INFO: task kworker/1:2:1054 blocked for more than 143 seconds. Not tainted 5.15.0-rc2-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:2 state:D stack:23704 pid: 1054 ppid: 2 flags:0x00004000 Workqueue: events ovs_dp_masks_rebalance Call Trace: context_switch kernel/sched/core.c:4940 [inline] __schedule+0xc8d/0x1270 kernel/sched/core.c:6287 schedule+0x14b/0x210 kernel/sched/core.c:6366 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6425 __mutex_lock_common+0xdff/0x2550 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x1a/0x20 kernel/locking/mutex.c:743 ovs_lock net/openvswitch/datapath.c:106 [inline] ovs_dp_masks_rebalance+0x29/0xe0 net/openvswitch/datapath.c:2458 process_one_work+0x853/0x1140 kernel/workqueue.c:2297 worker_thread+0xac1/0x1320 kernel/workqueue.c:2444 kthread+0x453/0x480 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 INFO: task kworker/0:3:3024 blocked for more than 143 seconds. Not tainted 5.15.0-rc2-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:3 state:D stack:24312 pid: 3024 ppid: 2 flags:0x00004000 Workqueue: events ovs_dp_masks_rebalance Call Trace: context_switch kernel/sched/core.c:4940 [inline] __schedule+0xc8d/0x1270 kernel/sched/core.c:6287 schedule+0x14b/0x210 kernel/sched/core.c:6366 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6425 __mutex_lock_common+0xdff/0x2550 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x1a/0x20 kernel/locking/mutex.c:743 ovs_lock net/openvswitch/datapath.c:106 [inline] ovs_dp_masks_rebalance+0x29/0xe0 net/openvswitch/datapath.c:2458 process_one_work+0x853/0x1140 kernel/workqueue.c:2297 worker_thread+0xac1/0x1320 kernel/workqueue.c:2444 kthread+0x453/0x480 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 INFO: task kworker/1:6:8218 blocked for more than 143 seconds. Not tainted 5.15.0-rc2-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:6 state:D stack:23640 pid: 8218 ppid: 2 flags:0x00004000 Workqueue: events ovs_dp_masks_rebalance Call Trace: context_switch kernel/sched/core.c:4940 [inline] __schedule+0xc8d/0x1270 kernel/sched/core.c:6287 schedule+0x14b/0x210 kernel/sched/core.c:6366 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6425 __mutex_lock_common+0xdff/0x2550 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x1a/0x20 kernel/locking/mutex.c:743 ovs_lock net/openvswitch/datapath.c:106 [inline] ovs_dp_masks_rebalance+0x29/0xe0 net/openvswitch/datapath.c:2458 process_one_work+0x853/0x1140 kernel/workqueue.c:2297 worker_thread+0xac1/0x1320 kernel/workqueue.c:2444 kthread+0x453/0x480 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 INFO: task kworker/0:6:8353 blocked for more than 143 seconds. Not tainted 5.15.0-rc2-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:6 state:D stack:24272 pid: 8353 ppid: 2 flags:0x00004000 Workqueue: events ovs_dp_masks_rebalance Call Trace: context_switch kernel/sched/core.c:4940 [inline] __schedule+0xc8d/0x1270 kernel/sched/core.c:6287 schedule+0x14b/0x210 kernel/sched/core.c:6366 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6425 __mutex_lock_common+0xdff/0x2550 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x1a/0x20 kernel/locking/mutex.c:743 ovs_lock net/openvswitch/datapath.c:106 [inline] ovs_dp_masks_rebalance+0x29/0xe0 net/openvswitch/datapath.c:2458 process_one_work+0x853/0x1140 kernel/workqueue.c:2297 worker_thread+0xac1/0x1320 kernel/workqueue.c:2444 kthread+0x453/0x480 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 INFO: task kworker/0:5:13965 blocked for more than 144 seconds. Not tainted 5.15.0-rc2-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:5 state:D stack:24944 pid:13965 ppid: 2 flags:0x00004000 Workqueue: events ovs_dp_masks_rebalance Call Trace: context_switch kernel/sched/core.c:4940 [inline] __schedule+0xc8d/0x1270 kernel/sched/core.c:6287 schedule+0x14b/0x210 