INFO: task syz.3.1675:11878 blocked for more than 143 seconds.
Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.1675 state:D stack:23536 pid:11878 tgid:11874 ppid:5814 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0xe58/0x5ad0 kernel/sched/core.c:6756
__schedule_loop kernel/sched/core.c:6833 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6848
schedule_timeout+0x244/0x280 kernel/time/sleep_timeout.c:75
do_wait_for_common kernel/sched/completion.c:95 [inline]
__wait_for_common+0x3e1/0x600 kernel/sched/completion.c:116
disable_device+0x170/0x280 drivers/infiniband/core/device.c:1296
__ib_unregister_device+0x2b4/0x480 drivers/infiniband/core/device.c:1519
ib_unregister_device_and_put+0x5a/0x80 drivers/infiniband/core/device.c:1584
nldev_dellink+0x211/0x300 drivers/infiniband/core/nldev.c:1825
rdma_nl_rcv_msg+0x388/0x6e0 drivers/infiniband/core/netlink.c:195
rdma_nl_rcv_skb.constprop.0.isra.0+0x2e6/0x450 drivers/infiniband/core/netlink.c:239
netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]
netlink_unicast+0x53c/0x7f0 net/netlink/af_netlink.c:1347
netlink_sendmsg+0x8b8/0xd70 net/netlink/af_netlink.c:1891
sock_sendmsg_nosec net/socket.c:711 [inline]
__sock_sendmsg net/socket.c:726 [inline]
____sys_sendmsg+0xaaf/0xc90 net/socket.c:2583
___sys_sendmsg+0x135/0x1e0 net/socket.c:2637
__sys_sendmsg+0x16e/0x220 net/socket.c:2669
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb81757fed9
RSP: 002b:00007fb8183e2058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fb817746080 RCX: 00007fb81757fed9
RDX: 0000000020000000 RSI: 00000000200002c0 RDI: 000000000000000b
RBP: 00007fb8175f3cc8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fb817746080 R15: 00007ffdb4f0afe8
Showing all locks held in the system:
1 lock held by khungtaskd/30:
#0: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
#0: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#0: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 kernel/locking/lockdep.c:6744
4 locks held by kworker/u8:2/35:
#0: ffff8880b863ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:606 [inline]
#0: ffff8880b863ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 kernel/sched/core.c:591
#1: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 kernel/sched/psi.c:987
#2: ffff88805c9e8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: wiphy_lock include/net/cfg80211.h:6019 [inline]
#2: ffff88805c9e8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x9d/0x560 net/wireless/core.c:426
#3: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
#3: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#3: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: ieee80211_sta_active_ibss+0xe7/0x420 net/mac80211/ibss.c:642
4 locks held by kworker/u8:4/64:
#0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3204
#1: ffffc9000213fd80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205
#2: ffffffff8fec4950 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xbb/0xb40 net/core/net_namespace.c:586
#3: ffff88802edc46b8 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 drivers/infiniband/core/device.c:1667
1 lock held by klogd/5177:
#0: ffff8880b863ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:606 [inline]
#0: ffff8880b863ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 kernel/sched/core.c:591
2 locks held by getty/5564:
#0: ffff888031ffe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
#1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 drivers/tty/n_tty.c:2211
2 locks held by kworker/1:3/5826:
#0: ffff8880b863ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:606 [inline]
#0: ffff8880b863ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 kernel/sched/core.c:591
#1: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x203/0x8e0 kernel/sched/psi.c:975
3 locks held by kworker/u8:10/6305:
#0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3204
#1: ffffc90003287d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205
#2: ffffffff8feda688 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 net/core/link_watch.c:281
2 locks held by kworker/u8:13/11672:
#0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3204
#1: ffffc9001c597d80 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205
2 locks held by syz.3.1675/11878:
#0: ffffffff9ab9d518 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x16a/0x6e0 drivers/infiniband/core/netlink.c:164
#1: ffff88802edc46b8 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480 drivers/infiniband/core/device.c:1515
2 locks held by syz.0.2099/13435:
#0: ffffffff8fec4950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x292/0x6b0 net/core/net_namespace.c:496
