IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 8021q: adding VLAN 0 to HW filter on device batadv0 8021q: adding VLAN 0 to HW filter on device batadv0 INFO: task syz-executor.0:7972 blocked for more than 140 seconds. Not tainted 4.14.0-rc4-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.0 D25080 7972 7893 0x00000004 Call Trace: context_switch kernel/sched/core.c:2790 [inline] __schedule+0x821/0x1fe0 kernel/sched/core.c:3366 schedule+0xf6/0x440 kernel/sched/core.c:3425 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3483 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0xe0e/0x19c0 kernel/locking/mutex.c:893 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:908 hashlimit_mt_check_common.isra.10+0x296/0x12b0 net/netfilter/xt_hashlimit.c:897 hashlimit_mt_check_v2+0x48e/0x6f0 net/netfilter/xt_hashlimit.c:944 xt_check_match+0x200/0x5d0 net/netfilter/x_tables.c:465 check_match net/ipv6/netfilter/ip6_tables.c:498 [inline] find_check_match net/ipv6/netfilter/ip6_tables.c:515 [inline] find_check_entry.isra.8+0x3fc/0xe90 net/ipv6/netfilter/ip6_tables.c:566 translate_table+0xc5c/0x1bd0 net/ipv4/netfilter/ip_tables.c:731 do_replace net/ipv4/netfilter/ip_tables.c:1130 [inline] do_ipt_set_ctl+0x2d7/0x52d net/ipv4/netfilter/ip_tables.c:1664 nf_sockopt net/netfilter/nf_sockopt.c:105 [inline] nf_setsockopt+0x5c/0xb0 net/netfilter/nf_sockopt.c:114 ip_setsockopt+0x6b/0xa0 net/ipv4/ip_sockglue.c:1255 udp_setsockopt+0x16/0x30 net/ipv4/udp.c:2412 sock_common_setsockopt+0x73/0xf0 net/core/sock.c:2965 SYSC_setsockopt net/socket.c:1852 [inline] SyS_setsockopt+0x167/0x320 net/socket.c:1831 entry_SYSCALL_64_fastpath+0x23/0xc2 RIP: 0033:0x45a919 RSP: 002b:00007f82108dfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a919 RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 RBP: 0000000000000082 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000020000500 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffffb2f62ef R14: 00007f82108e09c0 R15: 000000000075bf2c Showing all locks held in the system: 2 locks held by khungtaskd/1036: #0: (rcu_read_lock){....}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:175 [inline] #0: (rcu_read_lock){....}, at: [] watchdog+0x19d/0xba0 kernel/hung_task.c:249 #1: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0xde/0x340 kernel/locking/lockdep.c:4552 1 lock held by rsyslogd/7653: #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0x14d/0x1b0 fs/file.c:767 2 locks held by getty/7775: #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x2d/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x2ec/0x1b00 drivers/tty/n_tty.c:2133 2 locks held by getty/7776: #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x2d/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x2ec/0x1b00 drivers/tty/n_tty.c:2133 2 locks held by getty/7777: #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x2d/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x2ec/0x1b00 drivers/tty/n_tty.c:2133 2 locks held by getty/7778: #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x2d/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x2ec/0x1b00 drivers/tty/n_tty.c:2133 2 locks held by