Extracting prog: 8m47.86894081s Minimizing prog: 46m22.366387352s Simplifying prog options: 12m55.288998398s Extracting C: 5m10.117196385s Simplifying C: 0s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') program crashed: INFO: task hung in rtnl_lock single: successfully extracted reproducer found reproducer with 4 syscalls minimizing guilty program testing program (duration=7m40.921099965s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-ioctl$sock_SIOCGIFINDEX-socket$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00'}) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=7m40.921099965s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00'}) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') program did not crash testing program (duration=7m40.921099965s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$nl_generic-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000200)='bridge0\x00') program did not crash testing program (duration=7m40.921099965s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_SIOCGIFINDEX-socket$nl_generic-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000200)='bridge0\x00') program did not crash testing program (duration=7m40.921099965s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') program did not crash testing program (duration=7m40.921099965s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=7m40.921099965s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-ioctl$sock_SIOCBRDELBR program crashed: no output from test machine a never seen crash title: no output from test machine, ignore simplifying guilty program options testing program (duration=7m40.921099965s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') program crashed: INFO: task hung in rtnetlink_rcv_msg a never seen crash title: INFO: task hung in rtnetlink_rcv_msg, ignore testing program (duration=7m40.921099965s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') program did not crash testing program (duration=7m40.921099965s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') program crashed: INFO: task hung in rtnl_lock validation run: crashed=true testing program (duration=7m40.921099965s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') program crashed: INFO: task hung in rtnl_lock validation run: crashed=true testing program (duration=7m40.921099965s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') program crashed: INFO: task hung in rtnl_lock validation run: crashed=true reproducing took 1h28m46.360072707s repro crashed as (corrupted=false): INFO: task kworker/u8:2:46 blocked for more than 122 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:2 state:D stack:0 pid:46 tgid:46 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5996 [inline] __schedule+0x134f/0x1ea0 kernel/sched/core.c:7843 __schedule_loop kernel/sched/core.c:7924 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7939 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7996 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x960/0x1bb0 kernel/locking/mutex.c:803 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 rtnl_lock+0x19/0x20 net/core/rtnetlink.c:79 addrconf_dad_work+0xce/0x1530 net/ipv6/addrconf.c:4234 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0x7d4/0x1020 kernel/workqueue.c:3319 worker_thread+0xc70/0x10b0 kernel/workqueue.c:3400 kthread+0x2c9/0x370 kernel/kthread.c:389 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task syz-executor:442 blocked for more than 124 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:442 tgid:442 ppid:1 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5996 [inline] __schedule+0x134f/0x1ea0 kernel/sched/core.c:7843 __schedule_loop kernel/sched/core.c:7924 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7939 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7996 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x960/0x1bb0 kernel/locking/mutex.c:803 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 rtnl_lock+0x19/0x20 net/core/rtnetlink.c:79 ip_tunnel_init_net+0x30c/0x890 net/ipv4/ip_tunnel.c:1145 ipgre_tap_init_net+0x2d/0x40 net/ipv4/ip_gre.c:1741 ops_init+0x1af/0x5d0 net/core/net_namespace.c:139 setup_net+0x227/0x9b0 net/core/net_namespace.c:356 copy_net_ns+0x512/0xa30 net/core/net_namespace.c:510 create_new_namespaces+0x3b5/0x720 kernel/nsproxy.c:110 unshare_nsproxy_namespaces+0x124/0x180 kernel/nsproxy.c:228 ksys_unshare+0x502/0x880 kernel/fork.c:3356 __do_sys_unshare kernel/fork.c:3427 [inline] __se_sys_unshare kernel/fork.c:3425 [inline] __x64_sys_unshare+0x3c/0x50 kernel/fork.c:3425 x64_sys_call+0x2998/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:273 