INFO: task dhcpcd:5294 blocked for more than 143 seconds. Not tainted 6.2.0-rc2-syzkaller-00024-g512dee0c00ad #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:dhcpcd state:D stack:29080 pid:5294 ppid:4641 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5244 [inline] __schedule+0xb8a/0x5450 kernel/sched/core.c:6555 schedule+0xde/0x1b0 kernel/sched/core.c:6631 synchronize_rcu_expedited+0x39f/0x780 kernel/rcu/tree_exp.h:961 synchronize_rcu+0x306/0x3b0 kernel/rcu/tree.c:3543 synchronize_net+0x4e/0x60 net/core/dev.c:10749 __unregister_prot_hook+0x48a/0x5a0 net/packet/af_packet.c:382 packet_do_bind+0x8bc/0xdc0 net/packet/af_packet.c:3227 packet_bind+0x156/0x1b0 net/packet/af_packet.c:3311 __sys_bind+0x1ed/0x260 net/socket.c:1776 __do_sys_bind net/socket.c:1787 [inline] __se_sys_bind net/socket.c:1785 [inline] __x64_sys_bind+0x73/0xb0 net/socket.c:1785 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fbfccca1ce7 RSP: 002b:00007ffdc1cce368 EFLAGS: 00000217 ORIG_RAX: 0000000000000031 RAX: ffffffffffffffda RBX: 0000562dd0007b60 RCX: 00007fbfccca1ce7 RDX: 0000000000000014 RSI: 00007ffdc1cce378 RDI: 0000000000000005 RBP: 0000000000000000 R08: 0000562dd0f07980 R09: 00007fbfccd62a60 R10: 0000000020000000 R11: 0000000000000217 R12: 0000562dd0f04a10 R13: 0000562dd0f077b8 R14: 00007ffdc1ceec4c R15: 00007ffdc1ceec74 INFO: task dhcpcd:5295 blocked for more than 145 seconds. Not tainted 6.2.0-rc2-syzkaller-00024-g512dee0c00ad #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:dhcpcd state:D stack:28232 pid:5295 ppid:4641 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5244 [inline] __schedule+0xb8a/0x5450 kernel/sched/core.c:6555 schedule+0xde/0x1b0 kernel/sched/core.c:6631 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6690 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0xa48/0x1360 kernel/locking/mutex.c:747 exp_funnel_lock kernel/rcu/tree_exp.h:324 [inline] synchronize_rcu_expedited+0x24f/0x780 kernel/rcu/tree_exp.h:946 synchronize_rcu+0x306/0x3b0 kernel/rcu/tree.c:3543 synchronize_net+0x4e/0x60 net/core/dev.c:10749 __unregister_prot_hook+0x48a/0x5a0 net/packet/af_packet.c:382 packet_do_bind+0x8bc/0xdc0 net/packet/af_packet.c:3227 packet_bind+0x156/0x1b0 net/packet/af_packet.c:3311 __sys_bind+0x1ed/0x260 net/socket.c:1776 __do_sys_bind net/socket.c:1787 [inline] __se_sys_bind net/socket.c:1785 [inline] __x64_sys_bind+0x73/0xb0 net/socket.c:1785 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fbfccca1ce7 RSP: 002b:00007ffdc1cce368 EFLAGS: 00000217 ORIG_RAX: 0000000000000031 RAX: ffffffffffffffda RBX: 0000562dd0007b60 RCX: 00007fbfccca1ce7 RDX: 0000000000000014 RSI: 00007ffdc1cce378 RDI: 0000000000000005 RBP: 0000000000000000 R08: 0000562dd0f07b00 R09: 00007fbfccd62a60 R10: 0000000020000000 R11: 0000000000000217 R12: 0000562dd0f04a10 R13: 0000562dd0f079e8 R14: 00007ffdc1ceec4c R15: 00007ffdc1ceec74 INFO: task dhcpcd:5299 blocked for more than 147 seconds. Not tainted 6.2.0-rc2-syzkaller-00024-g512dee0c00ad #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:dhcpcd state:D stack:29080 pid:5299 ppid:4641 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5244 [inline] __schedule+0xb8a/0x5450 kernel/sched/core.c:6555 schedule+0xde/0x1b0 kernel/sched/core.c:6631 exp_funnel_lock kernel/rcu/tree_exp.h:315 [inline] synchronize_rcu_expedited+0x6ec/0x780 kernel/rcu/tree_exp.h:946 synchronize_rcu+0x306/0x3b0 kernel/rcu/tree.c:3543 synchronize_net+0x4e/0x60 net/core/dev.c:10749 __unregister_prot_hook+0x48a/0x5a0 net/packet/af_packet.c:382 packet_do_bind+0x8bc/0xdc0 net/packet/af_packet.c:3227 packet_bind+0x156/0x1b0 net/packet/af_packet.c:3311 __sys_bind+0x1ed/0x260 net/socket.c:1776 __do_sys_bind net/socket.c:1787 [inline] __se_sys_bind net/socket.c:1785 [inline] __x64_sys_bind+0x73/0xb0 net/socket.c:1785 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fbfccca1ce7 