getty/7779: #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x2d/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x2ec/0x1b00 drivers/tty/n_tty.c:2133 2 locks held by getty/7780: #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x2d/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x2ec/0x1b00 drivers/tty/n_tty.c:2133 2 locks held by getty/7781: #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x2d/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x2ec/0x1b00 drivers/tty/n_tty.c:2133 2 locks held by syz-executor.0/7972: #0: (sk_lock-AF_INET){+.+.}, at: [] lock_sock include/net/sock.h:1459 [inline] #0: (sk_lock-AF_INET){+.+.}, at: [] ip_setsockopt+0x56/0xa0 net/ipv4/ip_sockglue.c:1254 #1: (hashlimit_mutex){+.+.}, at: [] hashlimit_mt_check_common.isra.10+0x296/0x12b0 net/netfilter/xt_hashlimit.c:897 2 locks held by syz-executor.0/8015: #0: (sk_lock-AF_INET){+.+.}, at: [] lock_sock include/net/sock.h:1459 [inline] #0: (sk_lock-AF_INET){+.+.}, at: [] ip_setsockopt+0x56/0xa0 net/ipv4/ip_sockglue.c:1254 #1: (hashlimit_mutex){+.+.}, at: [] hashlimit_mt_check_common.isra.10+0x296/0x12b0 net/netfilter/xt_hashlimit.c:897 2 locks held by syz-executor.5/7981: #0: (sk_lock-AF_INET){+.+.}, at: [] lock_sock include/net/sock.h:1459 [inline] #0: (sk_lock-AF_INET){+.+.}, at: [] ip_setsockopt+0x56/0xa0 net/ipv4/ip_sockglue.c:1254 #1: (hashlimit_mutex){+.+.}, at: [] hashlimit_mt_check_common.isra.10+0x296/0x12b0 net/netfilter/xt_hashlimit.c:897 2 locks held by syz-executor.5/8019: #0: (sk_lock-AF_INET){+.+.}, at: [] lock_sock include/net/sock.h:1459 [inline] #0: (sk_lock-AF_INET){+.+.}, at: [] ip_setsockopt+0x56/0xa0 net/ipv4/ip_sockglue.c:1254 #1: (hashlimit_mutex){+.+.}, at: [] hashlimit_mt_check_common.isra.10+0x296/0x12b0 net/netfilter/xt_hashlimit.c:897 2 locks held by syz-executor.4/8023: #0: (sk_lock-AF_INET){+.+.}, at: [] lock_sock include/net/sock.h:1459 [inline] #0: (sk_lock-AF_INET){+.+.}, at: [] ip_setsockopt+0x56/0xa0 net/ipv4/ip_sockglue.c:1254 #1: (hashlimit_mutex){+.+.}, at: [] hashlimit_mt_check_common.isra.10+0x296/0x12b0 net/netfilter/xt_hashlimit.c:897 2 locks held by syz-executor.4/8032: #0: (sk_lock-AF_INET){+.+.}, at: [] lock_sock include/net/sock.h:1459 [inline] #0: (sk_lock-AF_INET){+.+.}, at: [] ip_setsockopt+0x56/0xa0 net/ipv4/ip_sockglue.c:1254 #1: (hashlimit_mutex){+.+.}, at: [] hashlimit_mt_check_common.isra.10+0x296/0x12b0 net/netfilter/xt_hashlimit.c:897 2 locks held by syz-executor.3/8028: #0: (sk_lock-AF_INET){+.+.}, at: [] lock_sock include/net/sock.h:1459 [inline] #0: (sk_lock-AF_INET){+.+.}, at: [] ip_setsockopt+0x56/0xa0 net/ipv4/ip_sockglue.c:1254 #1: (hashlimit_mutex){+.+.}, at: [] hashlimit_mt_check_common.isra.10+0x296/0x12b0 net/netfilter/xt_hashlimit.c:897 2 locks held by syz-executor.1/8031: #0: (sk_lock-AF_INET){+.+.}, at: [] lock_sock include/net/sock.h:1459 [inline] #0: (sk_lock-AF_INET){+.+.}, at: [] ip_setsockopt+0x56/0xa0 net/ipv4/ip_sockglue.c:1254 #1: (hashlimit_mutex){+.+.}, at: [] hashlimit_mt_check_common.isra.10+0x296/0x12b0 net/netfilter/xt_hashlimit.c:897 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 1036 Comm: khungtaskd Not tainted 4.14.