INFO: task syz-executor.4:15153 can't die for more than 143 seconds.
task:syz-executor.4 state:D stack:29552 pid:15153 ppid: 8517 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:4688 [inline]
__schedule+0xb38/0x58c0 kernel/sched/core.c:5945
schedule+0xcf/0x270 kernel/sched/core.c:6024
rwsem_down_write_slowpath+0x7dc/0x1200 kernel/locking/rwsem.c:1106
__down_write_common kernel/locking/rwsem.c:1261 [inline]
__down_write_common kernel/locking/rwsem.c:1258 [inline]
__down_write kernel/locking/rwsem.c:1270 [inline]
down_write+0x137/0x150 kernel/locking/rwsem.c:1407
register_netdevice_notifier+0x1e/0x260 net/core/dev.c:1902
raw_init+0x296/0x340 net/can/raw.c:339
can_create+0x27c/0x4d0 net/can/af_can.c:168
__sock_create+0x353/0x790 net/socket.c:1408
sock_create net/socket.c:1459 [inline]
__sys_socket+0xef/0x200 net/socket.c:1501
__do_sys_socket net/socket.c:1510 [inline]
__se_sys_socket net/socket.c:1508 [inline]
__x64_sys_socket+0x6f/0xb0 net/socket.c:1508
do_syscall_64+0x31/0xb0 arch/x86/entry/common.c:47
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x4665d9
RSP: 002b:00007f0cc32e2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d
RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
R13: 00007fffa6c54cff R14: 00007f0cc32e2300 R15: 0000000000022000
INFO: task syz-executor.4:15153 blocked for more than 143 seconds.
Not tainted 5.13.0-rc2-next-20210518-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.4 state:D stack:29552 pid:15153 ppid: 8517 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:4688 [inline]
__schedule+0xb38/0x58c0 kernel/sched/core.c:5945
schedule+0xcf/0x270 kernel/sched/core.c:6024
rwsem_down_write_slowpath+0x7dc/0x1200 kernel/locking/rwsem.c:1106
__down_write_common kernel/locking/rwsem.c:1261 [inline]
__down_write_common kernel/locking/rwsem.c:1258 [inline]
__down_write kernel/locking/rwsem.c:1270 [inline]
down_write+0x137/0x150 kernel/locking/rwsem.c:1407
register_netdevice_notifier+0x1e/0x260 net/core/dev.c:1902
raw_init+0x296/0x340 net/can/raw.c:339
can_create+0x27c/0x4d0 net/can/af_can.c:168
__sock_create+0x353/0x790 net/socket.c:1408
sock_create net/socket.c:1459 [inline]
__sys_socket+0xef/0x200 net/socket.c:1501
__do_sys_socket net/socket.c:1510 [inline]
__se_sys_socket net/socket.c:1508 [inline]
__x64_sys_socket+0x6f/0xb0 net/socket.c:1508
do_syscall_64+0x31/0xb0 arch/x86/entry/common.c:47
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x4665d9
RSP: 002b:00007f0cc32e2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d
RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
R13: 00007fffa6c54cff R14: 00007f0cc32e2300 R15: 0000000000022000
INFO: task syz-executor.4:15158 can't die for more than 143 seconds.
task:syz-executor.4 state:D stack:29584 pid:15158 ppid: 8517 flags:0x00000004
Call Trace:
context_switch kernel/sched/core.c:4688 [inline]
__schedule+0xb38/0x58c0 kernel/sched/core.c:5945
schedule+0xcf/0x270 kernel/sched/core.c:6024
rwsem_down_write_slowpath+0x7dc/0x1200 kernel/locking/rwsem.c:1106
__down_write_common kernel/locking/rwsem.c:1261 [inline]
__down_write_common kernel/locking/rwsem.c:1258 [inline]
__down_write kernel/locking/rwsem.c:1270 [inline]
down_write+0x137/0x150 kernel/locking/rwsem.c:1407
register_netdevice_notifier+0x1e/0x260 net/core/dev.c:1902
raw_init+0x296/0x340 net/can/raw.c:339
can_create+0x27c/0x4d0 net/can/af_can.c:168
__sock_create+0x353/0x790 net/socket.c:1408
sock_create net/socket.c:1459 [inline]
__sys_socket+0xef/0x200 net/socket.c:1501
__do_sys_socket net/socket.c:1510 [inline]
__se_sys_socket net/socket.c:1508 [inline]
__x64_sys_socket+0x6f/0xb0 net/socket.c:1508
do_syscall_64+0x31/0xb0 arch/x86/entry/common.c:47
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x4665d9
RSP: 002b:00007f0cc32c1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9
RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d
RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038
R13: 00007fffa6c54cff R14: 00007f0cc32c1300 R15: 0000000000022000
INFO: task syz-executor.4:15158 blocked for more than 144 seconds.