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f65f379c1a7 RSP: 002b:00007fff49e0ee68 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f65f379c1a7 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 RBP: 00007fff49e0eec0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff49e0eec8 R13: 0000000000000002 R14: 00007fff49e0f0a8 R15: 0000000000000000 INFO: task syz.2.19:445 blocked for more than 125 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.19 state:D stack:0 pid:445 tgid:444 ppid:377 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5996 [inline] __schedule+0x134f/0x1ea0 kernel/sched/core.c:7843 __schedule_loop kernel/sched/core.c:7924 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7939 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7996 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x960/0x1bb0 kernel/locking/mutex.c:803 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 rtnl_lock+0x19/0x20 net/core/rtnetlink.c:79 tun_detach drivers/net/tun.c:698 [inline] tun_chr_close+0x41/0x150 drivers/net/tun.c:3520 __fput+0x1fe/0xa00 fs/file_table.c:429 ____fput+0x20/0x30 fs/file_table.c:457 task_work_run+0x1e5/0x260 kernel/task_work.c:246 exit_task_work include/linux/task_work.h:43 [inline] do_exit+0x9e3/0x2650 kernel/exit.c:953 do_group_exit+0x229/0x2f0 kernel/exit.c:1095 get_signal+0x1398/0x14e0 kernel/signal.c:2933 arch_do_signal_or_restart+0xbc/0x760 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x57/0xb0 kernel/entry/common.c:218 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7fbc0739aeb9 RSP: 002b:00007fbc0819e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: 0000000000000000 RBX: 00007fbc07615fa0 RCX: 00007fbc0739aeb9 RDX: 0000200000000200 RSI: 00000000000089a2 RDI: 0000000000000004 RBP: 00007fbc07408c1f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fbc07616038 R14: 00007fbc07615fa0 R15: 00007fff87dfcdb8 INFO: task syz-executor:449 blocked for more than 127 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:449 tgid:449 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5996 [inline] __schedule+0x134f/0x1ea0 kernel/sched/core.c:7843 __schedule_loop kernel/sched/core.c:7924 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7939 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7996 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x960/0x1bb0 kernel/locking/mutex.c:803 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 rtnl_lock net/core/rtnetlink.c:79 [inline] rtnetlink_rcv_msg+0x79e/0xa40 net/core/rtnetlink.c:6672 netlink_rcv_skb+0x256/0x4f0 net/netlink/af_netlink.c:2545 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6693 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] netlink_unicast+0x8c0/0xa60 net/netlink/af_netlink.c:1339 netlink_sendmsg+0x7fe/0xb10 net/netlink/af_netlink.c:1889 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x718/0x790 net/socket.c:2217 __do_sys_sendto net/socket.c:2229 [inline] __se_sys_sendto net/socket.c:2225 [inline] __x64_sys_sendto+0xe9/0x100 net/socket.c:2225 x64_sys_call+0x2c2c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7ff4fef560d7 RSP: 002b:00007ffde1f20240 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00005555940b3500 RCX: 00007ff4fef560d7 RDX: 000000000000002c RSI: 00007ff4ffd44670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007ffde1f202a4 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 R13: 0000000000000000 R14: 00007ff4ffd44670 R15: 0000000000000000 INFO: task syz-executor:451 blocked for more than 128 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:451 tgid:451 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5996 [inline] __schedule+0x134f/0x1ea0 kernel/sched/core.c:7843 __schedule_loop kernel/sched/core.c:7924 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7939 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7996 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x960/0x1bb0 kernel/locking/mutex.c:803 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 rtnl_lock net/core/rtnetlink.c:79 [inline] rtnetlink_rcv_msg+0x79e/0xa40 net/core/rtnetlink.c:6672 netlink_rcv_skb+0x256/0x4f0 net/netlink/af_netlink.c:2545 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6693 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] netlink_unicast+0x8c0/0xa60 net/netlink/af_netlink.c:1339 netlink_sendmsg+0x7fe/0xb10 net/netlink/af_netlink.c:1889 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x718/0x790 net/socket.c:2217 __do_sys_sendto net/socket.c:2229 [inline] __se_sys_sendto net/socket.c:2225 [inline] __x64_sys_sendto+0xe9/0x100 net/socket.c:2225 x64_sys_call+0x2c2c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f475ad560d7 RSP: 002b:00007ffde6c7a360 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 0000555571efe500 RCX: 00007f475ad560d7 RDX: 000000000000002c RSI: 00007f475bb44670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007ffde6c7a3c4 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f475bb44670 R15: 0000000000000000 INFO: task syz-executor:453 blocked for more than 130 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:453 tgid:453 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5996 [inline] __schedule+0x134f/0x1ea0 kernel/sched/core.c:7843 __schedule_loop kernel/sched/core.c:7924 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7939 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7996 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x960/0x1bb0 kernel/locking/mutex.c:803 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 rtnl_lock net/core/rtnetlink.c:79 [inline] rtnetlink_rcv_msg+0x79e/0xa40 net/core/rtnetlink.c:6672 netlink_rcv_skb+0x256/0x4f0 net/netlink/af_netlink.c:2545 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6693 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] netlink_unicast+0x8c0/0xa60 net/netlink/af_netlink.c:1339 netlink_sendmsg+0x7fe/0xb10 net/netlink/af_netlink.c:1889 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x718/0x790 net/socket.c:2217 __do_sys_sendto net/socket.c:2229 [inline] __se_sys_sendto net/socket.c:2225 [inline] __x64_sys_sendto+0xe9/0x100 net/socket.c:2225 x64_sys_call+0x2c2c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7fc3ea1560d7 RSP: 002b:00007fffe987d930 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 0000555592e93500 RCX: 00007fc3ea1560d7 RDX: 000000000000002c RSI: 00007fc3eaf44670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007fffe987d994 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 R13: 0000000000000000 R14: 00007fc3eaf44670 R15: 0000000000000000 INFO: task syz-executor:455 blocked for more than 131 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:455 tgid:455 ppid:1 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5996 [inline] __schedule+0x134f/0x1ea0 kernel/sched/core.c:7843 __schedule_loop kernel/sched/core.c:7924 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7939 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7996 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x960/0x1bb0 kernel/locking/mutex.c:803 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 rtnl_lock net/core/rtnetlink.c:79 [inline] rtnetlink_rcv_msg+0x79e/0xa40 net/core/rtnetlink.c:6672 netlink_rcv_skb+0x256/0x4f0 net/netlink/af_netlink.c:2545 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6693 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] netlink_unicast+0x8c0/0xa60 net/netlink/af_netlink.c:1339 netlink_sendmsg+0x7fe/0xb10 net/netlink/af_netlink.c:1889 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x718/0x790 net/socket.c:2217 __do_sys_sendto net/socket.c:2229 [inline] __se_sys_sendto net/socket.c:2225 [inline] __x64_sys_sendto+0xe9/0x100 net/socket.c:2225 x64_sys_call+0x2c2c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7ff976b560d7 RSP: 002b:00007ffc77cb4b20 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 000055555b045500 RCX: 00007ff976b560d7 RDX: 000000000000002c RSI: 00007ff977944670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007ffc77cb4b84 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 R13: 0000000000000000 R14: 00007ff977944670 R15: 0000000000000000 final repro crashed as (corrupted=false): INFO: task kworker/u8:2:46 blocked for more than 122 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:2 state:D stack:0 pid:46 tgid:46 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5996 [inline] __schedule+0x134f/0x1ea0 kernel/sched/core.c:7843 __schedule_loop kernel/sched/core.c:7924 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7939 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7996 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x960/0x1bb0 kernel/locking/mutex.c:803 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 rtnl_lock+0x19/0x20 net/core/rtnetlink.c:79 addrconf_dad_work+0xce/0x1530 net/ipv6/addrconf.c:4234 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0x7d4/0x1020 kernel/workqueue.c:3319 worker_thread+0xc70/0x10b0 kernel/workqueue.c:3400 kthread+0x2c9/0x370 kernel/kthread.c:389 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task syz-executor:442 blocked for more than 124 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:442 tgid:442 ppid:1 