INFO: task kworker/0:1:11 blocked for more than 145 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:1 state:D stack:22152 pid:11 tgid:11 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events switchdev_deferred_process_work Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x16dc/0x5500 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] rt_mutex_schedule+0x76/0xf0 kernel/sched/core.c:7607 rt_mutex_slowlock_block+0x55c/0x680 kernel/locking/rtmutex.c:1670 __rt_mutex_slowlock kernel/locking/rtmutex.c:1747 [inline] __rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1787 [inline] rt_mutex_slowlock+0x2d4/0x780 kernel/locking/rtmutex.c:1827 __rt_mutex_lock kernel/locking/rtmutex.c:1842 [inline] __mutex_lock_common kernel/locking/rtmutex_api.c:560 [inline] mutex_lock_nested+0x168/0x1d0 kernel/locking/rtmutex_api.c:578 switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:104 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task kworker/u8:4:67 blocked for more than 145 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:4 state:D stack:20424 pid:67 tgid:67 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events_unbound linkwatch_event Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x16dc/0x5500 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] rt_mutex_schedule+0x76/0xf0 kernel/sched/core.c:7607 rt_mutex_slowlock_block+0x55c/0x680 kernel/locking/rtmutex.c:1670 __rt_mutex_slowlock kernel/locking/rtmutex.c:1747 [inline] __rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1787 [inline] rt_mutex_slowlock+0x2d4/0x780 kernel/locking/rtmutex.c:1827 __rt_mutex_lock kernel/locking/rtmutex.c:1842 [inline] __mutex_lock_common kernel/locking/rtmutex_api.c:560 [inline] mutex_lock_nested+0x168/0x1d0 kernel/locking/rtmutex_api.c:578 linkwatch_event+0xe/0x60 net/core/link_watch.c:313 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task dhcpcd:5257 blocked for more than 145 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:dhcpcd state:D stack:21864 pid:5257 tgid:5257 ppid:5256 task_flags:0x400140 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x16dc/0x5500 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] rt_mutex_schedule+0x76/0xf0 kernel/sched/core.c:7607 rt_mutex_slowlock_block+0x55c/0x680 kernel/locking/rtmutex.c:1670 __rt_mutex_slowlock kernel/locking/rtmutex.c:1747 [inline] __rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1787 [inline] rt_mutex_slowlock+0x2d4/0x780 kernel/locking/rtmutex.c:1827 __rt_mutex_lock kernel/locking/rtmutex.c:1842 [inline] __mutex_lock_common kernel/locking/rtmutex_api.c:560 [inline] mutex_lock_nested+0x168/0x1d0 kernel/locking/rtmutex_api.c:578 rtnl_lock net/core/rtnetlink.c:80 [inline] rtnl_dump_ifinfo+0xa74/0x14b0 net/core/rtnetlink.c:2562 rtnl_dumpit+0xcc/0x200 net/core/rtnetlink.c:6945 netlink_dump+0x711/0xee0 net/netlink/af_netlink.c:2331 netlink_recvmsg+0x683/0xa50 net/netlink/af_netlink.c:1982 sock_recvmsg_nosec net/socket.c:1126 [inline] sock_recvmsg+0x196/0x1e0 net/socket.c:1148 ____sys_recvmsg+0x1f2/0x4b0 net/socket.c:2904 ___sys_recvmsg+0x213/0x5a0 net/socket.c:2946 __sys_recvmsg net/socket.c:2979 [inline] __do_sys_recvmsg net/socket.c:2985 [inline] __se_sys_recvmsg net/socket.c:2982 [inline] __x64_sys_recvmsg+0x1b4/0x290 net/socket.c:2982 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb33ff0f407 RSP: 002b:00007fff4c71ec10 EFLAGS: 00000202 ORIG_RAX: 000000000000002f RAX: ffffffffffffffda RBX: 00007fb33fe85780 RCX: 00007fb33ff0f407 RDX: 0000000000000000 RSI: 00007fff4c71eca0 RDI: 000000000000003a RBP: 00007fff4c71ec84 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001d9c R13: 00007fff4c71ec90 R14: 00007fff4c71ed80 R15: 0000000000000000 INFO: task syz-executor:10970 blocked for more than 145 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:23256 pid:10970 tgid:10970 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x16dc/0x5500 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] rt_mutex_schedule+0x76/0xf0 kernel/sched/core.c:7607 rt_mutex_slowlock_block+0x55c/0x680 kernel/locking/rtmutex.c:1670 __rt_mutex_slowlock kernel/locking/rtmutex.c:1747 [inline] __rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1787 [inline] rt_mutex_slowlock+0x2d4/0x780 kernel/locking/rtmutex.c:1827 __rt_mutex_lock kernel/locking/rtmutex.c:1842 [inline] __mutex_lock_common kernel/locking/rtmutex_api.c:560 [inline] mutex_lock_nested+0x168/0x1d0 kernel/locking/rtmutex_api.c:578 rtnl_lock net/core/rtnetlink.c:80 [inline] rtnl_nets_lock net/core/rtnetlink.c:341 [inline] rtnl_newlink+0x8a3/0x1bd0 net/core/rtnetlink.c:4158 rtnetlink_rcv_msg+0x802/0xc00 net/core/rtnetlink.c:7076 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x7f5/0x990 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:775 __sock_sendmsg net/socket.c:790 [inline] __sys_sendto+0x41e/0x5d0 net/socket.c:2252 __do_sys_sendto net/socket.c:2259 [inline] __se_sys_sendto net/socket.c:2255 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2255 do_[ 669.713330][ T38] do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_[ 