rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6328/1:b..l rcu: (detected by 0, t=10502 jiffies, g=18049, q=499 ncpus=2) task:syz-executor.1 state:R running task stack:23576 pid:6328 tgid:6327 ppid:5137 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6594 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6916 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_acquire+0x264/0x550 kernel/locking/lockdep.c:5820 Code: 2b 00 74 08 4c 89 f7 e8 6a 82 8a 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 RSP: 0018:ffffc9000326ed80 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 1ffff9200064ddbc RCX: d79239a3a6816e00 RDX: dffffc0000000000 RSI: ffffffff8bcada20 RDI: ffffffff8c206c80 RBP: ffffc9000326eee0 R08: ffffffff92fe4747 R09: 1ffffffff25fc8e8 R10: dffffc0000000000 R11: fffffbfff25fc8e9 R12: 1ffff9200064ddb8 R13: dffffc0000000000 R14: ffffc9000326ede0 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:333 [inline] rcu_read_lock include/linux/rcupdate.h:845 [inline] percpu_ref_get_many+0x36/0x140 include/linux/percpu-refcount.h:202 percpu_ref_get include/linux/percpu-refcount.h:222 [inline] css_get include/linux/cgroup_refcnt.h:11 [inline] mem_cgroup_commit_charge+0x9f/0x380 mm/memcontrol.c:3134 charge_memcg+0xb1/0x160 mm/memcontrol.c:7534 __mem_cgroup_charge+0x27/0x80 mm/memcontrol.c:7545 mem_cgroup_charge include/linux/memcontrol.h:692 [inline] folio_prealloc+0x52/0x170 mm/memory.c:1068 wp_page_copy mm/memory.c:3336 [inline] do_wp_page+0x11cc/0x52f0 mm/memory.c:3728 handle_pte_fault+0x117e/0x7040 mm/memory.c:5537 __handle_mm_fault mm/memory.c:5664 [inline] handle_mm_fault+0x10df/0x1ba0 mm/memory.c:5829 do_user_addr_fault arch/x86/mm/fault.c:1389 [inline] handle_page_fault arch/x86/mm/fault.c:1481 [inline] exc_page_fault+0x2b9/0x8c0 arch/x86/mm/fault.c:1539 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0010:rep_movs_alternative+0x4a/0x70 arch/x86/lib/copy_user_64.S:71 Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 RSP: 0018:ffffc9000326f958 EFLAGS: 00050206 RAX: ffff8880129b4001 RBX: 0000000020526e80 RCX: 0000000000000e80 RDX: 0000000000000000 RSI: ffff8880129b4180 RDI: 0000000020526000 RBP: ffffc9000326fad8 R08: ffff8880129b4fff R09: 1ffff110025369ff R10: dffffc0000000000 R11: ffffed1002536a00 R12: dffffc0000000000 R13: 1ffff9200064df40 R14: 0000000000001000 R15: ffff8880129b4000 copy_user_generic arch/x86/include/asm/uaccess_64.h:110 [inline] raw_copy_to_user arch/x86/include/asm/uaccess_64.h:131 [inline] copy_to_user_iter lib/iov_iter.c:25 [inline] iterate_iovec include/linux/iov_iter.h:51 [inline] iterate_and_advance2 include/linux/iov_iter.h:247 [inline] iterate_and_advance include/linux/iov_iter.h:271 [inline] _copy_to_iter+0x4c0/0x1960 lib/iov_iter.c:185 copy_page_to_iter+0xb1/0x160 lib/iov_iter.c:362 process_vm_rw_pages mm/process_vm_access.c:45 [inline] process_vm_rw_single_vec mm/process_vm_access.c:118 [inline] process_vm_rw_core mm/process_vm_access.c:216 [inline] process_vm_rw+0x871/0xcf0 mm/process_vm_access.c:284 __do_sys_process_vm_readv mm/process_vm_access.c:296 [inline] __se_sys_process_vm_readv mm/process_vm_access.c:292 [inline] __x64_sys_process_vm_readv+0xe0/0x100 mm/process_vm_access.c:292 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc19967d0a9 RSP: 002b:00007fc19a4220c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 RAX: ffffffffffffffda RBX: 00007fc1997b3f80 RCX: 00007fc19967d0a9 RDX: 0000000000000002 RSI: 0000000020008400 RDI: 00000000000000c5 RBP: 00007fc1996ec074 R08: 0000000000000286 R09: 0000000000000000 R10: 0000000020008640 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007fc1997b3f80 R15: 00007ffc9b8dd568 rcu: rcu_preempt kthread starved for 10422 jiffies! g18049 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26448 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6594 __schedule_loop kernel/sched/core.c:6671 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6686 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2020 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2222 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 skipped: idling at native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline] NMI backtrace for cpu 1 skipped: idling at arch_safe_halt arch/x86/include/asm/irqflags.h:106 [inline] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 drivers/acpi/processor_idle.c:112 DEBUG: waiting rtnl_mutex for 10609 jiffies. task:kworker/u8:5 state:D stack:19544 pid:954 tgid:954 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6594 __schedule_loop kernel/sched/core.c:6671 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6686 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6743 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd50 kernel/workqueue.c:3385 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Showing all locks held in the system: 3 locks held by kworker/u8:4/82: 3 locks held by kworker/u8:5/954: #0: ffff888029be2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888029be2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90003ef7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90003ef7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 2 locks held by udevd/4544: 2 locks held by getty/4847: #0: ffff88802e9d20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 3 locks held by kworker/0:3/5124: 2 locks held by udevd/5236: 2 locks held by syz-executor.0/5402: #0: ffff88802ea700e0 (&type->s_umount_key#59){+.