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5996 [inline] __schedule+0x134f/0x1ea0 kernel/sched/core.c:7843 __schedule_loop kernel/sched/core.c:7924 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7939 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7996 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x960/0x1bb0 kernel/locking/mutex.c:803 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 rtnl_lock+0x19/0x20 net/core/rtnetlink.c:79 ip_tunnel_init_net+0x30c/0x890 net/ipv4/ip_tunnel.c:1145 ipgre_tap_init_net+0x2d/0x40 net/ipv4/ip_gre.c:1741 ops_init+0x1af/0x5d0 net/core/net_namespace.c:139 setup_net+0x227/0x9b0 net/core/net_namespace.c:356 copy_net_ns+0x512/0xa30 net/core/net_namespace.c:510 create_new_namespaces+0x3b5/0x720 kernel/nsproxy.c:110 unshare_nsproxy_namespaces+0x124/0x180 kernel/nsproxy.c:228 ksys_unshare+0x502/0x880 kernel/fork.c:3356 __do_sys_unshare kernel/fork.c:3427 [inline] __se_sys_unshare kernel/fork.c:3425 [inline] __x64_sys_unshare+0x3c/0x50 kernel/fork.c:3425 x64_sys_call+0x2998/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:273 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f65f379c1a7 RSP: 002b:00007fff49e0ee68 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f65f379c1a7 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 RBP: 00007fff49e0eec0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff49e0eec8 R13: 0000000000000002 R14: 00007fff49e0f0a8 R15: 0000000000000000 INFO: task syz.2.19:445 blocked for more than 125 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.19 state:D stack:0 pid:445 tgid:444 ppid:377 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5996 [inline] __schedule+0x134f/0x1ea0 kernel/sched/core.c:7843 __schedule_loop kernel/sched/core.c:7924 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7939 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7996 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x960/0x1bb0 kernel/locking/mutex.c:803 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 rtnl_lock+0x19/0x20 net/core/rtnetlink.c:79 tun_detach drivers/net/tun.c:698 [inline] tun_chr_close+0x41/0x150 drivers/net/tun.c:3520 __fput+0x1fe/0xa00 fs/file_table.c:429 ____fput+0x20/0x30 fs/file_table.c:457 task_work_run+0x1e5/0x260 kernel/task_work.c:246 exit_task_work include/linux/task_work.h:43 [inline] do_exit+0x9e3/0x2650 kernel/exit.c:953 do_group_exit+0x229/0x2f0 kernel/exit.c:1095 get_signal+0x1398/0x14e0 kernel/signal.c:2933 arch_do_signal_or_restart+0xbc/0x760 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x57/0xb0 kernel/entry/common.c:218 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7fbc0739aeb9 RSP: 002b:00007fbc0819e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: 0000000000000000 RBX: 00007fbc07615fa0 RCX: 00007fbc0739aeb9 RDX: 0000200000000200 RSI: 00000000000089a2 RDI: 0000000000000004 RBP: 00007fbc07408c1f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fbc07616038 R14: 00007fbc07615fa0 R15: 00007fff87dfcdb8 INFO: task syz-executor:449 blocked for more than 127 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:449 tgid:449 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5996 [inline] __schedule+0x134f/0x1ea0 kernel/sched/core.c:7843 __schedule_loop kernel/sched/core.c:7924 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7939 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7996 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x960/0x1bb0 kernel/locking/mutex.c:803 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 rtnl_lock net/core/rtnetlink.c:79 [inline] rtnetlink_rcv_msg+0x79e/0xa40 net/core/rtnetlink.c:6672 netlink_rcv_skb+0x256/0x4f0 net/netlink/af_netlink.c:2545 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6693 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] netlink_unicast+0x8c0/0xa60 net/netlink/af_netlink.c:1339 netlink_sendmsg+0x7fe/0xb10 net/netlink/af_netlink.c:1889 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x718/0x790 net/socket.c:2217 __do_sys_sendto net/socket.c:2229 [inline] __se_sys_sendto net/socket.c:2225 [inline] __x64_sys_sendto+0xe9/0x100 net/socket.c:2225 x64_sys_call+0x2c2c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7ff4fef560d7 RSP: 002b:00007ffde1f20240 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00005555940b3500 RCX: 00007ff4fef560d7 RDX: 000000000000002c RSI: 00007ff4ffd44670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007ffde1f202a4 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 R13: 0000000000000000 R14: 00007ff4ffd44670 R15: 0000000000000000 INFO: task syz-executor:451 blocked for more than 128 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:451 tgid:451 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5996 [inline] __schedule+0x134f/0x1ea0 kernel/sched/core.c:7843 __schedule_loop kernel/sched/core.c:7924 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7939 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7996 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x960/0x1bb0 kernel/locking/mutex.c:803 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 rtnl_lock net/core/rtnetlink.c:79 [inline] rtnetlink_rcv_msg+0x79e/0xa40 net/core/rtnetlink.c:6672 netlink_rcv_skb+0x256/0x4f0 net/netlink/af_netlink.c:2545 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6693 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] netlink_unicast+0x8c0/0xa60 net/netlink/af_netlink.c:1339 netlink_sendmsg+0x7fe/0xb10 net/netlink/af_netlink.c:1889 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x718/0x790 net/socket.c:2217 __do_sys_sendto net/socket.c:2229 [inline] __se_sys_sendto net/socket.c:2225 [inline] __x64_sys_sendto+0xe9/0x100 net/socket.c:2225 x64_sys_call+0x2c2c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f475ad560d7 RSP: 002b:00007ffde6c7a360 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 0000555571efe500 RCX: 00007f475ad560d7 RDX: 000000000000002c RSI: 00007f475bb44670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007ffde6c7a3c4 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f475bb44670 R15: 0000000000000000 INFO: task syz-executor:453 blocked for more than 130 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:453 tgid:453 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5996 [inline] __schedule+0x134f/0x1ea0 kernel/sched/core.c:7843 __schedule_loop kernel/sched/core.c:7924 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7939 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7996 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x960/0x1bb0 kernel/locking/mutex.c:803 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 rtnl_lock net/core/rtnetlink.c:79 [inline] rtnetlink_rcv_msg+0x79e/0xa40 net/core/rtnetlink.c:6672 netlink_rcv_skb+0x256/0x4f0 net/netlink/af_netlink.c:2545 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6693 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] netlink_unicast+0x8c0/0xa60 net/netlink/af_netlink.c:1339 netlink_sendmsg+0x7fe/0xb10 net/netlink/af_netlink.c:1889 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x718/0x790 net/socket.c:2217 __do_sys_sendto net/socket.c:2229 [inline] __se_sys_sendto net/socket.c:2225 [inline] __x64_sys_sendto+0xe9/0x100 net/socket.c:2225 x64_sys_call+0x2c2c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7fc3ea1560d7 RSP: 002b:00007fffe987d930 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 0000555592e93500 RCX: 00007fc3ea1560d7 RDX: 000000000000002c RSI: 00007fc3eaf44670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007fffe987d994 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 R13: 0000000000000000 R14: 00007fc3eaf44670 R15: 0000000000000000 INFO: task syz-executor:455 blocked for more than 131 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:455 tgid:455 ppid:1 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5996 [inline] __schedule+0x134f/0x1ea0 kernel/sched/core.c:7843 __schedule_loop kernel/sched/core.c:7924 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7939 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7996 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x960/0x1bb0 kernel/locking/mutex.c:803 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 rtnl_lock net/core/rtnetlink.c:79 [inline] rtnetlink_rcv_msg+0x79e/0xa40 net/core/rtnetlink.c:6672 netlink_rcv_skb+0x256/0x4f0 net/netlink/af_netlink.c:2545 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6693 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] netlink_unicast+0x8c0/0xa60 net/netlink/af_netlink.c:1339 netlink_sendmsg+0x7fe/0xb10 net/netlink/af_netlink.c:1889 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x718/0x790 net/socket.c:2217 __do_sys_sendto net/socket.c:2229 [inline] __se_sys_sendto net/socket.c:2225 [inline] __x64_sys_sendto+0xe9/0x100 net/socket.c:2225 x64_sys_call+0x2c2c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7ff976b560d7 RSP: 002b:00007ffc77cb4b20 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 000055555b045500 RCX: 00007ff976b560d7 RDX: 000000000000002c RSI: 00007ff977944670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007ffc77cb4b84 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 R13: 0000000000000000 R14: 00007ff977944670 R15: 0000000000000000