INFO: task khugepaged:35 blocked for more than 143 seconds. Not tainted 6.0.0-syzkaller-06475-g4c86114194e6 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:khugepaged state:D stack:28168 pid: 35 ppid: 2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5183 [inline] __schedule+0xadf/0x52b0 kernel/sched/core.c:6495 schedule+0xda/0x1b0 kernel/sched/core.c:6571 schedule_timeout+0x1db/0x2a0 kernel/time/timer.c:1911 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x1be/0x530 kernel/sched/completion.c:106 __flush_work+0x58d/0xae0 kernel/workqueue.c:3073 __lru_add_drain_all+0x49d/0x7d0 mm/swap.c:875 khugepaged_do_scan mm/khugepaged.c:2197 [inline] khugepaged+0x10f/0x4ad0 mm/khugepaged.c:2258 kthread+0x2e4/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 INFO: task kworker/u4:7:4517 blocked for more than 143 seconds. Not tainted 6.0.0-syzkaller-06475-g4c86114194e6 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u4:7 state:D stack:25872 pid: 4517 ppid: 2 flags:0x00004000 Workqueue: events_unbound fsnotify_mark_destroy_workfn Call Trace: context_switch kernel/sched/core.c:5183 [inline] __schedule+0xadf/0x52b0 kernel/sched/core.c:6495 schedule+0xda/0x1b0 kernel/sched/core.c:6571 schedule_timeout+0x1db/0x2a0 kernel/time/timer.c:1911 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x1be/0x530 kernel/sched/completion.c:106 __synchronize_srcu+0x1f2/0x290 kernel/rcu/srcutree.c:1215 fsnotify_mark_destroy_workfn+0xfd/0x3c0 fs/notify/mark.c:898 process_one_work+0x991/0x1610 kernel/workqueue.c:2289 worker_thread+0x665/0x1080 kernel/workqueue.c:2436 kthread+0x2e4/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 INFO: task kworker/u4:11:8460 blocked for more than 144 seconds. Not tainted 6.0.0-syzkaller-06475-g4c86114194e6 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u4:11 state:D stack:25448 pid: 8460 ppid: 2 flags:0x00004000 Workqueue: netns cleanup_net Call Trace: context_switch kernel/sched/core.c:5183 [inline] __schedule+0xadf/0x52b0 kernel/sched/core.c:6495 schedule+0xda/0x1b0 kernel/sched/core.c:6571 schedule_timeout+0x1db/0x2a0 kernel/time/timer.c:1911 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x1be/0x530 kernel/sched/completion.c:106 __flush_workqueue+0x3ed/0x13a0 kernel/workqueue.c:2861 rxrpc_release_sock net/rxrpc/af_rxrpc.c:887 [inline] rxrpc_release+0x26f/0x5a0 net/rxrpc/af_rxrpc.c:917 __sock_release net/socket.c:650 [inline] sock_release+0x87/0x1b0 net/socket.c:678 afs_close_socket+0x1ca/0x330 fs/afs/rxrpc.c:125 afs_net_exit+0x175/0x320 fs/afs/main.c:158 ops_exit_list+0xb0/0x170 net/core/net_namespace.c:162 cleanup_net+0x4ea/0xb00 net/core/net_namespace.c:594 process_one_work+0x991/0x1610 kernel/workqueue.c:2289 worker_thread+0x665/0x1080 kernel/workqueue.c:2436 kthread+0x2e4/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 INFO: task kworker/u4:12:8462 blocked for more than 144 seconds. Not tainted 6.0.0-syzkaller-06475-g4c86114194e6 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u4:12 state:D stack:26648 pid: 8462 ppid: 2 flags:0x00004000 Workqueue: events_unbound fsnotify_connector_destroy_workfn Call Trace: context_switch kernel/sched/core.c:5183 [inline] __schedule+0xadf/0x52b0 kernel/sched/core.c:6495 schedule+0xda/0x1b0 kernel/sched/core.c:6571 schedule_timeout+0x1db/0x2a0 kernel/time/timer.c:1911 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x1be/0x530 kernel/sched/completion.c:106 __synchronize_srcu+0x1f2/0x290 kernel/rcu/srcutree.c:1215 fsnotify_connector_destroy_workfn+0x49/0xa0 fs/notify/mark.c:208 process_one_work+0x991/0x1610 kernel/workqueue.c:2289 worker_thread+0x665/0x1080 kernel/workqueue.c:2436 kthread+0x2e4/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 INFO: task syz-executor.1:10198 blocked for more than 145 seconds. Not tainted 6.0.0-syzkaller-06475-g4c86114194e6 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:27824 pid:10198 ppid: 5962 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5183 [inline] __schedule+0xadf/0x52b0 kernel/sched/core.c:6495 schedule+0xda/0x1b0 kernel/sched/core.c:6571 schedule_timeout+0x1db/0x2a0 kernel/time/timer.c:1911 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x1be/0x530 kernel/sched/completion.c:106 __flush_work+0x58d/0xae0 kernel/workqueue.c:3073 p9_mux_poll_stop