+.}-{3:3}, at: __super_lock fs/super.c:56 [inline] #0: ffff88802ea700e0 (&type->s_umount_key#59){+.+.}-{3:3}, at: __super_lock_excl fs/super.c:71 [inline] #0: ffff88802ea700e0 (&type->s_umount_key#59){+.+.}-{3:3}, at: deactivate_super+0xb5/0xf0 fs/super.c:505 #1: ffff88807cc880e0 (&type->s_umount_key#33){++++}-{3:3}, at: ovl_sync_fs+0x11b/0x180 fs/overlayfs/super.c:231 1 lock held by udevd/5409: 2 locks held by udevd/5770: 1 lock held by syz-executor.3/6036: #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 1 lock held by syz-executor.4/6320: 2 locks held by syz-executor.1/6327: 2 locks held by syz-executor.1/6328: 2 locks held by sed/6365: ============================================= DEBUG: waiting rtnl_mutex for 10753 jiffies. task:kworker/u8:5 state:D stack:19544 pid:954 tgid:954 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6594 __schedule_loop kernel/sched/core.c:6671 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6686 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6743 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd50 kernel/workqueue.c:3385 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Showing all locks held in the system: 3 locks held by kworker/u8:4/82: 3 locks held by kworker/u8:5/954: #0: ffff888029be2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888029be2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90003ef7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90003ef7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 2 locks held by udevd/4544: 2 locks held by getty/4847: #0: ffff88802e9d20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 3 locks held by kworker/0:3/5124: 2 locks held by udevd/5236: 2 locks held by syz-executor.0/5402: #0: ffff88802ea700e0 (&type->s_umount_key#59){+.+.}-{3:3}, at: __super_lock fs/super.c:56 [inline] #0: ffff88802ea700e0 (&type->s_umount_key#59){+.+.}-{3:3}, at: __super_lock_excl fs/super.c:71 [inline] #0: ffff88802ea700e0 (&type->s_umount_key#59){+.+.}-{3:3}, at: deactivate_super+0xb5/0xf0 fs/super.c:505 #1: ffff88807cc880e0 (&type->s_umount_key#33){++++}-{3:3}, at: ovl_sync_fs+0x11b/0x180 fs/overlayfs/super.c:231 1 lock held by udevd/5409: 2 locks held by udevd/5770: 1 lock held by syz-executor.3/6036: #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 1 lock held by syz-executor.4/6320: 2 locks held by syz-executor.1/6327: 2 locks held by syz-executor.1/6328: 2 locks held by sed/6365: ============================================= DEBUG: waiting rtnl_mutex for 10897 jiffies. task:kworker/u8:5 state:D stack:19544 pid:954 tgid:954 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6594 __schedule_loop kernel/sched/core.c:6671 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6686 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6743 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd50 kernel/workqueue.c:3385 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Showing all locks held in the system: 3 locks held by kworker/u8:4/82: 3 locks held by kworker/u8:5/954: #0: ffff888029be2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888029be2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90003ef7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90003ef7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 2 locks held by udevd/4544: 2 locks held by getty/4847: #0: ffff88802e9d20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 3 locks held by kworker/0:3/5124: 2 locks held by udevd/5236: 2 locks held by syz-executor.0/5402: #0: ffff88802ea700e0 (&type->s_umount_key#59){+.+.}-{3:3}, at: __super_lock fs/super.c:56 [inline] #0: ffff88802ea700e0 (&type->s_umount_key#59){+.+.}-{3:3}, at: __super_lock_excl fs/super.c:71 [inline] #0: ffff88802ea700e0 (&type->s_umount_key#59){+.+.}-{3:3}, at: deactivate_super+0xb5/0xf0 fs/super.c:505 #1: ffff88807cc880e0 (&type->s_umount_key#33){++++}-{3:3}, at: ovl_sync_fs+0x11b/0x180 fs/overlayfs/super.c:231 1 lock held by udevd/5409: 2 locks held by udevd/5770: 1 lock held by syz-executor.3/6036: #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 2 locks held by syz-executor.4/6320: 2 locks held by syz-executor.1/6327: 2 locks held by syz-executor.1/6328: 2 locks held by sed/6365: ============================================= DEBUG: waiting rtnl_mutex for 11041 jiffies. task:kworker/u8:5 state:D stack:19544 pid:954 tgid:954 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6594 __schedule_loop kernel/sched/core.c:6671 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6686 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6743 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd50 kernel/workqueue.c:3385 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Showing all locks held in the system: 3 locks held by kworker/u8:4/82: 3 locks held by kworker/u8:5/954: #0: ffff888029be2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888029be2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90003ef7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90003ef7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 2 locks held by udevd/4544: 2 locks held by getty/4847: #0: ffff88802e9d20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 3 locks held by kworker/0:3/5124: 2 locks held by udevd/5236: 2 locks held by syz-executor.0/5402: #0: ffff88802ea700e0 (&type->s_umount_key#59){+.