rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2627 jiffies s: 7737 root: 0x2/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 6510 Comm: syz.1.256 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
RIP: 0010:get_current arch/x86/include/asm/current.h:49 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:235 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x90 kernel/kcov.c:304
Code: 44 0a 20 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 <65> 48 8b 14 25 40 d7 03 00 65 8b 05 10 4f 70 7e a9 00 01 ff 00 74
RSP: 0018:ffffc90000a18998 EFLAGS: 00000246
RAX: ffffffff8b074dde RBX: 0000000000000000 RCX: ffff88802adc1e00
RDX: 0000000000000101 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90000a18bf0 R08: ffffffff8b074e45 R09: 1ffffffff26020f0
R10: dffffc0000000000 R11: fffffbfff26020f1 R12: 0000000000000000
R13: 0000000000020000 R14: ffff888066ed7cc0 R15: ffff8880639530b0
FS: 00007fa1bd3ff6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020047030 CR3: 0000000055c14000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
ieee80211_rx_monitor net/mac80211/rx.c:786 [inline]
ieee80211_rx_list+0x8d5/0x3780 net/mac80211/rx.c:5451
ieee80211_rx_napi+0x18a/0x3c0 net/mac80211/rx.c:5483
ieee80211_rx include/net/mac80211.h:5122 [inline]
ieee80211_handle_queued_frames+0xe7/0x1e0 net/mac80211/main.c:439
tasklet_action_common+0x321/0x4d0 kernel/softirq.c:785
handle_softirqs+0x2c4/0x970 kernel/softirq.c:554
__do_softirq kernel/softirq.c:588 [inline]
invoke_softirq kernel/softirq.c:428 [inline]
__irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637
irq_exit_rcu+0x9/0x30 kernel/softirq.c:649
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:console_flush_all+0x9f7/0xf50 kernel/printk/printk.c:3033
Code: 20 00 90 0f 0b 90 e9 f3 f9 ff ff e8 43 25 20 00 e8 6e bf 1d 0a 4d 85 f6 74 c0 e8 34 25 20 00 fb 49 bd 00 00 00 00 00 fc ff df <43> 80 3c 2f 00 48 8b 5c 24 30 74 08 48 89 df e8 25 f0 86 00 4c 8b
RSP: 0018:ffffc9000c06f280 EFLAGS: 00000246
RAX: ffffffff81735eac RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc90009061000 RSI: 000000000003ffff RDI: 0000000000040000
RBP: ffffc9000c06f410 R08: ffffffff81735e53 R09: 1ffffffff26020f0
R10: dffffc0000000000 R11: fffffbfff26020f1 R12: ffffffff8eb2cb40
R13: dffffc0000000000 R14: 0000000000000200 R15: 1ffffffff1d65973
console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3103
vprintk_emit+0x7a1/0x900 kernel/printk/printk.c:2423
dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4909
dev_printk_emit+0xdd/0x120 drivers/base/core.c:4920
_dev_warn+0x122/0x170 drivers/base/core.c:4976
nbd_clear_sock drivers/block/nbd.c:1333 [inline]
nbd_config_put+0x387/0x7e0 drivers/block/nbd.c:1357
nbd_release+0x10b/0x130 drivers/block/nbd.c:1652
bdev_release+0x5e3/0x700
blkdev_release+0x15/0x20 block/fops.c:638
__fput+0x24a/0x8a0 fs/file_table.c:422
task_work_run+0x24f/0x310 kernel/task_work.c:204
get_signal+0x15e6/0x1740 kernel/signal.c:2681
arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310
exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
__syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218
do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa1bd975bd9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fa1bd3ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: 0000000000000000 RBX: 00007fa1bdb03f60 RCX: 00007fa1bd975bd9
RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004
RBP: 00007fa1bd9e4aa1 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007fa1bdb03f60 R15: 00007fff8a5eef38
DEBUG: waiting rtnl_mutex for 3688 jiffies.
task:syz-executor state:D stack:21024 pid:6328 tgid:6328 ppid:6307 flags:0x00000000
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
rtnl_lock net/core/rtnetlink.c:149 [inline]
rtnetlink_rcv_msg+0x847/0x1180 net/core/rtnetlink.c:6725
netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550
netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]
netlink_unicast+0x7f0/0x990 net/netlink/af_netlink.c:1357
netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901
sock_sendmsg_nosec net/socket.c:730 [inline]
__sock_sendmsg+0x221/0x270 net/socket.c:745
__sys_sendto+0x3a4/0x4f0 net/socket.c:2204
__do_sys_sendto net/socket.c:2216 [inline]
__se_sys_sendto net/socket.c:2212 [inline]
__x64_sys_sendto+0xde/0x100 net/socket.c:2212
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f87c977796c
RSP: 002b:00007ffd20f81f60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f87ca434620 RCX: 00007f87c977796c
RDX: 0000000000000064 RSI: 00007f87ca434670 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00007ffd20f81fb4 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
R13: 0000000000000000 R14: 00007f87ca434670 R15: 0000000000000000
DEBUG: waiting rtnl_mutex for 3586 jiffies.