kernel/sched/core.c:6366 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6425 __mutex_lock_common+0xdff/0x2550 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x1a/0x20 kernel/locking/mutex.c:743 ovs_lock net/openvswitch/datapath.c:106 [inline] ovs_dp_masks_rebalance+0x29/0xe0 net/openvswitch/datapath.c:2458 process_one_work+0x853/0x1140 kernel/workqueue.c:2297 worker_thread+0xac1/0x1320 kernel/workqueue.c:2444 kthread+0x453/0x480 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 INFO: task kworker/0:1:2674 blocked for more than 144 seconds. Not tainted 5.15.0-rc2-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:1 state:D stack:24536 pid: 2674 ppid: 2 flags:0x00004000 Workqueue: events ovs_dp_masks_rebalance Call Trace: context_switch kernel/sched/core.c:4940 [inline] __schedule+0xc8d/0x1270 kernel/sched/core.c:6287 schedule+0x14b/0x210 kernel/sched/core.c:6366 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6425 __mutex_lock_common+0xdff/0x2550 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x1a/0x20 kernel/locking/mutex.c:743 ovs_lock net/openvswitch/datapath.c:106 [inline] ovs_dp_masks_rebalance+0x29/0xe0 net/openvswitch/datapath.c:2458 process_one_work+0x853/0x1140 kernel/workqueue.c:2297 worker_thread+0xac1/0x1320 kernel/workqueue.c:2444 kthread+0x453/0x480 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 INFO: task kworker/0:4:10695 blocked for more than 144 seconds. Not tainted 5.15.0-rc2-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:4 state:D stack:24688 pid:10695 ppid: 2 flags:0x00004000 Workqueue: events ovs_dp_masks_rebalance Call Trace: context_switch kernel/sched/core.c:4940 [inline] __schedule+0xc8d/0x1270 kernel/sched/core.c:6287 schedule+0x14b/0x210 kernel/sched/core.c:6366 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6425 __mutex_lock_common+0xdff/0x2550 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x1a/0x20 kernel/locking/mutex.c:743 ovs_lock net/openvswitch/datapath.c:106 [inline] ovs_dp_masks_rebalance+0x29/0xe0 net/openvswitch/datapath.c:2458 process_one_work+0x853/0x1140 kernel/workqueue.c:2297 worker_thread+0xac1/0x1320 kernel/workqueue.c:2444 kthread+0x453/0x480 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 INFO: task kworker/0:8:12634 blocked for more than 144 seconds. Not tainted 5.15.0-rc2-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:8 state:D stack:25136 pid:12634 ppid: 2 flags:0x00004000 Workqueue: events ovs_dp_masks_rebalance Call Trace: context_switch kernel/sched/core.c:4940 [inline] __schedule+0xc8d/0x1270 kernel/sched/core.c:6287 schedule+0x14b/0x210 kernel/sched/core.c:6366 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6425 __mutex_lock_common+0xdff/0x2550 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x1a/0x20 kernel/locking/mutex.c:743 ovs_lock net/openvswitch/datapath.c:106 [inline] ovs_dp_masks_rebalance+0x29/0xe0 net/openvswitch/datapath.c:2458 process_one_work+0x853/0x1140 kernel/workqueue.c:2297 worker_thread+0xac1/0x1320 kernel/workqueue.c:2444 kthread+0x453/0x480 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 INFO: task kworker/1:3:16479 blocked for more than 144 seconds. Not tainted 5.15.0-rc2-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:3 state:D stack:24080 pid:16479 ppid: 2 flags:0x00004000 Workqueue: events ovs_dp_masks_rebalance Call Trace: context_switch kernel/sched/core.c:4940 [inline] __schedule+0xc8d/0x1270 kernel/sched/core.c:6287 schedule+0x14b/0x210 kernel/sched/core.c:6366 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6425 __mutex_lock_common+0xdff/0x2550 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x1a/0x20 kernel/locking/mutex.c:743 ovs_lock net/openvswitch/datapath.c:106 [inline] ovs_dp_masks_rebalance+0x29/0xe0 net/openvswitch/datapath.c:2458 process_one_work+0x853/0x1140 kernel/workqueue.c:2297 