INFO: task syz.5.2550:16467 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.5.2550 state:D stack:26888 pid:16467 tgid:16463 ppid:6602 task_flags:0x400140 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5583 [inline]
__schedule+0x125e/0x6990 kernel/sched/core.c:7382
__schedule_loop kernel/sched/core.c:7459 [inline]
schedule+0xdd/0x2c0 kernel/sched/core.c:7474
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7531
__mutex_lock_common kernel/locking/mutex.c:726 [inline]
__mutex_lock+0xcca/0x1c10 kernel/locking/mutex.c:821
nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
netlink_rcv_skb+0x159/0x420 net/netlink/af_netlink.c:2584
nfnetlink_rcv+0x1b3/0x440 net/netfilter/nfnetlink.c:667
netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline]
netlink_unicast+0x668/0x950 net/netlink/af_netlink.c:1361
netlink_sendmsg+0x9ac/0x10c0 net/netlink/af_netlink.c:1920
sock_sendmsg_nosec net/socket.c:800 [inline]
__sock_sendmsg net/socket.c:818 [inline]
____sys_sendmsg+0xa99/0xc30 net/socket.c:2715
___sys_sendmsg+0x190/0x1e0 net/socket.c:2769
__sys_sendmsg+0x160/0x210 net/socket.c:2801
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fcbff19f559
RSP: 002b:00007fcc00104028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fcbff426090 RCX: 00007fcbff19f559
RDX: 0000000000000002 RSI: 0000200000000880 RDI: 000000000000000b
RBP: 00007fcbff236b50 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fcbff426128 R14: 00007fcbff426090 R15: 00007ffe24b1fb38
INFO: task syz.5.2550:16468 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.5.2550 state:D
stack:27592 pid:16468 tgid:16463 ppid:6602 task_flags:0x400140 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5583 [inline]
__schedule+0x125e/0x6990 kernel/sched/core.c:7382
__schedule_loop kernel/sched/core.c:7459 [inline]
schedule+0xdd/0x2c0 kernel/sched/core.c:7474
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7531
__mutex_lock_common kernel/locking/mutex.c:726 [inline]
__mutex_lock+0xcca/0x1c10 kernel/locking/mutex.c:821
nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
netlink_rcv_skb+0x159/0x420 net/netlink/af_netlink.c:2584
nfnetlink_rcv+0x1b3/0x440 net/netfilter/nfnetlink.c:667
netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline]
netlink_unicast+0x668/0x950 net/netlink/af_netlink.c:1361
netlink_sendmsg+0x9ac/0x10c0 net/netlink/af_netlink.c:1920
sock_sendmsg_nosec net/socket.c:800 [inline]
__sock_sendmsg net/socket.c:818 [inline]
____sys_sendmsg+0xa99/0xc30 net/socket.c:2715
___sys_sendmsg+0x190/0x1e0 net/socket.c:2769
__sys_sendmsg+0x160/0x210 net/socket.c:2801
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fcbff19f559
RSP: 002b:00007fcc000e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fcbff426180 RCX: 00007fcbff19f559
RDX: 0000000000048040 RSI: 0000200000000980 RDI: 000000000000000b
RBP: 00007fcbff236b50 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fcbff426218 R14: 00007fcbff426180 R15: 00007ffe24b1fb38
INFO: task syz.7.2552:16538 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.7.2552 state:D stack:26552 pid:16538 tgid:16535 ppid:12920 task_flags:0x400140 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5583 [inline]
__schedule+0x125e/0x6990 kernel/sched/core.c:7382
__schedule_loop kernel/sched/core.c:7459 [inline]
schedule+0xdd/0x2c0 kernel/sched/core.c:7474
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7531
__mutex_lock_common kernel/locking/mutex.c:726 [inline]
__mutex_lock+0xcca/0x1c10 kernel/locking/mutex.c:821
nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
netlink_rcv_skb+0x159/0x420 net/netlink/af_netlink.c:2584
nfnetlink_rcv+0x1b3/0x440 net/netfilter/nfnetlink.c:667
netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline]
netlink_unicast+0x668/0x950 net/netlink/af_netlink.c:1361
netlink_sendmsg+0x9ac/0x10c0 net/netlink/af_netlink.c:1920
sock_sendmsg_nosec net/socket.c:800 [inline]
__sock_sendmsg net/socket.c:818 [inline]
____sys_sendmsg+0xa99/0xc30 net/socket.c:2715
___sys_sendmsg+0x190/0x1e0 net/socket.c:2769
__sys_sendmsg+0x160/0x210 net/socket.c:2801
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f35cb19f559
RSP: 002b:00007f35cbf8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f35cb426090 RCX: 00007f35cb19f559
RDX: 0000000000004000 RSI: 0000200000000100 RDI: 0000000000000007
RBP: 00007f35cb236b50 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f35cb426128 R14: 00007f35cb426090 R15: 00007ffd5f8bdd08
Showing all locks held in the system:
locks held by khungtaskd/32: 1, last CPU#1:
#0: ffffffff8ffeb2a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#0: ffffffff8ffeb2a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#0: ffffffff8ffeb2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6871
locks held by kworker/u8:12/1471: 4, last CPU#0:
#0: ffff888036058148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 kernel/workqueue.c:3470
#1: ffffc90006537d08 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 kernel/workqueue.c:3471
