INFO: task khugepaged:33 blocked for more than 143 seconds. Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:khugepaged state:D stack:23912 pid: 33 ppid: 2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:4983 [inline] __schedule+0xab2/0x4d90 kernel/sched/core.c:6293 schedule+0xd2/0x260 kernel/sched/core.c:6366 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6425 __mutex_lock_common kernel/locking/mutex.c:680 [inline] __mutex_lock+0xa32/0x12f0 kernel/locking/mutex.c:740 __lru_add_drain_all+0x65/0x760 mm/swap.c:798 khugepaged_do_scan mm/khugepaged.c:2214 [inline] khugepaged+0x101/0x4da0 mm/khugepaged.c:2275 kthread+0x405/0x4f0 kernel/kthread.c:345 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 INFO: task kworker/0:3:6191 blocked for more than 143 seconds. Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:3 state:D stack:25304 pid: 6191 ppid: 2 flags:0x00004000 Workqueue: events pwq_unbound_release_workfn Call Trace: context_switch kernel/sched/core.c:4983 [inline] __schedule+0xab2/0x4d90 kernel/sched/core.c:6293 schedule+0xd2/0x260 kernel/sched/core.c:6366 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6425 __mutex_lock_common kernel/locking/mutex.c:680 [inline] __mutex_lock+0xa32/0x12f0 kernel/locking/mutex.c:740 exp_funnel_lock kernel/rcu/tree_exp.h:322 [inline] synchronize_rcu_expedited+0x2d5/0x620 kernel/rcu/tree_exp.h:839 synchronize_rcu+0x132/0x190 kernel/rcu/tree.c:3785 wq_unregister_lockdep kernel/workqueue.c:3500 [inline] pwq_unbound_release_workfn+0x235/0x340 kernel/workqueue.c:3738 process_one_work+0x9b2/0x1690 kernel/workqueue.c:2299 worker_thread+0x658/0x11f0 kernel/workqueue.c:2446 kthread+0x405/0x4f0 kernel/kthread.c:345 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 INFO: task kworker/u4:6:6572 blocked for more than 143 seconds. Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u4:6 state:D stack:24256 pid: 6572 ppid: 2 flags:0x00004000 Workqueue: events_unbound fsnotify_connector_destroy_workfn Call Trace: context_switch kernel/sched/core.c:4983 [inline] __schedule+0xab2/0x4d90 kernel/sched/core.c:6293 schedule+0xd2/0x260 kernel/sched/core.c:6366 schedule_timeout+0x1db/0x2a0 kernel/time/timer.c:1857 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion+0x174/0x270 kernel/sched/completion.c:138 __synchronize_srcu+0x1f2/0x290 kernel/rcu/srcutree.c:930 fsnotify_connector_destroy_workfn+0x49/0xa0 fs/notify/mark.c:164 process_one_work+0x9b2/0x1690 kernel/workqueue.c:2299 worker_thread+0x658/0x11f0 kernel/workqueue.c:2446 kthread+0x405/0x4f0 kernel/kthread.c:345 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 INFO: task systemd-udevd:16321 blocked for more than 143 seconds. Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:systemd-udevd state:D stack:25984 pid:16321 ppid: 2973 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:4983 [inline] __schedule+0xab2/0x4d90 kernel/sched/core.c:6293 schedule+0xd2/0x260 kernel/sched/core.c:6366 __bio_queue_enter+0x3c5/0x6a0 block/blk-core.c:402 bio_queue_enter block/blk.h:80 [inline] blk_mq_get_new_requests block/blk-mq.c:2719 [inline] blk_mq_submit_bio+0x1225/0x2050 block/blk-mq.c:2809 __submit_bio block/blk-core.c:792 [inline] __submit_bio_noacct_mq block/blk-core.c:867 [inline] submit_bio_noacct block/blk-core.c:893 [inline] submit_bio_noacct+0x82c/0xa20 block/blk-core.c:882 submit_bio block/blk-core.c:954 [inline] submit_bio+0x1ea/0x430 block/blk-core.c:912 submit_bh_wbc+0x5e8/0x7e0 fs/buffer.c:3091 submit_bh fs/buffer.c:3097 [inline] block_read_full_page+0xe88/0x18f0 fs/buffer.c:2376 filemap_read_page+0x1b2/0xa00 mm/filemap.c:2479 filemap_update_page mm/filemap.c:2558 [inline] filemap_get_pages+0x1289/0x1970 mm/filemap.c:2667 filemap_read+0x329/0xda0 mm/filemap.c:2730 generic_file_read_iter+0x3b6/0x5a0 mm/filemap.c:2880 blkdev_read_iter+0xf8/0x1d0 block/fops.c:583 call_read_iter include/linux/fs.h:2156 [inline] new_sync_read+0x421/0x6e0 fs/read_write.c:400 vfs_read+0x35c/0x600 fs/read_write.c:481 ksys_read+0x12d/0x250 fs/read_write.c:619 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f951b1ab210 RSP: 002b:00007ffdafd3bca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 000055be0cedec20 RCX: 00007f951b1ab210 RDX: 0000000000000400 RSI: 000055be0cedec48 RDI: 000000000000000f RBP: 000055be0cee00c0 R08: 00007f951b195f78 R09: 0000000000000430 R10: 000055be0cedec38 R11: 0000000000000246 R12: 0000000000000400 R13: 0000000000000800 R14: 000055be0cee0110 R15: 0000000000000400 INFO: task systemd-udevd:16404 blocked for more than 143 seconds. Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:systemd-udevd state:D stack:26104 pid:16404 ppid: 2973 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:4983 [inline] __schedule+0xab2/0x4d90 kernel/sched/core.c:6293 schedule+0xd2/0x260 kernel/sched/core.c:6366 __bio_queue_enter+0x3c5/0x6a0 block/blk-core.c:402 bio_queue_enter block/blk.h:80 [inline] blk_mq_get_new_requests block/blk-mq.c:2719 [inline] blk_mq_submit_bio+0x1225/0x2050 block/blk-mq.c:2809 __submit_bio block/blk-core.c:792 [inline] __submit_bio_noacct_mq block/blk-core.c:867 [inline] submit_bio_noacct block/blk-core.c:893 [inline] submit_bio_noacct+0x82c/0xa20 block/blk-core.c:882 submit_bio block/blk-core.c:954 [inline] submit_bio+0x1ea/0x430 block/blk-core.c:912 submit_bh_wbc+0x5e8/0x7e0 fs/buffer.c:3091 submit_bh fs/buffer.c:3097 [inline] block_read_full_page+0xe88/0x18f0 fs/buffer.c:2376 filemap_read_page+0x1b2/0xa00 mm/filemap.c:2479 filemap_update_page mm/filemap.c:2558 [inline] filemap_get_pages+0x1289/0x1970 mm/filemap.c:2667 filemap_read+0x329/0xda0 mm/filemap.c:2730 generic_file_read_iter+0x3b6/0x5a0 mm/filemap.c:2880 blkdev_read_iter+0xf8/0x1d0 block/fops.c:583 call_read_iter include/linux/fs.h:2156 [inline] new_sync_read+0x421/0x6e0 fs/read_write.c:400 vfs_read+0x35c/0x600 fs/read_write.c:481 ksys_read+0x12d/0x250 fs/read_write.c:619 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f951b1ab210 RSP: 002b:00007ffdafd3b6b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 000055be0cedda70 RCX: 00007f951b1ab210 RDX: 0000000000000400 RSI: 000055be0cedda98 RDI: 000000000000000f RBP: 000055be0cecd7c0 R08: 00007f951b195f58 R09: 0000000000000430 R10: 000055be0cedda88 R11: 0000000000000246 R12: 0000000000000400 R13: 0000000000000800 R14: 000055be0cecd810 R15: 0000000000000400 INFO: task systemd-udevd:16483 blocked for more than 143 seconds. Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:systemd-udevd state:D stack:25984 pid:16483 ppid: 2973 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:4983 [inline] __schedule+0xab2/0x4d90 kernel/sched/core.c:6293 schedule+0xd2/0x260 kernel/sched/core.c:6366 __bio_queue_enter+0x3c5/0x6a0 block/blk-core.c:402 bio_queue_enter block/blk.h:80 [inline] blk_mq_get_new_requests block/blk-mq.c:2719 [inline] blk_mq_submit_bio+0x1225/0x2050 block/blk-mq.c:2809 __submit_bio block/blk-core.c:792 [inline] __submit_bio_noacct_mq block/blk-core.c:867 [inline] submit_bio_noacct block/blk-core.c:893 [inline] submit_bio_noacct+0x82c/0xa20 block/blk-core.c:882 submit_bio block/blk-core.c:954 [inline] submit_bio+0x1ea/0x430 block/blk-core.c:912 mpage_bio_submit fs/mpage.c:66 [inline] mpage_readahead+0x72a/0x920 fs/mpage.c:393 read_pages+0x1db/0x790 mm/readahead.c:129 page_cache_ra_unbounded+0x585/0x780 mm/readahead.c:238 do_page_cache_ra mm/readahead.c:268 [inline] force_page_cache_ra+0x32f/0x4a0 mm/readahead.c:300 page_cache_sync_ra+0x107/0x200 mm/readahead.c:574 page_cache_sync_readahead include/linux/pagemap.h:1030 [inline] filemap_get_pages+0x2a9/0x1970 mm/filemap.c:2644 filemap_read+0x329/0xda0 mm/filemap.c:2730 generic_file_read_iter+0x3b6/0x5a0 mm/filemap.c:2880 blkdev_read_iter+0xf8/0x1d0 block/fops.c:583 call_read_iter include/linux/fs.h:2156 [inline] new_sync_read+0x421/0x6e0 fs/read_write.c:400 vfs_read+0x35c/0x600 fs/read_write.c:481 ksys_read+0x12d/0x250 fs/read_write.c:619 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f951b1ab210 RSP: 002b:00007ffdafd3b698 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 000055be0cedbd40 RCX: 00007f951b1ab210 RDX: 0000000000000040 RSI: 000055be0cedbd68 RDI: 000000000000000f RBP: 000055be0ceeb090 R08: 00007f951b195bc8 R09: 0000000000000070 R10: 000055be0cedbd58 R11: 0000000000000246 R12: 00000000080f0000 R13: 00000000080f0040 R14: 000055be0ceeb0e0 R15: 0000000000000040 INFO: task systemd-udevd:16745 blocked for more than 143 seconds. Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:systemd-udevd state:D stack:25240 pid:16745 ppid: 2973 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:4983 [inline] __schedule+0xab2/0x4d90 kernel/sched/core.c:6293 schedule+0xd2/0x260 kernel/sched/core.c:6366 __bio_queue_enter+0x3c5/0x6a0 block/blk-core.c:402 bio_queue_enter block/blk.h:80 [inline] blk_mq_get_new_requests block/blk-mq.c:2719 [inline] blk_mq_submit_bio+0x1225/0x2050 block/blk-mq.c:2809 __submit_bio block/blk-core.c:792 [inline] __submit_bio_noacct_mq block/blk-core.c:867 [inline] submit_bio_noacct block/blk-core.c:893 [inline] submit_bio_noacct+0x82c/0xa20 block/blk-core.c:882 submit_bio block/blk-core.c:954 [inline] submit_bio+0x1ea/0x430 block/blk-core.c:912 submit_bh_wbc+0x5e8/0x7e0 fs/buffer.c:3091 submit_bh fs/buffer.c:3097 [inline] block_read_full_page+0xe88/0x18f0 fs/buffer.c:2376 filemap_read_page+0x1b2/0xa00 mm/filemap.c:2479 filemap_update_page mm/filemap.c:2558 [inline] filemap_get_pages+0x1289/0x1970 mm/filemap.c:2667 filemap_read+0x329/0xda0 mm/filemap.c:2730 generic_file_read_iter+0x3b6/0x5a0 mm/filemap.c:2880 blkdev_read_iter+0xf8/0x1d0 block/fops.c:583 call_read_iter include/linux/fs.h:2156 [inline] new_sync_read+0x421/0x6e0 fs/read_write.c:400 vfs_read+0x35c/0x600 fs/read_write.c:481 ksys_read+0x12d/0x250 fs/read_write.c:619 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f951b1ab210 RSP: 002b:00007ffdafd3bca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 000055be0cedec20 RCX: 00007f951b1ab210 RDX: 0000000000000400 RSI: 000055be0cedec48 RDI: 000000000000000f RBP: 000055be0cedb870 R08: 00007f951b195f58 R09: 0000000000000430 R10: 000055be0cedec38 R11: 0000000000000246 R12: 0000000000000400 R13: 0000000000000800 R14: 000055be0cedb8c0 R15: 0000000000000400 INFO: task systemd-udevd:18144 blocked for more than 143 seconds. Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:systemd-udevd state:D stack:26696 pid:18144 ppid: 2973 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:4983 [inline] __schedule+0xab2/0x4d90 kernel/sched/core.c:6293 schedule+0xd2/0x260 kernel/sched/core.c:6366 __bio_queue_enter+0x3c5/0x6a0 block/blk-core.c:402 bio_queue_enter block/blk.h:80 [inline] blk_mq_get_new_requests block/blk-mq.c:2719 [inline] blk_mq_submit_bio+0x1225/0x2050 block/blk-mq.c:2809 __submit_bio block/blk-core.c:792 [inline] __submit_bio_noacct_mq block/blk-core.c:867 [inline] submit_bio_noacct block/blk-core.c:893 [inline] submit_bio_noacct+0x82c/0xa20 block/blk-core.c:882 submit_bio block/blk-core.c:954 [inline] submit_bio+0x1ea/0x430 block/blk-core.c:912 submit_bh_wbc+0x5e8/0x7e0 fs/buffer.c:3091 submit_bh fs/buffer.c:3097 [inline] block_read_full_page+0xe88/0x18f0 fs/buffer.c:2376 filemap_read_page+0x1b2/0xa00 mm/filemap.c:2479 filemap_update_page mm/filemap.c:2558 [inline] filemap_get_pages+0x1289/0x1970 mm/filemap.c:2667 filemap_read+0x329/0xda0 mm/filemap.c:2730 generic_file_read_iter+0x3b6/0x5a0 mm/filemap.c:2880 blkdev_read_iter+0xf8/0x1d0 block/fops.c:583 call_read_iter include/linux/fs.h:2156 [inline] new_sync_read+0x421/0x6e0 fs/read_write.c:400 vfs_read+0x35c/0x600 fs/read_write.c:481 ksys_read+0x12d/0x250 fs/read_write.c:619 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f951b1ab210 RSP: 002b:00007ffdafd3bca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 000055be0cedec20 RCX: 00007f951b1ab210 RDX: 0000000000000400 RSI: 000055be0cedec48 RDI: 000000000000000f RBP: 000055be0cecce40 R08: 00007f951b195fa8 R09: 0000000000000430 R10: 000055be0cedec38 R11: 0000000000000246 R12: 0000000000000400 R13: 0000000000000800 R14: 000055be0cecce90 R15: 0000000000000400 INFO: task kworker/1:2:15485 blocked for more than 143 seconds. Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:2 state:D stack:28200 pid:15485 ppid: 2 flags:0x00004000 Workqueue: events pwq_unbound_release_workfn Call Trace: context_switch kernel/sched/core.c:4983 [inline] __schedule+0xab2/0x4d90 kernel/sched/core.c:6293 schedule+0xd2/0x260 kernel/sched/core.c:6366 synchronize_rcu_expedited+0x471/0x620 kernel/rcu/tree_exp.h:855 synchronize_rcu+0x132/0x190 kernel/rcu/tree.c:3785 wq_unregister_lockdep kernel/workqueue.c:3500 [inline] pwq_unbound_release_workfn+0x235/0x340 kernel/workqueue.c:3738 process_one_work+0x9b2/0x1690 kernel/workqueue.c:2299 worker_thread+0x658/0x11f0 kernel/workqueue.c:2446 kthread+0x405/0x4f0 kernel/kthread.c:345 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 INFO: task kworker/u4:0:22907 blocked for more than 143 seconds. Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u4:0 state:D stack:27096 pid:22907 ppid: 2 flags:0x00004000 Workqueue: events_unbound fsnotify_mark_destroy_workfn Call Trace: context_switch kernel/sched/core.c:4983 [inline] __schedule+0xab2/0x4d90 kernel/sched/core.c:6293 schedule+0xd2/0x260 kernel/sched/core.c:6366 schedule_timeout+0x1db/0x2a0 kernel/time/timer.c:1857 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion+0x174/0x270 kernel/sched/completion.c:138 __synchronize_srcu+0x1f2/0x290 kernel/rcu/srcutree.c:930 fsnotify_mark_destroy_workfn+0xfd/0x340 fs/notify/mark.c:861 process_one_work+0x9b2/0x1690 kernel/workqueue.c:2299 worker_thread+0x658/0x11f0 kernel/workqueue.c:2446 kthread+0x405/0x4f0 kernel/kthread.c:345 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 INFO: task syz-executor.3:6310 can't die for more than 143 seconds. task:syz-executor.3 state:D stack:27888 pid: 6310 ppid: 15368 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4983 [inline] __schedule+0xab2/0x4d90 kernel/sched/core.c:6293 schedule+0xd2/0x260 kernel/sched/core.c:6366 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6425 __mutex_lock_common kernel/locking/mutex.c:680 [inline] __mutex_lock+0xa32/0x12f0 kernel/locking/mutex.c:740 __lru_add_drain_all+0x65/0x760 mm/swap.c:798 invalidate_bdev+0x96/0xd0 block/bdev.c:88 invalidate_disk+0x3d/0x1b0 block/genhd.c:650 __loop_clr_fd+0x644/0xe20 drivers/block/loop.c:1142 loop_clr_fd drivers/block/loop.c:1225 [inline] lo_ioctl+0x398/0x17b0 drivers/block/loop.c:1551 blkdev_ioctl+0x37a/0x800 block/ioctl.c:588 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x193/0x200 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f114d0958a7 RSP: 002b:00007f114c00afa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000020000700 RCX: 00007f114d0958a7 RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000004 RBP: 00007f114c00b6bc R08: 00007f114c00b040 R09: 0000000020000000 R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff R13: 0000000000000005 R14: 00007f114c00b000 R15: 0000000020000040 INFO: task syz-executor.4:6307 can't die for more than 143 seconds. task:syz-executor.4 state:D stack:28032 pid: 6307 ppid: 13048 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4983 [inline] __schedule+0xab2/0x4d90 kernel/sched/core.c:6293 schedule+0xd2/0x260 kernel/sched/core.c:6366 schedule_timeout+0x1db/0x2a0 kernel/time/timer.c:1857 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion+0x174/0x270 kernel/sched/completion.c:138 __flush_work+0x56c/0xb10 kernel/workqueue.c:3085 __lru_add_drain_all+0x3fd/0x760 mm/swap.c:849 invalidate_bdev+0x96/0xd0 block/bdev.c:88 invalidate_disk+0x3d/0x1b0 block/genhd.c:650 __loop_clr_fd+0x644/0xe20 drivers/block/loop.c:1142 loop_clr_fd drivers/block/loop.c:1225 [inline] lo_ioctl+0x398/0x17b0 drivers/block/loop.c:1551 blkdev_ioctl+0x37a/0x800 block/ioctl.c:588 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x193/0x200 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fbf43b858a7 RSP: 002b:00007fbf42afafa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000020000700 RCX: 00007fbf43b858a7 RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000004 RBP: 00007fbf42afb6bc R08: 00007fbf42afb040 R09: 0000000020000000 R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff R13: 0000000000000016 R14: 00007fbf42afb000 R15: 0000000020000040 INFO: task syz-executor.1:6325 can't die for more than 143 seconds. task:syz-executor.1 state:D stack:28032 pid: 6325 ppid: 11942 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4983 [inline] __schedule+0xab2/0x4d90 kernel/sched/core.c:6293 schedule+0xd2/0x260 kernel/sched/core.c:6366 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6425 __mutex_lock_common kernel/locking/mutex.c:680 [inline] __mutex_lock+0xa32/0x12f0 kernel/locking/mutex.c:740 __lru_add_drain_all+0x65/0x760 mm/swap.c:798 invalidate_bdev+0x96/0xd0 block/bdev.c:88 invalidate_disk+0x3d/0x1b0 block/genhd.c:650 __loop_clr_fd+0x644/0xe20 drivers/block/loop.c:1142 loop_clr_fd drivers/block/loop.c:1225 [inline] lo_ioctl+0x398/0x17b0 drivers/block/loop.c:1551 blkdev_ioctl+0x37a/0x800 block/ioctl.c:588 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x193/0x200 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f5d8cd228a7 RSP: 002b:00007f5d8bc97fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000020000700 RCX: 00007f5d8cd228a7 RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000004 RBP: 00007f5d8bc986bc R08: 00007f5d8bc98040 R09: 0000000020000000 R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff R13: 0000000000000005 R14: 00007f5d8bc98000 R15: 0000000020000040 INFO: task syz-executor.0:6328 can't die for more than 143 seconds. task:syz-executor.0 state:D stack:27952 pid: 6328 ppid: 6543 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4983 [inline] __schedule+0xab2/0x4d90 kernel/sched/core.c:6293 schedule+0xd2/0x260 kernel/sched/core.c:6366 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6425 __mutex_lock_common kernel/locking/mutex.c:680 [inline] __mutex_lock+0xa32/0x12f0 kernel/locking/mutex.c:740 __lru_add_drain_all+0x65/0x760 mm/swap.c:798 invalidate_bdev+0x96/0xd0 block/bdev.c:88 invalidate_disk+0x3d/0x1b0 block/genhd.c:650 __loop_clr_fd+0x644/0xe20 drivers/block/loop.c:1142 loop_clr_fd drivers/block/loop.c:1225 [inline] lo_ioctl+0x398/0x17b0 drivers/block/loop.c:1551 blkdev_ioctl+0x37a/0x800 block/ioctl.c:588 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x193/0x200 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f91b3afe8a7 RSP: 002b:00007f91b2a73fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000020000700 RCX: 00007f91b3afe8a7 RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000004 RBP: 00007f91b2a746bc R08: 00007f91b2a74040 R09: 0000000020000000 R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff R13: 0000000000000005 R14: 00007f91b2a74000 R15: 0000000020000040 INFO: task syz-executor.2:6335 can't die for more than 143 seconds. task:syz-executor.2 state:D stack:28032 pid: 6335 ppid: 9835 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4983 [inline] __schedule+0xab2/0x4d90 kernel/sched/core.c:6293 schedule+0xd2/0x260 kernel/sched/core.c:6366 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6425 __mutex_lock_common kernel/locking/mutex.c:680 [inline] __mutex_lock+0xa32/0x12f0 kernel/locking/mutex.c:740 __lru_add_drain_all+0x65/0x760 mm/swap.c:798 invalidate_bdev+0x96/0xd0 block/bdev.c:88 invalidate_disk+0x3d/0x1b0 block/genhd.c:650 __loop_clr_fd+0x644/0xe20 drivers/block/loop.c:1142 loop_clr_fd drivers/block/loop.c:1225 [inline] lo_ioctl+0x398/0x17b0 drivers/block/loop.c:1551 blkdev_ioctl+0x37a/0x800 block/ioctl.c:588 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x193/0x200 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f79726998a7 RSP: 002b:00007f797160efa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000020000700 RCX: 00007f79726998a7 RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000004 RBP: 00007f797160f6bc R08: 00007f797160f040 R09: 0000000020000000 R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff R13: 0000000000000016 R14: 00007f797160f000 R15: 0000000020000040 INFO: task syz-executor.5:6340 can't die for more than 143 seconds. task:syz-executor.5 state:D stack:23464 pid: 6340 ppid: 14903 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:4983 [inline] __schedule+0xab2/0x4d90 kernel/sched/core.c:6293 schedule+0xd2/0x260 kernel/sched/core.c:6366 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6425 __mutex_lock_common kernel/locking/mutex.c:680 [inline] __mutex_lock+0xa32/0x12f0 kernel/locking/mutex.c:740 rtnl_lock net/core/rtnetlink.c:72 [inline] rtnetlink_rcv_msg+0x3be/0xb80 net/core/rtnetlink.c:5567 netlink_rcv_skb+0x153/0x420 net/netlink/af_netlink.c:2487 netlink_unicast_kernel net/netlink/af_netlink.c:1315 [inline] netlink_unicast+0x533/0x7d0 net/netlink/af_netlink.c:1341 