worker_thread+0xac1/0x1320 kernel/workqueue.c:2444 kthread+0x453/0x480 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 INFO: task kworker/1:4:16873 blocked for more than 145 seconds. Not tainted 5.15.0-rc2-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:4 state:D stack:24720 pid:16873 ppid: 2 flags:0x00004000 Workqueue: events ovs_dp_masks_rebalance Call Trace: context_switch kernel/sched/core.c:4940 [inline] __schedule+0xc8d/0x1270 kernel/sched/core.c:6287 schedule+0x14b/0x210 kernel/sched/core.c:6366 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6425 __mutex_lock_common+0xdff/0x2550 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x1a/0x20 kernel/locking/mutex.c:743 ovs_lock net/openvswitch/datapath.c:106 [inline] ovs_dp_masks_rebalance+0x29/0xe0 net/openvswitch/datapath.c:2458 process_one_work+0x853/0x1140 kernel/workqueue.c:2297 worker_thread+0xac1/0x1320 kernel/workqueue.c:2444 kthread+0x453/0x480 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 Showing all locks held in the system: 1 lock held by khungtaskd/26: #0: ffffffff8c91c180 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 5 locks held by kworker/u4:2/148: #0: ffff8881441cb138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7ca/0x1140 #1: ffffc9000123fd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x808/0x1140 kernel/workqueue.c:2272 #2: ffffffff8d94feb0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf0/0xc50 net/core/net_namespace.c:553 #3: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_lock net/openvswitch/datapath.c:106 [inline] #3: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_exit_net+0xdd/0x830 net/openvswitch/datapath.c:2606 #4: ffffffff8c920870 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x550 kernel/rcu/tree.c:3987 3 locks held by kworker/1:2/1054: #0: ffff888011064d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7ca/0x1140 #1: ffffc900049b7d20 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_one_work+0x808/0x1140 kernel/workqueue.c:2272 #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_lock net/openvswitch/datapath.c:106 [inline] #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_dp_masks_rebalance+0x29/0xe0 net/openvswitch/datapath.c:2458 3 locks held by kworker/0:3/3024: #0: ffff888011064d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7ca/0x1140 #1: ffffc90002b0fd20 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_one_work+0x808/0x1140 kernel/workqueue.c:2272 #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_lock net/openvswitch/datapath.c:106 [inline] #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_dp_masks_rebalance+0x29/0xe0 net/openvswitch/datapath.c:2458 1 lock held by in:imklog/6230: #0: ffff88807a6a7770 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x2f0 fs/file.c:990 3 locks held by kworker/1:6/8218: #0: ffff888011064d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7ca/0x1140 #1: ffffc900167e7d20 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_one_work+0x808/0x1140 kernel/workqueue.c:2272 #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_lock net/openvswitch/datapath.c:106 [inline] #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_dp_masks_rebalance+0x29/0xe0 net/openvswitch/datapath.c:2458 3 locks held by kworker/0:6/8353: #0: ffff888011064d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7ca/0x1140 #1: ffffc90016e57d20 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_one_work+0x808/0x1140 kernel/workqueue.c:2272 #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_lock net/openvswitch/datapath.c:106 [inline] #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_dp_masks_rebalance+0x29/0xe0 net/openvswitch/datapath.c:2458 3 locks held by kworker/0:5/13965: #0: ffff888011064d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7ca/0x1140 #1: ffffc900174dfd20 