INFO: task kworker/0:12:24010 blocked for more than 143 seconds. Not tainted 5.15.151-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:12 state:D stack:23104 pid:24010 ppid: 2 flags:0x00004000 Workqueue: events switchdev_deferred_process_work Call Trace: context_switch kernel/sched/core.c:5030 [inline] __schedule+0x12c4/0x45b0 kernel/sched/core.c:6376 schedule+0x11b/0x1f0 kernel/sched/core.c:6459 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6518 __mutex_lock_common+0xe34/0x25a0 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743 switchdev_deferred_process_work+0xa/0x20 net/switchdev/switchdev.c:74 process_one_work+0x8a1/0x10c0 kernel/workqueue.c:2310 worker_thread+0xaca/0x1280 kernel/workqueue.c:2457 kthread+0x3f6/0x4f0 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298 INFO: task kworker/0:15:24015 blocked for more than 143 seconds. Not tainted 5.15.151-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:15 state:D stack:25688 pid:24015 ppid: 2 flags:0x00004000 Workqueue: events linkwatch_event Call Trace: context_switch kernel/sched/core.c:5030 [inline] __schedule+0x12c4/0x45b0 kernel/sched/core.c:6376 schedule+0x11b/0x1f0 kernel/sched/core.c:6459 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6518 __mutex_lock_common+0xe34/0x25a0 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743 linkwatch_event+0xa/0x50 net/core/link_watch.c:251 process_one_work+0x8a1/0x10c0 kernel/workqueue.c:2310 worker_thread+0xaca/0x1280 kernel/workqueue.c:2457 kthread+0x3f6/0x4f0 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298 INFO: task syz-executor.4:24590 blocked for more than 144 seconds. Not tainted 5.15.151-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:25056 pid:24590 ppid: 24389 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5030 [inline] __schedule+0x12c4/0x45b0 kernel/sched/core.c:6376 schedule+0x11b/0x1f0 kernel/sched/core.c:6459 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6518 __mutex_lock_common+0xe34/0x25a0 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743 wg_netns_pre_exit+0x1b/0x1d0 drivers/net/wireguard/device.c:404 ops_pre_exit_list net/core/net_namespace.c:159 [inline] setup_net+0x651/0x9e0 net/core/net_namespace.c:346 copy_net_ns+0x395/0x5d0 net/core/net_namespace.c:473 create_new_namespaces+0x425/0x7a0 kernel/nsproxy.c:110 copy_namespaces+0x365/0x3b0 kernel/nsproxy.c:178 copy_process+0x1841/0x3ef0 kernel/fork.c:2209 kernel_clone+0x210/0x960 kernel/fork.c:2604 __do_sys_clone kernel/fork.c:2721 [inline] __se_sys_clone kernel/fork.c:2705 [inline] __x64_sys_clone+0x23f/0x290 kernel/fork.c:2705 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x61/0xcb RIP: 0033:0x7fa2e8e30da9 RSP: 002b:00007fa2e7390078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007fa2e8f5f050 RCX: 00007fa2e8e30da9 RDX: 0000000020000340 RSI: 0000000020000300 RDI: 0000000040000000 RBP: 00007fa2e8e7d47a R08: 00000000200003c0 R09: 00000000200003c0 R10: 0000000020000380 R11: 0000000000000206 R12: 0000000000000000 R13: 000000000000006e R14: 00007fa2e8f5f050 R15: 00007ffc7abe0678 INFO: task syz-executor.2:24611 blocked for more than 145 seconds. Not tainted 5.15.151-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:24280 pid:24611 ppid: 24210 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5030 [inline] __schedule+0x12c4/0x45b0 kernel/sched/core.c:6376 schedule+0x11b/0x1f0 kernel/sched/core.c:6459 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6518 __mutex_lock_common+0xe34/0x25a0 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743 ip_tunnel_init_net+0x20f/0x700 net/ipv4/ip_tunnel.c:1083 vti_init_net+0x2a/0xf0 net/ipv4/ip_vti.c:504 ops_init+0x356/0x600 net/core/net_namespace.c:135 setup_net+0x358/0x9e0 net/core/net_namespace.c:329 copy_net_ns+0x395/0x5d0 net/core/net_namespace.c:473 create_new_namespaces+0x425/0x7a0 kernel/nsproxy.c:110 copy_namespaces+0x365/0x3b0 kernel/nsproxy.c:178 copy_process+0x1841/0x3ef0 kernel/fork.c:2209 kernel_clone+0x210/0x960 kernel/fork.c:2604 __do_sys_clone kernel/fork.c:2721 [inline] __se_sys_clone kernel/fork.c:2705 [inline] __x64_sys_clone+0x23f/0x290 kernel/fork.c:2705 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x61/0xcb RIP: 0033:0x7fb396525da9 RSP: 002b:00007fb394a85078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007fb396654050 RCX: 00007fb396525da9 RDX: 0000000020000340 RSI: 0000000020000300 RDI: 0000000040000000 RBP: 00007fb39657247a R08: 00000000200003c0 R09: 00000000200003c0 R10: 0000000020000380 R11: 0000000000000206 R12: 0000000000000000 R13: 000000000000006e R14: 00007fb396654050 R15: 00007ffd5a46a418 Showing all locks held in the system: 1 lock held by khungtaskd/27: #0: ffffffff8c91f720 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 3 locks held by kworker/u4:2/154: 5 locks held by kworker/u4:3/155: #0: ffff888011dcd138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 kernel/workqueue.c:2283 #1: ffffc90001c47d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 kernel/workqueue.c:2285 #2: ffffffff8d9cfd50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 