netlink_sendmsg+0x86d/0xda0 net/netlink/af_netlink.c:1912 sock_sendmsg_nosec net/socket.c:704 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:724 ____sys_sendmsg+0x6e8/0x810 net/socket.c:2409 ___sys_sendmsg+0xf3/0x170 net/socket.c:2463 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2492 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f48d3dc0ae9 RSP: 002b:00007f48d2d36188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f48d3ed3f60 RCX: 00007f48d3dc0ae9 RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 RBP: 00007f48d3e1aff7 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff74d3bb2f R14: 00007f48d2d36300 R15: 0000000000022000 INFO: task syz-executor.5:6344 can't die for more than 143 seconds. task:syz-executor.5 state:D stack:26368 pid: 6344 ppid: 14903 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4983 [inline] __schedule+0xab2/0x4d90 kernel/sched/core.c:6293 schedule+0xd2/0x260 kernel/sched/core.c:6366 exp_funnel_lock kernel/rcu/tree_exp.h:313 [inline] synchronize_rcu_expedited+0x5a8/0x620 kernel/rcu/tree_exp.h:839 synchronize_rcu+0x132/0x190 kernel/rcu/tree.c:3785 hsr_add_port+0x46d/0x7b0 net/hsr/hsr_slave.c:190 hsr_dev_finalize+0x46c/0x750 net/hsr/hsr_device.c:531 hsr_newlink+0x315/0x730 net/hsr/hsr_netlink.c:102 __rtnl_newlink+0x106d/0x1750 net/core/rtnetlink.c:3457 rtnl_newlink+0x64/0xa0 net/core/rtnetlink.c:3505 rtnetlink_rcv_msg+0x413/0xb80 net/core/rtnetlink.c:5570 netlink_rcv_skb+0x153/0x420 net/netlink/af_netlink.c:2487 netlink_unicast_kernel net/netlink/af_netlink.c:1315 [inline] netlink_unicast+0x533/0x7d0 net/netlink/af_netlink.c:1341 netlink_sendmsg+0x86d/0xda0 net/netlink/af_netlink.c:1912 sock_sendmsg_nosec net/socket.c:704 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:724 ____sys_sendmsg+0x6e8/0x810 net/socket.c:2409 ___sys_sendmsg+0xf3/0x170 net/socket.c:2463 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2492 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f48d3dc0ae9 RSP: 002b:00007f48d2d15188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f48d3ed4028 RCX: 00007f48d3dc0ae9 RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 RBP: 00007f48d3e1aff7 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff74d3bb2f R14: 00007f48d2d15300 R15: 0000000000022000 INFO: task syz-executor.5:6353 can't die for more than 143 seconds. task:syz-executor.5 state:D stack:26712 pid: 6353 ppid: 14903 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4983 [inline] __schedule+0xab2/0x4d90 kernel/sched/core.c:6293 schedule+0xd2/0x260 kernel/sched/core.c:6366 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6425 __mutex_lock_common kernel/locking/mutex.c:680 [inline] __mutex_lock+0xa32/0x12f0 kernel/locking/mutex.c:740 rtnl_lock net/core/rtnetlink.c:72 [inline] rtnetlink_rcv_msg+0x3be/0xb80 net/core/rtnetlink.c:5567 netlink_rcv_skb+0x153/0x420 net/netlink/af_netlink.c:2487 netlink_unicast_kernel net/netlink/af_netlink.c:1315 [inline] netlink_unicast+0x533/0x7d0 net/netlink/af_netlink.c:1341 netlink_sendmsg+0x86d/0xda0 net/netlink/af_netlink.c:1912 sock_sendmsg_nosec net/socket.c:704 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:724 ____sys_sendmsg+0x6e8/0x810 net/socket.c:2409 ___sys_sendmsg+0xf3/0x170 net/socket.c:2463 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2492 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f48d3dc0ae9 RSP: 002b:00007f48d2cf4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f48d3ed40f0 RCX: 00007f48d3dc0ae9 RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000006 RBP: 00007f48d3e1aff7 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff74d3bb2f R14: 00007f48d2cf4300 R15: 0000000000022000 Showing all locks held in the system: 1 lock held by khungtaskd/27: #0: ffffffff8bb83220 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6458 1 lock held by khugepaged/33: #0: ffffffff8bc6a1e8 (lock#5){+.+.