INFO: task syz.0.3154:19844 blocked for more than 430 seconds. Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.3154 state:D stack:0 pid:19844 tgid:19843 ppid:15649 flags:0x00000006 Call Trace: [] context_switch kernel/sched/core.c:5328 [inline] [] __schedule+0xd58/0x3848 kernel/sched/core.c:6690 [] __schedule_loop kernel/sched/core.c:6767 [inline] [] schedule+0xc4/0x324 kernel/sched/core.c:6782 [] schedule_timeout+0x1e2/0x296 kernel/time/timer.c:2591 [] do_wait_for_common kernel/sched/completion.c:95 [inline] [] __wait_for_common+0x1ca/0x4b6 kernel/sched/completion.c:116 [] wait_for_common kernel/sched/completion.c:127 [inline] [] wait_for_completion+0x1a/0x22 kernel/sched/completion.c:148 [] __flush_work+0x5ee/0xcba kernel/workqueue.c:4217 [] __cancel_work_sync+0x136/0x15a kernel/workqueue.c:4337 [] cancel_delayed_work_sync+0x1c/0x26 kernel/workqueue.c:4411 [] htable_put.part.0+0x1a0/0x278 net/netfilter/xt_hashlimit.c:429 [] htable_put net/netfilter/xt_hashlimit.c:424 [inline] [] hashlimit_mt_destroy+0x7e/0xa6 net/netfilter/xt_hashlimit.c:977 [] cleanup_match net/ipv6/netfilter/ip6_tables.c:477 [inline] [] cleanup_entry+0x15e/0x326 net/ipv6/netfilter/ip6_tables.c:661 [] translate_table+0xcf4/0x15da net/ipv6/netfilter/ip6_tables.c:744 [] do_replace+0x2f8/0x432 net/ipv4/netfilter/ip_tables.c:1137 [] do_ip6t_set_ctl+0x39e/0x92a net/ipv6/netfilter/ip6_tables.c:1644 [] nf_setsockopt+0x78/0xda net/netfilter/nf_sockopt.c:101 [] ipv6_setsockopt+0x13c/0x16e net/ipv6/ipv6_sockglue.c:998 [] rawv6_setsockopt+0xe8/0x64c net/ipv6/raw.c:1054 [] sock_common_setsockopt+0x90/0xc0 net/core/sock.c:3803 [] do_sock_setsockopt+0x20a/0x402 net/socket.c:2334 [] __sys_setsockopt+0xf0/0x1aa net/socket.c:2357 [] __do_sys_setsockopt net/socket.c:2366 [inline] [] __se_sys_setsockopt net/socket.c:2363 [inline] [] __riscv_sys_setsockopt+0xa6/0x114 net/socket.c:2363 [] syscall_handler+0x94/0x118 arch/riscv/include/asm/syscall.h:90 [] do_trap_ecall_u+0x1aa/0x216 arch/riscv/kernel/traps.c:331 [] _new_vmalloc_restore_context_a0+0xc2/0xce Showing all locks held in the system: 1 lock held by khungtaskd/36: #0: ffffffff881cc080 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x68/0x2d6 kernel/locking/lockdep.c:6716 3 locks held by syslogd/2968: #0: ff6000005cdd3d18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:598 [inline] #0: ff6000005cdd3d18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock kernel/sched/sched.h:1505 [inline] #0: ff6000005cdd3d18 (&rq->__lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1804 [inline] #0: ff6000005cdd3d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x278/0x3848 kernel/sched/core.c:6589 #1: ff6000005cdbf648 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x22c/0x71a kernel/sched/psi.c:987 #2: ffffffff881cc080 (rcu_read_lock){....