+.}-{3:3}, at: __super_lock fs/super.c:56 [inline] #0: ffff88802ea700e0 (&type->s_umount_key#59){+.+.}-{3:3}, at: __super_lock_excl fs/super.c:71 [inline] #0: ffff88802ea700e0 (&type->s_umount_key#59){+.+.}-{3:3}, at: deactivate_super+0xb5/0xf0 fs/super.c:505 #1: ffff88807cc880e0 (&type->s_umount_key#33){++++}-{3:3}, at: ovl_sync_fs+0x11b/0x180 fs/overlayfs/super.c:231 1 lock held by udevd/5409: 2 locks held by udevd/5770: 1 lock held by syz-executor.3/6036: #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 2 locks held by syz-executor.1/6327: 2 locks held by syz-executor.1/6328: 2 locks held by sed/6365: ============================================= DEBUG: waiting rtnl_mutex for 11185 jiffies. task:kworker/u8:5 state:D stack:19544 pid:954 tgid:954 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6594 __schedule_loop kernel/sched/core.c:6671 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6686 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6743 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd50 kernel/workqueue.c:3385 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Showing all locks held in the system: 3 locks held by kworker/u8:4/82: 3 locks held by kworker/u8:5/954: #0: ffff888029be2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888029be2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90003ef7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90003ef7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 2 locks held by udevd/4544: 2 locks held by getty/4847: #0: ffff88802e9d20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 3 locks held by kworker/0:3/5124: 2 locks held by udevd/5236: 2 locks held by syz-executor.0/5402: #0: ffff88802ea700e0 (&type->s_umount_key#59){+.+.}-{3:3}, at: __super_lock fs/super.c:56 [inline] #0: ffff88802ea700e0 (&type->s_umount_key#59){+.+.}-{3:3}, at: __super_lock_excl fs/super.c:71 [inline] #0: ffff88802ea700e0 (&type->s_umount_key#59){+.+.}-{3:3}, at: deactivate_super+0xb5/0xf0 fs/super.c:505 #1: ffff88807cc880e0 (&type->s_umount_key#33){++++}-{3:3}, at: ovl_sync_fs+0x11b/0x180 fs/overlayfs/super.c:231 1 lock held by udevd/5409: 2 locks held by udevd/5770: 1 lock held by syz-executor.3/6036: #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 2 locks held by syz-executor.1/6327: 2 locks held by syz-executor.1/6328: 2 locks held by sed/6365: ============================================= DEBUG: waiting rtnl_mutex for 11329 jiffies. task:kworker/u8:5 state:D stack:19544 pid:954 tgid:954 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6594 __schedule_loop kernel/sched/core.c:6671 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6686 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6743 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd50 kernel/workqueue.c:3385 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Showing all locks held in the system: 3 locks held by kworker/u8:4/82: 3 locks held by kworker/u8:5/954: #0: ffff888029be2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888029be2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90003ef7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90003ef7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 2 locks held by udevd/4544: 2 locks held by getty/4847: #0: ffff88802e9d20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 3 locks held by kworker/0:3/5124: 2 locks held by udevd/5236: 2 locks held by syz-executor.0/5402: #0: ffff88802ea700e0 (&type->s_umount_key#59){+.+.}-{3:3}, at: __super_lock fs/super.c:56 [inline] #0: ffff88802ea700e0 (&type->s_umount_key#59){+.+.}-{3:3}, at: __super_lock_excl fs/super.c:71 [inline] #0: ffff88802ea700e0 (&type->s_umount_key#59){+.+.}-{3:3}, at: deactivate_super+0xb5/0xf0 fs/super.c:505 #1: ffff88807cc880e0 (&type->s_umount_key#33){++++}-{3:3}, at: ovl_sync_fs+0x11b/0x180 fs/overlayfs/super.c:231 1 lock held by udevd/5409: 2 locks held by udevd/5770: 1 lock held by syz-executor.3/6036: #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 2 locks held by syz-executor.1/6327: 2 locks held by syz-executor.1/6328: 2 locks held by sed/6365: ============================================= DEBUG: waiting rtnl_mutex for 11473 jiffies. task:kworker/u8:5 state:D stack:19544 pid:954 tgid:954 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6594 __schedule_loop kernel/sched/core.c:6671 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6686 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6743 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd50 kernel/workqueue.c:3385 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Showing all locks held in the system: 3 locks held by kworker/u8:4/82: 3 locks held by kworker/u8:5/954: #0: ffff888029be2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888029be2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90003ef7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90003ef7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 2 locks held by udevd/4544: 2 locks held by getty/4847: #0: ffff88802e9d20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 3 locks held by kworker/0:3/5124: 2 locks held by udevd/5236: 2 locks held by syz-executor.0/5402: