INFO: task dhcpcd:4724 blocked for more than 143 seconds. Not tainted 6.8.0-rc4-syzkaller-00005-gc664e16bb1ba #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:dhcpcd state:D stack:25600 pid:4724 tgid:4724 ppid:1 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5400 [inline] __schedule+0xf12/0x5c60 kernel/sched/core.c:6727 __schedule_loop kernel/sched/core.c:6802 [inline] schedule+0xe9/0x280 kernel/sched/core.c:6817 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6874 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x5bd/0x9d0 kernel/locking/mutex.c:752 vlan_ioctl_handler+0xcf/0xa80 net/8021q/vlan.c:553 sock_ioctl+0x4c4/0x6c0 net/socket.c:1305 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:871 [inline] __se_sys_ioctl fs/ioctl.c:857 [inline] __x64_sys_ioctl+0x193/0x220 fs/ioctl.c:857 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xd5/0x270 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x6f/0x77 RIP: 0033:0x7f8b94955d49 RSP: 002b:00007ffcb452f5c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 000055e72040cc50 RCX: 00007f8b94955d49 RDX: 00007ffcb452f5d0 RSI: 0000000000008982 RDI: 0000000000000011 RBP: 0000000000000002 R08: 0000000000000008 R09: 0000000000000000 R10: 00007ffcb453fc50 R11: 0000000000000246 R12: 00007ffcb452f5d0 R13: 00007ffcb452f690 R14: 000055e72040cc50 R15: 000055e720462e70 INFO: task kworker/0:5:20220 blocked for more than 143 seconds. Not tainted 6.8.0-rc4-syzkaller-00005-gc664e16bb1ba #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:5 state:D stack:26368 pid:20220 tgid:20220 ppid:2 flags:0x00004000 Workqueue: events linkwatch_event Call Trace: context_switch kernel/sched/core.c:5400 [inline] __schedule+0xf12/0x5c60 kernel/sched/core.c:6727 __schedule_loop kernel/sched/core.c:6802 [inline] schedule+0xe9/0x280 kernel/sched/core.c:6817 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6874 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x5bd/0x9d0 kernel/locking/mutex.c:752 linkwatch_event+0x51/0xc0 net/core/link_watch.c:281 process_one_work+0x889/0x15e0 kernel/workqueue.c:2633 process_scheduled_works kernel/workqueue.c:2706 [inline] worker_thread+0x8b9/0x12a0 kernel/workqueue.c:2787 kthread+0x2c6/0x3b0 kernel/kthread.c:388 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:242 INFO: task syz-executor.0:20253 blocked for more than 143 seconds. Not tainted 6.8.0-rc4-syzkaller-00005-gc664e16bb1ba #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:23648 pid:20253 tgid:20253 ppid:1 flags:0x00000006 Call Trace: context_switch kernel/sched/core.c:5400 [inline] __schedule+0xf12/0x5c60 kernel/sched/core.c:6727 __schedule_loop kernel/sched/core.c:6802 [inline] schedule+0xe9/0x280 kernel/sched/core.c:6817 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6874 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x5bd/0x9d0 kernel/locking/mutex.c:752 rtnl_lock net/core/rtnetlink.c:79 [inline] rtnetlink_rcv_msg+0x372/0xe10 net/core/rtnetlink.c:6612 netlink_rcv_skb+0x16b/0x440 net/netlink/af_netlink.c:2543 netlink_unicast_kernel net/netlink/af_netlink.c:1341 [inline] netlink_unicast+0x542/0x820 net/netlink/af_netlink.c:1367 netlink_sendmsg+0x8bb/0xd70 net/netlink/af_netlink.c:1908 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x47f/0x4e0 net/socket.c:2191 __do_sys_sendto net/socket.c:2203 [inline] __se_sys_sendto net/socket.c:2199 [inline] __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2199 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xd5/0x270 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x6f/0x77 RIP: 0033:0x7f21a287fa9c RSP: 002b:00007ffeb672e6e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f21a34d4620 RCX: 00007f21a287fa9c RDX: 0000000000000050 RSI: 00007f21a34d4670 RDI: 0000000000000003 RBP: 0000000000000000 R08: 00007ffeb672e734 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f21a34d4670 R15: 0000000000000000 INFO: task syz-executor.2:20259 blocked for more than 144 seconds. Not tainted 6.8.0-rc4-syzkaller-00005-gc664e16bb1ba #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:23968 pid:20259 tgid:20259 ppid:1 flags:0x00000006 Call Trace: context_switch kernel/sched/core.c:5400 [inline] __schedule+0xf12/0x5c60 kernel/sched/core.c:6727 __schedule_loop kernel/sched/core.c:6802 [inline] schedule+0xe9/0x280 kernel/sched/core.c:6817 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6874 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x5bd/0x9d0 kernel/locking/mutex.c:752 rtnl_lock net/core/rtnetlink.c:79 [inline] rtnetlink_rcv_msg+0x372/0xe10 net/core/rtnetlink.c:6612 netlink_rcv_skb+0x16b/0x440 net/netlink/af_netlink.c:2543 netlink_unicast_kernel net/netlink/af_netlink.c:1341 [inline] netlink_unicast+0x542/0x820 net/netlink/af_netlink.c:1367 netlink_sendmsg+0x8bb/0xd70 net/netlink/af_netlink.c:1908 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x47f/0x4e0 net/socket.c:2191 __do_sys_sendto net/socket.c:2203 [inline] __se_sys_sendto net/socket.c:2199 [inline] __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2199 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xd5/0x270 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x6f/0x77 RIP: 0033:0x7fe07a27fa9c RSP: 002b:00007fffcea7b1f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007fe07aed4620 RCX: 00007fe07a27fa9c RDX: 0000000000000044 RSI: 00007fe07aed4670 RDI: 0000000000000003 RBP: 0000000000000000 R08: 00007fffcea7b244 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 R13: 0000000000000000 R14: 00007fe07aed4670 R15: 0000000000000000 INFO: task syz-executor.3:20358 blocked for more than 144 seconds. Not tainted 6.8.0-rc4-syzkaller-00005-gc664e16bb1ba #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.3 state:D stack:26832 pid:20358 tgid:20358 ppid:1 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5400 [inline] __schedule+0xf12/0x5c60 kernel/sched/core.c:6727 __schedule_loop kernel/sched/core.c:6802 [inline] schedule+0xe9/0x280 kernel/sched/core.c:6817 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6874 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x5bd/0x9d0 kernel/locking/mutex.c:752 __tun_chr_ioctl+0x4fc/0x4790 drivers/net/tun.c:3115 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:871 [inline] __se_sys_ioctl fs/ioctl.c:857 [inline] __x64_sys_ioctl+0x193/0x220 fs/ioctl.c:857 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xd5/0x270 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x6f/0x77 RIP: 0033:0x7f1696c7db0b RSP: 002b:00007ffe544746c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f1696c7db0b RDX: 00007ffe54474740 RSI: 00000000400454ca RDI: 00000000000000c8 RBP: 00007ffe544748b0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe54474e98 R13: 0000000000000003 R14: 00007f1696dac9d8 R15: 000000000000000c INFO: task syz-executor.4:20406 blocked for more than 144 seconds. Not tainted 6.8.0-rc4-syzkaller-00005-gc664e16bb1ba #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:28320 pid:20406 tgid:20404 ppid:5092 flags:0x00000006 Call Trace: context_switch kernel/sched/core.c:5400 [inline] __schedule+0xf12/0x5c60 kernel/sched/core.c:6727 __schedule_loop kernel/sched/core.c:6802 [inline] schedule+0xe9/0x280 kernel/sched/core.c:6817 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6874 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x5bd/0x9d0 kernel/locking/mutex.c:752 __netlink_dump_start+0x16f/0x9d0 net/netlink/af_netlink.c:2333 netlink_dump_start include/linux/netlink.h:338 [inline] rtnetlink_rcv_msg+0xaba/0xe10 net/core/rtnetlink.c:6571 netlink_rcv_skb+0x16b/0x440 net/netlink/af_netlink.c:2543 netlink_unicast_kernel net/netlink/af_netlink.c:1341 [inline] netlink_unicast+0x542/0x820 net/netlink/af_netlink.c:1367 netlink_sendmsg+0x8bb/0xd70 net/netlink/af_netlink.c:1908 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] ____sys_sendmsg+0xab5/0xc90 net/socket.c:2584 ___sys_sendmsg+0x135/0x1e0 net/socket.c:2638 __sys_sendmsg+0x117/0x1f0 net/socket.c:2667 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xd5/0x270 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x6f/0x77 RIP: 0033:0x7f10ed87dda9 RSP: 002b:00007f10ee6c80c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f10ed9abf80 RCX: 00007f10ed87dda9 RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 RBP: 00007f10ed8ca47a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f10ed9abf80 R15: 00007ffcdfeac6b8 INFO: task syz-executor.1:20407 blocked for more than 145 seconds. Not