INFO: task syz.0.76:6358 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.76 state:D stack:25064 pid:6358 tgid:6357 ppid:5858 task_flags:0x400140 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5357 [inline]
__schedule+0x16f3/0x4c20 kernel/sched/core.c:6961
__schedule_loop kernel/sched/core.c:7043 [inline]
schedule+0x165/0x360 kernel/sched/core.c:7058
io_schedule+0x81/0xe0 kernel/sched/core.c:7903
__lock_metapage fs/jfs/jfs_metapage.c:52 [inline]
lock_metapage+0x1f3/0x400 fs/jfs/jfs_metapage.c:66
__get_metapage+0x497/0xde0 fs/jfs/jfs_metapage.c:748
dtSearch+0x591/0x21b0 fs/jfs/jfs_dtree.c:624
jfs_lookup+0x155/0x380 fs/jfs/namei.c:1461
__lookup_slow+0x29d/0x3d0 fs/namei.c:1808
lookup_slow+0x53/0x70 fs/namei.c:1825
walk_component+0x2d2/0x400 fs/namei.c:2129
lookup_last fs/namei.c:2630 [inline]
path_lookupat+0x163/0x430 fs/namei.c:2654
filename_lookup+0x212/0x570 fs/namei.c:2683
user_path_at+0x3a/0x60 fs/namei.c:3127
do_mount fs/namespace.c:4133 [inline]
__do_sys_mount fs/namespace.c:4347 [inline]
__se_sys_mount+0x2d3/0x410 fs/namespace.c:4324
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc52489ec29
RSP: 002b:00007fc522afe038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007fc524ae5fa0 RCX: 00007fc52489ec29
RDX: 00002000000003c0 RSI: 0000200000000380 RDI: 0000000000000000
RBP: 00007fc524921e41 R08: 0000200000000400 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fc524ae6038 R14: 00007fc524ae5fa0 R15: 00007ffe61210f18
Showing all locks held in the system:
1 lock held by khungtaskd/39:
#0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
#0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
#0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775
3 locks held by kworker/u8:4/67:
#0: ffff88814d1a7138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline]
#0: ffff88814d1a7138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3319
#1: ffffc9000152fbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline]
#1: ffffc9000152fbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3319
#2: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
#2: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 net/ipv6/addrconf.c:4194
2 locks held by kworker/u8:5/70:
4 locks held by kworker/u8:10/1513:
#0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline]
#0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3319
#1: ffffc900056efbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline]
#1: ffffc900056efbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3319
#2: ffffffff8ecc6940 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 net/core/net_namespace.c:658
#3: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: wg_destruct+0x25/0x2f0 drivers/net/wireguard/device.c:246
2 locks held by getty/5599:
#0: ffff88823bf7e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 drivers/tty/n_tty.c:2222
1 lock held by syz.0.76/6358:
#0: ffff88805d22de08 (&type->i_mutex_dir_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:885 [inline]
#0: ffff88805d22de08 (&type->i_mutex_dir_key#9){++++}-{4:4}, at: lookup_slow+0x46/0x70 fs/namei.c:1824
1 lock held by syz-executor/7121:
#0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
#0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/7163:
#0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
#0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20 net/ipv6/addrconf.c:5027
7 locks held by syz-executor/7213:
1 lock held by syz-executor/7258:
#0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
#0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/7263:
#0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