RSP: 002b:00007ffdc1cce368 EFLAGS: 00000217 ORIG_RAX: 0000000000000031 RAX: ffffffffffffffda RBX: 0000562dd0007b60 RCX: 00007fbfccca1ce7 RDX: 0000000000000014 RSI: 00007ffdc1cce378 RDI: 0000000000000005 RBP: 0000000000000000 R08: 0000562dd0f07c80 R09: 00007fbfccd62a60 R10: 0000000020000000 R11: 0000000000000217 R12: 0000562dd0f04a10 R13: 0000562dd0f07b68 R14: 00007ffdc1ceec4c R15: 00007ffdc1ceec74 Showing all locks held in the system: 2 locks held by kworker/u4:1/11: #0: ffff888012479138 ( (wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] (wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] (wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] (wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] (wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] (wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 kernel/workqueue.c:2260 #1: ffffc90000107da8 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 kernel/workqueue.c:2264 1 lock held by rcu_tasks_kthre/12: #0: ffffffff8c790f30 ( rcu_tasks.tasks_gp_mutex ){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507 1 lock held by rcu_tasks_trace/13: #0: ffffffff8c790c30 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507 1 lock held by khungtaskd/28: #0: ffffffff8c791a80 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x57/0x264 kernel/locking/lockdep.c:6494 2 locks held by kworker/u4:4/56: #0: ffff888012479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff888012479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff888012479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 kernel/workqueue.c:2260 #1: ffffc90001577da8 ( connector_reaper_work ){+.+.}-{0:0} , at: process_one_work+0x8a1/0x1710 kernel/workqueue.c:2264 10 locks held by kworker/1:2/892: 2 locks held by getty/4738: #0: ffff88814a63b098 ( &tty->ldisc_sem ){++++}-{0:0} , at: tty_ldisc_ref_wait+0x26/0x80 drivers/tty/tty_ldisc.c:244 #1: ffffc900015a02f0 ( &ldata->atomic_read_lock ){+.+.}-{3:3} , at: n_tty_read+0xef4/0x13e0 drivers/tty/n_tty.c:2177 3 locks held by udevd/5149: #0: ffff88802aa55888 (&of->mutex){+.+.}-{3:3}, at: kernfs_file_read_iter fs/kernfs/file.c:240 [inline] #0: ffff88802aa55888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x18e/0x790 fs/kernfs/file.c:280 #1: ffff888026766008 (kn->active#27){.+.+}-{0:0}, at: kernfs_file_read_iter fs/kernfs/file.c:241 [inline] #1: ffff888026766008 (kn->active#27){.+.+}-{0:0}, at: kernfs_fop_read_iter+0x1b1/0x790 fs/kernfs/file.c:280 #2: ffff88807551e190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:836 [inline] #2: ffff88807551e190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x40/0x2c0 drivers/usb/core/sysfs.c:874 6 locks held by kworker/0:4/5222: 10 locks held by kworker/1:6/5225: 6 locks held by kworker/0:8/5265: 3 locks held by udevd/5278: #0: ffff88802084b488 (&of->mutex){+.+.}-{3:3} , at: kernfs_file_read_iter fs/kernfs/file.c:240 [inline] , at: kernfs_fop_read_iter+0x18e/0x790 fs/kernfs/file.c:280 #1: ffff888070bce3a8 ( kn->active #27 ){.+.+}-{0:0} , at: kernfs_file_read_iter fs/kernfs/file.c:241 [inline] , at: kernfs_fop_read_iter+0x1b1/0x790 fs/kernfs/file.c:280 #2: ffff88802916a190 ( &dev->mutex ){....}-{3:3} , at: device_lock_interruptible include/linux/device.h:836 [inline] , at: read_descriptors+0x40/0x2c0 drivers/usb/core/sysfs.c:874 3 locks held by udevd/5279: #0: ffff88806ec1a088 ( &of->mutex ){+.+.}-{3:3} , at: kernfs_file_read_iter fs/kernfs/file.c:240 [inline] , at: kernfs_fop_read_iter+0x18e/0x790 fs/kernfs/file.c:280 #1: ffff88807160b3a8 ( kn->active #27 ){.+.+}-{0:0} , at: kernfs_file_read_iter fs/kernfs/file.c:241 [inline] , at: kernfs_fop_read_iter+0x1b1/0x790 fs/kernfs/file.c:280 #2: ffff8880755e7190 ( &dev->mutex ){....