IPVS: ftp: loaded support on port[0] = 21 chnl_net:caif_netlink_parms(): no params data found batman_adv: batadv0: Interface deactivated: batadv_slave_0 Bluetooth: hci3: command 0x0409 tx timeout INFO: task segctord:10365 blocked for more than 140 seconds. Not tainted 4.19.211-syzkaller #0 batman_adv: batadv0: Removing interface: batadv_slave_0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. segctord D30088 10365 2 0x80000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 __rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:589 [inline] rwsem_down_write_failed+0x3aa/0x760 kernel/locking/rwsem-xadd.c:618 call_rwsem_down_write_failed+0x13/0x20 arch/x86/lib/rwsem.S:117 __down_write arch/x86/include/asm/rwsem.h:142 [inline] down_write+0x4f/0x90 kernel/locking/rwsem.c:72 nilfs_transaction_lock+0x1fb/0x8b0 fs/nilfs2/segment.c:362 nilfs_segctor_thread_construct fs/nilfs2/segment.c:2479 [inline] nilfs_segctor_thread+0x3c0/0xf50 fs/nilfs2/segment.c:2563 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 batman_adv: batadv0: Interface deactivated: batadv_slave_1 INFO: task segctord:10769 blocked for more than 140 seconds. Not tainted 4.19.211-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. batman_adv: batadv0: Removing interface: batadv_slave_1 segctord D29872 10769 2 0x80000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 __rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:589 [inline] rwsem_down_write_failed+0x3aa/0x760 kernel/locking/rwsem-xadd.c:618 call_rwsem_down_write_failed+0x13/0x20 arch/x86/lib/rwsem.S:117 __down_write arch/x86/include/asm/rwsem.h:142 [inline] down_write+0x4f/0x90 kernel/locking/rwsem.c:72 nilfs_transaction_lock+0x1fb/0x8b0 fs/nilfs2/segment.c:362 nilfs_segctor_thread_construct fs/nilfs2/segment.c:2479 [inline] nilfs_segctor_thread+0x3c0/0xf50 fs/nilfs2/segment.c:2563 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 Showing all locks held in the system: device bridge_slave_1 left promiscuous mode 3 locks held by kworker/1:0/19: #0: 00000000c4b54bea ((wq_completion)"events"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2124 bridge0: port 2(bridge_slave_1) entered disabled state #1: 00000000d6ecebf6 ((linkwatch_work).work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2128 #2: 000000003387916a (rtnl_mutex){+.+.}, at: linkwatch_event+0xb/0x60 net/core/link_watch.c:236 1 lock held by khungtaskd/1571: #0: 00000000a40b2177 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 kernel/locking/lockdep.c:4441 5 locks held by kworker/u4:5/6990: #0: 00000000b3749962 ((wq_completion)"%s""netns"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2124 #1: 0000000047c3f5c8 (net_cleanup_work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2128 #2: 00000000374490a6 (pernet_ops_rwsem){++++}, at: cleanup_net+0xa8/0x8b0 net/core/net_namespace.c:521 #3: 000000003387916a (rtnl_mutex){+.+.}, at: rtnl_lock_unregistering net/core/dev.c:9748 [inline] #3: 000000003387916a (rtnl_mutex){+.+.}, at: default_device_exit_batch+0xea/0x3c0 net/core/dev.c:9786 #4: 000000004a34300b (rcu_preempt_state.exp_mutex){+.+.}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline] #4: 000000004a34300b (rcu_preempt_state.exp_mutex){+.+.}, at: _synchronize_rcu_expedited+0x4dc/0x6f0 kernel/rcu/tree_exp.h:667 1 lock held by in:imklog/7781: #0: 00000000a8f04eb8 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x26f/0x310 fs/file.c:767 3 locks held by kworker/0:4/9347: #0: 00000000c4b54bea ((wq_completion)"events"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2124 #1: 0000000051e7bfdb (deferred_process_work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2128 #2: 000000003387916a (rtnl_mutex){+.+.}, at: switchdev_deferred_process_work+0xa/0x20 net/switchdev/switchdev.c:150 5 locks held by syz-executor.1/10358: 1 lock held by segctord/10365: #0: 000000003d28f400 (&nilfs->ns_segctor_sem){++++}, at: nilfs_transaction_lock+0x1fb/0x8b0 fs/nilfs2/segment.c:362 6 locks held by syz-executor.2/10765: 1 lock held by segctord/10769: #0: 00000000e86d47ed (&nilfs->ns_segctor_sem){++++}, at: nilfs_transaction_lock+0x1fb/0x8b0 fs/nilfs2/segment.c:362 2 locks held by kworker/0:1/15182: #0: 0000000090900cf6 ((wq_completion)"rcu_gp"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2124 #1: 00000000076b298e ((work_completion)(&rew.rew_work)){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2128 1 lock held by syz-executor.5/15355: #0: 000000003387916a (rtnl_mutex){+.+.}, at: rtnl_lock net/core/rtnetlink.c:77 [inline] #0: 000000003387916a (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x3fe/0xb80 net/core/rtnetlink.c:4779 ============================================= device bridge_slave_0 left promiscuous mode NMI backtrace for cpu 1 CPU: 1 PID: 1571 Comm: khungtaskd Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 nmi_cpu_backtrace.cold+0x63/0xa2 lib/nmi_backtrace.c:101 bridge0: port 1(bridge_slave_0) entered disabled state nmi_trigger_cpumask_backtrace+0x1a6/0x1f0 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline] watchdog+0x991/0xe60 kernel/hung_task.c:287 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 15182 Comm: kworker/0:1 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Workqueue: rcu_gp wait_rcu_exp_gp RIP: 0010:look_up_lock_class kernel/locking/lockdep.c:693 [inline] RIP: 0010:register_lock_class+0x1ce/0x11c0 kernel/locking/lockdep.c:749 Code: c1 e8 03 80 3c 28 00 0f 85 bc 0b 00 00 4d 8b 24 24 4d 85 e4 0f 84 1a 02 00 00 49 8d 7c 24 20 48 89 f8 48 c1 e8 03 80 3c 28 00 <0f> 85 a6 0b 00 00 4d 3b 6c 24 20 75 c5 49 8d bc 24 40 01 00 00 48 RSP: 0018:ffff8880b36077b0 EFLAGS: 00000046 RAX: 1ffffffff19bf792 RBX: ffff8880b3607b90 RCX: 0000000000000000 RDX: 1ffffffff19ab7df RSI: 0000000000000000 RDI: ffffffff8cdfbc90 RBP: dffffc0000000000 R08: 0000000000000000 R09: 1ffff110166c0efe R10: ffffffff8d243760 R11: 0000000000000000 R12: ffffffff8cdfbc70 R13: ffffffff8d245600 R14: 1ffff110166c0efe R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fefc8baf000 CR3: 00000000af212000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __lock_acquire+0x17d/0x3ff0 kernel/locking/lockdep.c:3304 lock_acquire+0x170/0x3c0 kernel/locking/lockdep.c:3908 del_timer_sync+0xab/0x270 kernel/time/timer.c:1295 schedule_timeout+0x4d7/0xfe0 kernel/time/timer.c:1819 synchronize_sched_expedited_wait kernel/rcu/tree_exp.h:529 [inline] rcu_exp_wait_wake+0x2ff/0x480 kernel/rcu/tree_exp.h:597 process_one_work+0x864/0x1570 kernel/workqueue.c:2153 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415