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:16 [inline] dump_stack+0x145/0x1e1 lib/dump_stack.c:52 nmi_cpu_backtrace.cold.5+0x13/0xb2 lib/nmi_backtrace.c:102 nmi_trigger_cpumask_backtrace+0xf4/0x118 lib/nmi_backtrace.c:61 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 trigger_all_cpu_backtrace include/linux/nmi.h:137 [inline] check_hung_task kernel/hung_task.c:132 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:190 [inline] watchdog+0x74d/0xba0 kernel/hung_task.c:249 kthread+0x376/0x440 kernel/kthread.c:231 ret_from_fork+0x2a/0x40 arch/x86/entry/entry_64.S:431 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 7963 Comm: syz-executor.2 Not tainted 4.14.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8800a892c400 task.stack: ffff8800a8930000 RIP: 0010:trace_hardirqs_off_caller+0x198/0x2b0 kernel/locking/lockdep.c:2971 RSP: 0018:ffff8800a8937740 EFLAGS: 00000807 RAX: dffffc0000000000 RBX: ffff8800a892c400 RCX: 0000000000000000 RDX: 1ffff10015125993 RSI: 0000000000000000 RDI: ffff8800a892cc9c RBP: ffff8800a8937758 R08: 1ffff10015126ecc R09: ffff8800a892c400 R10: e3abaf4c495a6d20 R11: 1ffff10015125b2b R12: 0000000024ebda55 R13: ffffffff813fcb7c R14: ffffffff8618f780 R15: 0000000000000000 FS: 00007f4fc330b700(0000) GS:ffff88012c000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f30de94a020 CR3: 0000000128efb000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: trace_hardirqs_off+0xd/0x10 kernel/locking/lockdep.c:2980 __local_bh_enable_ip+0x5c/0x170 kernel/softirq.c:163 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:176 [inline] _raw_spin_unlock_bh+0x30/0x40 kernel/locking/spinlock.c:207 spin_unlock_bh include/linux/spinlock.h:361 [inline] htable_selective_cleanup+0x231/0x3a0 net/netfilter/xt_hashlimit.c:380 htable_destroy net/netfilter/xt_hashlimit.c:415 [inline] htable_put+0x1c0/0x310 net/netfilter/xt_hashlimit.c:442 hashlimit_mt_destroy_v2+0x51/0x70 net/netfilter/xt_hashlimit.c:963 cleanup_match+0x13b/0x210 net/ipv6/netfilter/ip6_tables.c:487 find_check_entry.isra.8+0x4fd/0xe90 net/ipv6/netfilter/ip6_tables.c:589 translate_table+0xc5c/0x1bd0 net/ipv4/netfilter/ip_tables.c:731 do_replace net/ipv4/netfilter/ip_tables.c:1130 [inline] do_ipt_set_ctl+0x2d7/0x52d net/ipv4/netfilter/ip_tables.c:1664 nf_sockopt net/netfilter/nf_sockopt.c:105 [inline] nf_setsockopt+0x5c/0xb0 net/netfilter/nf_sockopt.c:114 ip_setsockopt+0x6b/0xa0 net/ipv4/ip_sockglue.c:1255 udp_setsockopt+0x16/0x30 net/ipv4/udp.c:2412 sock_common_setsockopt+0x73/0xf0 net/core/sock.c:2965 SYSC_setsockopt net/socket.c:1852 [inline] SyS_setsockopt+0x167/0x320 net/socket.c:1831 entry_SYSCALL_64_fastpath+0x23/0xc2 RIP: 0033:0x45a919 RSP: 002b:00007f4fc330ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a919 RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 RBP: 0000000000000082 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000020000500 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd1479102f R14: 00007f4fc330b9c0 R15: 000000000075bfd4 Code: 00 00 8b 83 80 08 00 00 48 8d bb 9c 08 00 00 48 89 fa 48 c1 ea 03 44 8d 60 01 48 b8 00 00 00 00 00 fc ff df 44 89 a3 80 08 00 00 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85