task:kworker/1:3 state:D stack:23680 pid:5150 tgid:5150 ppid:2 flags:0x00004000
Workqueue: events linkwatch_event
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
linkwatch_event+0xe/0x60 net/core/link_watch.c:276
process_one_work kernel/workqueue.c:3224 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305
worker_thread+0x86d/0xd40 kernel/workqueue.c:3383
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
DEBUG: waiting rtnl_mutex for 3701 jiffies.
task:kworker/u8:7 state:D stack:22144 pid:2422 tgid:2422 ppid:2 flags:0x00004000
Workqueue: ipv6_addrconf addrconf_dad_work
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193
process_one_work kernel/workqueue.c:3224 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305
worker_thread+0x86d/0xd40 kernel/workqueue.c:3383
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
DEBUG: holding rtnl_mutex for 3683 jiffies.
task:kworker/u8:5 state:D stack:21248 pid:143 tgid:143 ppid:2 flags:0x00004000
Workqueue: netns cleanup_net
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
synchronize_rcu_expedited+0x684/0x830 kernel/rcu/tree_exp.h:995
synchronize_rcu+0x11b/0x360 kernel/rcu/tree.c:3989
lockdep_unregister_key+0x556/0x610 kernel/locking/lockdep.c:6557
__qdisc_destroy+0x165/0x410 net/sched/sch_generic.c:1079
qdisc_put net/sched/sch_generic.c:1105 [inline]
dev_shutdown+0x357/0x440 net/sched/sch_generic.c:1493
unregister_netdevice_many_notify+0x9c7/0x1d20 net/core/dev.c:11346
unregister_netdevice_many net/core/dev.c:11418 [inline]
default_device_exit_batch+0xa0f/0xa90 net/core/dev.c:11901
ops_exit_list net/core/net_namespace.c:178 [inline]
cleanup_net+0x89d/0xcc0 net/core/net_namespace.c:640
process_one_work kernel/workqueue.c:3224 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305
worker_thread+0x86d/0xd40 kernel/workqueue.c:3383
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Showing all locks held in the system:
5 locks held by kworker/u8:3/52:
5 locks held by kworker/u8:5/143:
#0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline]
#0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305
#1: ffffc90002e27d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline]
#1: ffffc90002e27d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305
#2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 net/core/net_namespace.c:594
#3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 net/core/dev.c:11887
#4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline]
#4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:980
3 locks held by kworker/u8:7/2422:
#0: ffff88802a3c8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline]
#0: ffff88802a3c8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305
#1: ffffc9000890fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline]
#1: ffffc9000890fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305
#2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193
3 locks held by kworker/u8:11/2871:
2 locks held by getty/4856:
#0: ffff88802acfc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211
3 locks held by kworker/1:3/5150:
#0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline]
#0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305
#1: ffffc90003e4fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline]
#1: ffffc90003e4fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305
#2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:276
1 lock held by syz-executor/6328:
#0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:149 [inline]
#0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 net/core/rtnetlink.c:6725
3 locks held by syz.4.254/6503:
6 locks held by syz.1.256/6510:
#0: ffff88801ffb24c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x184/0x700 block/bdev.c:1080
#1: ffff88801ffb8198 (&nbd->config_lock){+.+.}-{3:3}, at: refcount_dec_and_mutex_lock+0x30/0x100 lib/refcount.c:118
#2: ffffffff8e2110a0 (console_lock){+.+.}-{0:0}, at: dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4909
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:338 [inline]
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:267 [inline]
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:287 [inline]
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 kernel/printk/printk.c:3018
#4: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 kernel/time/timer.c:1789
#5: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:333 [inline]
#5: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:845 [inline]
#5: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6704
=============================================
DEBUG: waiting rtnl_mutex for 3791 jiffies.
task:syz-executor state:D stack:21024 pid:6328 tgid:6328 ppid:6307 flags:0x00000000
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
rtnl_lock net/core/rtnetlink.c:149 [inline]
rtnetlink_rcv_msg+0x847/0x1180 net/core/rtnetlink.c:6725
netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550
netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]
netlink_unicast+0x7f0/0x990 net/netlink/af_netlink.c:1357
netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901
sock_sendmsg_nosec net/socket.c:730 [inline]
__sock_sendmsg+0x221/0x270 net/socket.c:745
__sys_sendto+0x3a4/0x4f0 net/socket.c:2204
__do_sys_sendto net/socket.c:2216 [inline]
__se_sys_sendto net/socket.c:2212 [inline]
__x64_sys_sendto+0xde/0x100 net/socket.c:2212
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f87c977796c
RSP: 002b:00007ffd20f81f60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f87ca434620 RCX: 00007f87c977796c
RDX: 0000000000000064 RSI: 00007f87ca434670 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00007ffd20f81fb4 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
R13: 0000000000000000 R14: 00007f87ca434670 R15: 0000000000000000
DEBUG: waiting rtnl_mutex for 3689 jiffies.
