INFO: task syz.3.123:6668 blocked for more than 143 seconds.
Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.123 state:D stack:27080 pid:6668 tgid:6653 ppid:5810 task_flags:0x400040 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5397 [inline]
__schedule+0x165b/0x4c50 kernel/sched/core.c:6786
__schedule_loop kernel/sched/core.c:6864 [inline]
schedule+0x165/0x360 kernel/sched/core.c:6879
io_schedule+0x81/0xe0 kernel/sched/core.c:7724
TXN_SLEEP_DROP_LOCK fs/jfs/jfs_txnmgr.c:125 [inline]
txBegin+0x26e/0xb10 fs/jfs/jfs_txnmgr.c:374
jfs_mkdir+0x1e5/0xa70 fs/jfs/namei.c:231
vfs_mkdir+0x306/0x510 fs/namei.c:4366
do_mkdirat+0x247/0x590 fs/namei.c:4399
__do_sys_mkdirat fs/namei.c:4416 [inline]
__se_sys_mkdirat fs/namei.c:4414 [inline]
__x64_sys_mkdirat+0x87/0xa0 fs/namei.c:4414
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f318a71d217
RSP: 002b:00007f3188564e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
RAX: ffffffffffffffda RBX: 00007f3188564ef0 RCX: 00007f318a71d217
RDX: 00000000000001ff RSI: 0000200000000240 RDI: 00000000ffffff9c
RBP: 0000200000000200 R08: 00002000000000c0 R09: 0000000000000000
R10: 0000200000000200 R11: 0000000000000246 R12: 0000200000000240
R13: 00007f3188564eb0 R14: 0000000000000000 R15: 0000000000000000
Showing all locks held in the system:
7 locks held by kworker/u8:1/13:
1 lock held by khungtaskd/38:
#0: ffffffff8d9aa300 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
#0: ffffffff8d9aa300 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
#0: ffffffff8d9aa300 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6770
3 locks held by kworker/u8:4/67:
#0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline]
#0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3321
#1: ffffc9000152fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline]
#1: ffffc9000152fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3321
#2: ffffffff8ecb50f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:303
3 locks held by kworker/u8:8/1843:
#0: ffff888030eaa938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline]
#0: ffff888030eaa938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3321
#1: ffffc90005f87bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline]
#1: ffffc90005f87bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3321
#2: ffffffff8ecb50f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
#2: ffffffff8ecb50f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 net/ipv6/addrconf.c:4193
5 locks held by kworker/u8:10/4195:
2 locks held by dhcpcd/5474:
#0: ffffffff8ed1be00 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218
#1: ffffffff8ecb50f8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 net/wireless/nl80211.c:16736
2 locks held by getty/5572:
#0: ffff88823bf4a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 drivers/tty/n_tty.c:2222
2 locks held by syz.3.123/6668:
#0: ffff88805511e488 (sb_writers#29){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:557
#1: ffff88805f3f9958 (&type->i_mutex_dir_key#21/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:914 [inline]
#1: ffff88805f3f9958 (&type->i_mutex_dir_key#21/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0 fs/namei.c:4139
1 lock held by syz-executor/7025:
#0: ffffffff8ecb50f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
#0: ffffffff8ecb50f8 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20 net/ipv6/addrconf.c:5026
4 locks held by syz-executor/7043:
#0: ffff888035306488 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:3105 [inline]
#0: ffff888035306488 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xaa0 fs/read_write.c:682
#1: ffff88803a684c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e1/0x4f0 fs/kernfs/file.c:325
#2: ffff88802769e878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x204/0x4f0 fs/kernfs/file.c:326
#3: ffffffff8e53c218 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 drivers/net/netdevsim/bus.c:216
7 locks held by syz-executor/7049:
#0: ffff888035306488 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:3105 [inline]
#0: ffff888035306488 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xaa0 fs/read_write.c:682
#1: ffff88805c7e9878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e1/0x4f0 fs/kernfs/file.c:325
#2: ffff88802769e878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x204/0x4f0 fs/kernfs/file.c:326
#3: ffffffff8e53c218 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 drivers/net/netdevsim/bus.c:216
#4: ffff88805d90e0d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:884 [inline]
#4: ffff88805d90e0d8 (&dev->mutex){....}-{4:4}, at: __device_driver_lock drivers/base/dd.c:1094 [inline]
#4: ffff88805d90e0d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 drivers/base/dd.c:1292
#5: ffff88805d90d300 (&devlink->lock_key#14){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 drivers/net/netdevsim/dev.c:1675
#6: ffffffff8ecb50f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
#6: ffffffff8ecb50f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 net/core/dev.c:2143
2 locks held by syz-executor/7082:
#0: ffffffff8e4356a0 (&ops->srcu#2){.+.+}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
#0: ffffffff8e4356a0 (&ops->srcu#2){.+.+}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
#0: ffffffff8e4356a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 net/core/rtnetlink.c:570
#1: ffffffff8ecb50f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
#1: ffffffff8ecb50f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
#1: ffffffff8ecb50f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 net/core/rtnetlink.c:4054
1 lock held by syz-executor/7085:
#0: ffffffff8ecb50f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
#0: ffffffff8ecb50f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
#0: ffffffff8ecb50f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 net/core/rtnetlink.c:4054
=============================================
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT_{RT,(full)}
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
Call Trace:
dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:307 [inline]
watchdog+0xe9e/0xee0 kernel/hung_task.c:470
kthread+0x70e/0x8a0 kernel/kthread.c:464
ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT_{RT,(full)}
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
Workqueue: bat_events batadv_nc_worker
RIP: 0010:debug_lockdep_rcu_enabled+0x4/0x40 kernel/rcu/update.c:319
Code: 90 0f 0b 90 90 90 eb c4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <31> c0 83 3d 77 77 2a 04 00 74 1e 83 3d 7a 87 2a 04 00 74 15 65 48
RSP: 0018:ffffc90000127758 EFLAGS: 00000a02
RAX: f2f2f200f1f1f1f1 RBX: 1ffff92000024ef4 RCX: 10285f5431598700
RDX: 0000000000000200 RSI: 0000000000000030 RDI: ffffffff8b0b1660
RBP: ffffc90000127870 R08: 0000000000000000 R09: ffffffff8abf2444
R10: dffffc0000000000 R11: fffffbfff1e36fff R12: dffffc0000000000
R13: dffffc0000000000 R14: ffff88801ae80000 R15: ffff88801ae80444
FS: 0000000000000000(0000) GS:ffff8881268fa000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005570d8452318 CR3: 000000000d7a6000 CR4: 00000000003526f0
Call Trace:
__might_resched+0x91/0x5d0 kernel/sched/core.c:8762
__rt_spin_lock kernel/locking/spinlock_rt.c:48 [inline]
rt_spin_lock+0xc7/0x2c0 kernel/locking/spinlock_rt.c:57
spin_lock_bh include/linux/spinlock_rt.h:88 [inline]
batadv_nc_purge_paths+0x104/0x3f0 net/batman-adv/network-coding.c:442
batadv_nc_worker+0x8c8/0xbc0 net/batman-adv/network-coding.c:722
process_one_work kernel/workqueue.c:3238 [inline]
process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3321
worker_thread+0x8a0/0xda0 kernel/workqueue.c:3402
kthread+0x70e/0x8a0 kernel/kthread.c:464
ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245