INFO: task dhcpcd:9334 blocked for more than 143 seconds. Not tainted 5.17.0-rc5-syzkaller-00306-g2293be58d6a1 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:dhcpcd state:D stack:29088 pid: 9334 ppid: 3175 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:4995 [inline] __schedule+0xa94/0x4910 kernel/sched/core.c:6304 schedule+0xd2/0x260 kernel/sched/core.c:6377 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6436 __mutex_lock_common kernel/locking/mutex.c:673 [inline] __mutex_lock+0xa32/0x12f0 kernel/locking/mutex.c:733 exp_funnel_lock kernel/rcu/tree_exp.h:322 [inline] synchronize_rcu_expedited+0x2d5/0x620 kernel/rcu/tree_exp.h:840 synchronize_rcu+0x132/0x190 kernel/rcu/tree.c:3785 synchronize_net+0x4a/0x50 net/core/dev.c:10322 __unregister_prot_hook+0x48a/0x5a0 net/packet/af_packet.c:382 packet_do_bind+0x8ad/0xd70 net/packet/af_packet.c:3207 packet_bind+0x152/0x1b0 net/packet/af_packet.c:3291 __sys_bind+0x1e9/0x250 net/socket.c:1697 __do_sys_bind net/socket.c:1708 [inline] __se_sys_bind net/socket.c:1706 [inline] __x64_sys_bind+0x6f/0xb0 net/socket.c:1706 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f156f024ce7 RSP: 002b:00007ffea66ad768 EFLAGS: 00000217 ORIG_RAX: 0000000000000031 RAX: ffffffffffffffda RBX: 000055c9eeed2b60 RCX: 00007f156f024ce7 RDX: 0000000000000014 RSI: 00007ffea66ad778 RDI: 0000000000000005 RBP: 0000000000000000 R08: 000055c9efc904e0 R09: 00007f156f0e5a60 R10: 0000000000020000 R11: 0000000000000217 R12: 000055c9efc8d600 R13: 000055c9efc903c8 R14: 00007ffea66ce04c R15: 00007ffea66ce074 INFO: task dhcpcd:9335 blocked for more than 143 seconds. Not tainted 5.17.0-rc5-syzkaller-00306-g2293be58d6a1 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:dhcpcd state:D stack:29088 pid: 9335 ppid: 3175 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:4995 [inline] __schedule+0xa94/0x4910 kernel/sched/core.c:6304 schedule+0xd2/0x260 kernel/sched/core.c:6377 synchronize_rcu_expedited+0x471/0x620 kernel/rcu/tree_exp.h:856 synchronize_rcu+0x132/0x190 kernel/rcu/tree.c:3785 synchronize_net+0x4a/0x50 net/core/dev.c:10322 __unregister_prot_hook+0x48a/0x5a0 net/packet/af_packet.c:382 packet_do_bind+0x8ad/0xd70 net/packet/af_packet.c:3207 packet_bind+0x152/0x1b0 net/packet/af_packet.c:3291 __sys_bind+0x1e9/0x250 net/socket.c:1697 __do_sys_bind net/socket.c:1708 [inline] __se_sys_bind net/socket.c:1706 [inline] __x64_sys_bind+0x6f/0xb0 net/socket.c:1706 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f156f024ce7 RSP: 002b:00007ffea66ad768 EFLAGS: 00000217 ORIG_RAX: 0000000000000031 RAX: ffffffffffffffda RBX: 000055c9eeed2b60 RCX: 00007f156f024ce7 RDX: 0000000000000014 RSI: 00007ffea66ad778 RDI: 0000000000000005 RBP: 0000000000000000 R08: 000055c9efc90660 R09: 00007f156f0e5a60 R10: 0000000000020000 R11: 0000000000000217 R12: 000055c9efc8d600 R13: 000055c9efc90548 R14: 00007ffea66ce04c R15: 00007ffea66ce074 INFO: task dhcpcd:9361 blocked for more than 144 seconds. Not tainted 5.17.0-rc5-syzkaller-00306-g2293be58d6a1 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:dhcpcd state:D stack:29088 pid: 9361 ppid: 3175 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:4995 [inline] __schedule+0xa94/0x4910 kernel/sched/core.c:6304 schedule+0xd2/0x260 kernel/sched/core.c:6377 exp_funnel_lock kernel/rcu/tree_exp.h:313 [inline] synchronize_rcu_expedited+0x5a8/0x620 kernel/rcu/tree_exp.h:840 synchronize_net+0x3a/0x50 net/core/dev.c:10320 __unregister_prot_hook+0x48a/0x5a0 net/packet/af_packet.c:382 packet_do_bind+0x8ad/0xd70 