syzbot


INFO: task hung in wg_noise_handshake_create_initiation (4)

Status: auto-obsoleted due to no activity on 2025/11/17 01:01
Subsystems: wireguard
[Documentation on labels]
First crash: 185d, last: 107d
Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: task hung in wg_noise_handshake_create_initiation (2) wireguard 1 1 693d 693d 0/29 auto-obsoleted due to no activity on 2024/04/09 14:33
upstream INFO: task hung in wg_noise_handshake_create_initiation (3) wireguard 1 6 388d 546d 0/29 auto-obsoleted due to no activity on 2025/02/08 22:54
upstream INFO: task hung in wg_noise_handshake_create_initiation wireguard 1 2 2077d 2099d 0/29 auto-closed as invalid on 2020/06/25 19:28

Sample crash report:
INFO: task kworker/u8:8:708 blocked for more than 143 seconds.
      Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:8    state:D stack:0     pid:708   tgid:708   ppid:2      task_flags:0x4208060 flags:0x00000010
Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker
Call trace:
 __switch_to+0x414/0x834 arch/arm64/kernel/process.c:735 (T)
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x13b0/0x28d4 kernel/sched/core.c:6767
 __schedule_loop kernel/sched/core.c:6845 [inline]
 schedule+0xb4/0x230 kernel/sched/core.c:6860
 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6917
 rwsem_down_write_slowpath+0xa80/0x10f0 kernel/locking/rwsem.c:1176
 __down_write_common kernel/locking/rwsem.c:1304 [inline]
 __down_write kernel/locking/rwsem.c:1313 [inline]
 down_write+0xb4/0xc0 kernel/locking/rwsem.c:1578
 wg_noise_handshake_create_initiation+0x114/0x6c8 drivers/net/wireguard/noise.c:530
 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:34 [inline]
 wg_packet_handshake_send_worker+0x13c/0x2a0 drivers/net/wireguard/send.c:51
 process_one_work+0x7e8/0x156c kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x958/0xed8 kernel/workqueue.c:3400
 kthread+0x5fc/0x75c kernel/kthread.c:464
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:847
INFO: task kworker/1:2:1805 blocked for more than 143 seconds.
      Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:2     state:D stack:0     pid:1805  tgid:1805  ppid:2      task_flags:0x4208060 flags:0x00000010
Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker
Call trace:
 __switch_to+0x414/0x834 arch/arm64/kernel/process.c:735 (T)
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x13b0/0x28d4 kernel/sched/core.c:6767
 __schedule_loop kernel/sched/core.c:6845 [inline]
 schedule+0xb4/0x230 kernel/sched/core.c:6860
 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6917
 rwsem_down_read_slowpath+0x4ac/0x7c8 kernel/locking/rwsem.c:1084
 __down_read_common kernel/locking/rwsem.c:1248 [inline]
 __down_read kernel/locking/rwsem.c:1261 [inline]
 down_read+0x9c/0x2f8 kernel/locking/rwsem.c:1526
 wg_noise_handshake_consume_initiation+0x414/0x748 drivers/net/wireguard/noise.c:632
 wg_receive_handshake_packet drivers/net/wireguard/receive.c:144 [inline]
 wg_packet_handshake_receive_worker+0x4dc/0xc20 drivers/net/wireguard/receive.c:213
 process_one_work+0x7e8/0x156c kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x958/0xed8 kernel/workqueue.c:3400
 kthread+0x5fc/0x75c kernel/kthread.c:464
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:847
INFO: task kworker/1:7:6569 blocked for more than 143 seconds.
      Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:7     state:D stack:0     pid:6569  tgid:6569  ppid:2      task_flags:0x4208060 flags:0x00000010
Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker
Call trace:
 __switch_to+0x414/0x834 arch/arm64/kernel/process.c:735 (T)
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x13b0/0x28d4 kernel/sched/core.c:6767
 __schedule_loop kernel/sched/core.c:6845 [inline]
 schedule+0xb4/0x230 kernel/sched/core.c:6860
 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6917
 rwsem_down_read_slowpath+0x4ac/0x7c8 kernel/locking/rwsem.c:1084
 __down_read_common kernel/locking/rwsem.c:1248 [inline]
 __down_read kernel/locking/rwsem.c:1261 [inline]
 down_read+0x9c/0x2f8 kernel/locking/rwsem.c:1526
 wg_noise_handshake_consume_response+0x20c/0x988 drivers/net/wireguard/noise.c:753
 wg_receive_handshake_packet drivers/net/wireguard/receive.c:166 [inline]
 wg_packet_handshake_receive_worker+0x50c/0xc20 drivers/net/wireguard/receive.c:213
 process_one_work+0x7e8/0x156c kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x958/0xed8 kernel/workqueue.c:3400
 kthread+0x5fc/0x75c kernel/kthread.c:464
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:847
INFO: task kworker/u8:22:6952 blocked for more than 143 seconds.
      Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:22   state:D stack:0     pid:6952  tgid:6952  ppid:2      task_flags:0x4208060 flags:0x00000010
Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker
Call trace:
 __switch_to+0x414/0x834 arch/arm64/kernel/process.c:735 (T)
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x13b0/0x28d4 kernel/sched/core.c:6767
 __schedule_loop kernel/sched/core.c:6845 [inline]
 schedule+0xb4/0x230 kernel/sched/core.c:6860
 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6917
 rwsem_down_write_slowpath+0xa80/0x10f0 kernel/locking/rwsem.c:1176
 __down_write_common kernel/locking/rwsem.c:1304 [inline]
 __down_write kernel/locking/rwsem.c:1313 [inline]
 down_write+0xb4/0xc0 kernel/locking/rwsem.c:1578
 wg_noise_handshake_create_initiation+0x114/0x6c8 drivers/net/wireguard/noise.c:530
 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:34 [inline]
 wg_packet_handshake_send_worker+0x13c/0x2a0 drivers/net/wireguard/send.c:51
 process_one_work+0x7e8/0x156c kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x958/0xed8 kernel/workqueue.c:3400
 kthread+0x5fc/0x75c kernel/kthread.c:464
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:847

Showing all locks held in the system:
1 lock held by kworker/R-rcu_g/4:
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline]
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x86c/0xec8 kernel/workqueue.c:3529
2 locks held by kworker/0:0/9:
2 locks held by kworker/0:1/11:
1 lock held by kworker/R-mm_pe/13:
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline]
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x86c/0xec8 kernel/workqueue.c:3529
1 lock held by khungtaskd/32:
 #0: ffff80008f508920 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 include/linux/rcupdate.h:330
3 locks held by kworker/u8:2/44:
 #0: ffff0000c0031148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212
 #1: ffff800097d57bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212
 #2: ffff80009248e928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80
3 locks held by kworker/u8:4/207:
4 locks held by kworker/u8:8/708:
 #0: ffff0000d7f4d148 ((wq_completion)wg-kex-wg2#11){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212
 #1: ffff80009d107bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212
 #2: ffff0000d8145308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10c/0x6c8 drivers/net/wireguard/noise.c:529
 #3: ffff0000fb15a0f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x114/0x6c8 drivers/net/wireguard/noise.c:530
4 locks held by kworker/1:2/1805:
 #0: ffff0000c730c548 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212
 #1: ffff8000a0797bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212
 #2: ffff0000d8139308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x130/0x748 drivers/net/wireguard/noise.c:598
 #3: ffff0000f1eda0f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x414/0x748 drivers/net/wireguard/noise.c:632
3 locks held by kworker/0:2/2302:
4 locks held by kworker/0:3/2310:
3 locks held by dhcpcd/6161:
2 locks held by getty/6253:
 #0: ffff0000d32fe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340
 #1: ffff80009a0032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x34c/0xfa0 drivers/tty/n_tty.c:2222
1 lock held by kworker/R-wg-cr/6522:
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline]
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x86c/0xec8 kernel/workqueue.c:3529
1 lock held by kworker/R-wg-cr/6527:
1 lock held by kworker/R-wg-cr/6530:
 #0: ffff80008f508920 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x18/0x54 include/linux/rcupdate.h:330
1 lock held by kworker/R-wg-cr/6535:
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline]
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x86c/0xec8 kernel/workqueue.c:3529
1 lock held by kworker/R-wg-cr/6536:
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline]
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x86c/0xec8 kernel/workqueue.c:3529
2 locks held by kworker/0:4/6544:
4 locks held by kworker/1:7/6569:
 #0: ffff0000d1d20148 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212
 #1: ffff8000a1b27bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212
 #2: ffff0000d8145308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x180/0x988 drivers/net/wireguard/noise.c:742
 #3: ffff0000fb15a0f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x20c/0x988 drivers/net/wireguard/noise.c:753
2 locks held by kworker/0:5/6600:
4 locks held by kworker/0:6/6640:
3 locks held by kworker/u8:14/6942:
 #0: ffff0000c0031148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212
 #1: ffff8000a2df7bc0 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212
 #2: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: idle_cull_fn+0xc4/0x60c kernel/workqueue.c:2960
2 locks held by kworker/u8:16/6944:
 #0: ffff0000c0031148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212
 #1: ffff8000a34d7bc0 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212