669.713330][ T38] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2f7980e68e RSP: 002b:00007ffcc4366528 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00005555673ac500 RCX: 00007f2f7980e68e RDX: 0000000000000088 RSI: 00007f2f7a604670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007ffcc43665a4 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f2f7a604670 R15: 0000000000000000 INFO: task syz-executor:10978 blocked for more than 145 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:22472 pid:10978 tgid:10978 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x16dc/0x5500 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] rt_mutex_schedule+0x76/0xf0 kernel/sched/core.c:7607 rt_mutex_slowlock_block+0x55c/0x680 kernel/locking/rtmutex.c:1670 __rt_mutex_slowlock kernel/locking/rtmutex.c:1747 [inline] __rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1787 [inline] rt_mutex_slowlock+0x2d4/0x780 kernel/locking/rtmutex.c:1827 __rt_mutex_lock kernel/locking/rtmutex.c:1842 [inline] __mutex_lock_common kernel/locking/rtmutex_api.c:560 [inline] mutex_lock_nested+0x168/0x1d0 kernel/locking/rtmutex_api.c:578 rtnl_lock net/core/rtnetlink.c:80 [inline] rtnl_nets_lock net/core/rtnetlink.c:341 [inline] rtnl_newlink+0x8a3/0x1bd0 net/core/rtnetlink.c:4158 rtnetlink_rcv_msg+0x802/0xc00 net/core/rtnetlink.c:7076 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x7f5/0x990 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:775 __sock_sendmsg net/socket.c:790 [inline] __sys_sendto+0x41e/0x5d0 net/socket.c:2252 __do_sys_sendto net/socket.c:2259 [inline] __se_sys_sendto net/socket.c:2255 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2255 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc73af1e68e RSP: 002b:00007ffe6b7b8598 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00005555568ef500 RCX: 00007fc73af1e68e RDX: 0000000000000028 RSI: 00007fc73bd14670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007ffe6b7b8614 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000000 R14: 00007fc73bd14670 R15: 0000000000000000 INFO: task syz-executor:11333 blocked for more than 145 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:24632 pid:11333 tgid:11333 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x16dc/0x5500 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] rt_mutex_schedule+0x76/0xf0 kernel/sched/core.c:7607 rt_mutex_slowlock_block+0x55c/0x680 kernel/locking/rtmutex.c:1670 __rt_mutex_slowlock kernel/locking/rtmutex.c:1747 [inline] __rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1787 [inline] rt_mutex_slowlock+0x2d4/0x780 kernel/locking/rtmutex.c:1827 __rt_mutex_lock kernel/locking/rtmutex.c:1842 [inline] __mutex_lock_common kernel/locking/rtmutex_api.c:560 [inline] mutex_lock_nested+0x168/0x1d0 kernel/locking/rtmutex_api.c:578 rtnl_lock net/core/rtnetlink.c:80 [inline] rtnl_nets_lock net/core/rtnetlink.c:341 [inline] rtnl_newlink+0x8a3/0x1bd0 net/core/rtnetlink.c:4158 rtnetlink_rcv_msg+0x802/0xc00 net/core/rtnetlink.c:7076 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x7f5/0x990 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:775 __sock_sendmsg net/socket.c:790 [inline] __sys_sendto+0x41e/0x5d0 net/socket.c:2252 __do_sys_sendto net/socket.c:2259 [inline] __se_sys_sendto net/socket.c:2255 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2255 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f58fe5ae68e RSP: 002b:00007ffd03720c08 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 0000555582ea7500 RCX: 00007f58fe5ae68e RDX: 000000000000002c RSI: 00007f58ff3a4670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007ffd03720c84 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f58ff3a4670 R15: 0000000000000000 INFO: task syz-executor:11345 blocked for more than 145 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:25800 pid:11345 tgid:11345 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x16dc/0x5500 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] rt_mutex_schedule+0x76/0xf0 kernel/sched/core.c:7607 rt_mutex_slowlock_block+0x55c/0x680 kernel/locking/rtmutex.c:1670 __rt_mutex_slowlock kernel/locking/rtmutex.c:1747 [inline] __rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1787 [inline] rt_mutex_slowlock+0x2d4/0x780 kernel/locking/rtmutex.c:1827 __rt_mutex_lock kernel/locking/rtmutex.c:1842 [inline] __mutex_lock_common kernel/locking/rtmutex_api.c:560 [inline] mutex_lock_nested+0x168/0x1d0 kernel/locking/rtmutex_api.c:578 rtnl_lock net/core/rtnetlink.c:80 [inline] rtnl_nets_lock net/core/rtnetlink.c:341 [inline] rtnl_newlink+0x8a3/0x1bd0 net/core/rtnetlink.c:4158 rtnetlink_rcv_msg+0x802/0xc00 net/core/rtnetlink.c:7076 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x7f5/0x990 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:775 __sock_sendmsg net/socket.c:790 [inline] __sys_sendto+0x41e/0x5d0 net/socket.c:2252 __do_sys_sendto net/socket.c:2259 [inline] __se_sys_sendto net/socket.c:2255 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2255 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb2d246e68e RSP: 002b:00007ffe154280c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 000055555c373500 RCX: 00007fb2d246e68e RDX: 000000000000002c RSI: 00007fb2d3264670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007ffe15428144 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000000 R14: 00007fb2d3264670 R15: 0000000000000000 Showing all locks held in the system: 3 locks held by kworker/0:1/11: #0: ffff88813ff1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88813ff1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc90000107c40 (deferred_process_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc90000107c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:104 6 locks held by kworker/u8:0/12: #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc90000117c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc90000117c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffff888062020310 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 drivers/net/netdevsim/dev.c:909 #3: ffff88803aab3520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline] #3: ffff88803aab3520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report drivers/net/netdevsim/dev.c:862 [inline] #3: ffff88803aab3520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 drivers/net/netdevsim/dev.c:922 #4: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #4: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #4: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: __rt_spin_lock kernel/locking/spinlock_rt.c:50 [inline] #4: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 kernel/locking/spinlock_rt.c:57 #5: ffff8880b8636d10 ((crngs.lock)){+.+.}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline] #5: ffff8880b8636d10 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x158/0x5d0 drivers/char/random.c:358 6 locks held by kworker/u8:1/14: #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc90000137c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc90000137c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffff8880331c0310 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 drivers/net/netdevsim/dev.c:909 #3: ffff88806041e520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline] #3: ffff88806041e520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report drivers/net/netdevsim/dev.c:862 [inline] #3: ffff88806041e520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 drivers/net/netdevsim/dev.c:922 #4: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #4: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #4: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: __rt_spin_lock kernel/locking/spinlock_rt.c:50 [inline] #4: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 kernel/locking/spinlock_rt.c:57 #5: ffff8880b8636d10 ((crngs.lock)){+.+.}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline] #5: ffff8880b8636d10 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x158/0x5d0 drivers/char/random.c:358 4 locks held by pr/legacy/17: 4 locks held by rcuc/1/28: 3 locks held by ktimers/1/29: 2 locks held by kworker/1:0/31: 1 lock held by khungtaskd/38: #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775 3 locks held by kworker/u8:2/43: #0: ffff88801af7c938 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88801af7c938 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc90000b57c40 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc90000b57c40 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xd9/0x640 net/wireless/mlme.c:1048 3 locks held by kworker/u8:3/45: #0: ffff888032cf9138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff888032cf9138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc90000b77c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc90000b77c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #2: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 net/ipv6/addrconf.c:4769 4 locks held by kworker/u9:0/60: #0: ffff8880635e7138 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff8880635e7138 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc9000126fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc9000126fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffff888094c8c0b0 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xa5/0x1580 net/bluetooth/hci_event.c:5736 #3: ffffffff8f733eb8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 include/net/bluetooth/hci_core.h:2133 3 locks held by kworker/u8:4/67: #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc9000152fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc9000152fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:313 2 locks held by kworker/0:2/199: #0: ffff88813ff1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88813ff1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc90003997c40 (free_ipc_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc90003997c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 6 