task:kworker/1:3 state:D stack:23680 pid:5150 tgid:5150 ppid:2 flags:0x00004000
Workqueue: events linkwatch_event
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
linkwatch_event+0xe/0x60 net/core/link_watch.c:276
process_one_work kernel/workqueue.c:3224 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305
worker_thread+0x86d/0xd40 kernel/workqueue.c:3383
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
DEBUG: waiting rtnl_mutex for 3804 jiffies.
task:kworker/u8:7 state:D stack:22144 pid:2422 tgid:2422 ppid:2 flags:0x00004000
Workqueue: ipv6_addrconf addrconf_dad_work
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193
process_one_work kernel/workqueue.c:3224 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305
worker_thread+0x86d/0xd40 kernel/workqueue.c:3383
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
DEBUG: holding rtnl_mutex for 3786 jiffies.
task:kworker/u8:5 state:D stack:21248 pid:143 tgid:143 ppid:2 flags:0x00004000
Workqueue: netns cleanup_net
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
synchronize_rcu_expedited+0x684/0x830 kernel/rcu/tree_exp.h:995
synchronize_rcu+0x11b/0x360 kernel/rcu/tree.c:3989
lockdep_unregister_key+0x556/0x610 kernel/locking/lockdep.c:6557
__qdisc_destroy+0x165/0x410 net/sched/sch_generic.c:1079
qdisc_put net/sched/sch_generic.c:1105 [inline]
dev_shutdown+0x357/0x440 net/sched/sch_generic.c:1493
unregister_netdevice_many_notify+0x9c7/0x1d20 net/core/dev.c:11346
unregister_netdevice_many net/core/dev.c:11418 [inline]
default_device_exit_batch+0xa0f/0xa90 net/core/dev.c:11901
ops_exit_list net/core/net_namespace.c:178 [inline]
cleanup_net+0x89d/0xcc0 net/core/net_namespace.c:640
process_one_work kernel/workqueue.c:3224 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305
worker_thread+0x86d/0xd40 kernel/workqueue.c:3383
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Showing all locks held in the system:
5 locks held by kworker/u8:3/52:
5 locks held by kworker/u8:5/143:
#0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline]
#0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305
#1: ffffc90002e27d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline]
#1: ffffc90002e27d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305
#2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 net/core/net_namespace.c:594
#3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 net/core/dev.c:11887
#4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline]
#4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:980
3 locks held by kworker/u8:7/2422:
#0: ffff88802a3c8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline]
#0: ffff88802a3c8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305
#1: ffffc9000890fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline]
#1: ffffc9000890fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305
#2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193
3 locks held by kworker/u8:11/2871:
2 locks held by getty/4856:
#0: ffff88802acfc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211
3 locks held by kworker/1:3/5150:
#0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline]
#0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305
#1: ffffc90003e4fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline]
#1: ffffc90003e4fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305
#2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:276
1 lock held by syz-executor/6328:
#0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:149 [inline]
#0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 net/core/rtnetlink.c:6725
3 locks held by syz.4.254/6503:
6 locks held by syz.1.256/6510:
#0: ffff88801ffb24c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x184/0x700 block/bdev.c:1080
#1: ffff88801ffb8198 (&nbd->config_lock){+.+.}-{3:3}, at: refcount_dec_and_mutex_lock+0x30/0x100 lib/refcount.c:118
#2: ffffffff8e2110a0 (console_lock){+.+.}-{0:0}, at: dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4909
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:338 [inline]
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:267 [inline]
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:287 [inline]
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 kernel/printk/printk.c:3018
#4: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 kernel/time/timer.c:1789
#5: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:333 [inline]
#5: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:845 [inline]
#5: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6704
=============================================
DEBUG: waiting rtnl_mutex for 3895 jiffies.
task:syz-executor state:D stack:21024 pid:6328 tgid:6328 ppid:6307 flags:0x00000000
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
rtnl_lock net/core/rtnetlink.c:149 [inline]
rtnetlink_rcv_msg+0x847/0x1180 net/core/rtnetlink.c:6725
netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550
netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]
netlink_unicast+0x7f0/0x990 net/netlink/af_netlink.c:1357
netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901
sock_sendmsg_nosec net/socket.c:730 [inline]
__sock_sendmsg+0x221/0x270 net/socket.c:745
__sys_sendto+0x3a4/0x4f0 net/socket.c:2204
__do_sys_sendto net/socket.c:2216 [inline]
__se_sys_sendto net/socket.c:2212 [inline]
__x64_sys_sendto+0xde/0x100 net/socket.c:2212
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f87c977796c
RSP: 002b:00007ffd20f81f60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f87ca434620 RCX: 00007f87c977796c
RDX: 0000000000000064 RSI: 00007f87ca434670 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00007ffd20f81fb4 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
R13: 0000000000000000 R14: 00007f87ca434670 R15: 0000000000000000
DEBUG: waiting rtnl_mutex for 3793 jiffies.