net/9p/trans_fd.c:175 [inline] p9_conn_destroy net/9p/trans_fd.c:884 [inline] p9_fd_close+0x290/0x580 net/9p/trans_fd.c:920 p9_client_create+0x97a/0x1070 net/9p/client.c:1001 v9fs_session_init+0x1e2/0x1810 fs/9p/v9fs.c:408 v9fs_mount+0xba/0xc90 fs/9p/vfs_super.c:126 legacy_get_tree+0x105/0x220 fs/fs_context.c:610 vfs_get_tree+0x89/0x2f0 fs/super.c:1530 do_new_mount fs/namespace.c:3040 [inline] path_mount+0x1326/0x1e20 fs/namespace.c:3370 do_mount fs/namespace.c:3383 [inline] __do_sys_mount fs/namespace.c:3591 [inline] __se_sys_mount fs/namespace.c:3568 [inline] __x64_sys_mount+0x27f/0x300 fs/namespace.c:3568 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fe29988a5a9 RSP: 002b:00007fe29a965168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fe2999abf80 RCX: 00007fe29988a5a9 RDX: 0000000020000100 RSI: 0000000020000040 RDI: 0000000000000000 RBP: 00007fe2998e5580 R08: 0000000020000200 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fffff83230f R14: 00007fe29a965300 R15: 0000000000022000 INFO: task syz-executor.4:10213 blocked for more than 146 seconds. Not tainted 6.0.0-syzkaller-06475-g4c86114194e6 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:27824 pid:10213 ppid: 5707 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5183 [inline] __schedule+0xadf/0x52b0 kernel/sched/core.c:6495 schedule+0xda/0x1b0 kernel/sched/core.c:6571 schedule_timeout+0x1db/0x2a0 kernel/time/timer.c:1911 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x1be/0x530 kernel/sched/completion.c:106 __flush_work+0x58d/0xae0 kernel/workqueue.c:3073 p9_mux_poll_stop net/9p/trans_fd.c:175 [inline] p9_conn_destroy net/9p/trans_fd.c:884 [inline] p9_fd_close+0x290/0x580 net/9p/trans_fd.c:920 p9_client_create+0x97a/0x1070 net/9p/client.c:1001 v9fs_session_init+0x1e2/0x1810 fs/9p/v9fs.c:408 v9fs_mount+0xba/0xc90 fs/9p/vfs_super.c:126 legacy_get_tree+0x105/0x220 fs/fs_context.c:610 vfs_get_tree+0x89/0x2f0 fs/super.c:1530 do_new_mount fs/namespace.c:3040 [inline] path_mount+0x1326/0x1e20 fs/namespace.c:3370 do_mount fs/namespace.c:3383 [inline] __do_sys_mount fs/namespace.c:3591 [inline] __se_sys_mount fs/namespace.c:3568 [inline] __x64_sys_mount+0x27f/0x300 fs/namespace.c:3568 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f7316e8a5a9 RSP: 002b:00007f731805b168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f7316fabf80 RCX: 00007f7316e8a5a9 RDX: 0000000020000100 RSI: 0000000020000040 RDI: 0000000000000000 RBP: 00007f7316ee5580 R08: 0000000020000200 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe4f03a10f R14: 00007f731805b300 R15: 0000000000022000 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/13: #0: ffffffff8bf85bf0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507 1 lock held by rcu_tasks_trace/14: #0: ffffffff8bf858f0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507 1 lock held by khungtaskd/28: #0: ffffffff8bf86740 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6492 1 lock held by khugepaged/35: #0: ffffffff8c07ee28 (lock#3){+.+.}-{3:3}, at: __lru_add_drain_all+0x62/0x7d0 mm/swap.c:830 3 locks held by kworker/1:2/43: 2 locks held by getty/3286: #0: ffff88814b3bd098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:244 #1: ffffc9000311e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef0/0x13e0 drivers/tty/n_tty.c:2177 3 locks held by kworker/0:5/3682: #0: ffff888011864d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888011864d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888011864d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888011864d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff888011864d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff888011864d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 kernel/workqueue.c:2260 #1: ffffc9000468fda8 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 kernel/workqueue.c:2264 #2: ffffffff8bf91438 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:324 [inline] #2: ffffffff8bf91438 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x24b/0x770 kernel/rcu/tree_exp.h:946 2 locks held by kworker/u4:7/4517: #0: ffff888011869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888011869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888011869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888011869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff888011869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff888011869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 kernel/workqueue.c:2260 #1: ffffc900158afda8 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 kernel/workqueue.c:2264 4 locks held by kworker/0:16/5728: 2 locks held by kworker/0:20/5736: #0: ffff888011864d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888011864d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888011864d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888011864d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff888011864d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff888011864d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 kernel/workqueue.c:2260 #1: ffffc90003277da8 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 kernel/workqueue.c:2264 3 locks held by kworker/0:21/5737: #0: ffff88802617d938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff88802617d938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff88802617d938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff88802617d938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff88802617d938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff88802617d938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 kernel/workqueue.c:2260 #1: ffffc90003287da8 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 kernel/workqueue.c:2264 #2: ffffffff8d7c0b28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xe/0x20 net/ipv6/addrconf.c:4624 3 locks held by kworker/0:28/5746: #0: ffff888011864d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888011864d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888011864d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888011864d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff888011864d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff888011864d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 kernel/workqueue.c:2260 #1: ffffc900032f7da8 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 kernel/workqueue.c:2264 #2: ffffffff8d7c0b28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xb/0x60 net/core/link_watch.c:263 3 locks held by kworker/u4:11/8460: #0: ffff8880119c6138 ((wq_completion)netns){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff8880119c6138 ((wq_completion)netns){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff8880119c6138 ((wq_completion)netns){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff8880119c6138 ((wq_completion)netns){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff8880119c6138 ((wq_completion)netns){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff8880119c6138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 kernel/workqueue.c:2260 #1: ffffc900068cfda8 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 kernel/workqueue.c:2264 #2: ffffffff8d7acf90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x9b/0xb00 net/core/net_namespace.c:556 2 locks held by kworker/u4:12/8462: #0: ffff888011869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888011869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888011869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888011869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff888011869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff888011869138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 kernel/workqueue.c:2260 #1: ffffc9000af57da8 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 kernel/workqueue.c:2264 8 locks held by syz-executor.1/10252: #0: ffff888026f3e460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x127/0x250 fs/read_write.c:637 #1: ffff888057513c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x28c/0x610 fs/kernfs/file.c:345 #2: ffff8881480bfe88 (kn->active#208){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b0/0x610 fs/kernfs/file.c:346 #3: ffffffff8ce92808 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xc5/0x470 drivers/net/netdevsim/bus.c:205 #4: ffff88801bd490e8 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:835 [inline] #4: ffff88801bd490e8 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1073 [inline] #4: ffff88801bd490e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa0/0x700 drivers/base/dd.c:1272 #5: ffff88801c8c52f8 (&devlink->lock_key#10){+.