tainted 6.8.0-rc4-syzkaller-00005-gc664e16bb1ba #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:27360 pid:20407 tgid:20405 ppid:5091 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5400 [inline] __schedule+0xf12/0x5c60 kernel/sched/core.c:6727 __schedule_loop kernel/sched/core.c:6802 [inline] schedule+0xe9/0x280 kernel/sched/core.c:6817 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6874 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x5bd/0x9d0 kernel/locking/mutex.c:752 __netlink_dump_start+0x16f/0x9d0 net/netlink/af_netlink.c:2333 netlink_dump_start include/linux/netlink.h:338 [inline] rtnetlink_rcv_msg+0xaba/0xe10 net/core/rtnetlink.c:6571 netlink_rcv_skb+0x16b/0x440 net/netlink/af_netlink.c:2543 netlink_unicast_kernel net/netlink/af_netlink.c:1341 [inline] netlink_unicast+0x542/0x820 net/netlink/af_netlink.c:1367 netlink_sendmsg+0x8bb/0xd70 net/netlink/af_netlink.c:1908 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] ____sys_sendmsg+0xab5/0xc90 net/socket.c:2584 ___sys_sendmsg+0x135/0x1e0 net/socket.c:2638 __sys_sendmsg+0x117/0x1f0 net/socket.c:2667 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xd5/0x270 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x6f/0x77 RIP: 0033:0x7f2ec4e7dda9 RSP: 002b:00007f2ec5bc00c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f2ec4fabf80 RCX: 00007f2ec4e7dda9 RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 RBP: 00007f2ec4eca47a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f2ec4fabf80 R15: 00007ffce9f35e78 Showing all locks held in the system: 1 lock held by khungtaskd/30: #0: ffffffff8d7ad160 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:298 [inline] #0: ffffffff8d7ad160 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:750 [inline] #0: ffffffff8d7ad160 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 kernel/locking/lockdep.c:6614 2 locks held by dhcpcd/4724: #0: ffffffff8f2ba628 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x4a8/0x6c0 net/socket.c:1303 #1: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0xcf/0xa80 net/8021q/vlan.c:553 2 locks held by getty/4822: #0: ffff88802abeb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc900015c02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfca/0x1490 drivers/tty/n_tty.c:2201 2 locks held by kworker/1:0/14876: #0: ffff888014c8e538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x789/0x15e0 kernel/workqueue.c:2608 #1: ffffc9000d16fd80 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7eb/0x15e0 kernel/workqueue.c:2609 3 locks held by kworker/1:3/17918: #0: ffff888014c8c938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x789/0x15e0 kernel/workqueue.c:2608 #1: ffffc900140b7d80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7eb/0x15e0 kernel/workqueue.c:2609 #2: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:75 5 locks held by kworker/u4:3/18814: #0: ffff888014c8f938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x789/0x15e0 kernel/workqueue.c:2608 #1: ffffc9000b277d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7eb/0x15e0 kernel/workqueue.c:2609 #2: ffffffff8f2cea50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x9f/0xb20 net/core/net_namespace.c:580 #3: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0x8f/0xb30 net/core/dev.c:11605 #4: ffffffff8d7b89b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:292 [inline] #4: ffffffff8d7b89b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x6b5/0x800 kernel/rcu/tree_exp.h:995 3 locks held by kworker/0:5/20220: #0: ffff888014c8c938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x789/0x15e0 kernel/workqueue.c:2608 #1: ffffc9000df27d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7eb/0x15e0 kernel/workqueue.c:2609 #2: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 net/core/link_watch.c:281 3 locks held by kworker/0:6/20221: #0: ffff88802a679138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x789/0x15e0 kernel/workqueue.c:2608 #1: ffffc9000df37d80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7eb/0x15e0 kernel/workqueue.c:2609 #2: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30 net/ipv6/addrconf.c:4671 1 lock held by syz-executor.0/20253: #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xe10 net/core/rtnetlink.c:6612 1 lock held by syz-executor.2/20259: #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xe10 net/core/rtnetlink.c:6612 1 lock held by syz-executor.3/20358: #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x4fc/0x4790 drivers/net/tun.c:3115 1 lock held by syz-executor.4/20406: #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x16f/0x9d0 net/netlink/af_netlink.c:2333 1 lock held by syz-executor.1/20407: #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x16f/0x9d0 net/netlink/af_netlink.c:2333 1 lock held by syz-executor.1/20411: #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xe10 net/core/rtnetlink.c:6612 1 lock held by syz-executor.4/20415: #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xe10 net/core/rtnetlink.c:6612 1 lock held by syz-executor.0/20418: #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xe10 net/core/rtnetlink.c:6612 1 lock held by syz-executor.2/20423: #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xe10 net/core/rtnetlink.c:6612 1 lock held by syz-executor.3/20426: #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xe10 net/core/rtnetlink.c:6612 1 lock held by syz-executor.1/20431: #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xe10 net/core/rtnetlink.c:6612 1 lock held by syz-executor.4/20436: #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xe10 net/core/rtnetlink.c:6612 1 lock held by syz-executor.0/20441: #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xe10 net/core/rtnetlink.c:6612 1 lock held by syz-executor.2/20446: #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xe10 net/core/rtnetlink.c:6612 1 lock held by syz-executor.3/20450: #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #0: ffffffff8f2e3e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xe10 net/core/rtnetlink.c:6612 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.8.0-rc4-syzkaller-00005-gc664e16bb1ba #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd9/0x1b0 lib/dump_stack.c:106 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline] watchdog+0xf87/0x1210 kernel/hung_task.c:379 kthread+0x2c6/0x3b0 kernel/kthread.c:388 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:242 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 1039 Comm: kworker/u4:7 Not tainted 6.8.0-rc4-syzkaller-00005-gc664e16bb1ba #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 Workqueue: events_unbound toggle_allocation_gate RIP: 0010:__sanitizer_cov_trace_switch+0x40/0x90 kernel/kcov.c:341 Code: 48 83 f8 20 74 6b 77 48 48 83 f8 08 74 5b 48 83 f8 10 75 2f 41 bd 03 00 00 00 4c 8b 75 00 31 db 4d 85 f6 74 1e 48 8b 74 dd 10 <4c> 89 e2 4c 89 ef 48 83 c3 01 48 8b 4c 24 28 e8 8c fd ff ff 49 39 RSP: 0018:ffffc90004aaf958 EFLAGS: 00000206 RAX: 0000000000000000 RBX: 0000000000000004 RCX: ffffffff8ab845a5 RDX: ffff888021f71dc0 RSI: 0000000000000005 RDI: 0000000000000005 RBP: ffffffff8c5c8480 R08: 0000000000000005 R09: 0000000000000004 R10: 0000000000000006 R11: 0000000000000004 R12: 0000000000000006 R13: 0000000000000005 R14: 0000000000000007 R15: ffffffff8d29df00 FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f46eead5000 CR3: 000000000d57a000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: insn_get_immediate+0x135/0x1c50 arch/x86/lib/insn.c:647 insn_get_length arch/x86/lib/insn.c:707 [inline] insn_decode+0x2b2/0x340 arch/x86/lib/insn.c:747 arch_jump_entry_size+0xb3/0x150 arch/x86/kernel/jump_label.c:24 __jump_label_patch+0x85/0x400 arch/x86/kernel/jump_label.c:45 arch_jump_label_transform_queue+0x7e/0x120 arch/x86/kernel/jump_label.c:137 __jump_label_update+0x125/0x420 kernel/jump_label.c:475 jump_label_update+0x1d7/0x400 kernel/jump_label.c:829 static_key_disable_cpuslocked+0x154/0x1c0 kernel/jump_label.c:235 static_key_disable+0x1a/0x20 kernel/jump_label.c:243 toggle_allocation_gate mm/kfence/core.c:831 [inline] toggle_allocation_gate+0x143/0x250 mm/kfence/core.c:818 process_one_work+0x889/0x15e0 kernel/workqueue.c:2633 process_scheduled_works kernel/workqueue.c:2706 [inline] worker_thread+0x8b9/0x12a0 kernel/workqueue.c:2787 kthread+0x2c6/0x3b0 kernel/kthread.c:388 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:242