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_one_work+0x808/0x1140 kernel/workqueue.c:2272 #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_lock net/openvswitch/datapath.c:106 [inline] #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_dp_masks_rebalance+0x29/0xe0 net/openvswitch/datapath.c:2458 3 locks held by kworker/0:1/2674: #0: ffff888011064d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7ca/0x1140 #1: ffffc90006437d20 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_one_work+0x808/0x1140 kernel/workqueue.c:2272 #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_lock net/openvswitch/datapath.c:106 [inline] #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_dp_masks_rebalance+0x29/0xe0 net/openvswitch/datapath.c:2458 3 locks held by kworker/0:4/10695: #0: ffff888011064d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7ca/0x1140 #1: ffffc9001ce2fd20 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_one_work+0x808/0x1140 kernel/workqueue.c:2272 #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_lock net/openvswitch/datapath.c:106 [inline] #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_dp_masks_rebalance+0x29/0xe0 net/openvswitch/datapath.c:2458 3 locks held by kworker/0:8/12634: #0: ffff888011064d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7ca/0x1140 #1: ffffc90005537d20 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_one_work+0x808/0x1140 kernel/workqueue.c:2272 #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_lock net/openvswitch/datapath.c:106 [inline] #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_dp_masks_rebalance+0x29/0xe0 net/openvswitch/datapath.c:2458 3 locks held by kworker/1:3/16479: #0: ffff888011064d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7ca/0x1140 #1: ffffc9000df57d20 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_one_work+0x808/0x1140 kernel/workqueue.c:2272 #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_lock net/openvswitch/datapath.c:106 [inline] #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_dp_masks_rebalance+0x29/0xe0 net/openvswitch/datapath.c:2458 3 locks held by kworker/1:4/16873: #0: ffff888011064d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7ca/0x1140 #1: ffffc9000363fd20 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_one_work+0x808/0x1140 kernel/workqueue.c:2272 #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_lock net/openvswitch/datapath.c:106 [inline] #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_dp_masks_rebalance+0x29/0xe0 net/openvswitch/datapath.c:2458 3 locks held by kworker/1:5/18294: #0: ffff888011064d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7ca/0x1140 #1: ffffc90014c8fd20 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_one_work+0x808/0x1140 kernel/workqueue.c:2272 #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_lock net/openvswitch/datapath.c:106 [inline] #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_dp_masks_rebalance+0x29/0xe0 net/openvswitch/datapath.c:2458 3 locks held by kworker/0:9/19100: #0: ffff888011064d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7ca/0x1140 #1: ffffc90006877d20 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_one_work+0x808/0x1140 kernel/workqueue.c:2272 #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_lock net/openvswitch/datapath.c:106 [inline] #2: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_dp_masks_rebalance+0x29/0xe0 net/openvswitch/datapath.c:2458 2 locks held by syz-executor.3/19368: #0: ffffffff8d9bab90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 net/netlink/genetlink.c:802 #1: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_lock net/openvswitch/datapath.c:106 [inline] #1: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_dp_cmd_new+0x738/0xeb0 net/openvswitch/datapath.c:1783 