#2: ffff888081a0e1c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule net/batman-adv/bat_iv_ogm.c:1010 [inline]
#2: ffff888081a0e1c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule net/batman-adv/bat_iv_ogm.c:1005 [inline]
#2: ffff888081a0e1c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_send_outstanding_bat_ogm_packet+0x50f/0x7d0 net/batman-adv/bat_iv_ogm.c:1924
#3: ffffffff8ffeb2a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#3: ffffffff8ffeb2a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#3: ffffffff8ffeb2a0 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_slide_own_bcast_window net/batman-adv/bat_iv_ogm.c:870 [inline]
#3: ffffffff8ffeb2a0 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule_buff+0x583/0x15d0 net/batman-adv/bat_iv_ogm.c:949
locks held by dhcpcd/5286: 1, on CPU#1:
#0: ffffffff91f2f820 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:134 [inline]
#0: ffffffff91f2f820 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x4a6/0x1bb0 net/ipv6/addrconf.c:5088
locks held by getty/5386: 2, on CPU#0:
#0: ffff88801e7860a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
#1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1540 drivers/tty/n_tty.c:2211
locks held by kworker/0:6/16388: 3, on CPU#0:
#0: ffff88813ff32d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 kernel/workqueue.c:3470
#1: ffffc9000446fd08 ((work_completion)(&(&devlink->rwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 kernel/workqueue.c:3471
#2: ffffffff8fff77a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 kernel/rcu/tree_exp.h:311
locks held by syz.4.2548/16442: 3, last CPU#0:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
#1: ffff888043e126f0 (nlk_cb_mutex-NETFILTER){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 net/netlink/af_netlink.c:2438
#2: ffffffff8ffeb2a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_release include/linux/rcupdate.h:319 [inline]
#2: ffffffff8ffeb2a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_unlock include/linux/rcupdate.h:880 [inline]
#2: ffffffff8ffeb2a0 (rcu_read_lock){....}-{1:3}, at: cond_resched_rcu include/linux/rcupdate_wait.h:65 [inline]
#2: ffffffff8ffeb2a0 (rcu_read_lock){....}-{1:3}, at: hash_netportnet4_list+0x2cc/0x16b0 net/netfilter/ipset/ip_set_hash_gen.h:1568
locks held by syz.5.2550/16467: 1, on CPU#1:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz.5.2550/16468: 1, on CPU#1:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz.7.2552/16538: 1, on CPU#1:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz.8.2555/16680: 1, on CPU#0:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz.8.2555/16681: 1, on CPU#0:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz.9.2561/16882: 1, on CPU#0:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz.3.2554/17058: 1, on CPU#1:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz.3.2554/17059: 1, on CPU#1:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz.0.2559/17081: 1, on CPU#0:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz.1.2564/17118: 1, on CPU#1:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz.6.2560/17153: 1, on CPU#0:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz.2.2565/17327: 1, on CPU#1:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz.4.2566/17821: 1, on CPU#0:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz.4.2566/17822: 1, on CPU#0:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz.7.2572/17868: 1, on CPU#1:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz.7.2572/17871: 1, on CPU#0:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz.5.2574/17915: 1, on CPU#1:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz.9.2575/17920: 1, on CPU#0:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz.9.2575/17921: 1, on CPU#0:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz.8.2577/17944: 1, on CPU#0:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz.8.2577/17945: 1, on CPU#0:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz-executor/18012: 2, last CPU#0:
#0: ffff88807b06d900 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:600 [inline]
#0: ffff88807b06d900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa40 mm/mmap.c:1299
#1: ffffffff8ffeb2a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#1: ffffffff8ffeb2a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#1: ffffffff8ffeb2a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x9a/0x470 mm/pgtable-generic.c:302
locks held by syz.3.2595/18193: 1, on CPU#1:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz.3.2595/18195: 1, on CPU#1:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz-executor/18211: 7, on CPU#0:
#0: ffff88802765e478 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739
#1: ffff8880380c3c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:336
#2: ffff88802c16b878 (kn->active#52){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline]
#2: ffff88802c16b878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:337
#3: ffffffff914704e0 (nsim_bus_dev_list_lock){+.+.}-{4:4}
, at: new_device_store+0xfe/0x6d0 drivers/net/netdevsim/bus.c:184
#4: ffff8880362a3128 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1109 [inline]
#4: ffff8880362a3128 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4c0 drivers/base/dd.c:1106
#5: ffff8880362a0258 (&devlink->lock_key#28){+.+.}-{4:4}, at: nsim_drv_probe+0xcd/0x1350 drivers/net/netdevsim/dev.c:1583
#6: ffffffff91f2f820 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x1b/0x70 net/ipv4/nexthop.c:4044
locks held by syz.6.2600/18218: 1, on CPU#1:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz.1.2601/18233: 1, on CPU#0:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz.1.2601/18234: 1, on CPU#0:
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock net/netfilter/nfnetlink.c:96 [inline]
#0: ffffffff9d0d8240 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 net/netfilter/nfnetlink.c:293
locks held by syz-executor/18244: 3, last CPU#0:
#0: ffffffff926ac908 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline]
#0: ffffffff926ac908 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:320 [inline]
#0: ffffffff926ac908 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 net/core/rtnetlink.c:602
#1: ffffffff91f2f820 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
#1: ffffffff91f2f820 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:366 [inline]
#1: ffffffff91f2f820 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xac3/0x2620 net/core/rtnetlink.c:4251
#2: ffff88804fcfb530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x53/0xc80 net/ipv6/mcast.c:963
locks held by syz.2.2605/18303: 1, on CPU#1:
#0: ffff88805dbbe540 (&mm->mmap_lock){++++}-{4:4}, at: mmap_write_lock_killable include/linux/mmap_lock.h:550 [inline]
#0: ffff88805dbbe540 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f0/0x490 mm/util.c:579
locks held by syz.2.2605/18304: 2, last CPU#0:
#0: ffff888025c9cce8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1041 [inline]
#0: ffff888025c9cce8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_buffered_write+0xff/0x180 block/fops.c:738
#1: ffffffff8ffeb2a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire.constprop.0+0x7/0x30 include/linux/rcupdate.h:309
locks held by syz.2.2605/18305: 2, last CPU#0:
#0: ffff88805dbbe540 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:600 [inline]
#0: ffff88805dbbe540 (&mm->mmap_lock){++++}-{4:4}, at: madvise_lock+0xec/0x240 mm/madvise.c:1801
#1: ffffe8ffffc212a8 (&acomp_ctx->mutex){+.+.}-{4:4}, at: zswap_compress mm/zswap.c:869 [inline]
#1: ffffe8ffffc212a8 (&acomp_ctx->mutex){+.+.}-{4:4}, at: zswap_store_page mm/zswap.c:1454 [inline]
#1: ffffe8ffffc212a8 (&acomp_ctx->mutex){+.+.}-{4:4}, at: zswap_store+0xd3b/0x2f90 mm/zswap.c:1569
=============================================
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:123
nmi_trigger_cpumask_backtrace+0x21f/0x2a0 lib/nmi_backtrace.c:66
trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline]
__sys_info lib/sys_info.c:157 [inline]
sys_info+0x141/0x190 lib/sys_info.c:165
check_hung_uninterruptible_tasks kernel/hung_task.c:377 [inline]
watchdog+0xd0f/0x10c0 kernel/hung_task.c:598
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 31 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
RIP: 0010:io_serial_in+0x87/0xb0 drivers/tty/serial/8250/8250_port.c:426
Code: 13 4c fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c e9 bd a5 2e 06 e8 c8 f3 c5 fc eb a2 e8 51 f4
RSP: 0018:ffffc90000a77950 EFLAGS: 00000002
RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000
RDX: 00000000000003fd RSI: ffffffff85c232f0 RDI: ffffffff9cf49080
RBP: ffffffff9cf49040 R08: 000000000000001f R09: 0000000000000000
R10: 0000000000000003 R11: 205d323434363154 R12: 0000000000000000
R13: 0000000000000020 R14: fffffbfff39e9265 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff88812257f000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005601e8b84ce8 CR3: 0000000077112000 CR4: 00000000003526f0
Call Trace:
serial_in drivers/tty/serial/8250/8250.h:134 [inline]
serial_lsr_in drivers/tty/serial/8250/8250.h:156 [inline]
wait_for_lsr+0x13a/0x210 drivers/tty/serial/8250/8250_port.c:2036
serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 drivers/tty/serial/8250/8250_port.c:3294
__serial8250_console_fifo_write+0xa5/0x290 drivers/tty/serial/8250/8250_port.c:3369
serial8250_console_fifo_write drivers/tty/serial/8250/8250_port.c:3402 [inline]
__serial8250_console_write drivers/tty/serial/8250/8250_port.c:3456 [inline]
serial8250_console_write+0x1108/0x14f0 drivers/tty/serial/8250/8250_port.c:3520
nbcon_emit_next_record+0x8f7/0xa70 kernel/printk/nbcon.c:1070
nbcon_emit_one+0x1a8/0x2b0 kernel/printk/nbcon.c:1157
nbcon_kthread_func+0x5ef/0x7f0 kernel/printk/nbcon.c:1271
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245