net/packet/af_packet.c:3207 packet_bind+0x152/0x1b0 net/packet/af_packet.c:3291 __sys_bind+0x1e9/0x250 net/socket.c:1697 __do_sys_bind net/socket.c:1708 [inline] __se_sys_bind net/socket.c:1706 [inline] __x64_sys_bind+0x6f/0xb0 net/socket.c:1706 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f156f024ce7 RSP: 002b:00007ffea66ad768 EFLAGS: 00000217 ORIG_RAX: 0000000000000031 RAX: ffffffffffffffda RBX: 000055c9eeed2b60 RCX: 00007f156f024ce7 RDX: 0000000000000014 RSI: 00007ffea66ad778 RDI: 0000000000000005 RBP: 0000000000000000 R08: 000055c9efc90ec0 R09: 00007f156f0e5a60 R10: 0000000000020000 R11: 0000000000000217 R12: 000055c9efc8d600 R13: 000055c9efc90938 R14: 00007ffea66ce04c R15: 00007ffea66ce074 INFO: task dhcpcd:9364 blocked for more than 144 seconds. Not tainted 5.17.0-rc5-syzkaller-00306-g2293be58d6a1 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:dhcpcd state:D stack:29088 pid: 9364 ppid: 3175 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:4995 [inline] __schedule+0xa94/0x4910 kernel/sched/core.c:6304 schedule+0xd2/0x260 kernel/sched/core.c:6377 exp_funnel_lock kernel/rcu/tree_exp.h:313 [inline] synchronize_rcu_expedited+0x5a8/0x620 kernel/rcu/tree_exp.h:840 synchronize_net+0x3a/0x50 net/core/dev.c:10320 __unregister_prot_hook+0x48a/0x5a0 net/packet/af_packet.c:382 packet_do_bind+0x8ad/0xd70 net/packet/af_packet.c:3207 packet_bind+0x152/0x1b0 net/packet/af_packet.c:3291 __sys_bind+0x1e9/0x250 net/socket.c:1697 __do_sys_bind net/socket.c:1708 [inline] __se_sys_bind net/socket.c:1706 [inline] __x64_sys_bind+0x6f/0xb0 net/socket.c:1706 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f156f024ce7 RSP: 002b:00007ffea66ad768 EFLAGS: 00000217 ORIG_RAX: 0000000000000031 RAX: ffffffffffffffda RBX: 000055c9eeed2b60 RCX: 00007f156f024ce7 RDX: 0000000000000014 RSI: 00007ffea66ad778 RDI: 0000000000000005 RBP: 0000000000000000 R08: 000055c9efc90360 R09: 00007f156f0e5a60 R10: 0000000000020000 R11: 0000000000000217 R12: 000055c9efc8d600 R13: 000055c9efc90ab8 R14: 00007ffea66ce04c R15: 00007ffea66ce074 INFO: task dhcpcd:9379 blocked for more than 145 seconds. Not tainted 5.17.0-rc5-syzkaller-00306-g2293be58d6a1 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:dhcpcd state:D stack:28544 pid: 9379 ppid: 3175 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:4995 [inline] __schedule+0xa94/0x4910 kernel/sched/core.c:6304 schedule+0xd2/0x260 kernel/sched/core.c:6377 exp_funnel_lock kernel/rcu/tree_exp.h:313 [inline] synchronize_rcu_expedited+0x5a8/0x620 kernel/rcu/tree_exp.h:840 synchronize_rcu+0x132/0x190 kernel/rcu/tree.c:3785 synchronize_net+0x4a/0x50 net/core/dev.c:10322 __unregister_prot_hook+0x48a/0x5a0 net/packet/af_packet.c:382 packet_do_bind+0x8ad/0xd70 net/packet/af_packet.c:3207 packet_bind+0x152/0x1b0 net/packet/af_packet.c:3291 __sys_bind+0x1e9/0x250 net/socket.c:1697 __do_sys_bind net/socket.c:1708 [inline] __se_sys_bind net/socket.c:1706 [inline] __x64_sys_bind+0x6f/0xb0 net/socket.c:1706 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f156f024ce7 RSP: 002b:00007ffea66ad768 EFLAGS: 00000217 ORIG_RAX: 0000000000000031 RAX: ffffffffffffffda RBX: 000055c9eeed2b60 RCX: 00007f156f024ce7 RDX: 0000000000000014 RSI: 00007ffea66ad778 RDI: 0000000000000005 RBP: 0000000000000000 R08: 000055c9efc90360 R09: 00007f156f0e5a60 R10: 0000000000000100 R11: 0000000000000217 R12: 000055c9efc8d600 R13: 000055c9efc90fa8 R14: 00007ffea66ce04c R15: 00007ffea66ce074 INFO: task dhcpcd:9414 blocked for more than 145 seconds. Not tainted 5.17.0-rc5-syzkaller-00306-g2293be58d6a1 