#0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20 net/ipv6/addrconf.c:5027
=============================================
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)}
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
Call Trace:
dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline]
watchdog+0xf93/0xfe0 kernel/hung_task.c:491
kthread+0x70e/0x8a0 kernel/kthread.c:463
ret_from_fork+0x436/0x7d0 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 7213 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)}
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
RIP: 0010:check_kcov_mode kernel/kcov.c:185 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:246 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x45/0xa0 kernel/kcov.c:314
Code: e0 00 00 ff 00 ba 00 01 00 00 23 91 0c 0b 00 00 41 89 d1 45 09 c1 74 12 45 85 c0 75 5f 85 d2 74 5b 83 b9 d4 15 00 00 00 74 52 <8b> 91 b0 15 00 00 83 fa 03 75 47 48 8b 91 b8 15 00 00 44 8b 89 b4
RSP: 0018:ffffc90003fa6ed8 EFLAGS: 00000246
RAX: ffffffff82534712 RBX: ffff88803c7115a0 RCX: ffff8880371fd940
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: ffffed10078e22b5 R12: ffff88801988c1d8
R13: dffffc0000000000 R14: ffff88803c7115a0 R15: dffffc0000000000
FS: 0000555581389500(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa05ab7c000 CR3: 00000000203ca000 CR4: 00000000003526f0
Call Trace:
kernfs_next_descendant_post+0x42/0x1f0 fs/kernfs/dir.c:1373
kernfs_activate fs/kernfs/dir.c:1428 [inline]
kernfs_add_one+0x3e1/0x520 fs/kernfs/dir.c:834
__kernfs_create_file+0x22b/0x2e0 fs/kernfs/file.c:1086
sysfs_add_file_mode_ns+0x238/0x300 fs/sysfs/file.c:319
create_files fs/sysfs/group.c:76 [inline]
internal_create_group+0x66d/0x1110 fs/sysfs/group.c:183
internal_create_groups fs/sysfs/group.c:223 [inline]
sysfs_create_groups+0x59/0x120 fs/sysfs/group.c:249
device_add_groups drivers/base/core.c:2836 [inline]
device_add_attrs+0x1c4/0x5a0 drivers/base/core.c:2911
device_add+0x496/0xb50 drivers/base/core.c:3643
netdev_register_kobject+0x178/0x310 net/core/net-sysfs.c:2356
register_netdevice+0x12a0/0x1b10 net/core/dev.c:11206
nsim_init_netdevsim drivers/net/netdevsim/netdev.c:1034 [inline]
nsim_create+0xb49/0xf20 drivers/net/netdevsim/netdev.c:1105
__nsim_dev_port_add+0x6b6/0xb10 drivers/net/netdevsim/dev.c:1438
nsim_dev_port_add_all+0x37/0xf0 drivers/net/netdevsim/dev.c:1494
nsim_drv_probe+0x884/0xba0 drivers/net/netdevsim/dev.c:1653
call_driver_probe drivers/base/dd.c:-1 [inline]
really_probe+0x26a/0x9e0 drivers/base/dd.c:659
__driver_probe_device+0x18c/0x2f0 drivers/base/dd.c:801
driver_probe_device+0x4f/0x430 drivers/base/dd.c:831
__device_attach_driver+0x2ce/0x530 drivers/base/dd.c:959
bus_for_each_drv+0x254/0x2e0 drivers/base/bus.c:462
__device_attach+0x2bb/0x400 drivers/base/dd.c:1031
bus_probe_device+0x188/0x260 drivers/base/bus.c:537
device_add+0x7b6/0xb50 drivers/base/core.c:3689
nsim_bus_dev_new drivers/net/netdevsim/bus.c:463 [inline]
new_device_store+0x36c/0x6f0 drivers/net/netdevsim/bus.c:191
kernfs_fop_write_iter+0x3ad/0x540 fs/kernfs/file.c:352
new_sync_write fs/read_write.c:593 [inline]
vfs_write+0x5d5/0xb40 fs/read_write.c:686
ksys_write+0x14b/0x260 fs/read_write.c:738
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f06b37dd6df
Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
RSP: 002b:00007ffe879146b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f06b37dd6df
RDX: 0000000000000003 RSI: 00007ffe87914700 RDI: 0000000000000005
RBP: 00007f06b386310d R08: 0000000000000000 R09: 00007ffe87914507
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
R13: 00007ffe87914700 R14: 00007f06b4554620 R15: 0000000000000003