task:kworker/1:3 state:D stack:23680 pid:5150 tgid:5150 ppid:2 flags:0x00004000
Workqueue: events linkwatch_event
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
linkwatch_event+0xe/0x60 net/core/link_watch.c:276
process_one_work kernel/workqueue.c:3224 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305
worker_thread+0x86d/0xd40 kernel/workqueue.c:3383
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
DEBUG: waiting rtnl_mutex for 3908 jiffies.
task:kworker/u8:7 state:D stack:22144 pid:2422 tgid:2422 ppid:2 flags:0x00004000
Workqueue: ipv6_addrconf addrconf_dad_work
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193
process_one_work kernel/workqueue.c:3224 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305
worker_thread+0x86d/0xd40 kernel/workqueue.c:3383
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
DEBUG: holding rtnl_mutex for 3890 jiffies.
task:kworker/u8:5 state:D stack:21248 pid:143 tgid:143 ppid:2 flags:0x00004000
Workqueue: netns cleanup_net
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
synchronize_rcu_expedited+0x684/0x830 kernel/rcu/tree_exp.h:995
synchronize_rcu+0x11b/0x360 kernel/rcu/tree.c:3989
lockdep_unregister_key+0x556/0x610 kernel/locking/lockdep.c:6557
__qdisc_destroy+0x165/0x410 net/sched/sch_generic.c:1079
qdisc_put net/sched/sch_generic.c:1105 [inline]
dev_shutdown+0x357/0x440 net/sched/sch_generic.c:1493
unregister_netdevice_many_notify+0x9c7/0x1d20 net/core/dev.c:11346
unregister_netdevice_many net/core/dev.c:11418 [inline]
default_device_exit_batch+0xa0f/0xa90 net/core/dev.c:11901
ops_exit_list net/core/net_namespace.c:178 [inline]
cleanup_net+0x89d/0xcc0 net/core/net_namespace.c:640
process_one_work kernel/workqueue.c:3224 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305
worker_thread+0x86d/0xd40 kernel/workqueue.c:3383
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Showing all locks held in the system:
5 locks held by kworker/u8:3/52:
5 locks held by kworker/u8:5/143:
#0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline]
#0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305
#1: ffffc90002e27d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline]
#1: ffffc90002e27d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305
#2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 net/core/net_namespace.c:594
#3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 net/core/dev.c:11887
#4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline]
#4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:980
3 locks held by kworker/u8:7/2422:
#0: ffff88802a3c8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline]
#0: ffff88802a3c8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305
#1: ffffc9000890fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline]
#1: ffffc9000890fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305
#2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193
3 locks held by kworker/u8:11/2871:
2 locks held by getty/4856:
#0: ffff88802acfc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211
3 locks held by kworker/1:3/5150:
#0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline]
#0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305
#1: ffffc90003e4fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline]
#1: ffffc90003e4fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305
#2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:276
1 lock held by syz-executor/6328:
#0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:149 [inline]
#0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 net/core/rtnetlink.c:6725
3 locks held by syz.4.254/6503:
6 locks held by syz.1.256/6510:
#0: ffff88801ffb24c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x184/0x700 block/bdev.c:1080
#1: ffff88801ffb8198 (&nbd->config_lock){+.+.}-{3:3}, at: refcount_dec_and_mutex_lock+0x30/0x100 lib/refcount.c:118
#2: ffffffff8e2110a0 (console_lock){+.+.}-{0:0}, at: dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4909
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:338 [inline]
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:267 [inline]
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:287 [inline]
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 kernel/printk/printk.c:3018
#4: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 kernel/time/timer.c:1789
#5: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:333 [inline]
#5: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:845 [inline]
#5: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6704
=============================================
DEBUG: waiting rtnl_mutex for 3999 jiffies.
task:syz-executor state:D stack:21024 pid:6328 tgid:6328 ppid:6307 flags:0x00000000
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
rtnl_lock net/core/rtnetlink.c:149 [inline]
rtnetlink_rcv_msg+0x847/0x1180 net/core/rtnetlink.c:6725
netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550
netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]
netlink_unicast+0x7f0/0x990 net/netlink/af_netlink.c:1357
netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901
sock_sendmsg_nosec net/socket.c:730 [inline]
__sock_sendmsg+0x221/0x270 net/socket.c:745
__sys_sendto+0x3a4/0x4f0 net/socket.c:2204
__do_sys_sendto net/socket.c:2216 [inline]
__se_sys_sendto net/socket.c:2212 [inline]
__x64_sys_sendto+0xde/0x100 net/socket.c:2212
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f87c977796c
RSP: 002b:00007ffd20f81f60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f87ca434620 RCX: 00007f87c977796c
RDX: 0000000000000064 RSI: 00007f87ca434670 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00007ffd20f81fb4 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
R13: 0000000000000000 R14: 00007f87ca434670 R15: 0000000000000000
DEBUG: waiting rtnl_mutex for 3897 jiffies.