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:dhcpcd state:D stack:28920 pid: 9414 ppid: 3175 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:4995 [inline] __schedule+0xa94/0x4910 kernel/sched/core.c:6304 schedule+0xd2/0x260 kernel/sched/core.c:6377 exp_funnel_lock kernel/rcu/tree_exp.h:313 [inline] synchronize_rcu_expedited+0x5a8/0x620 kernel/rcu/tree_exp.h:840 synchronize_rcu+0x132/0x190 kernel/rcu/tree.c:3785 synchronize_net+0x4a/0x50 net/core/dev.c:10322 __unregister_prot_hook+0x48a/0x5a0 net/packet/af_packet.c:382 packet_do_bind+0x8ad/0xd70 net/packet/af_packet.c:3207 packet_bind+0x152/0x1b0 net/packet/af_packet.c:3291 __sys_bind+0x1e9/0x250 net/socket.c:1697 __do_sys_bind net/socket.c:1708 [inline] __se_sys_bind net/socket.c:1706 [inline] __x64_sys_bind+0x6f/0xb0 net/socket.c:1706 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f156f024ce7 RSP: 002b:00007ffea66ad768 EFLAGS: 00000217 ORIG_RAX: 0000000000000031 RAX: ffffffffffffffda RBX: 000055c9eeed2b60 RCX: 00007f156f024ce7 RDX: 0000000000000014 RSI: 00007ffea66ad778 RDI: 0000000000000005 RBP: 0000000000000000 R08: 000055c9efc90360 R09: 00007f156f0e5a60 R10: 0000000000000001 R11: 0000000000000217 R12: 000055c9efc8d600 R13: 000055c9efc91128 R14: 00007ffea66ce04c R15: 00007ffea66ce074 Showing all locks held in the system: 1 lock held by khungtaskd/27: #0: ffffffff8bb845e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6460 3 locks held by kworker/1:2/139: 2 locks held by getty/3276: #0: ffff88814b593098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:244 #1: ffffc90002b632e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xcf0/0x1230 drivers/tty/n_tty.c:2075 2 locks held by dhcpcd/9334: #0: ffff888060c04130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1668 [inline] #0: ffff888060c04130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2f/0xd70 net/packet/af_packet.c:3174 #1: ffffffff8bb8e228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:322 [inline] #1: ffffffff8bb8e228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d5/0x620 kernel/rcu/tree_exp.h:840 2 locks held by dhcpcd/9335: #0: ffff888079222130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1668 [inline] #0: ffff888079222130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2f/0xd70 net/packet/af_packet.c:3174 #1: ffffffff8bb8e228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:290 [inline] #1: ffffffff8bb8e228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4fa/0x620 kernel/rcu/tree_exp.h:840 1 lock held by dhcpcd/9361: #0: ffff8880503d8130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1668 [inline] #0: ffff8880503d8130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2f/0xd70 net/packet/af_packet.c:3174 1 lock held by dhcpcd/9364: #0: ffff88806e1ea130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1668 [inline] #0: ffff88806e1ea130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2f/0xd70 net/packet/af_packet.c:3174 1 lock held by dhcpcd/9379: #0: ffff888049d9c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1668 [inline] #0: ffff888049d9c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2f/0xd70 net/packet/af_packet.c:3174 1 lock held by dhcpcd/9414: #0: ffff88804d488130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1668 [inline] #0: ffff88804d488130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2f/0xd70 net/packet/af_packet.c:3174 3 locks held by syz-executor365/11136: #0: ffff88807ecda460 (sb_writers#5){.+.+}-{0:0}, at: filename_create+0xf3/0x480 fs/namei.c:3699 #1: ffff88805b1f49b8 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:812 [inline] #1: ffff88805b1f49b8 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: filename_create+0x158/0x480 fs/namei.c:3704 #2: ffff88807ecde990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf84/0x1380 fs/jbd2/transaction.c:466 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.17.0-rc5-syzkaller-00306-g2293be58d6a1 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x1e6/0x230 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:212 [inline] watchdog+0xc1d/0xf50 kernel/hung_task.c:369 kthread+0x2e9/0x3a0 kernel/kthread.c:377 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 19 Comm: ksoftirqd/1 Not tainted 5.17.0-rc5-syzkaller-00306-g2293be58d6a1 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:check_kcov_mode kernel/kcov.c:166 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x7/0x60 kernel/kcov.c:200 Code: 46 00 5d be 03 00 00 00 e9 96 6b 66 02 66 0f 1f 44 00 00 48 8b be b0 01 00 00 e8 b4 ff ff ff 31 c0 c3 90 65 8b 05 39 c3 89 7e <89> c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b 14 25 00 70 02 00 a9 RSP: 0018:ffffc90000d97508 EFLAGS: 00000246 RAX: 0000000000000100 RBX: ffff888059a3e800 RCX: ffff8880119e5700 RDX: 0000000000000000 RSI: ffff8880119e5700 RDI: 0000000000000003 RBP: dffffc0000000000 R08: 00000000fffffffd R09: 0000000000000000 R10: ffffffff87ee2f3b R11: 0000000000000000 R12: ffff888059a3e854 R13: ffffc90000d977f8 R14: 0000000000000000 R15: ffff888059a3e8a8 FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3017d21c80 CR3: 000000004d70b000 CR4: 0000000000350ee0 Call Trace: __find_rr_leaf+0x260/0xd20 net/ipv6/route.c:791 find_rr_leaf net/ipv6/route.c:847 [inline] rt6_select net/ipv6/route.c:891 [inline] fib6_table_lookup+0x649/0xa20 net/ipv6/route.c:2185 ip6_pol_route+0x1c5/0x11e0 net/ipv6/route.c:2221 pol_lookup_func include/net/ip6_fib.h:583 [inline] fib6_rule_lookup+0x111/0x6f0 net/ipv6/fib6_rules.c:115 ip6_route_input_lookup net/ipv6/route.c:2291 [inline] ip6_route_input+0x63c/0xbc0 net/ipv6/route.c:2587 ip6_rcv_finish_core.constprop.0.isra.0+0x168/0x570 net/ipv6/ip6_input.c:63 ip6_rcv_finish net/ipv6/ip6_input.c:74 [inline] NF_HOOK include/linux/netfilter.h:307 [inline] NF_HOOK include/linux/netfilter.h:301 [inline] ipv6_rcv+0x21c/0x3b0 net/ipv6/ip6_input.c:297 __netif_receive_skb_one_core+0x114/0x180 net/core/dev.c:5351 __netif_receive_skb+0x24/0x1b0 net/core/dev.c:5465 process_backlog+0x2a5/0x6c0 net/core/dev.c:5797 __napi_poll+0xb3/0x6e0 net/core/dev.c:6365 napi_poll net/core/dev.c:6432 [inline] net_rx_action+0x801/0xb40 net/core/dev.c:6519 __do_softirq+0x29b/0x9c2 kernel/softirq.c:558 run_ksoftirqd kernel/softirq.c:921 [inline] run_ksoftirqd+0x2d/0x60 kernel/softirq.c:913 smpboot_thread_fn+0x645/0x9c0 kernel/smpboot.c:164 kthread+0x2e9/0x3a0 kernel/kthread.c:377 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 ---------------- Code disassembly (best guess): 0: 46 00 5d be rex.RX add %r11b,-0x42(%rbp) 4: 03 00 add (%rax),%eax 6: 00 00 add %al,(%rax) 8: e9 96 6b 66 02 jmpq 0x2666ba3 d: 66 0f 1f 44 00 00 nopw 0x0(%rax,%rax,1) 13: 48 8b be b0 01 00 00 mov 0x1b0(%rsi),%rdi 1a: e8 b4 ff ff ff callq 0xffffffd3 1f: 31 c0 xor %eax,%eax 21: c3 retq 22: 90 nop 23: 65 8b 05 39 c3 89 7e mov %gs:0x7e89c339(%rip),%eax # 0x7e89c363 * 2a: 89 c1 mov %eax,%ecx <-- trapping instruction 2c: 48 8b 34 24 mov (%rsp),%rsi 30: 81 e1 00 01 00 00 and $0x100,%ecx 36: 65 48 8b 14 25 00 70 mov %gs:0x27000,%rdx 3d: 02 00 3f: a9 .byte 0xa9