}-{3:3}, at: __lru_add_drain_all+0x65/0x760 mm/swap.c:798 6 locks held by kworker/1:3/2959: #0: ffff8880121e8138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff8880121e8138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff8880121e8138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1198 [inline] #0: ffff8880121e8138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:635 [inline] #0: ffff8880121e8138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:662 [inline] #0: ffff8880121e8138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 kernel/workqueue.c:2270 #1: ffffc90001f4fdb0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 kernel/workqueue.c:2274 #2: ffff888147e16220 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:760 [inline] #2: ffff888147e16220 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4460 drivers/usb/core/hub.c:5671 #3: ffff888061361220 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:760 [inline] #3: ffff888061361220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7a/0x4a0 drivers/base/dd.c:944 #4: ffff8880613671a8 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:760 [inline] #4: ffff8880613671a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7a/0x4a0 drivers/base/dd.c:944 #5: ffff88802ff20d60 (&dev->phy_mutex){+.+.}-{3:3}, at: asix_mdio_read+0x86/0x220 drivers/net/usb/asix_common.c:495 1 lock held by systemd-journal/2960: 3 locks held by kworker/0:3/6191: #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1198 [inline] #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:635 [inline] #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:662 [inline] #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 kernel/workqueue.c:2270 #1: ffffc90003cffdb0 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 kernel/workqueue.c:2274 #2: ffffffff8bb8cc28 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:322 [inline] #2: ffffffff8bb8cc28 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d5/0x620 kernel/rcu/tree_exp.h:839 1 lock held by in:imklog/6226: #0: ffff88807f135770 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 fs/file.c:990 2 locks held by kworker/u4:6/6572: #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1198 [inline] #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:635 [inline] #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:662 [inline] #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 kernel/workqueue.c:2270 #1: ffffc90002a7fdb0 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 kernel/workqueue.c:2274 3 locks held by kworker/1:8/12975: 1 lock held by systemd-udevd/16321: #0: ffff888016e55bc8 (mapping.invalidate_lock#2){.+.+}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:838 [inline] #0: ffff888016e55bc8 (mapping.invalidate_lock#2){.+.+}-{3:3}, at: filemap_update_page mm/filemap.c:2529 [inline] #0: ffff888016e55bc8 (mapping.invalidate_lock#2){.+.+}-{3:3}, at: filemap_get_pages+0xcc8/0x1970 mm/filemap.c:2667 1 lock held by systemd-udevd/16404: #0: ffff888144896788 (mapping.invalidate_lock#2){.+.+}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:838 [inline] #0: ffff888144896788 (mapping.invalidate_lock#2){.+.+}-{3:3}, at: filemap_update_page mm/filemap.c:2529 [inline] #0: ffff888144896788 (mapping.invalidate_lock#2){.+.+}-{3:3}, at: filemap_get_pages+0xcc8/0x1970 mm/filemap.c:2667 1 lock held by systemd-udevd/16483: #0: ffff888011021548 (mapping.invalidate_lock#2){.+.+}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:838 [inline] #0: ffff888011021548 (mapping.invalidate_lock#2){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x1ae/0x780 mm/readahead.c:194 1 lock held by systemd-udevd/16745: #0: ffff888144897348 (mapping.invalidate_lock#2){.+.+}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:838 [inline] #0: ffff888144897348 (mapping.invalidate_lock#2){.+.+}-{3:3}, at: filemap_update_page mm/filemap.c:2529 [inline] #0: ffff888144897348 (mapping.invalidate_lock#2){.+.+}-{3:3}, at: filemap_get_pages+0xcc8/0x1970 mm/filemap.c:2667 1 lock held by systemd-udevd/18144: #0: ffff888011020988 (mapping.invalidate_lock#2){.+.+}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:838 [inline] #0: ffff888011020988 (mapping.invalidate_lock#2){.+.+}-{3:3}, at: filemap_update_page mm/filemap.c:2529 [inline] #0: ffff888011020988 (mapping.invalidate_lock#2){.+.