4 locks held by kworker/u8:22/6952:
 #0: ffff0000f012d148 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212
 #1: ffff8000a2a17bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212
 #2: ffff0000d8139308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10c/0x6c8 drivers/net/wireguard/noise.c:529
 #3: ffff0000f1eda0f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x114/0x6c8 drivers/net/wireguard/noise.c:530
2 locks held by kworker/u8:24/6954:
 #0: ffff0000c0031148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212
 #1: ffff8000a29f7bc0 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212
2 locks held by kworker/u8:26/6957:
6 locks held by kworker/u8:27/6958:
 #0: ffff0000c183a148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212
 #1: ffff8000a1d17bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212
 #2: ffff800092481e50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x138/0x9c0 net/core/net_namespace.c:608
 #3: ffff0000f192d0e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:922 [inline]
 #3: ffff0000f192d0e8 (&dev->mutex){....}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:108 [inline]
 #3: ffff0000f192d0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0xe4/0x380 net/devlink/core.c:506
 #4: ffff0000f192e250 (&devlink->lock_key){+.+.}-{4:4}, at: devl_lock net/devlink/core.c:276 [inline]
 #4: ffff0000f192e250 (&devlink->lock_key){+.+.}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:109 [inline]
 #4: ffff0000f192e250 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0xf0/0x380 net/devlink/core.c:506
 #5: ffff80008f50e300 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x58/0x528 kernel/rcu/tree.c:3774
3 locks held by syz-executor/7567:
 #0: ffff80008fc26ea8 (bio_slab_lock){+.+.}-{4:4}, at: bio_put_slab block/bio.c:140 [inline]
 #0: ffff80008fc26ea8 (bio_slab_lock){+.+.}-{4:4}, at: bioset_exit+0x1f8/0x3dc block/bio.c:1664
 #1: ffff80008f3a24b0 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x48/0x178 mm/slab_common.c:510
 #2: ffff80008f5e5b78 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x58/0x178 mm/slab_common.c:511
1 lock held by kworker/0:7/7721:
1 lock held by kworker/R-wg-cr/7742:
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x348 kernel/workqueue.c:2678
2 locks held by kworker/R-wg-cr/7745:
1 lock held by kworker/R-wg-cr/7806:
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x348 kernel/workqueue.c:2678
1 lock held by kworker/R-wg-cr/7807:
1 lock held by kworker/R-wg-cr/7808:
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline]
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x86c/0xec8 kernel/workqueue.c:3529
1 lock held by syz-executor/7830:
 #0: ffff80008f50e300 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x58/0x528 kernel/rcu/tree.c:3774
7 locks held by syz-executor/7857:
 #0: ffff0000d89b8420 (sb_writers#6){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:3041 [inline]
 #0: ffff0000d89b8420 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x244/0x97c fs/read_write.c:680
 #1: ffff0000f9837488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b4/0x488 fs/kernfs/file.c:325
 #2: ffff0000cac4a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1d0/0x488 fs/kernfs/file.c:326
 #3: ffff800091543d68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd4/0x31c drivers/net/netdevsim/bus.c:216
 #4: ffff0000f22320e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:922 [inline]
 #4: ffff0000f22320e8 (&dev->mutex){....}-{4:4}, at: __device_driver_lock drivers/base/dd.c:1094 [inline]
 #4: ffff0000f22320e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0x9c/0x658 drivers/base/dd.c:1292
 #5: ffff0000cfd5d250 (&devlink->lock_key#5){+.+.}-{4:4}, at: devl_lock+0x24/0x34 net/devlink/core.c:276
 #6: ffff80008f50e300 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x58/0x528 kernel/rcu/tree.c:3774
5 locks held by kworker/R-wg-cr/7869:
1 lock held by kworker/R-wg-cr/7873:
1 lock held by kworker/R-wg-cr/7876:
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline]
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x86c/0xec8 kernel/workqueue.c:3529
2 locks held by kworker/R-wg-cr/7878:
1 lock held by syz.9.283/7989:
 #0: ffff80008f50e300 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x58/0x528 kernel/rcu/tree.c:3774
4 locks held by syz-executor/8013:
 #0: ffff0000d89b8420 (sb_writers#6){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:3041 [inline]
 #0: ffff0000d89b8420 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x244/0x97c fs/read_write.c:680
 #1: ffff0001092f8888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b4/0x488 fs/kernfs/file.c:325
 #2: ffff0000cac4a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1d0/0x488 fs/kernfs/file.c:326
 #3: ffff800091543d68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd4/0x31c drivers/net/netdevsim/bus.c:216
4 locks held by syz-executor/8030:
 #0: ffff0000d89b8420 (sb_writers#6){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:3041 [inline]