}-{3:3} , at: device_lock_interruptible include/linux/device.h:836 [inline] , at: read_descriptors+0x40/0x2c0 drivers/usb/core/sysfs.c:874 2 locks held by dhcpcd/5294: #0: ffff888070374130 ( sk_lock-AF_PACKET ){+.+.}-{0:0} , at: lock_sock include/net/sock.h:1725 [inline] , at: packet_do_bind+0x2f/0xdc0 net/packet/af_packet.c:3194 #1: ffffffff8c79c738 ( rcu_state.exp_mutex ){+.+.}-{3:3} , at: exp_funnel_lock kernel/rcu/tree_exp.h:292 [inline] , at: synchronize_rcu_expedited+0x5df/0x780 kernel/rcu/tree_exp.h:946 2 locks held by dhcpcd/5295: #0: ffff888078ec2130 ( sk_lock-AF_PACKET ){+.+.}-{0:0} , at: lock_sock include/net/sock.h:1725 [inline] , at: packet_do_bind+0x2f/0xdc0 net/packet/af_packet.c:3194 #1: ffffffff8c79c738 ( rcu_state.exp_mutex ){+.+.}-{3:3} , at: exp_funnel_lock kernel/rcu/tree_exp.h:324 [inline] , at: synchronize_rcu_expedited+0x24f/0x780 kernel/rcu/tree_exp.h:946 1 lock held by dhcpcd/5299: #0: ffff88807c792130 ( sk_lock-AF_PACKET ){+.+.}-{0:0} , at: lock_sock include/net/sock.h:1725 [inline] , at: packet_do_bind+0x2f/0xdc0 net/packet/af_packet.c:3194 1 lock held by dhcpcd/5311: #0: ffff88801cb94130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1725 [inline] ffff88801cb94130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2f/0xdc0 net/packet/af_packet.c:3194 1 lock held by dhcpcd/5313: #0: ffff88801d5be130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1725 [inline] #0: ffff88801d5be130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2f/0xdc0 net/packet/af_packet.c:3194 1 lock held by dhcpcd/5314: #0: ffff888076dfa130 ( sk_lock-AF_PACKET ){+.+.}-{0:0} , at: lock_sock include/net/sock.h:1725 [inline] , at: packet_do_bind+0x2f/0xdc0 net/packet/af_packet.c:3194 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc2-syzkaller-00024-g512dee0c00ad #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd1/0x138 lib/dump_stack.c:106 nmi_cpu_backtrace.cold+0x24/0x18a lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x333/0x3c0 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline] watchdog+0xc75/0xfc0 kernel/hung_task.c:377 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 892 Comm: kworker/1:2 Not tainted 6.2.0-rc2-syzkaller-00024-g512dee0c00ad #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Workqueue: usb_hub_wq hub_event RIP: 0010:rcu_read_lock_sched_held+0x4/0x70 kernel/rcu/update.c:120 Code: 41 5c 49 c1 ec 09 49 83 f4 01 41 83 e4 01 44 89 e0 41 5c c3 45 31 e4 44 89 e0 41 5c c3 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa <41> 54 41 bc 01 00 00 00 e8 6f c4 9b 08 85 c0 75 06 44 89 e0 41 5c RSP: 0018:ffffc900001e0fc8 EFLAGS: 00000046 RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff813630bb RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff8e72d650 RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffff8e72d657 R10: fffffbfff1ce5aca R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005555568e2708 CR3: 000000007583d000 CR4: 0000000000350ee0 Call Trace: trace_local_timer_exit arch/x86/include/asm/trace/irq_vectors.h:41 [inline] __sysvec_apic_timer_interrupt+0x452/0x640 arch/x86/kernel/apic/apic.c:1114 sysvec_apic_timer_interrupt+0x92/0xc0 arch/x86/kernel/apic/apic.c:1107 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:console_trylock_spinning kernel/printk/printk.c:2008 [inline] RIP: 0010:vprintk_emit+0x3fe/0x600 kernel/printk/printk.c:2356 Code: ee 1a 00 48 85 db 0f 85 da 01 00 00 e8 0b f2 1a 00 31 ff 4c 89 f6 e8 d1 ee 1a 00 4d 85 f6 74 06 e8 f7 f1 1a 00 fb f3 0f 1e fa ed f1 1a 00 45 31 c9 41 b8 01 00 00 00 31 c9 68 6a 60 66 81 ba RSP: 0018:ffffc90004e0e7e0 EFLAGS: 00000293 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: ffff88801e781d40 RSI: ffffffff81666069 RDI: 0000000000000007 RBP: ffffc90004e0e818 R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000035 R13: ffff8880174e0000 R14: 0000000000000200 R15: ffffc90004e0e938 dev_vprintk_emit+0x372/0x3b6 drivers/base/core.c:4698