}-{1:2}, at: filemap_get_entry+0x0/0x3fe include/linux/mm.h:794 2 locks held by getty/3124: #0: ff60000017fcd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46 drivers/tty/tty_ldsem.c:340 #1: ff2000000008b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xd7c/0x129a drivers/tty/n_tty.c:2211 3 locks held by syz-executor/3149: 2 locks held by kworker/1:0/18054: 4 locks held by kworker/u9:6/18096: 3 locks held by kworker/u10:3/18489: 3 locks held by kworker/u10:5/18691: 2 locks held by kworker/u9:2/19158: 2 locks held by kworker/1:4/20200: 4 locks held by syz-executor/20458: 4 locks held by syz-executor/20459: ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 36 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 Hardware name: riscv-virtio,qemu (DT) Call Trace: [] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:130 [] show_stack+0x34/0x40 arch/riscv/kernel/stacktrace.c:136 [] __dump_stack lib/dump_stack.c:94 [inline] [] dump_stack_lvl+0x122/0x196 lib/dump_stack.c:120 [] dump_stack+0x1c/0x24 lib/dump_stack.c:129 [] nmi_cpu_backtrace+0x39c/0x39e lib/nmi_backtrace.c:113 [] nmi_trigger_cpumask_backtrace+0x2b6/0x456 lib/nmi_backtrace.c:62 [] arch_trigger_cpumask_backtrace+0x2c/0x3c arch/riscv/kernel/smp.c:347 [] trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline] [] watchdog+0xcfa/0x1178 kernel/hung_task.c:379 [] kthread+0x28c/0x3a6 kernel/kthread.c:389 [] ret_from_fork+0xe/0x18 arch/riscv/kernel/entry.S:326 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 20457 Comm: rm Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 Hardware name: riscv-virtio,qemu (DT) epc : lock_acquire.part.0+0x36c/0x81c kernel/locking/lockdep.c:5790 ra : lockdep_recursion_finish kernel/locking/lockdep.c:467 [inline] ra : lock_acquire.part.0+0x2d6/0x81c kernel/locking/lockdep.c:5827 epc : ffffffff802497ac ra : ffffffff80249716 sp : ff20000001f07830 gp : ffffffff899c0180 tp : ff60000013a94ec0 t0 : ff60000013a959e0 t1 : ff60000013a95a58 t2 : 000000000000007f s0 : ff20000001f07990 s1 : ff6000005cdbf708 a0 : ffffffff90d62aa0 a1 : 0000000000000000 a2 : 0000000000000000 a3 : ffffffff814a98a0 a4 : 0000000000000000 a5 : 0000000000000000 a6 : 0000000000000003 a7 : 0000000017621103 s2 : ffffffff90d62aa0 s3 : 0000000000000000 s4 : ffffffff88371780 s5 : 1fe40000003e0f10 s6 : 0000000000000000 s7 : ffffffff808b34f4 s8 : 0000000000000000 s9 : ffffffff86458708 s10: ffffffff90d62aa0 s11: 0000000000000002 t3 : 1fec000002752b3b t4 : 000000000000000b t5 : 0afc9078cadebf5c t6 : 1fec000002752b4f status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001 [] arch_local_irq_restore arch/riscv/include/asm/irqflags.h:51 [inline] [] lock_acquire.part.0+0x36c/0x81c kernel/locking/lockdep.c:5828 [] lock_acquire+0x74/0x98 kernel/locking/lockdep.c:5798 [] fs_reclaim_acquire mm/page_alloc.c:3851 [inline] [] fs_reclaim_acquire+0x94/0x106 mm/page_alloc.c:3842 [] might_alloc include/linux/sched/mm.h:318 [inline] [] slab_pre_alloc_hook mm/slub.c:4036 [inline] [] slab_alloc_node mm/slub.c:4114 [inline] [] kmem_cache_alloc_noprof+0x4c/0x304 mm/slub.c:4141 [] anon_vma_chain_alloc mm/rmap.c:143 [inline] [] __anon_vma_prepare+0xba/0x4e0 mm/rmap.c:196 [] __vmf_anon_prepare+0x136/0x244 mm/memory.c:3307 [] vmf_anon_prepare mm/internal.h:326 [inline] [] do_cow_fault mm/memory.c:5317 [inline] [] do_fault mm/memory.c:5433 [inline] [] do_pte_missing mm/memory.c:3965 [inline] [] handle_pte_fault mm/memory.c:5766 [inline] [] __handle_mm_fault+0x95a/0x43ea mm/memory.c:5909 [] handle_mm_fault+0x48c/0x886 mm/memory.c:6077 [] handle_page_fault+0x2ba/0x1588 arch/riscv/mm/fault.c:302 [] do_page_fault+0x20/0x56 arch/riscv/kernel/traps.c:362 [] _new_vmalloc_restore_context_a0+0xc2/0xce