INFO: task kworker/u9:2:3379 blocked for more than 430 seconds. Not tainted 6.14.0-rc1-syzkaller-g245aece3750d #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u9:2 state:D stack:0 pid:3379 tgid:3379 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events_unbound bpf_map_free_deferred Call Trace: [] context_switch kernel/sched/core.c:5377 [inline] [] __schedule+0xe4c/0x3d70 kernel/sched/core.c:6764 [] __schedule_loop kernel/sched/core.c:6841 [inline] [] schedule+0xc4/0x324 kernel/sched/core.c:6856 [] schedule_preempt_disabled+0x16/0x28 kernel/sched/core.c:6913 [] __mutex_lock_common kernel/locking/mutex.c:662 [inline] [] __mutex_lock+0x9b2/0x1230 kernel/locking/mutex.c:730 [] mutex_lock_nested+0x14/0x1c kernel/locking/mutex.c:782 [] rcu_barrier+0x56/0x6cc kernel/rcu/tree.c:3741 [] dev_map_free+0x11c/0x6bc kernel/bpf/devmap.c:214 [] bpf_map_free kernel/bpf/syscall.c:841 [inline] [] bpf_map_free_deferred+0x226/0x47a kernel/bpf/syscall.c:867 [] process_one_work+0x96a/0x1f3a kernel/workqueue.c:3236 [] process_scheduled_works kernel/workqueue.c:3317 [inline] [] worker_thread+0x5be/0xdc6 kernel/workqueue.c:3398 [] kthread+0x37e/0x7b6 kernel/kthread.c:464 [] ret_from_fork+0xe/0x18 arch/riscv/kernel/entry.S:327 INFO: task syz.1.158:4294 blocked for more than 430 seconds. Not tainted 6.14.0-rc1-syzkaller-g245aece3750d #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.158 state:D stack:0 pid:4294 tgid:4294 ppid:3181 task_flags:0x400040 flags:0x00000008 Call Trace: [] context_switch kernel/sched/core.c:5377 [inline] [] __schedule+0xe4c/0x3d70 kernel/sched/core.c:6764 [] __schedule_loop kernel/sched/core.c:6841 [inline] [] schedule+0xc4/0x324 kernel/sched/core.c:6856 [] schedule_timeout+0x1c6/0x28a kernel/time/sleep_timeout.c:75 [] do_wait_for_common kernel/sched/completion.c:95 [inline] [] __wait_for_common+0x1ca/0x4b6 kernel/sched/completion.c:116 [] wait_for_common kernel/sched/completion.c:127 [inline] [] wait_for_completion+0x1a/0x22 kernel/sched/completion.c:148 [] rcu_barrier+0x2dc/0x6cc kernel/rcu/tree.c:3809 [] netdev_run_todo+0x294/0x10b4 net/core/dev.c:11130 [] rtnl_unlock+0x14/0x1c net/core/rtnetlink.c:151 [] tun_detach drivers/net/tun.c:708 [inline] [] tun_chr_close+0xde/0x230 drivers/net/tun.c:3521 [] __fput+0x37e/0x9f4 fs/file_table.c:448 [] ____fput+0x1c/0x26 fs/file_table.c:476 [] task_work_run+0x16a/0x25e kernel/task_work.c:227 [] resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] [] exit_to_user_mode_loop kernel/entry/common.c:114 [inline] [] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] [] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] [] syscall_exit_to_user_mode+0x290/0x2a4 kernel/entry/common.c:218 [] do_trap_ecall_u+0x86/0x216 arch/riscv/kernel/traps.c:345 [] handle_exception+0x146/0x152 arch/riscv/kernel/entry.S:197 Showing all locks held in the system: 4 locks held by kworker/0:1/9: 1 lock held by kworker/R-mm_pe/13: 1 lock held by khungtaskd/37: #0: ffffffff883d8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x68/0x288 kernel/locking/lockdep.c:6742 5 locks held by kworker/1:2/828: 2 locks held by getty/3140: #0: ffffaf801cdde0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46 drivers/tty/tty_ldsem.c:340 #1: ffff8f800008b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xd7c/0x129a drivers/tty/n_tty.c:2211 2 locks held by syz-executor/3169: 2 locks held by kworker/R-wg-cr/3354: 3 locks held by kworker/u9:2/3379: #0: ffffaf8011a89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x848/0x1f3a kernel/workqueue.c:3211 #1: ffff8f800ce07bd0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x870/0x1f3a kernel/workqueue.c:3211 #2: ffffffff883e8380 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x56/0x6cc kernel/rcu/tree.c:3741 1 lock held by kworker/R-wg-cr/3408: #0: ffffffff8828d7a8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2734 [inline] #0: ffffffff8828d7a8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x73e/0xc72 