INFO: task dhcpcd:3059 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:dhcpcd state:D stack:0 pid:3059 tgid:3059 ppid:3058 task_flags:0x400140 flags:0x00000000 Call Trace: [] context_switch kernel/sched/core.c:5256 [inline] [] __schedule+0x102c/0x451e kernel/sched/core.c:6863 [] __schedule_loop kernel/sched/core.c:6945 [inline] [] schedule+0xc4/0x35e kernel/sched/core.c:6960 [] schedule_preempt_disabled+0x16/0x28 kernel/sched/core.c:7017 [] __mutex_lock_common kernel/locking/mutex.c:692 [inline] [] __mutex_lock+0x8aa/0x19b4 kernel/locking/mutex.c:776 [] mutex_lock_nested+0x14/0x1c kernel/locking/mutex.c:828 [] rtnl_lock net/core/rtnetlink.c:80 [inline] [] rtnl_dumpit+0x1a2/0x1f6 net/core/rtnetlink.c:6826 [] netlink_dump+0x4ca/0x114e net/netlink/af_netlink.c:2325 [] netlink_recvmsg+0x6f8/0x8e6 net/netlink/af_netlink.c:1976 [] sock_recvmsg_nosec net/socket.c:1078 [inline] [] sock_recvmsg+0xd6/0x142 net/socket.c:1100 [] ____sys_recvmsg+0x22c/0x8f4 net/socket.c:2812 [] ___sys_recvmsg+0x112/0x19e net/socket.c:2854 [] __sys_recvmsg+0x186/0x244 net/socket.c:2887 [] __do_sys_recvmsg net/socket.c:2893 [inline] [] __se_sys_recvmsg net/socket.c:2890 [inline] [] __riscv_sys_recvmsg+0x70/0xa2 net/socket.c:2890 [] syscall_handler+0x94/0x118 arch/riscv/include/asm/syscall.h:112 [] do_trap_ecall_u+0x3d8/0x56c arch/riscv/kernel/traps.c:343 [] handle_exception+0x146/0x152 arch/riscv/kernel/entry.S:198 INFO: task kworker/u8:1:3300 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:1 state:D stack:0 pid:3300 tgid:3300 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: ipv6_addrconf addrconf_verify_work Call Trace: [] context_switch kernel/sched/core.c:5256 [inline] [] __schedule+0x102c/0x451e kernel/sched/core.c:6863 [] __schedule_loop kernel/sched/core.c:6945 [inline] [] schedule+0xc4/0x35e kernel/sched/core.c:6960 [] schedule_preempt_disabled+0x16/0x28 kernel/sched/core.c:7017 [] __mutex_lock_common kernel/locking/mutex.c:692 [inline] [] __mutex_lock+0x8aa/0x19b4 kernel/locking/mutex.c:776 [] mutex_lock_nested+0x14/0x1c kernel/locking/mutex.c:828 [] rtnl_lock+0x22/0x2a net/core/rtnetlink.c:80 [] rtnl_net_lock include/linux/rtnetlink.h:130 [inline] [] addrconf_verify_work+0x1c/0x3c net/ipv6/addrconf.c:4734 [] process_one_work+0x96a/0x1f3a kernel/workqueue.c:3257 [] process_scheduled_works kernel/workqueue.c:3340 [inline] [] worker_thread+0x5ce/0xde8 kernel/workqueue.c:3421 [] kthread+0x39e/0x7d8 kernel/kthread.c:463 [] ret_from_fork_kernel+0x2a/0xc78 arch/riscv/kernel/process.c:214 [] ret_from_fork_kernel_asm+0x16/0x18 arch/riscv/kernel/entry.S:328 INFO: task syz-executor:4694 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:4694 tgid:4694 ppid:1 task_flags:0x400140 flags:0x00000002 Call Trace: [] context_switch kernel/sched/core.c:5256 [inline] [] __schedule+0x102c/0x451e kernel/sched/core.c:6863 [] __schedule_loop kernel/sched/core.c:6945 [inline] [] schedule+0xc4/0x35e kernel/sched/core.c:6960 [] schedule_preempt_disabled+0x16/0x28 kernel/sched/core.c:7017 [] __mutex_lock_common kernel/locking/mutex.c:692 [inline] [] __mutex_lock+0x8aa/0x19b4 kernel/locking/mutex.c:776 [] mutex_lock_nested+0x14/0x1c kernel/locking/mutex.c:828 [] rtnl_lock net/core/rtnetlink.c:80 [inline] [] rtnl_nets_lock net/core/rtnetlink.c:341 [inline] [] rtnl_newlink+0x64c/0x1dc4 