 #0: ffff0000d89b8420 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x244/0x97c fs/read_write.c:680
 #1: ffff000112eaa488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b4/0x488 fs/kernfs/file.c:325
 #2: ffff0000cac4a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1d0/0x488 fs/kernfs/file.c:326
 #3: ffff800091543d68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd4/0x31c drivers/net/netdevsim/bus.c:216
4 locks held by syz-executor/8043:
 #0: ffff0000d89b8420 (sb_writers#6){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:3041 [inline]
 #0: ffff0000d89b8420 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x244/0x97c fs/read_write.c:680
 #1: ffff0000d5df4888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b4/0x488 fs/kernfs/file.c:325
 #2: ffff0000cac4a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1d0/0x488 fs/kernfs/file.c:326
 #3: ffff800091543d68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd4/0x31c drivers/net/netdevsim/bus.c:216
1 lock held by syz.8.311/8111:
 #0: ffff80008f50e300 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x58/0x528 kernel/rcu/tree.c:3774
2 locks held by syz-executor/8127:
 #0: ffff80008f322568 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_lock_acquire+0x18/0x54 include/linux/srcu.h:160
 #1: ffff80009248e928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
 #1: ffff80009248e928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
 #1: ffff80009248e928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x710/0x15dc net/core/rtnetlink.c:4064
2 locks held by syz-executor/8137:
 #0: ffff8000912db7a0 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_lock_acquire+0x18/0x54 include/linux/srcu.h:160
 #1: ffff80009248e928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
 #1: ffff80009248e928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
 #1: ffff80009248e928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x710/0x15dc net/core/rtnetlink.c:4064
3 locks held by syz-executor/8161:
2 locks held by syz-executor/8169:
 #0: ffff8000913299e0 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_lock_acquire+0x18/0x54 include/linux/srcu.h:160
 #1: ffff80009248e928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
 #1: ffff80009248e928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
 #1: ffff80009248e928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x710/0x15dc net/core/rtnetlink.c:4064
1 lock held by kworker/R-wg-cr/8202:
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: set_pf_worker kernel/workqueue.c:3325 [inline]
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x80/0xec8 kernel/workqueue.c:3452
1 lock held by kworker/R-wg-cr/8205:
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: set_pf_worker kernel/workqueue.c:3325 [inline]
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x80/0xec8 kernel/workqueue.c:3452
1 lock held by kworker/R-wg-cr/8206:
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: set_pf_worker kernel/workqueue.c:3325 [inline]
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x80/0xec8 kernel/workqueue.c:3452
1 lock held by kworker/R-wg-cr/8207:
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: set_pf_worker kernel/workqueue.c:3325 [inline]
 #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x80/0xec8 kernel/workqueue.c:3452
1 lock held by dhcpcd/8228:
 #0: ffff0000f2481a08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: inode_lock include/linux/fs.h:867 [inline]
 #0: ffff0000f2481a08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release net/socket.c:646 [inline]
 #0: ffff0000f2481a08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x7c/0x1e4 net/socket.c:1391
2 locks held by dhcpcd/8229:
 #0: ffff000110036258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1651 [inline]
 #0: ffff000110036258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x48/0xafc net/packet/af_packet.c:3252
 #1: ffff80008f50e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:336 [inline]
 #1: ffff80008f50e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x290/0x624 kernel/rcu/tree_exp.h:998
2 locks held by dhcpcd/8230:
 #0: ffff0000c865c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1651 [inline]
 #0: ffff0000c865c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x48/0xafc net/packet/af_packet.c:3252
 #1: ffff80008f50e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:336 [inline]
 #1: ffff80008f50e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x290/0x624 kernel/rcu/tree_exp.h:998

=============================================


Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/02 03:49 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d7fa1af5b33e 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 INFO: task hung in wg_noise_handshake_create_initiation
2025/08/19 00:55 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git for-next 8f5ae30d69d7 6e8d317a .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 INFO: task hung in wg_noise_handshake_create_initiation
* Struck through repros no longer work on HEAD.