Not tainted 5.13.0-rc2-next-20210518-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.4 state:D stack:29584 pid:15158 ppid: 8517 flags:0x00000004
Call Trace:
context_switch kernel/sched/core.c:4688 [inline]
__schedule+0xb38/0x58c0 kernel/sched/core.c:5945
schedule+0xcf/0x270 kernel/sched/core.c:6024
rwsem_down_write_slowpath+0x7dc/0x1200 kernel/locking/rwsem.c:1106
__down_write_common kernel/locking/rwsem.c:1261 [inline]
__down_write_common kernel/locking/rwsem.c:1258 [inline]
__down_write kernel/locking/rwsem.c:1270 [inline]
down_write+0x137/0x150 kernel/locking/rwsem.c:1407
register_netdevice_notifier+0x1e/0x260 net/core/dev.c:1902
raw_init+0x296/0x340 net/can/raw.c:339
can_create+0x27c/0x4d0 net/can/af_can.c:168
__sock_create+0x353/0x790 net/socket.c:1408
sock_create net/socket.c:1459 [inline]
__sys_socket+0xef/0x200 net/socket.c:1501
__do_sys_socket net/socket.c:1510 [inline]
__se_sys_socket net/socket.c:1508 [inline]
__x64_sys_socket+0x6f/0xb0 net/socket.c:1508
do_syscall_64+0x31/0xb0 arch/x86/entry/common.c:47
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x4665d9
RSP: 002b:00007f0cc32c1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9
RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d
RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038
R13: 00007fffa6c54cff R14: 00007f0cc32c1300 R15: 0000000000022000
Showing all locks held in the system:
5 locks held by kworker/0:2/8:
3 locks held by kworker/u4:7/303:
1 lock held by khungtaskd/1644:
#0: ffffffff8c17afe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6333
1 lock held by in:imklog/8150:
#0: ffff8880277f3c70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 fs/file.c:990
1 lock held by syz-executor.4/15153:
#0: ffffffff8d897750 (pernet_ops_rwsem){++++}-{3:3}, at: register_netdevice_notifier+0x1e/0x260 net/core/dev.c:1902
1 lock held by syz-executor.4/15158:
#0: ffffffff8d897750 (pernet_ops_rwsem){++++}-{3:3}, at: register_netdevice_notifier+0x1e/0x260 net/core/dev.c:1902
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 1644 Comm: khungtaskd Not tainted 5.13.0-rc2-next-20210518-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x13e/0x1d6 lib/dump_stack.c:129
nmi_cpu_backtrace.cold+0x44/0xd7 lib/nmi_backtrace.c:105
nmi_trigger_cpumask_backtrace+0x1b3/0x230 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:254 [inline]
watchdog+0xd3b/0xf50 kernel/hung_task.c:339
kthread+0x3b1/0x4a0 kernel/kthread.c:313
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 25 Comm: kworker/u4:1 Not tainted 5.13.0-rc2-next-20210518-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: phy9 ieee80211_iface_work
RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:152 [inline]
RIP: 0010:unwind_next_frame+0x1ee/0x1ce0 arch/x86/kernel/unwind_orc.c:443
Code: 14 00 00 4d 8b 7e 48 3c 01 49 c7 c0 60 26 ff 8b 49 83 df 00 4d 85 ff 0f 84 55 01 00 00 49 81 ff 00 00 00 81 0f 82 9b 02 00 00 <49> 81 ff fc 85 60 89 0f 83 8e 02 00 00 44 8b 1d ce c0 fb 09 4c 89
RSP: 0018:ffffc90000dff6f8 EFLAGS: 00000202
RAX: 0000000000000000 RBX: 1ffff920001bfee7 RCX: 1ffff920001bff0d
RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff888015dfcd20
RBP: 0000000000000001 R08: ffffffff8bff2660 R09: ffffc90000dff820
R10: fffff520001bff0f R11: 000000000000003f R12: ffffc90000dff868
R13: ffffc90000dff855 R14: ffffc90000dff820 R15: ffffffff81333bd5
FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd7b2da9008 CR3: 000000000be8e000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
__unwind_start+0x51b/0x800 arch/x86/kernel/unwind_orc.c:699
unwind_start arch/x86/include/asm/unwind.h:60 [inline]
arch_stack_walk+0x5c/0xe0 arch/x86/kernel/stacktrace.c:24
stack_trace_save+0x8c/0xc0 kernel/stacktrace.c:121
kasan_save_stack+0x1b/0x40 mm/kasan/common.c:38
kasan_set_track+0x1c/0x30 mm/kasan/common.c:46
kasan_set_free_info+0x20/0x30 mm/kasan/generic.c:357
____kasan_slab_free mm/kasan/common.c:363 [inline]
____kasan_slab_free mm/kasan/common.c:328 [inline]
__kasan_slab_free+0xfb/0x130 mm/kasan/common.c:371
kasan_slab_free include/linux/kasan.h:212 [inline]
slab_free_hook mm/slub.c:1623 [inline]
slab_free_freelist_hook+0xdf/0x240 mm/slub.c:1648
slab_free mm/slub.c:3208 [inline]
kmem_cache_free+0x8e/0x5a0 mm/slub.c:3224
kfree_skbmem+0xef/0x1b0 net/core/skbuff.c:684
__kfree_skb net/core/skbuff.c:741 [inline]
kfree_skb net/core/skbuff.c:758 [inline]
kfree_skb+0x140/0x3f0 net/core/skbuff.c:752
ieee80211_iface_work+0x2cf/0x9e0 net/mac80211/iface.c:1449
process_one_work+0x98d/0x1600 kernel/workqueue.c:2275
worker_thread+0x64c/0x1120 kernel/workqueue.c:2421
kthread+0x3b1/0x4a0 kernel/kthread.c:313
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294