950 sock_ioctl+0x325/0x610 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcda/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45c849 Code: 0f 85 19 01 00 00 48 8b 84 24 d8 00 00 00 48 89 48 18 48 8d 7c 24 68 0f 57 c0 48 8d 7f e0 48 89 6c 24 f0 48 8d 6c 24 f0 e8 95 <84> ff ff 48 8b 6d 00 48 8d 05 29 46 18 00 48 89 04 24 48 8b 4c 24 RSP: 002b:00007f99aa183c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f99aa1846d4 RCX: 000000000045c849 RDX: 0000000020000000 RSI: 0000000000008914 RDI: 0000000000000004 RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000000004a5 R14: 00000000004c7693 R15: 000000000076c04c INFO: task syz-executor.1:13504 blocked for more than 140 seconds. Not tainted 4.19.112-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.1 D28544 13504 8027 0x00000004 Call Trace: schedule+0x8d/0x1b0 kernel/sched/core.c:3559 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3617 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072 devinet_ioctl+0x1c0/0x1c20 net/ipv4/devinet.c:1027 inet_ioctl+0x1f4/0x370 net/ipv4/af_inet.c:954 packet_ioctl+0xb9/0x2a0 net/packet/af_packet.c:4126 sock_do_ioctl+0xd8/0x2f0 net/socket.c:950 sock_ioctl+0x325/0x610 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcda/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45c849 Code: 0f 85 19 01 00 00 48 8b 84 24 d8 00 00 00 48 89 48 18 48 8d 7c 24 68 0f 57 c0 48 8d 7f e0 48 89 6c 24 f0 48 8d 6c 24 f0 e8 95 <84> ff ff 48 8b 6d 00 48 8d 05 29 46 18 00 48 89 04 24 48 8b 4c 24 RSP: 002b:00007f1b4d063c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f1b4d0646d4 RCX: 000000000045c849 RDX: 0000000020000000 RSI: 0000000000008914 RDI: 0000000000000003 RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000000004a5 R14: 00000000004c7693 R15: 000000000076bf0c INFO: task syz-executor.1:13506 blocked for more than 140 seconds. Not tainted 4.19.112-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.1 D29344 13506 8027 0x00000004 Call Trace: schedule+0x8d/0x1b0 kernel/sched/core.c:3559 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3617 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072 devinet_ioctl+0x1c0/0x1c20 net/ipv4/devinet.c:1027 inet_ioctl+0x1f4/0x370 net/ipv4/af_inet.c:954 packet_ioctl+0xb9/0x2a0 net/packet/af_packet.c:4126 sock_do_ioctl+0xd8/0x2f0 net/socket.c:950 sock_ioctl+0x325/0x610 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcda/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45c849 Code: 0f 85 19 01 00 00 48 8b 84 24 d8 00 00 00 48 89 48 18 48 8d 7c 24 68 0f 57 c0 48 8d 7f e0 48 89 6c 24 f0 48 8d 6c 24 f0 e8 95 <84> ff ff 48 8b 6d 00 48 8d 05 29 46 18 00 48 89 04 24 48 8b 4c 24 RSP: 002b:00007f1b4d042c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f1b4d0436d4 RCX: 000000000045c849 RDX: 0000000020000000 RSI: 0000000000008914 RDI: 0000000000000004 RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000000004a5 R14: 00000000004c7693 R15: 000000000076bfac INFO: task syz-executor.1:13507 blocked for more than 140 seconds. Not tainted 4.19.112-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.1 D29344 13507 8027 0x00000004 Call Trace: schedule+0x8d/0x1b0 kernel/sched/core.c:3559 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3617 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072 devinet_ioctl+0x1c0/0x1c20 net/ipv4/devinet.c:1027 inet_ioctl+0x1f4/0x370 net/ipv4/af_inet.c:954 packet_ioctl+0xb9/0x2a0 net/packet/af_packet.c:4126 sock_do_ioctl+0xd8/0x2f0 net/socket.c:950 sock_ioctl+0x325/0x610 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcda/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45c849 Code: 0f 85 19 01 00 00 48 8b 84 24 d8 00 00 00 48 89 48 18 48 8d 7c 24 68 0f 57 c0 48 8d 7f e0 48 89 6c 24 f0 48 8d 6c 24 f0 e8 95 <84> ff ff 48 8b 6d 00 48 8d 05 29 46 18 00 48 89 04 24 48 8b 4c 24 RSP: 002b:00007f1b4d021c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f1b4d0226d4 RCX: 000000000045c849 RDX: 0000000020000000 RSI: 0000000000008914 RDI: 0000000000000004 RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000000004a5 R14: 00000000004c7693 R15: 000000000076c04c INFO: task syz-executor.2:13511 blocked for more than 140 seconds. Not tainted 4.19.112-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.2 D29344 13511 8017 0x00000004 Call Trace: schedule+0x8d/0x1b0 kernel/sched/core.c:3559 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3617 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072 devinet_ioctl+0x1c0/0x1c20 net/ipv4/devinet.c:1027 inet_ioctl+0x1f4/0x370 net/ipv4/af_inet.c:954 packet_ioctl+0xb9/0x2a0 net/packet/af_packet.c:4126 sock_do_ioctl+0xd8/0x2f0 net/socket.c:950 sock_ioctl+0x325/0x610 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcda/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45c849 Code: 0f 85 19 01 00 00 48 8b 84 24 d8 00 00 00 48 89 48 18 48 8d 7c 24 68 0f 57 c0 48 8d 7f e0 48 89 6c 24 f0 48 8d 6c 24 f0 e8 95 <84> ff ff 48 8b 6d 00 48 8d 05 29 46 18 00 48 89 04 24 48 8b 4c 24 RSP: 002b:00007f87a47a6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f87a47a76d4 RCX: 000000000045c849 RDX: 0000000020000000 RSI: 0000000000008914 RDI: 0000000000000003 RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000000004a5 R14: 00000000004c7693 R15: 000000000076bf0c Showing all locks held in the system: 1 lock held by khungtaskd/1079: #0: 000000008a02677a (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 kernel/locking/lockdep.c:4436 3 locks held by kworker/1:2/2914: #0: 00000000fa2670a7 ((wq_completion)"events"){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 00000000fa2670a7 ((wq_completion)"events"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000fa2670a7 ((wq_completion)"events"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] #0: 00000000fa2670a7 ((wq_completion)"events"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] #0: 00000000fa2670a7 ((wq_completion)"events"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] #0: 00000000fa2670a7 ((wq_completion)"events"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: 00000000fa2670a7 ((wq_completion)"events"){+.+.}, at: process_one_work+0x81a/0x1640 kernel/workqueue.c:2126 #1: 00000000db55ad48 (deferred_process_work){+.+.}, at: process_one_work+0x84e/0x1640 kernel/workqueue.c:2130 #2: 000000005597e47f (rtnl_mutex){+.+.}, at: switchdev_deferred_process_work+0xa/0x20 net/switchdev/switchdev.c:150 1 lock held by rsyslogd/7846: #0: 00000000164e18f1 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xe3/0x100 fs/file.c:767 2 locks held by getty/7967: #0: 0000000060a6853d (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: 00000000d84ffb02 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 drivers/tty/n_tty.c:2154 2 locks held by getty/7968: #0: 0000000054bb44a0 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: 00000000a5d35433 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 drivers/tty/n_tty.c:2154 2 locks held by getty/7969: #0: 00000000bc07ff89 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: 00000000f4be0c72 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 drivers/tty/n_tty.c:2154 2 locks held by getty/7970: #0: 00000000075941a0 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: 000000005fd0a29f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 drivers/tty/n_tty.c:2154 2 locks held by getty/7971: #0: 000000003fb10065 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: 00000000d86a9a31 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 drivers/tty/n_tty.c:2154 2 locks held by getty/7972: #0: 00000000ce164572 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: 000000003d166133 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 drivers/tty/n_tty.c:2154 2 locks held by getty/7973: #0: 0000000073a94bdc (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: 00000000c8902fba (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 drivers/tty/n_tty.c:2154 3 locks held by kworker/0:3/8065: #0: 00000000db0a3836 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 00000000db0a3836 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000db0a3836 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] #0: 00000000db0a3836 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] #0: 00000000db0a3836 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] #0: 00000000db0a3836 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: 00000000db0a3836 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: process_one_work+0x81a/0x1640 kernel/workqueue.c:2126 #1: 0000000068d626b9 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}, at: process_one_work+0x84e/0x1640 kernel/workqueue.c:2130 #2: 000000005597e47f (rtnl_mutex){+.+.}, at: addrconf_dad_work+0xa9/0x1110 net/ipv6/addrconf.c:3984 3 locks held by kworker/1:3/8066: #0: 00000000db0a3836 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 00000000db0a3836 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000db0a3836 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] #0: 00000000db0a3836 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] #0: 00000000db0a3836 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] #0: 00000000db0a3836 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: 00000000db0a3836 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: process_one_work+0x81a/0x1640 kernel/workqueue.c:2126 #1: 0000000055e39920 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}, at: process_one_work+0x84e/0x1640 kernel/workqueue.c:2130 #2: 000000005597e47f (rtnl_mutex){+.+.}, at: addrconf_dad_work+0xa9/0x1110 net/ipv6/addrconf.c:3984 1 lock held by syz-executor.3/13488: #0: 000000005597e47f (rtnl_mutex){+.+.}, at: devinet_ioctl+0x1c0/0x1c20 net/ipv4/devinet.c:1027 1 lock held by syz-executor.0/13492: #0: 000000005597e47f (rtnl_mutex){+.+.}, at: devinet_ioctl+0x1c0/0x1c20 net/ipv4/devinet.c:1027 1 lock held by syz-executor.5/13499: #0: 000000005597e47f (rtnl_mutex){+.+.}, at: devinet_ioctl+0x1c0/0x1c20 net/ipv4/devinet.c:1027 1 lock held by syz-executor.5/13501: #0: 000000005597e47f (rtnl_mutex){+.+.}, at: devinet_ioctl+0x1c0/0x1c20 net/ipv4/devinet.c:1027 1 lock held by syz-executor.1/13504: #0: 000000005597e47f (rtnl_mutex){+.+.}, at: devinet_ioctl+0x1c0/0x1c20 net/ipv4/devinet.c:1027 1 lock held by syz-executor.1/13506: #0: 000000005597e47f (rtnl_mutex){+.+.}, at: devinet_ioctl+0x1c0/0x1c20 net/ipv4/devinet.c:1027 1 lock held by syz-executor.1/13507: #0: 000000005597e47f (rtnl_mutex){+.+.}, at: devinet_ioctl+0x1c0/0x1c20 net/ipv4/devinet.c:1027 1 lock held by syz-executor.2/13511: #0: 000000005597e47f (rtnl_mutex){+.+.}, at: devinet_ioctl+0x1c0/0x1c20 net/ipv4/devinet.c:1027 1 lock held by syz-executor.2/13512: #0: 000000005597e47f (rtnl_mutex){+.+.}, at: devinet_ioctl+0x1c0/0x1c20 net/ipv4/devinet.c:1027 1 lock held by syz-executor.2/13513: #0: 000000005597e47f (rtnl_mutex){+.+.}, at: devinet_ioctl+0x1c0/0x1c20 net/ipv4/devinet.c:1027 1 lock held by syz-executor.2/13522: #0: 000000005597e47f (rtnl_mutex){+.+.}, at: devinet_ioctl+0x1c0/0x1c20 net/ipv4/devinet.c:1027 1 lock held by syz-executor.4/13517: #0: 000000005597e47f (rtnl_mutex){+.+.}, at: devinet_ioctl+0x1c0/0x1c20 net/ipv4/devinet.c:1027 1 lock held by syz-executor.4/13518: #0: 000000005597e47f (rtnl_mutex){+.+.}, at: devinet_ioctl+0x1c0/0x1c20 net/ipv4/devinet.c:1027 1 lock held by syz-executor.4/13521: #0: 000000005597e47f (rtnl_mutex){+.+.}, at: devinet_ioctl+0x1c0/0x1c20 net/ipv4/devinet.c:1027 1 lock held by syz-executor.4/13525: #0: 000000005597e47f (rtnl_mutex){+.+.}, at: devinet_ioctl+0x1c0/0x1c20 net/ipv4/devinet.c:1027 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 1079 Comm: khungtaskd Not tainted 4.19.112-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x188/0x20d lib/dump_stack.c:118 nmi_cpu_backtrace.cold+0x63/0xa2 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1a6/0x1eb lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline] watchdog+0x962/0xe40 kernel/hung_task.c:287 kthread+0x34a/0x420 kernel/kthread.c:246 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:60