+}-{3:3}, at: filemap_get_pages+0xcc8/0x1970 mm/filemap.c:2667 3 locks held by kworker/0:1/29237: #0: ffff888022348538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888022348538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888022348538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1198 [inline] #0: ffff888022348538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:635 [inline] #0: ffff888022348538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:662 [inline] #0: ffff888022348538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 kernel/workqueue.c:2270 #1: ffffc90004747db0 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 kernel/workqueue.c:2274 #2: ffffffff8d30cce8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20 net/ipv6/addrconf.c:4595 3 locks held by kworker/1:2/15485: #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1198 [inline] #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:635 [inline] #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:662 [inline] #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 kernel/workqueue.c:2270 #1: ffffc9000fa87db0 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 kernel/workqueue.c:2274 #2: ffffffff8bb8cc28 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:322 [inline] #2: ffffffff8bb8cc28 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d5/0x620 kernel/rcu/tree_exp.h:839 2 locks held by kworker/u4:0/22907: #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1198 [inline] #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:635 [inline] #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:662 [inline] #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 kernel/workqueue.c:2270 #1: ffffc9000f3e7db0 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 kernel/workqueue.c:2274 1 lock held by syz-executor.5/4050: #0: ffffffff8bbf8a28 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x23/0xf0 kernel/trace/trace_event_perf.c:241 1 lock held by syz-executor.3/6310: #0: ffffffff8bc6a1e8 (lock#5){+.+.}-{3:3}, at: __lru_add_drain_all+0x65/0x760 mm/swap.c:798 1 lock held by syz-executor.4/6307: #0: ffffffff8bc6a1e8 (lock#5){+.+.}-{3:3}, at: __lru_add_drain_all+0x65/0x760 mm/swap.c:798 1 lock held by syz-executor.1/6325: #0: ffffffff8bc6a1e8 (lock#5){+.+.}-{3:3}, at: __lru_add_drain_all+0x65/0x760 mm/swap.c:798 1 lock held by syz-executor.0/6328: #0: ffffffff8bc6a1e8 (lock#5){+.+.}-{3:3}, at: __lru_add_drain_all+0x65/0x760 mm/swap.c:798 1 lock held by syz-executor.2/6335: #0: ffffffff8bc6a1e8 (lock#5){+.+.}-{3:3}, at: __lru_add_drain_all+0x65/0x760 mm/swap.c:798 1 lock held by syz-executor.5/6340: #0: ffffffff8d30cce8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:72 [inline] #0: ffffffff8d30cce8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 net/core/rtnetlink.c:5567 1 lock held by syz-executor.5/6344: #0: ffffffff8d30cce8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:72 [inline] #0: ffffffff8d30cce8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 net/core/rtnetlink.c:5567 1 lock held by syz-executor.5/6353: #0: ffffffff8d30cce8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:72 [inline] #0: ffffffff8d30cce8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 net/core/rtnetlink.c:5567 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x1b3/0x230 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:256 [inline] watchdog+0xcb7/0xed0 kernel/hung_task.c:413 kthread+0x405/0x4f0 kernel/kthread.c:345 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 2973 Comm: systemd-udevd Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0033:0x7f951af412f1 Code: 0f 6f 57 d4 f3 0f 6f 4e d4 b2 d4 66 0f ef d1 66 0f 38 17 c2 0f 83 87 02 00 00 f3 0f 6f 57 e4 f3 0f 6f 4e e4 b2 e4 66 0f ef d1 <66> 0f 38 17 c2 0f 83 6c 02 00 00 48 8b 47 f4 48 8b 4e f4 48 39 c1 RSP: 002b:00007ffdafd41278 EFLAGS: 00000207 RAX: 0000000000000000 RBX: 000055be0cf84c70 RCX: 00007f951af412e1 RDX: 00000000000000e4 RSI: 000055be0ed4e340 RDI: 000055be0d17a9f0 RBP: 0000000000000700 R08: 000000000000001c R09: 000000000000001c R10: 000000000000001c R11: 00007f951af66060 R12: 000055be0d17a9d4 R13: 0000000000000000 R14: 000055be0ed4f100 R15: 000000000000716c FS: 00007f951c0658c0 GS: 0000000000000000