kernel/workqueue.c:3533 2 locks held by kworker/1:3/3867: 2 locks held by kworker/1:4/3868: 3 locks held by kworker/1:5/3959: 2 locks held by kworker/1:8/4012: 2 locks held by kworker/1:9/4032: 2 locks held by kworker/1:10/4091: 1 lock held by syz.1.158/4294: #0: ffffffff883e8380 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x56/0x6cc kernel/rcu/tree.c:3741 2 locks held by syz-executor/4339: 2 locks held by kworker/1:0/4433: 2 locks held by kworker/R-wg-cr/4449: 3 locks held by kworker/u9:6/4475: 1 lock held by syz.0.183/4641: #0: ffffffff883e8380 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x56/0x6cc kernel/rcu/tree.c:3741 2 locks held by kworker/1:7/4708: 3 locks held by kworker/1:12/5048: ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller-g245aece3750d #0 Hardware name: riscv-virtio,qemu (DT) Call Trace: [] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:132 [] show_stack+0x30/0x3c arch/riscv/kernel/stacktrace.c:138 [] __dump_stack lib/dump_stack.c:94 [inline] [] dump_stack_lvl+0x12e/0x1a6 lib/dump_stack.c:120 [] dump_stack+0x1c/0x24 lib/dump_stack.c:129 [] nmi_cpu_backtrace+0x3b0/0x3b2 lib/nmi_backtrace.c:113 [] nmi_trigger_cpumask_backtrace+0x2b6/0x458 lib/nmi_backtrace.c:62 [] arch_trigger_cpumask_backtrace+0x2c/0x3e arch/riscv/kernel/smp.c:348 [] trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:236 [inline] [] watchdog+0xcf2/0x11de kernel/hung_task.c:399 [] kthread+0x37e/0x7b6 kernel/kthread.c:464 [] ret_from_fork+0xe/0x18 arch/riscv/kernel/entry.S:327 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 4449 Comm: kworker/R-wg-cr Not tainted 6.14.0-rc1-syzkaller-g245aece3750d #0 Hardware name: riscv-virtio,qemu (DT) Workqueue: wg-crypt-wg0 wg_packet_tx_worker epc : finish_task_switch.isra.0+0x1f4/0x940 kernel/sched/core.c:5251 ra : raw_spin_rq_unlock_irq kernel/sched/sched.h:1533 [inline] ra : finish_lock_switch kernel/sched/core.c:5131 [inline] ra : finish_task_switch.isra.0+0x1f0/0x940 kernel/sched/core.c:5249 epc : ffffffff80203200 ra : ffffffff802031fc sp : ffff8f8003e276d0 gp : ffffffff89c1d3c0 tp : ffffaf801aa10000 t0 : 5c7bda2363811625 t1 : fffff5ef0ddb15f8 t2 : 0000000000000029 s0 : ffff8f8003e27750 s1 : 0000000000000000 a0 : 0000000000000001 a1 : ffffffff86842140 a2 : 0000000000000006 a3 : 0000000000000001 a4 : 0000000000000001 a5 : 000000000001a4cd a6 : ffffaf801aa10b78 a7 : 1ffff5f00354216f s2 : ffffaf806ed8afd8 s3 : ffffaf806ed8afc0 s4 : ffffaf806ed8bbc8 s5 : ffffaf802dfdcec0 s6 : 0000000000000000 s7 : 0000000000000402 s8 : ffffffff89c5c940 s9 : 1ffff5f00ddb1779 s10: ffffaf806ed8bb60 s11: ffffaf802dfdcec0 t3 : ffffaf801aa10b30 t4 : fffff5ef0ddb15f8 t5 : fffff5ef0ddb15f9 t6 : 000000000000000d status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001 [] arch_local_irq_enable arch/riscv/include/asm/irqflags.h:21 [inline] [] raw_spin_rq_unlock_irq kernel/sched/sched.h:1533 [inline] [] finish_lock_switch kernel/sched/core.c:5131 [inline] [] finish_task_switch.isra.0+0x1f4/0x940 kernel/sched/core.c:5249 [] context_switch kernel/sched/core.c:5380 [inline] [] __schedule+0xe54/0x3d70 kernel/sched/core.c:6764 [] preempt_schedule_common kernel/sched/core.c:6943 [inline] [] preempt_schedule+0xd2/0x1e2 kernel/sched/core.c:6967 [] __local_bh_enable_ip+0x420/0x5e8 kernel/softirq.c:396 [] local_bh_enable include/linux/bottom_half.h:33 [inline] [] rcu_read_unlock_bh include/linux/rcupdate.h:919 [inline] [] mod_peer_timer drivers/net/wireguard/timers.c:38 [inline] [] wg_timers_any_authenticated_packet_traversal+0x23c/0x3a6 drivers/net/wireguard/timers.c:215 [] wg_packet_create_data_done drivers/net/wireguard/send.c:247 [inline] [] wg_packet_tx_worker+0x10c/0x766 drivers/net/wireguard/send.c:276 [] process_one_work+0x96a/0x1f3a kernel/workqueue.c:3236 [] process_scheduled_works kernel/workqueue.c:3317 [inline] [] rescuer_thread+0x56e/0xc72 kernel/workqueue.c:3494 [] kthread+0x37e/0x7b6 kernel/kthread.c:464 [] ret_from_fork+0xe/0x18 arch/riscv/kernel/entry.S:327