net/core/rtnetlink.c:4071 [] rtnetlink_rcv_msg+0x9e2/0xdbe net/core/rtnetlink.c:6958 [] netlink_rcv_skb+0x206/0x3be net/netlink/af_netlink.c:2550 [] rtnetlink_rcv+0x26/0x30 net/core/rtnetlink.c:6985 [] netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] [] netlink_unicast+0x544/0x88a net/netlink/af_netlink.c:1344 [] netlink_sendmsg+0x854/0xdcc net/netlink/af_netlink.c:1894 [] sock_sendmsg_nosec net/socket.c:727 [inline] [] __sock_sendmsg+0xcc/0x162 net/socket.c:742 [] __sys_sendto+0x27a/0x34e net/socket.c:2206 [] __do_sys_sendto net/socket.c:2213 [inline] [] __se_sys_sendto net/socket.c:2209 [inline] [] __riscv_sys_sendto+0xc0/0x158 net/socket.c:2209 [] syscall_handler+0x94/0x118 arch/riscv/include/asm/syscall.h:112 [] do_trap_ecall_u+0x3d8/0x56c arch/riscv/kernel/traps.c:343 [] handle_exception+0x146/0x152 arch/riscv/kernel/entry.S:198 INFO: task syz-executor:4753 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:4753 tgid:4753 ppid:1 task_flags:0x400140 flags:0x00000002 Call Trace: [] context_switch kernel/sched/core.c:5256 [inline] [] __schedule+0x102c/0x451e kernel/sched/core.c:6863 [] __schedule_loop kernel/sched/core.c:6945 [inline] [] schedule+0xc4/0x35e kernel/sched/core.c:6960 [] schedule_preempt_disabled+0x16/0x28 kernel/sched/core.c:7017 [] __mutex_lock_common kernel/locking/mutex.c:692 [inline] [] __mutex_lock+0x8aa/0x19b4 kernel/locking/mutex.c:776 [] mutex_lock_nested+0x14/0x1c kernel/locking/mutex.c:828 [] rtnl_lock net/core/rtnetlink.c:80 [inline] [] rtnl_nets_lock net/core/rtnetlink.c:341 [inline] [] rtnl_newlink+0x64c/0x1dc4 net/core/rtnetlink.c:4071 [] rtnetlink_rcv_msg+0x9e2/0xdbe net/core/rtnetlink.c:6958 [] netlink_rcv_skb+0x206/0x3be net/netlink/af_netlink.c:2550 [] rtnetlink_rcv+0x26/0x30 net/core/rtnetlink.c:6985 [] netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] [] netlink_unicast+0x544/0x88a net/netlink/af_netlink.c:1344 [] netlink_sendmsg+0x854/0xdcc net/netlink/af_netlink.c:1894 [] sock_sendmsg_nosec net/socket.c:727 [inline] [] __sock_sendmsg+0xcc/0x162 net/socket.c:742 [] __sys_sendto+0x27a/0x34e net/socket.c:2206 [] __do_sys_sendto net/socket.c:2213 [inline] [] __se_sys_sendto net/socket.c:2209 [inline] [] __riscv_sys_sendto+0xc0/0x158 net/socket.c:2209 [] syscall_handler+0x94/0x118 arch/riscv/include/asm/syscall.h:112 [] do_trap_ecall_u+0x3d8/0x56c arch/riscv/kernel/traps.c:343 [] handle_exception+0x146/0x152 arch/riscv/kernel/entry.S:198 Showing all locks held in the system: 3 locks held by kworker/u8:2/18: 4 locks held by ksoftirqd/1/24: 3 locks held by kworker/1:1/32: 1 lock held by khungtaskd/33: #0: ffffffff889e1320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2a/0x1a0 kernel/locking/lockdep.c:6771 2 locks held by dhcpcd/3059: #0: ffffaf8013bcd6f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xd9c/0x114e net/netlink/af_netlink.c:2267 #1: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #1: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x1a2/0x1f6 net/core/rtnetlink.c:6826 2 locks held by getty/3162: #0: ffffaf80197960a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46 drivers/tty/tty_ldsem.c:340 #1: ffff8f800008e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x3e4/0x12ea drivers/tty/n_tty.c:2211 2 locks held by syz-executor/3191: 3 locks held by kworker/u8:1/3300: #0: ffffaf801e007948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x848/0x1f3a kernel/workqueue.c:3232 #1: ffff8f8009957b70 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x870/0x1f3a kernel/workqueue.c:3232 #2: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x22/0x2a net/core/rtnetlink.c:80 5 locks held by kworker/u8:7/3467: 2 locks held by kworker/1:4/3818: 2 locks held by kworker/1:2/4239: 2 locks held by kworker/1:7/4423: 3 locks held by kworker/u8:0/4640: #0: ffffaf8012289948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x848/0x1f3a kernel/workqueue.c:3232 #1: ffff8f80041e7b70 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x870/0x1f3a kernel/workqueue.c:3232 #2: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x22/0x2a net/core/rtnetlink.c:80 4 locks held by kworker/1:10/4648: 2 locks held by kworker/1:12/4668: 1 lock held by syz.1.217/4678: #0: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x22/0x2a net/core/rtnetlink.c:80 2 locks held by syz-executor/4694: #0: ffffffff8963f4a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0xea/0x31c net/core/rtnetlink.c:573 #1: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #1: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline] #1: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x64c/0x1dc4 net/core/rtnetlink.c:4071 1 lock held by syz-executor/4753: #0: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #0: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline] #0: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x64c/0x1dc4 net/core/rtnetlink.c:4071 1 lock held by syz-executor/5057: #0: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x22/0x2a net/core/rtnetlink.c:80 1 lock held by syz-executor/5065: #0: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x22/0x2a net/core/rtnetlink.c:80 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT Hardware name: riscv-virtio,qemu (DT) Call Trace: [] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:149 [] show_stack+0x30/0x3c arch/riscv/kernel/stacktrace.c:155 [] __dump_stack lib/dump_stack.c:94 [inline] [] dump_stack_lvl+0x12a/0x1a2 lib/dump_stack.c:120 [] dump_stack+0x1c/0x24 lib/dump_stack.c:129 [] nmi_cpu_backtrace+0x3b0/0x3b2 lib/nmi_backtrace.c:113 [] nmi_trigger_cpumask_backtrace+0x2b6/0x45a lib/nmi_backtrace.c:62 [] arch_trigger_cpumask_backtrace+0x2c/0x3c arch/riscv/kernel/smp.c:350 [] trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] [] __sys_info lib/sys_info.c:157 [inline] [] sys_info+0x20c/0x252 lib/sys_info.c:165 [] check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline] [] watchdog+0xa70/0x11ec kernel/hung_task.c:515 [] kthread+0x39e/0x7d8 kernel/kthread.c:463 [] ret_from_fork_kernel+0x2a/0xc78 arch/riscv/kernel/process.c:214 [] ret_from_fork_kernel_asm+0x16/0x18 arch/riscv/kernel/entry.S:328 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 32 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT Hardware name: riscv-virtio,qemu (DT) Workqueue: events iterate_cleanup_work epc : preempt_count include/asm-generic/preempt.h:11 [inline] epc : should_resched include/asm-generic/preempt.h:77 [inline] epc : __local_bh_enable_ip+0x392/0x5ee kernel/softirq.c:457 ra : __local_bh_enable_ip+0x38e/0x5ee kernel/softirq.c:455 epc : ffffffff8016b9d2 ra : ffffffff8016b9ce sp : ffff8f8000016af0 gp : ffffffff8a2fec60 tp : ffffaf8013ed3500 t0 : ffff8f8000016ec8 t1 : 0000000000000098 t2 : fffffffff2f20000 s0 : ffff8f8000016b40 s1 : 0000000000000102 a0 : 0000000000000001 a1 : ffffffff8820a170 a2 : 0000000000000003 a3 : 0000000000000101 a4 : 0000000000000001 a5 : 0000000000102de0 a6 : 0000000000f00000 a7 : 0000000000000000 s2 : ffffaf8013ed3500 s3 : ffffffff85d045d4 s4 : 0000000000000001 s5 : ffffffff916cd6a0 s6 : 1ffff5f0027da6a1 s7 : ffffffff8a340820 s8 : ffff8f8000016d80 s9 : dfffffff00000000 s10: ffff8f8000016d20 s11: ffffaf8030073100 t3 : 1ffff5f006289603 t4 : ffffaf801f912128 t5 : ffffffff87ad8ae8 t6 : 0000000000000002 status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001 [] arch_local_irq_enable arch/riscv/include/asm/irqflags.h:21 [inline] [] __local_bh_enable_ip+0x392/0x5ee kernel/softirq.c:455 [] local_bh_enable include/linux/bottom_half.h:33 [inline] [] ipt_do_table+0xe9a/0x1cb4 net/ipv4/netfilter/ip_tables.c:357 [] nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] [] nf_hook_slow+0xb8/0x1ec net/netfilter/core.c:623 [] nf_hook include/linux/netfilter.h:273 [inline] [] __ip_local_out+0x496/0xbd6 net/ipv4/ip_output.c:120 [] ip_local_out+0x2e/0x1a8 net/ipv4/ip_output.c:129 [] synproxy_send_tcp.isra.0+0x428/0x636 net/netfilter/nf_synproxy_core.c:439 [] synproxy_send_client_synack+0x6cc/0x94e net/netfilter/nf_synproxy_core.c:484 [] nft_synproxy_eval_v4 net/netfilter/nft_synproxy.c:59 [inline] [] nft_synproxy_do_eval+0x858/0xab8 net/netfilter/nft_synproxy.c:141 [] nft_synproxy_eval+0x28/0x4e net/netfilter/nft_synproxy.c:247 [] expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline] [] nft_do_chain+0x328/0x1598 net/netfilter/nf_tables_core.c:285 [] nft_do_chain_inet+0x180/0x34c net/netfilter/nft_chain_filter.c:161 [] nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] [] nf_hook_slow+0xb8/0x1ec net/netfilter/core.c:623 [] nf_hook include/linux/netfilter.h:273 [inline] [] NF_HOOK include/linux/netfilter.h:316 [inline] [] ip_local_deliver+0x2ea/0x568 net/ipv4/ip_input.c:262 [] dst_input include/net/dst.h:474 [inline] [] ip_rcv_finish+0x1b0/0x2d2 net/ipv4/ip_input.c:453 [] NF_HOOK include/linux/netfilter.h:318 [inline] [] NF_HOOK include/linux/netfilter.h:312 [inline] [] ip_rcv+0xd6/0x44e net/ipv4/ip_input.c:573 [] __netif_receive_skb_one_core+0x106/0x16e net/core/dev.c:6137 [] __netif_receive_skb+0x2c/0x144 net/core/dev.c:6250 [] process_backlog+0x4ec/0x1caa net/core/dev.c:6602 [] __napi_poll.constprop.0+0xa4/0x4b6 net/core/dev.c:7666 [] napi_poll net/core/dev.c:7729 [inline] [] net_rx_action+0xa42/0xe36 net/core/dev.c:7881 [] handle_softirqs+0x4b6/0x1336 kernel/softirq.c:622 [] __do_softirq+0x12/0x1a kernel/softirq.c:656 [] ___do_softirq+0x18/0x20 arch/riscv/kernel/irq.c:119 [] call_on_irq_stack+0x32/0x40 arch/riscv/kernel/entry.S:361 INFO: task dhcpcd:3059 blocked for more than 452 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:dhcpcd state:D stack:0 pid:3059 tgid:3059 ppid:3058 task_flags:0x400140 flags:0x00000000 Call Trace: [] context_switch kernel/sched/core.c:5256 [inline] [] __schedule+0x102c/0x451e kernel/sched/core.c:6863 [] __schedule_loop kernel/sched/core.c:6945 [inline] [] schedule+0xc4/0x35e kernel/sched/core.c:6960 [] schedule_preempt_disabled+0x16/0x28 kernel/sched/core.c:7017 [] __mutex_lock_common kernel/locking/mutex.c:692 [inline] [] __mutex_lock+0x8aa/0x19b4 kernel/locking/mutex.c:776 [] mutex_lock_nested+0x14/0x1c kernel/locking/mutex.c:828 [] rtnl_lock net/core/rtnetlink.c:80 [inline] [] rtnl_dumpit+0x1a2/0x1f6 net/core/rtnetlink.c:6826 [] netlink_dump+0x4ca/0x114e net/netlink/af_netlink.c:2325 [] netlink_recvmsg+0x6f8/0x8e6 net/netlink/af_netlink.c:1976 [] sock_recvmsg_nosec net/socket.c:1078 [inline] [] sock_recvmsg+0xd6/0x142 net/socket.c:1100 [] ____sys_recvmsg+0x22c/0x8f4 net/socket.c:2812 [] ___sys_recvmsg+0x112/0x19e net/socket.c:2854 [] __sys_recvmsg+0x186/0x244 net/socket.c:2887 [] __do_sys_recvmsg net/socket.c:2893 [inline] [] __se_sys_recvmsg net/socket.c:2890 [inline] [] __riscv_sys_recvmsg+0x70/0xa2 net/socket.c:2890 [] syscall_handler+0x94/0x118 arch/riscv/include/asm/syscall.h:112 [] do_trap_ecall_u+0x3d8/0x56c arch/riscv/kernel/traps.c:343 [] handle_exception+0x146/0x152 arch/riscv/kernel/entry.S:198 INFO: task kworker/u8:1:3300 blocked for more than 452 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:1 state:D stack:0 pid:3300 tgid:3300 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: ipv6_addrconf addrconf_verify_work Call Trace: [] context_switch kernel/sched/core.c:5256 [inline] [] __schedule+0x102c/0x451e kernel/sched/core.c:6863 [] __schedule_loop kernel/sched/core.c:6945 [inline] [] schedule+0xc4/0x35e kernel/sched/core.c:6960 [] schedule_preempt_disabled+0x16/0x28 kernel/sched/core.c:7017 [] __mutex_lock_common kernel/locking/mutex.c:692 [inline] [] __mutex_lock+0x8aa/0x19b4 kernel/locking/mutex.c:776 [] mutex_lock_nested+0x14/0x1c kernel/locking/mutex.c:828 [] rtnl_lock+0x22/0x2a net/core/rtnetlink.c:80 [] rtnl_net_lock include/linux/rtnetlink.h:130 [inline] [] addrconf_verify_work+0x1c/0x3c net/ipv6/addrconf.c:4734 [] process_one_work+0x96a/0x1f3a kernel/workqueue.c:3257 [] process_scheduled_works kernel/workqueue.c:3340 [inline] [] worker_thread+0x5ce/0xde8 kernel/workqueue.c:3421 [] kthread+0x39e/0x7d8 kernel/kthread.c:463 [] ret_from_fork_kernel+0x2a/0xc78 arch/riscv/kernel/process.c:214 [] ret_from_fork_kernel_asm+0x16/0x18 arch/riscv/kernel/entry.S:328 INFO: task syz-executor:4694 blocked for more than 452 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:4694 tgid:4694 ppid:1 task_flags:0x400140 flags:0x00000002 Call Trace: [] context_switch kernel/sched/core.c:5256 [inline] [] __schedule+0x102c/0x451e kernel/sched/core.c:6863 [] __schedule_loop kernel/sched/core.c:6945 [inline] [] schedule+0xc4/0x35e kernel/sched/core.c:6960 [] schedule_preempt_disabled+0x16/0x28 kernel/sched/core.c:7017 [] __mutex_lock_common kernel/locking/mutex.c:692 [inline] [] __mutex_lock+0x8aa/0x19b4 kernel/locking/mutex.c:776 [] mutex_lock_nested+0x14/0x1c kernel/locking/mutex.c:828 [] rtnl_lock net/core/rtnetlink.c:80 [inline] [] rtnl_nets_lock net/core/rtnetlink.c:341 [inline] [] rtnl_newlink+0x64c/0x1dc4 net/core/rtnetlink.c:4071 [] rtnetlink_rcv_msg+0x9e2/0xdbe net/core/rtnetlink.c:6958 [] netlink_rcv_skb+0x206/0x3be net/netlink/af_netlink.c:2550 [] rtnetlink_rcv+0x26/0x30 net/core/rtnetlink.c:6985 [] netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] [] netlink_unicast+0x544/0x88a net/netlink/af_netlink.c:1344 [] netlink_sendmsg+0x854/0xdcc net/netlink/af_netlink.c:1894 [] sock_sendmsg_nosec net/socket.c:727 [inline] [] __sock_sendmsg+0xcc/0x162 net/socket.c:742 [] __sys_sendto+0x27a/0x34e net/socket.c:2206 [] __do_sys_sendto net/socket.c:2213 [inline] [] __se_sys_sendto net/socket.c:2209 [inline] [] __riscv_sys_sendto+0xc0/0x158 net/socket.c:2209 [] syscall_handler+0x94/0x118 arch/riscv/include/asm/syscall.h:112 [] do_trap_ecall_u+0x3d8/0x56c arch/riscv/kernel/traps.c:343 [] handle_exception+0x146/0x152 arch/riscv/kernel/entry.S:198 INFO: task syz-executor:4753 blocked for more than 452 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:4753 tgid:4753 ppid:1 task_flags:0x400140 flags:0x00000002 Call Trace: [] context_switch kernel/sched/core.c:5256 [inline] [] __schedule+0x102c/0x451e kernel/sched/core.c:6863 [] __schedule_loop kernel/sched/core.c:6945 [inline] [] schedule+0xc4/0x35e kernel/sched/core.c:6960 [] schedule_preempt_disabled+0x16/0x28 kernel/sched/core.c:7017 [] __mutex_lock_common kernel/locking/mutex.c:692 [inline] [] __mutex_lock+0x8aa/0x19b4 kernel/locking/mutex.c:776 [] mutex_lock_nested+0x14/0x1c kernel/locking/mutex.c:828 [] rtnl_lock net/core/rtnetlink.c:80 [inline] [] rtnl_nets_lock net/core/rtnetlink.c:341 [inline] [] rtnl_newlink+0x64c/0x1dc4 net/core/rtnetlink.c:4071 [] rtnetlink_rcv_msg+0x9e2/0xdbe net/core/rtnetlink.c:6958 [] netlink_rcv_skb+0x206/0x3be net/netlink/af_netlink.c:2550 [] rtnetlink_rcv+0x26/0x30 net/core/rtnetlink.c:6985 [] netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] [] netlink_unicast+0x544/0x88a net/netlink/af_netlink.c:1344 [] netlink_sendmsg+0x854/0xdcc net/netlink/af_netlink.c:1894 [] sock_sendmsg_nosec net/socket.c:727 [inline] [] __sock_sendmsg+0xcc/0x162 net/socket.c:742 [] __sys_sendto+0x27a/0x34e net/socket.c:2206 [] __do_sys_sendto net/socket.c:2213 [inline] [] __se_sys_sendto net/socket.c:2209 [inline] [] __riscv_sys_sendto+0xc0/0x158 net/socket.c:2209 [] syscall_handler+0x94/0x118 arch/riscv/include/asm/syscall.h:112 [] do_trap_ecall_u+0x3d8/0x56c arch/riscv/kernel/traps.c:343 [] handle_exception+0x146/0x152 arch/riscv/kernel/entry.S:198 Showing all locks held in the system: 5 locks held by kworker/1:1/32: 1 lock held by khungtaskd/33: #0: ffffffff889e1320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2a/0x1a0 kernel/locking/lockdep.c:6771 1 lock held by klogd/3015: 2 locks held by dhcpcd/3059: #0: ffffaf8013bcd6f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xd9c/0x114e net/netlink/af_netlink.c:2267 #1: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #1: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x1a2/0x1f6 net/core/rtnetlink.c:6826 2 locks held by getty/3162: #0: ffffaf80197960a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46 drivers/tty/tty_ldsem.c:340 #1: ffff8f800008e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x3e4/0x12ea drivers/tty/n_tty.c:2211 3 locks held by kworker/u8:1/3300: #0: ffffaf801e007948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x848/0x1f3a kernel/workqueue.c:3232 #1: ffff8f8009957b70 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x870/0x1f3a kernel/workqueue.c:3232 #2: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x22/0x2a net/core/rtnetlink.c:80 6 locks held by kworker/u8:7/3467: #0: ffffaf8012aa3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x848/0x1f3a kernel/workqueue.c:3232 #1: ffff8f8009be7b70 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x870/0x1f3a kernel/workqueue.c:3232 #2: ffffffff89ec48b0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xcc/0x82c net/core/net_namespace.c:670 #3: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x22/0x2a net/core/rtnetlink.c:80 #4: ffffaf801c78cd18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: netdev_lock include/linux/netdevice.h:2781 [inline] #4: ffffaf801c78cd18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: netdev_lock_ops include/net/netdev_lock.h:42 [inline] #4: ffffaf801c78cd18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: netdev_lock_ops include/net/netdev_lock.h:39 [inline] #4: ffffaf801c78cd18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xcb4/0x2504 net/core/dev.c:12368 #5: ffffffff889f17f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x26a/0x37e kernel/rcu/tree_exp.h:311 2 locks held by kworker/1:4/3818: 3 locks held by kworker/u8:5/4340: 2 locks held by kworker/1:7/4423: 3 locks held by kworker/u8:0/4640: #0: ffffaf8012289948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x848/0x1f3a kernel/workqueue.c:3232 #1: ffff8f80041e7b70 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x870/0x1f3a kernel/workqueue.c:3232 #2: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x22/0x2a net/core/rtnetlink.c:80 5 locks held by kworker/1:10/4648: 2 locks held by kworker/1:12/4668: 1 lock held by syz.1.217/4678: #0: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x22/0x2a net/core/rtnetlink.c:80 2 locks held by syz-executor/4694: #0: ffffffff8963f4a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0xea/0x31c net/core/rtnetlink.c:573 #1: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #1: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline] #1: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x64c/0x1dc4 net/core/rtnetlink.c:4071 1 lock held by syz-executor/4753: #0: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #0: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline] #0: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x64c/0x1dc4 net/core/rtnetlink.c:4071 1 lock held by syz-executor/5057: #0: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x22/0x2a net/core/rtnetlink.c:80 1 lock held by syz-executor/5065: #0: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x22/0x2a net/core/rtnetlink.c:80 2 locks held by kworker/1:13/5068: ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT Hardware name: riscv-virtio,qemu (DT) Call Trace: [] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:149 [] show_stack+0x30/0x3c arch/riscv/kernel/stacktrace.c:155 [] __dump_stack lib/dump_stack.c:94 [inline] [] dump_stack_lvl+0x12a/0x1a2 lib/dump_stack.c:120 [] dump_stack+0x1c/0x24 lib/dump_stack.c:129 [] nmi_cpu_backtrace+0x3b0/0x3b2 lib/nmi_backtrace.c:113 [] nmi_trigger_cpumask_backtrace+0x2b6/0x45a lib/nmi_backtrace.c:62 [] arch_trigger_cpumask_backtrace+0x2c/0x3c arch/riscv/kernel/smp.c:350 [] trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] [] __sys_info lib/sys_info.c:157 [inline] [] sys_info+0x20c/0x252 lib/sys_info.c:165 [] check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline] [] watchdog+0xa70/0x11ec kernel/hung_task.c:515 [] kthread+0x39e/0x7d8 kernel/kthread.c:463 [] ret_from_fork_kernel+0x2a/0xc78 arch/riscv/kernel/process.c:214 [] ret_from_fork_kernel_asm+0x16/0x18 arch/riscv/kernel/entry.S:328 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 4423 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT Hardware name: riscv-virtio,qemu (DT) Workqueue: wg-crypt-wg0 wg_packet_tx_worker epc : mod_node_page_state+0x28/0x6a mm/vmstat.c:746 ra : mod_node_page_state+0x58/0x6a mm/vmstat.c:745 epc : ffffffff80946b24 ra : ffffffff80946b54 sp : ffff8f8000016c70 gp : ffffffff8a2fec60 tp : ffffaf801c240000 t0 : ffff8f8000016520 t1 : fffff1af001867ab t2 : 1ffff1f000002d40 s0 : ffff8f8000016ca0 s1 : 0000000000000002 a0 : 0000000000000001 a1 : ffffffff8820a170 a2 : 0000000000000003 a3 : 0000000000000101 a4 : 0000000000000001 a5 : 0000000000000000 a6 : 0000000000f00000 a7 : ffff8d8000c33d5b s2 : ffffaf807ffeee80 s3 : 0000000000000006 s4 : 0000000000004000 s5 : 0000000000000002 s6 : 0000000000150000 s7 : 0000000000000002 s8 : ffffffff915345a0 s9 : ffffffff916cd6a0 s10: ffffaf8014a97b40 s11: 0000000000000000 t3 : 81987a7b00000000 t4 : fffff1af001867ab t5 : fffff1af001867ac t6 : 0000000000000002 status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001 [] arch_local_irq_restore arch/riscv/include/asm/irqflags.h:51 [inline] [] mod_node_page_state+0x28/0x6a mm/vmstat.c:745 [] account_slab mm/slub.c:3204 [inline] [] allocate_slab mm/slub.c:3267 [inline] [] new_slab+0x138/0x438 mm/slub.c:3302 [] ___slab_alloc+0xda6/0x1a3c mm/slub.c:4656 [] __slab_alloc.constprop.0+0x72/0x118 mm/slub.c:4779 [] __slab_alloc_node mm/slub.c:4855 [inline] [] slab_alloc_node mm/slub.c:5251 [inline] [] kmem_cache_alloc_node_noprof+0x320/0x834 mm/slub.c:5315 [] kmalloc_reserve+0x1a6/0x2be net/core/skbuff.c:586 [] __alloc_skb+0x1c4/0x4ea net/core/skbuff.c:690 [] alloc_skb include/linux/skbuff.h:1383 [inline] [] synproxy_send_client_synack+0x1ae/0x94e net/netfilter/nf_synproxy_core.c:460 [] nft_synproxy_eval_v4 net/netfilter/nft_synproxy.c:59 [inline] [] nft_synproxy_do_eval+0x858/0xab8 net/netfilter/nft_synproxy.c:141 [] nft_synproxy_eval+0x28/0x4e net/netfilter/nft_synproxy.c:247 [] expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline] [] nft_do_chain+0x328/0x1598 net/netfilter/nf_tables_core.c:285 [] nft_do_chain_inet+0x180/0x34c net/netfilter/nft_chain_filter.c:161 [] nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] [] nf_hook_slow+0xb8/0x1ec net/netfilter/core.c:623 [] nf_hook include/linux/netfilter.h:273 [inline] [] NF_HOOK include/linux/netfilter.h:316 [inline] [] ip_local_deliver+0x2ea/0x568 net/ipv4/ip_input.c:262 [] dst_input include/net/dst.h:474 [inline] [] ip_rcv_finish+0x1b0/0x2d2 net/ipv4/ip_input.c:453 [] NF_HOOK include/linux/netfilter.h:318 [inline] [] NF_HOOK include/linux/netfilter.h:312 [inline] [] ip_rcv+0xd6/0x44e net/ipv4/ip_input.c:573 [] __netif_receive_skb_one_core+0x106/0x16e net/core/dev.c:6137 [] __netif_receive_skb+0x2c/0x144 net/core/dev.c:6250 [] process_backlog+0x4ec/0x1caa net/core/dev.c:6602 [] __napi_poll.constprop.0+0xa4/0x4b6 net/core/dev.c:7666 [] napi_poll net/core/dev.c:7729 [inline] [] net_rx_action+0xa42/0xe36 net/core/dev.c:7881 [] handle_softirqs+0x4b6/0x1336 kernel/softirq.c:622 [] __do_softirq+0x12/0x1a kernel/softirq.c:656 [] ___do_softirq+0x18/0x20 arch/riscv/kernel/irq.c:119 [] call_on_irq_stack+0x32/0x40 arch/riscv/kernel/entry.S:361