locks held by kworker/1:2/822: 5 locks held by kworker/u8:8/1154: 6 locks held by kworker/u8:9/1470: 5 locks held by kworker/u8:10/1748: #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc90006f7fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc90006f7fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffffffff8f5a19e0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 net/core/net_namespace.c:673 #3: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 net/mac80211/main.c:1710 #4: ffff888060d708d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6884 [inline] #4: ffff888060d708d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_stop+0x121/0x200 net/mac80211/iface.c:852 6 locks held by kworker/u8:12/3078: 4 locks held by kworker/u8:14/3582: 1 lock held by klogd/4951: 2 locks held by dhcpcd/5257: #0: ffff88803c9fc928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0 net/netlink/af_netlink.c:2273 #1: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #1: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa74/0x14b0 net/core/rtnetlink.c:2562 2 locks held by getty/5358: #0: ffff8880330410a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 drivers/tty/n_tty.c:2211 4 locks held by kworker/u9:2/5598: #0: ffff8880624f6138 ((wq_completion)hci5#3){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff8880624f6138 ((wq_completion)hci5#3){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc90004f77c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc90004f77c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffff88807f7600b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 net/bluetooth/hci_event.c:3730 #3: ffffffff8f733eb8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm include/net/bluetooth/hci_core.h:2133 [inline] #3: ffffffff8f733eb8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 net/bluetooth/hci_event.c:3764 6 locks held by kworker/u9:3/5599: #0: ffff88803fe25938 ((wq_completion)hci7){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88803fe25938 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc90004fa7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc90004fa7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffff888052250f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 net/bluetooth/hci_sync.c:331 #3: ffff8880522500b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 net/bluetooth/hci_sync.c:5786 #4: ffffffff8f733eb8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm include/net/bluetooth/hci_core.h:2133 [inline] #4: ffffffff8f733eb8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x145/0x320 net/bluetooth/hci_conn.c:1408 #5: ffff888060be1b70 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 net/bluetooth/l2cap_core.c:1778 4 locks held by kworker/u9:4/5602: #0: ffff8880617d2138 ((wq_completion)hci8){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff8880617d2138 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc90004fe7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc90004fe7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffff888063d5cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 net/bluetooth/hci_sync.c:331 #3: ffff888063d5c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 net/bluetooth/hci_sync.c:5786 2 locks held by kworker/1:5/5713: 3 locks held by kworker/1:6/5786: 9 locks held by syz-executor/8071: 8 locks held by kworker/u8:16/8217: 5 locks held by kworker/1:7/8402: 3 locks held by syz-executor/10586: #0: ffff888054a58f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close net/bluetooth/hci_core.c:497 [inline] #0: ffff888054a58f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 net/bluetooth/hci_core.c:2678 #1: ffff888054a580b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0 net/bluetooth/hci_sync.c:5393 #2: ffffffff8f733eb8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_disconn_cfm include/net/bluetooth/hci_core.h:2148 [inline] #2: ffffffff8f733eb8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260 net/bluetooth/hci_conn.c:2733 3 locks held by syz-executor/10633: #0: ffff8880500b0f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close net/bluetooth/hci_core.c:497 [inline] #0: ffff8880500b0f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 net/bluetooth/hci_core.c:2678 #1: ffff8880500b00b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0 net/bluetooth/hci_sync.c:5393 #2: ffffffff8f733eb8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_disconn_cfm include/net/bluetooth/hci_core.h:2148 [inline] #2: ffffffff8f733eb8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260 net/bluetooth/hci_conn.c:2733 2 locks held by syz-executor/10970: #0: ffffffff8ed15c68 (&ops->srcu#2){.+.+}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffffffff8ed15c68 (&ops->srcu#2){.+.