2 locks held by syz-executor.3/19373: #0: ffffffff8d9bab90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 net/netlink/genetlink.c:802 #1: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_lock net/openvswitch/datapath.c:106 [inline] #1: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_dp_cmd_new+0x738/0xeb0 net/openvswitch/datapath.c:1783 2 locks held by syz-executor.5/19412: #0: ffffffff8d9bab90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 net/netlink/genetlink.c:802 #1: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_lock net/openvswitch/datapath.c:106 [inline] #1: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_dp_cmd_set+0x50/0x360 net/openvswitch/datapath.c:1912 2 locks held by syz-executor.2/19416: #0: ffffffff8d9bab90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 net/netlink/genetlink.c:802 #1: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_lock net/openvswitch/datapath.c:106 [inline] #1: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_dp_cmd_new+0x738/0xeb0 net/openvswitch/datapath.c:1783 2 locks held by syz-executor.2/19419: #0: ffffffff8d9bab90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 net/netlink/genetlink.c:802 #1: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_lock net/openvswitch/datapath.c:106 [inline] #1: ffffffff8dc45ca8 (ovs_mutex){+.+.}-{3:3}, at: ovs_dp_cmd_new+0x738/0xeb0 net/openvswitch/datapath.c:1783 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 26 Comm: khungtaskd Not tainted 5.15.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1dc/0x2d8 lib/dump_stack.c:106 nmi_cpu_backtrace+0x45f/0x490 lib/nmi_backtrace.c:105 nmi_trigger_cpumask_backtrace+0x16a/0x280 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:210 [inline] watchdog+0xc54/0xca0 kernel/hung_task.c:295 kthread+0x453/0x480 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 10 Comm: kworker/u4:1 Not tainted 5.15.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: phy5 ieee80211_iface_work RIP: 0010:__mutex_trylock_common+0xf2/0x300 Code: 00 49 8b 1c 24 48 c7 c0 40 08 93 90 48 c1 e8 03 48 89 44 24 30 48 c7 c0 d8 25 dc 8d 48 c1 e8 03 48 89 44 24 28 43 80 3c 37 00 <74> 08 4c 89 ef e8 c4 a8 6a 00 48 89 5c 24 60 41 89 dd 41 83 e5 07 RSP: 0018:ffffc90000cf7840 EFLAGS: 00000246 RAX: 1ffffffff1bb84bb RBX: 0000000000000000 RCX: ffffffff81632933 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88806f078d18 RBP: ffffc90000cf7910 R08: dffffc0000000000 R09: ffffed100de0f1a4 R10: ffffed100de0f1a4 R11: 0000000000000000 R12: ffff88806f078d18 R13: ffffc90000cf78a0 R14: dffffc0000000000 R15: 1ffff9200019ef14 FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f33847e5000 CR3: 000000000c68e000 CR4: 00000000001506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __mutex_trylock kernel/locking/mutex.c:146 [inline] __mutex_lock_common+0x1ed/0x2550 kernel/locking/mutex.c:598 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x1a/0x20 kernel/locking/mutex.c:743 sdata_lock net/mac80211/ieee80211_i.h:1014 [inline] ieee80211_ibss_work+0xa3/0x14f0 net/mac80211/ibss.c:1676 process_one_work+0x853/0x1140 kernel/workqueue.c:2297 worker_thread+0xac1/0x1320 kernel/workqueue.c:2444 kthread+0x453/0x480 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 ---------------- Code disassembly (best guess): 0: 00 49 8b add %cl,-0x75(%rcx) 3: 1c 24 sbb $0x24,%al 5: 48 c7 c0 40 08 93 90 mov $0xffffffff90930840,%rax c: 48 c1 e8 03 shr $0x3,%rax 10: 48 89 44 24 30 mov %rax,0x30(%rsp) 15: 48 c7 c0 d8 25 dc 8d mov $0xffffffff8ddc25d8,%rax 1c: 48 c1 e8 03 shr $0x3,%rax 20: 48 89 44 24 28 mov %rax,0x28(%rsp) 25: 43 80 3c 37 00 cmpb $0x0,(%r15,%r14,1) * 2a: 74 08 je 0x34 <-- trapping instruction 2c: 4c 89 ef mov %r13,%rdi 2f: e8 c4 a8 6a 00 callq 0x6aa8f8 34: 48 89 5c 24 60 mov %rbx,0x60(%rsp) 39: 41 89 dd mov %ebx,%r13d 3c: 41 83 e5 07 and $0x7,%r13d