+.}-{3:3}, at: nsim_drv_remove+0x4e/0x190 drivers/net/netdevsim/dev.c:1668 #6: ffffffff8d7c0b28 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x35/0x190 drivers/net/netdevsim/netdev.c:381 #7: ffffffff8bf91438 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:292 [inline] #7: ffffffff8bf91438 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x5db/0x770 kernel/rcu/tree_exp.h:946 2 locks held by syz-executor.2/10264: #0: ffffffff8d7acf90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760 net/core/net_namespace.c:467 #1: ffffffff8d7c0b28 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x17/0x210 drivers/net/wireguard/device.c:420 1 lock held by syz-executor.4/10276: #0: ffffffff8d7c0b28 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline] #0: ffffffff8d7c0b28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e5/0xca0 net/core/rtnetlink.c:6088 1 lock held by syz-executor.3/10280: #0: ffffffff8be5b688 (sched_core_mutex){+.+.}-{3:3}, at: sched_core_get+0x53/0x240 kernel/sched/core.c:405 1 lock held by syz-executor.1/10287: #0: ffffffff8d7c0b28 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline] #0: ffffffff8d7c0b28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e5/0xca0 net/core/rtnetlink.c:6088 1 lock held by dhcpcd/10292: #0: ffff888051936130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1721 [inline] #0: ffff888051936130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2f/0xdc0 net/packet/af_packet.c:3194 1 lock held by dhcpcd/10294: #0: ffff888021010130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1721 [inline] #0: ffff888021010130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2f/0xdc0 net/packet/af_packet.c:3194 1 lock held by syz-executor.0/10295: #0: ffffffff8d7c0b28 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline] #0: ffffffff8d7c0b28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e5/0xca0 net/core/rtnetlink.c:6088 1 lock held by dhcpcd/10296: #0: ffff888021012130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1721 [inline] #0: ffff888021012130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2f/0xdc0 net/packet/af_packet.c:3194 1 lock held by dhcpcd/10297: #0: ffff888060d88130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1721 [inline] #0: ffff888060d88130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2f/0xdc0 net/packet/af_packet.c:3194 1 lock held by dhcpcd/10298: #0: ffff888060d8a130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1721 [inline] #0: ffff888060d8a130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2f/0xdc0 net/packet/af_packet.c:3194 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.0.0-syzkaller-06475-g4c86114194e6 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 nmi_cpu_backtrace.cold+0x46/0x14f lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x206/0x250 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:212 [inline] watchdog+0xc18/0xf50 kernel/hung_task.c:369 kthread+0x2e4/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 43 Comm: kworker/1:2 Not tainted 6.0.0-syzkaller-06475-g4c86114194e6 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 Workqueue: events p9_poll_workfn RIP: 0010:p9_fd_poll+0x1db/0x2c0 net/9p/trans_fd.c:237 Code: 48 48 85 db 0f 84 95 00 00 00 e8 20 d4 75 f8 4c 89 ee 4c 89 f7 ff d3 83 e0 fe 41 89 c4 e8 0d d4 75 f8 41 09 ec e8 05 d4 75 f8 <44> 89 e0 5b 5d 41 5c 41 5d 41 5e c3 e8 f4 d3 75 f8 48 85 ed 41 bc RSP: 0018:ffffc90000b47c40 EFLAGS: 00000293 RAX: 0000000000000000 RBX: ffffffff81d84220 RCX: 0000000000000000 RDX: ffff888017483b00 RSI: ffffffff890541ab RDI: 0000000000000005 RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000105 R13: 0000000000000000 R14: ffff88806d9e6780 R15: 0000000000000293 FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c00145f000 CR3: 000000000bc8e000 CR4: 0000000000350ee0 Call Trace: p9_poll_mux net/9p/trans_fd.c:624 [inline] p9_poll_workfn+0x22b/0x4e0 net/9p/trans_fd.c:1147 process_one_work+0x991/0x1610 kernel/workqueue.c:2289 worker_thread+0x665/0x1080 kernel/workqueue.c:2436 kthread+0x2e4/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306