task:kworker/1:3 state:D stack:23680 pid:5150 tgid:5150 ppid:2 flags:0x00004000
Workqueue: events linkwatch_event
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
linkwatch_event+0xe/0x60 net/core/link_watch.c:276
process_one_work kernel/workqueue.c:3224 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305
worker_thread+0x86d/0xd40 kernel/workqueue.c:3383
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
DEBUG: waiting rtnl_mutex for 4012 jiffies.
task:kworker/u8:7 state:D stack:22144 pid:2422 tgid:2422 ppid:2 flags:0x00004000
Workqueue: ipv6_addrconf addrconf_dad_work
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193
process_one_work kernel/workqueue.c:3224 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305
worker_thread+0x86d/0xd40 kernel/workqueue.c:3383
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
DEBUG: holding rtnl_mutex for 3994 jiffies.
task:kworker/u8:5 state:D stack:21248 pid:143 tgid:143 ppid:2 flags:0x00004000
Workqueue: netns cleanup_net
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
synchronize_rcu_expedited+0x684/0x830 kernel/rcu/tree_exp.h:995
synchronize_rcu+0x11b/0x360 kernel/rcu/tree.c:3989
lockdep_unregister_key+0x556/0x610 kernel/locking/lockdep.c:6557
__qdisc_destroy+0x165/0x410 net/sched/sch_generic.c:1079
qdisc_put net/sched/sch_generic.c:1105 [inline]
dev_shutdown+0x357/0x440 net/sched/sch_generic.c:1493
unregister_netdevice_many_notify+0x9c7/0x1d20 net/core/dev.c:11346
unregister_netdevice_many net/core/dev.c:11418 [inline]
default_device_exit_batch+0xa0f/0xa90 net/core/dev.c:11901
ops_exit_list net/core/net_namespace.c:178 [inline]
cleanup_net+0x89d/0xcc0 net/core/net_namespace.c:640
process_one_work kernel/workqueue.c:3224 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305
worker_thread+0x86d/0xd40 kernel/workqueue.c:3383
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Showing all locks held in the system:
5 locks held by kworker/u8:3/52:
5 locks held by kworker/u8:5/143:
#0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline]
#0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305
#1: ffffc90002e27d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline]
#1: ffffc90002e27d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305
#2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 net/core/net_namespace.c:594
#3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 net/core/dev.c:11887
#4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline]
#4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:980
3 locks held by kworker/u8:7/2422:
#0: ffff88802a3c8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline]
#0: ffff88802a3c8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305
#1: ffffc9000890fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline]
#1: ffffc9000890fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305
#2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193
3 locks held by kworker/u8:11/2871:
2 locks held by getty/4856:
#0: ffff88802acfc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211
3 locks held by kworker/1:3/5150:
#0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline]
#0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305
#1: ffffc90003e4fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline]
#1: ffffc90003e4fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305
#2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:276
1 lock held by syz-executor/6328:
#0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:149 [inline]
#0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 net/core/rtnetlink.c:6725
3 locks held by syz.4.254/6503:
6 locks held by syz.1.256/6510:
#0: ffff88801ffb24c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x184/0x700 block/bdev.c:1080
#1: ffff88801ffb8198 (&nbd->config_lock){+.+.}-{3:3}, at: refcount_dec_and_mutex_lock+0x30/0x100 lib/refcount.c:118
#2: ffffffff8e2110a0 (console_lock){+.+.}-{0:0}, at: dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4909
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:338 [inline]
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:267 [inline]
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:287 [inline]
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 kernel/printk/printk.c:3018
#4: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 kernel/time/timer.c:1789
#5: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:333 [inline]
#5: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:845 [inline]
#5: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6704
=============================================
DEBUG: waiting rtnl_mutex for 4103 jiffies.