#1: ffff88802edc46b8 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 drivers/infiniband/core/device.c:1667
2 locks held by syz-executor/13582:
#0: ffffffff8f2acfe0 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:158 [inline]
#0: ffffffff8f2acfe0 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:249 [inline]
#0: ffffffff8f2acfe0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x10f/0x2c0 net/core/rtnetlink.c:559
#1: ffffffff8feda688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:79 [inline]
#1: ffffffff8feda688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:326 [inline]
#1: ffffffff8feda688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5e4/0x1ce0 net/core/rtnetlink.c:4008
2 locks held by syz.4.2153/13643:
#0: ffffffff8feda688 (rtnl_mutex){+.+.}-{4:4}, at: tun_detach drivers/net/tun.c:698 [inline]
#0: ffffffff8feda688 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 drivers/net/tun.c:3517
#1: ffffffff8e1c6e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 kernel/rcu/tree_exp.h:329
1 lock held by syz.1.2156/13653:
#0: ffffffff8feda688 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x244/0x57e0 net/ethtool/ioctl.c:3397
1 lock held by syz.2.2157/13669:
#0: ffffffff8feda688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:79 [inline]
#0: ffffffff8feda688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:326 [inline]
#0: ffffffff8feda688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5e4/0x1ce0 net/core/rtnetlink.c:4008
3 locks held by syz.5.2158/13664:
#0: ffff88805c646208 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: inode_lock include/linux/fs.h:818 [inline]
#0: ffff88805c646208 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: __sock_release+0x86/0x270 net/socket.c:639
#1: ffff88802e314258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1617 [inline]
#1: ffff88802e314258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_release+0x5bf/0xd90 net/packet/af_packet.c:3218
#2: ffffffff8e1c6e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 kernel/rcu/tree_exp.h:329
=============================================
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:234 [inline]
watchdog+0xf14/0x1240 kernel/hung_task.c:397
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 5177 Comm: klogd Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:__lock_release kernel/locking/lockdep.c:5553 [inline]
RIP: 0010:lock_release+0x2ec/0x6f0 kernel/locking/lockdep.c:5870
Code: 50 03 00 00 66 83 6d 22 20 66 83 7d 22 1f 0f 87 cd 00 00 00 4c 89 f2 44 8b 64 24 50 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e f4 02 00 00 48 89 ea 45 89 a7
RSP: 0018:ffffc9000497f718 EFLAGS: 00000802
RAX: dffffc0000000000 RBX: 1ffff9200092fee5 RCX: ffffc9000497f768
RDX: 1ffff1100f3035e3 RSI: ffffffff9a9ba980 RDI: ffff88807981af6a
RBP: ffff88807981af48 R08: 0000000000000000 R09: fffffbfff20be25a
R10: ffffffff905f12d7 R11: 0000000000000002 R12: 0000000000000001
R13: 0000000000000002 R14: ffff88807981af18 R15: ffff88807981a440
FS: 00007f5205094500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f9f78877d60 CR3: 0000000035846000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:149 [inline]
_raw_spin_unlock_irqrestore+0x1a/0x80 kernel/locking/spinlock.c:194
spin_unlock_irqrestore include/linux/spinlock.h:406 [inline]
avc_reclaim_node security/selinux/avc.c:482 [inline]
avc_alloc_node+0x365/0x5a0 security/selinux/avc.c:501
avc_insert security/selinux/avc.c:612 [inline]
avc_compute_av+0xfd/0x5c0 security/selinux/avc.c:987
avc_perm_nonode+0xaa/0x170 security/selinux/avc.c:1110
avc_has_perm_noaudit+0x2d2/0x3a0 security/selinux/avc.c:1153
avc_has_perm+0xc1/0x1c0 security/selinux/avc.c:1188
selinux_socket_unix_may_send+0x1e8/0x2b0 security/selinux/hooks.c:5066
security_unix_may_send+0x8e/0x210 security/security.c:4533
unix_dgram_sendmsg+0xe5a/0x19e0 net/unix/af_unix.c:2118
sock_sendmsg_nosec net/socket.c:711 [inline]
__sock_sendmsg net/socket.c:726 [inline]
__sys_sendto+0x488/0x4f0 net/socket.c:2197
__do_sys_sendto net/socket.c:2204 [inline]
__se_sys_sendto net/socket.c:2200 [inline]
__x64_sys_sendto+0xe0/0x1c0 net/socket.c:2200
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f52051f69b5
Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83
RSP: 002b:00007ffd2fade8d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f52051f69b5
RDX: 000000000000004d RSI: 000055d9e7558ac0 RDI: 0000000000000003
RBP: 000055d9e75502c0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013
R13: 00007f5205384212 R14: 00007ffd2fade9d8 R15: 0000000000000000