+}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffffffff8ed15c68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 net/core/rtnetlink.c:570 #1: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #1: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline] #1: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 net/core/rtnetlink.c:4158 1 lock held by syz.6.1585/10972: #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: tun_detach drivers/net/tun.c:641 [inline] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 drivers/net/tun.c:3506 1 lock held by syz-executor/10978: #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 net/core/rtnetlink.c:4158 1 lock held by syz.8.1587/10982: #0: ffff88803b2880d0 (&type->s_umount_key#59){++++}-{4:4}, at: __super_lock fs/super.c:58 [inline] #0: ffff88803b2880d0 (&type->s_umount_key#59){++++}-{4:4}, at: __super_lock_excl fs/super.c:73 [inline] #0: ffff88803b2880d0 (&type->s_umount_key#59){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 fs/super.c:509 1 lock held by syz-executor/11333: #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 net/core/rtnetlink.c:4158 1 lock held by syz-executor/11345: #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 net/core/rtnetlink.c:4158 1 lock held by syz-executor/12378: #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 net/ipv4/devinet.c:978 1 lock held by syz-executor/12787: #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 net/ipv4/devinet.c:978 1 lock held by syz-executor/13424: #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 net/ipv4/devinet.c:978 1 lock held by syz-executor/13439: #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 net/ipv4/devinet.c:978 4 locks held by kworker/u9:5/13441: #0: ffff88803c086138 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88803c086138 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc90004437c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc90004437c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffff888094cd00b0 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xa5/0x1580 net/bluetooth/hci_event.c:5736 #3: ffffffff8f733eb8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 include/net/bluetooth/hci_core.h:2133 1 lock held by syz-executor/14511: #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 net/ipv4/devinet.c:978 4 locks held by kworker/u9:6/14515: #0: ffff88802c49c938 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88802c49c938 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc900040d7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc900040d7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffff88807fb080b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 net/bluetooth/hci_event.c:3730 #3: ffffffff8f733eb8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm include/net/bluetooth/hci_core.h:2133 [inline] #3: ffffffff8f733eb8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 net/bluetooth/hci_event.c:3764 1 lock held by syz-executor/14779: #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 net/ipv4/devinet.c:978 1 lock held by syz-executor/15373: #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 net/ipv4/devinet.c:978 1 lock held by syz-executor/15390: #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 net/ipv4/devinet.c:978 2 locks held by kworker/1:13/15393: 1 lock held by syz-executor/16403: #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 net/ipv4/devinet.c:978 1 lock held by syz-executor/16806: #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 net/ipv4/devinet.c:978 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:122 nmi_trigger_cpumask_backtrace+0x17a/0x380 lib/nmi_backtrace.c:65 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xfd7/0x1030 kernel/hung_task.c:561 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 RIP: 0010:__rb_erase_augmented include/linux/rbtree_augmented.h:271 [inline] RIP: 0010:rb_erase_augmented include/linux/rbtree_augmented.h:329 [inline] RIP: 0010:rb_erase_augmented_cached include/linux/rbtree_augmented.h:340 [inline] RIP: 0010:__dequeue_entity+0x813/0x1180 kernel/sched/fair.c:1051 Code: 8d 7c 24 08 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 05 e8 57 9c 95 00 49 89 5c 24 08 e9 c8 02 00 00 <48> 8d 5d 08 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 RSP: 0018:ffffc90000a3f9e0 EFLAGS: 00000046 RAX: 0000000000000000 RBX: ffff88801d2b9fa0 RCX: dffffc0000000000 RDX: 0000000000000001 RSI: ffff888033c11f80 RDI: ffff888033c11fa0 RBP: ffff88801d2b9f90 R08: ffffc90000a3fcc8 R09: 1ffff11003a5e200 R10: dffffc0000000000 R11: ffffffff81975550 R12: ffff8880b873b980 R13: ffff888033c11f80 R14: 0000000000000000 R15: 1ffff110170e773a FS: 0000000000000000(0000) GS:ffff888125d4c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fffc714c59c CR3: 000000002ada0000 CR4: 00000000003526f0 Call Trace: set_next_entity kernel/sched/fair.c:6337 [inline] set_next_task_fair+0x106/0xce0 kernel/sched/fair.c:15045 __pick_next_task+0x372/0x3c0 kernel/sched/core.c:6164 pick_next_task kernel/sched/core.c:-1 [inline] __schedule+0x864/0x5500 kernel/sched/core.c:7149 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7326 smpboot_thread_fn+0x5f9/0xa80 kernel/smpboot.c:156 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245