task:syz-executor state:D stack:21024 pid:6328 tgid:6328 ppid:6307 flags:0x00000000
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
rtnl_lock net/core/rtnetlink.c:149 [inline]
rtnetlink_rcv_msg+0x847/0x1180 net/core/rtnetlink.c:6725
netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550
netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]
netlink_unicast+0x7f0/0x990 net/netlink/af_netlink.c:1357
netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901
sock_sendmsg_nosec net/socket.c:730 [inline]
__sock_sendmsg+0x221/0x270 net/socket.c:745
__sys_sendto+0x3a4/0x4f0 net/socket.c:2204
__do_sys_sendto net/socket.c:2216 [inline]
__se_sys_sendto net/socket.c:2212 [inline]
__x64_sys_sendto+0xde/0x100 net/socket.c:2212
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f87c977796c
RSP: 002b:00007ffd20f81f60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f87ca434620 RCX: 00007f87c977796c
RDX: 0000000000000064 RSI: 00007f87ca434670 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00007ffd20f81fb4 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
R13: 0000000000000000 R14: 00007f87ca434670 R15: 0000000000000000
DEBUG: waiting rtnl_mutex for 4001 jiffies.
task:kworker/1:3 state:D stack:23680 pid:5150 tgid:5150 ppid:2 flags:0x00004000
Workqueue: events linkwatch_event
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
linkwatch_event+0xe/0x60 net/core/link_watch.c:276
process_one_work kernel/workqueue.c:3224 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305
worker_thread+0x86d/0xd40 kernel/workqueue.c:3383
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
DEBUG: waiting rtnl_mutex for 4116 jiffies.
task:kworker/u8:7 state:D stack:22144 pid:2422 tgid:2422 ppid:2 flags:0x00004000
Workqueue: ipv6_addrconf addrconf_dad_work
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193
process_one_work kernel/workqueue.c:3224 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305
worker_thread+0x86d/0xd40 kernel/workqueue.c:3383
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
DEBUG: holding rtnl_mutex for 4098 jiffies.
task:kworker/u8:5 state:D stack:21248 pid:143 tgid:143 ppid:2 flags:0x00004000
Workqueue: netns cleanup_net
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
synchronize_rcu_expedited+0x684/0x830 kernel/rcu/tree_exp.h:995
synchronize_rcu+0x11b/0x360 kernel/rcu/tree.c:3989
lockdep_unregister_key+0x556/0x610 kernel/locking/lockdep.c:6557
__qdisc_destroy+0x165/0x410 net/sched/sch_generic.c:1079
qdisc_put net/sched/sch_generic.c:1105 [inline]
dev_shutdown+0x357/0x440 net/sched/sch_generic.c:1493
unregister_netdevice_many_notify+0x9c7/0x1d20 net/core/dev.c:11346
unregister_netdevice_many net/core/dev.c:11418 [inline]
default_device_exit_batch+0xa0f/0xa90 net/core/dev.c:11901
ops_exit_list net/core/net_namespace.c:178 [inline]
cleanup_net+0x89d/0xcc0 net/core/net_namespace.c:640
process_one_work kernel/workqueue.c:3224 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305
worker_thread+0x86d/0xd40 kernel/workqueue.c:3383
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Showing all locks held in the system:
5 locks held by kworker/u8:3/52:
5 locks held by kworker/u8:5/143:
#0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline]
#0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305
#1: ffffc90002e27d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline]
#1: ffffc90002e27d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305
#2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 net/core/net_namespace.c:594
#3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 net/core/dev.c:11887
#4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline]
#4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:980
3 locks held by kworker/u8:7/2422:
#0: ffff88802a3c8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline]
#0: ffff88802a3c8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305
#1: ffffc9000890fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline]
#1: ffffc9000890fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305
#2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193
3 locks held by kworker/u8:11/2871:
2 locks held by getty/4856:
#0: ffff88802acfc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211
3 locks held by kworker/1:3/5150:
#0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline]
#0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305
#1: ffffc90003e4fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline]
#1: ffffc90003e4fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305
#2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:276
1 lock held by syz-executor/6328:
#0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:149 [inline]
#0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 net/core/rtnetlink.c:6725
3 locks held by syz.4.254/6503:
6 locks held by syz.1.256/6510:
#0: ffff88801ffb24c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x184/0x700 block/bdev.c:1080
#1: ffff88801ffb8198 (&nbd->config_lock){+.+.}-{3:3}, at: refcount_dec_and_mutex_lock+0x30/0x100 lib/refcount.c:118
#2: ffffffff8e2110a0 (console_lock){+.+.}-{0:0}, at: dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4909
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:338 [inline]
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:267 [inline]
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:287 [inline]
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 kernel/printk/printk.c:3018
#4: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 kernel/time/timer.c:1789
#5: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:333 [inline]
#5: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:845 [inline]
#5: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6704
=============================================
DEBUG: waiting rtnl_mutex for 4207 jiffies.
task:syz-executor state:D stack:21024 pid:6328 tgid:6328 ppid:6307 flags:0x00000000
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
rtnl_lock net/core/rtnetlink.c:149 [inline]
rtnetlink_rcv_msg+0x847/0x1180 net/core/rtnetlink.c:6725
netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550
netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]
netlink_unicast+0x7f0/0x990 net/netlink/af_netlink.c:1357
netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901
sock_sendmsg_nosec net/socket.c:730 [inline]
__sock_sendmsg+0x221/0x270 net/socket.c:745
__sys_sendto+0x3a4/0x4f0 net/socket.c:2204
__do_sys_sendto net/socket.c:2216 [inline]
__se_sys_sendto net/socket.c:2212 [inline]
__x64_sys_sendto+0xde/0x100 net/socket.c:2212
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f87c977796c
RSP: 002b:00007ffd20f81f60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f87ca434620 RCX: 00007f87c977796c
RDX: 0000000000000064 RSI: 00007f87ca434670 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00007ffd20f81fb4 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
R13: 0000000000000000 R14: 00007f87ca434670 R15: 0000000000000000
DEBUG: waiting rtnl_mutex for 4106 jiffies.
task:kworker/1:3 state:D stack:23680 pid:5150 tgid:5150 ppid:2 flags:0x00004000
Workqueue: events linkwatch_event
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
linkwatch_event+0xe/0x60 net/core/link_watch.c:276
process_one_work kernel/workqueue.c:3224 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305
worker_thread+0x86d/0xd40 kernel/workqueue.c:3383
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
DEBUG: waiting rtnl_mutex for 4221 jiffies.
task:kworker/u8:7 state:D stack:22144 pid:2422 tgid:2422 ppid:2 flags:0x00004000
Workqueue: ipv6_addrconf addrconf_dad_work
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193
process_one_work kernel/workqueue.c:3224 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305
worker_thread+0x86d/0xd40 kernel/workqueue.c:3383
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
DEBUG: holding rtnl_mutex for 4203 jiffies.
task:kworker/u8:5 state:D stack:21248 pid:143 tgid:143 ppid:2 flags:0x00004000
Workqueue: netns cleanup_net
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
synchronize_rcu_expedited+0x684/0x830 kernel/rcu/tree_exp.h:995
synchronize_rcu+0x11b/0x360 kernel/rcu/tree.c:3989
lockdep_unregister_key+0x556/0x610 kernel/locking/lockdep.c:6557
__qdisc_destroy+0x165/0x410 net/sched/sch_generic.c:1079
qdisc_put net/sched/sch_generic.c:1105 [inline]
dev_shutdown+0x357/0x440 net/sched/sch_generic.c:1493
unregister_netdevice_many_notify+0x9c7/0x1d20 net/core/dev.c:11346
unregister_netdevice_many net/core/dev.c:11418 [inline]
default_device_exit_batch+0xa0f/0xa90 net/core/dev.c:11901
ops_exit_list net/core/net_namespace.c:178 [inline]
cleanup_net+0x89d/0xcc0 net/core/net_namespace.c:640
process_one_work kernel/workqueue.c:3224 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305
worker_thread+0x86d/0xd40 kernel/workqueue.c:3383
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Showing all locks held in the system:
5 locks held by kworker/u8:3/52:
5 locks held by kworker/u8:5/143:
#0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline]
#0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305
#1: ffffc90002e27d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline]
#1: ffffc90002e27d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305
#2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 net/core/net_namespace.c:594
#3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 net/core/dev.c:11887
#4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline]
#4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:980
3 locks held by kworker/u8:7/2422:
#0: ffff88802a3c8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline]
#0: ffff88802a3c8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305
#1: ffffc9000890fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline]
#1: ffffc9000890fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305
#2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193
3 locks held by kworker/u8:11/2871:
2 locks held by getty/4856:
#0: ffff88802acfc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211
3 locks held by kworker/1:3/5150:
#0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline]
#0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305
#1: ffffc90003e4fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline]
#1: ffffc90003e4fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305
#2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:276
1 lock held by syz-executor/6328:
#0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:149 [inline]
#0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 net/core/rtnetlink.c:6725
3 locks held by syz.4.254/6503:
6 locks held by syz.1.256/6510:
#0: ffff88801ffb24c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x184/0x700 block/bdev.c:1080
#1: ffff88801ffb8198 (&nbd->config_lock){+.+.}-{3:3}, at: refcount_dec_and_mutex_lock+0x30/0x100 lib/refcount.c:118
#2: ffffffff8e2110a0 (console_lock){+.+.}-{0:0}, at: dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4909
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:338 [inline]
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:267 [inline]
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:287 [inline]
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 kernel/printk/printk.c:3018
#4: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 kernel/time/timer.c:1789
#5: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:333 [inline]
#5: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:845 [inline]
#5: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6704
=============================================
DEBUG: waiting rtnl_mutex for 4311 jiffies.
task:syz-executor state:D stack:21024 pid:6328 tgid:6328 ppid:6307 flags:0x00000000
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
rtnl_lock net/core/rtnetlink.c:149 [inline]
rtnetlink_rcv_msg+0x847/0x1180 net/core/rtnetlink.c:6725
netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550
netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]
netlink_unicast+0x7f0/0x990 net/netlink/af_netlink.c:1357
netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901
sock_sendmsg_nosec net/socket.c:730 [inline]
__sock_sendmsg+0x221/0x270 net/socket.c:745
__sys_sendto+0x3a4/0x4f0 net/socket.c:2204
__do_sys_sendto net/socket.c:2216 [inline]
__se_sys_sendto net/socket.c:2212 [inline]
__x64_sys_sendto+0xde/0x100 net/socket.c:2212
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f87c977796c
RSP: 002b:00007ffd20f81f60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f87ca434620 RCX: 00007f87c977796c
RDX: 0000000000000064 RSI: 00007f87ca434670 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00007ffd20f81fb4 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
R13: 0000000000000000 R14: 00007f87ca434670 R15: 0000000000000000
DEBUG: waiting rtnl_mutex for 4209 jiffies.
task:kworker/1:3 state:D stack:23680 pid:5150 tgid:5150 ppid:2 flags:0x00004000
Workqueue: events linkwatch_event
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
linkwatch_event+0xe/0x60 net/core/link_watch.c:276
process_one_work kernel/workqueue.c:3224 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305
worker_thread+0x86d/0xd40 kernel/workqueue.c:3383
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
DEBUG: waiting rtnl_mutex for 4324 jiffies.
task:kworker/u8:7 state:D stack:22144 pid:2422 tgid:2422 ppid:2 flags:0x00004000
Workqueue: ipv6_addrconf addrconf_dad_work
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193
process_one_work kernel/workqueue.c:3224 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305
worker_thread+0x86d/0xd40 kernel/workqueue.c:3383
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
DEBUG: holding rtnl_mutex for 4306 jiffies.
task:kworker/u8:5 state:D stack:21248 pid:143 tgid:143 ppid:2 flags:0x00004000
Workqueue: netns cleanup_net
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
synchronize_rcu_expedited+0x684/0x830 kernel/rcu/tree_exp.h:995
synchronize_rcu+0x11b/0x360 kernel/rcu/tree.c:3989
lockdep_unregister_key+0x556/0x610 kernel/locking/lockdep.c:6557
__qdisc_destroy+0x165/0x410 net/sched/sch_generic.c:1079
qdisc_put net/sched/sch_generic.c:1105 [inline]
dev_shutdown+0x357/0x440 net/sched/sch_generic.c:1493
unregister_netdevice_many_notify+0x9c7/0x1d20 net/core/dev.c:11346
unregister_netdevice_many net/core/dev.c:11418 [inline]
default_device_exit_batch+0xa0f/0xa90 net/core/dev.c:11901
ops_exit_list net/core/net_namespace.c:178 [inline]
cleanup_net+0x89d/0xcc0 net/core/net_namespace.c:640
process_one_work kernel/workqueue.c:3224 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305
worker_thread+0x86d/0xd40 kernel/workqueue.c:3383
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Showing all locks held in the system:
5 locks held by kworker/u8:3/52:
5 locks held by kworker/u8:5/143:
#0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline]
#0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305
#1: ffffc90002e27d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline]
#1: ffffc90002e27d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305
#2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 net/core/net_namespace.c:594
#3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 net/core/dev.c:11887
#4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline]
#4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:980
3 locks held by kworker/u8:7/2422:
#0: ffff88802a3c8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline]
#0: ffff88802a3c8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305
#1: ffffc9000890fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline]
#1: ffffc9000890fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305
#2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193
3 locks held by kworker/u8:11/2871:
2 locks held by getty/4856:
#0: ffff88802acfc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211
3 locks held by kworker/1:3/5150:
#0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline]
#0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305
#1: ffffc90003e4fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline]
#1: ffffc90003e4fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305
#2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:276
1 lock held by syz-executor/6328:
#0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:149 [inline]
#0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 net/core/rtnetlink.c:6725
3 locks held by syz.4.254/6503:
6 locks held by syz.1.256/6510:
#0: ffff88801ffb24c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x184/0x700 block/bdev.c:1080
#1: ffff88801ffb8198 (&nbd->config_lock){+.+.}-{3:3}, at: refcount_dec_and_mutex_lock+0x30/0x100 lib/refcount.c:118
#2: ffffffff8e2110a0 (console_lock){+.+.}-{0:0}, at: dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4909
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:338 [inline]
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:267 [inline]
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:287 [inline]
#3: ffffffff8e210cb0 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 kernel/printk/printk.c:3018
#4: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 kernel/time/timer.c:1789
#5: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:333 [inline]
#5: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:845 [inline]
#5: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6704
=============================================
DEBUG: waiting rtnl_mutex for 4415 jiffies.
task:syz-executor state:D stack:21024 pid:6328 tgid:6328 ppid:6307 flags:0x00000000
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
rtnl_lock net/core/rtnetlink.c:149 [inline]
rtnetlink_rcv_msg+0x847/0x1180 net/core/rtnetlink.c:6725