net/core/net_namespace.c:558 #3: ffffffff8d9db908 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock_unregistering net/core/dev.c:11576 [inline] #3: ffffffff8d9db908 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0x1ac/0x3f0 net/core/dev.c:11614 #4: ffffffff8c923ce8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:290 [inline] #4: ffffffff8c923ce8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740 kernel/rcu/tree_exp.h:845 2 locks held by kworker/0:3/3247: #0: ffff888011c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 kernel/workqueue.c:2283 #1: ffffc90003167d20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 kernel/workqueue.c:2285 2 locks held by getty/3264: #0: ffff888023fea098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:252 #1: ffffc90002bae2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 drivers/tty/n_tty.c:2158 3 locks held by kworker/0:6/3562: #0: ffff888011c71938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 kernel/workqueue.c:2283 #1: ffffc90004047d20 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 kernel/workqueue.c:2285 #2: ffffffff8d9db908 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x7f/0xb70 net/wireless/reg.c:2436 4 locks held by kworker/u4:6/18442: #0: ffff888142586938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 kernel/workqueue.c:2283 #1: ffffc9000f20fd20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 kernel/workqueue.c:2285 #2: ffff88807f67cbd8 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x1f6/0x3d10 fs/ext4/inode.c:2677 #3: ffff88807f67e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12b9/0x1570 fs/jbd2/transaction.c:462 3 locks held by kworker/0:12/24010: #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 kernel/workqueue.c:2283 #1: ffffc900045bfd20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 kernel/workqueue.c:2285 #2: ffffffff8d9db908 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 net/switchdev/switchdev.c:74 3 locks held by kworker/0:15/24015: #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 kernel/workqueue.c:2283 #1: ffffc900041c7d20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 kernel/workqueue.c:2285 #2: ffffffff8d9db908 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 net/core/link_watch.c:251 3 locks held by kworker/0:16/24016: #0: ffff8880233a7d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 kernel/workqueue.c:2283 #1: ffffc900044d7d20 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 kernel/workqueue.c:2285 #2: ffffffff8d9db908 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20 net/ipv6/addrconf.c:4655 3 locks held by syz-executor.0/24496: #0: ffff88807f67a460 (sb_writers#5){.+.+}-{0:0}, at: do_coredump+0x1825/0x31e0 fs/coredump.c:825 #1: ffff8880511c83f0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:789 [inline] #1: ffff8880511c83f0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_buffered_write_iter+0xa0/0x360 fs/ext4/file.c:262 #2: ffff88807f67a0e0 (&type->s_umount_key#32){++++}-{3:3}, at: try_to_writeback_inodes_sb+0x1d/0xb0 fs/fs-writeback.c:2729 1 lock held by syz-executor.4/24558: 3 locks held by syz-executor.4/24566: 2 locks held by syz-executor.4/24573: 3 locks held by syz-executor.4/24581: 2 locks held by syz-executor.4/24590: #0: ffffffff8d9cfd50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x37b/0x5d0 net/core/net_namespace.c:469 #1: ffffffff8d9db908 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1b/0x1d0 drivers/net/wireguard/device.c:404 1 lock held by syz-executor.1/24599: 1 lock held by syz-executor.0/24606: 2 locks held by syz-executor.2/24611: #0: ffffffff8d9cfd50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x37b/0x5d0 net/core/net_namespace.c:469 #1: ffffffff8d9db908 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20f/0x700 net/ipv4/ip_tunnel.c:1083 1 lock held by syz-executor.1/24614: 1 lock held by syz-executor.1/24698: 1 lock held by syz-executor.2/24727: #0: ffffffff8d9db908 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:72 [inline] #0: ffffffff8d9db908 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 net/core/rtnetlink.c:5626 1 lock held by syz-executor.4/24728: #0: ffffffff8d9db908 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:72 [inline] #0: ffffffff8d9db908 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 net/core/rtnetlink.c:5626 1 lock held by syz-executor.1/24739: 2 locks held by syz-executor.1/24758: 1 lock held by syz-executor.0/24759: 1 lock held by syz-executor.0/24806: 1 lock held by syz-executor.1/24817: #0: ffff88807f67cbd8 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x1f6/0x3d10 fs/ext4/inode.c:2677 1 lock held by syz-executor.0/24830: 1 lock held by syz-executor.3/24931: #0: ffffffff8d9db908 (rtnl_mutex){+.+.}-{3:3}, at: tun_detach drivers/net/tun.c:699 [inline] #0: ffffffff8d9db908 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0 drivers/net/tun.c:3435 2 locks held by syz-executor.0/24990: #0: ffff88807f67cbd8 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x1f6/0x3d10 fs/ext4/inode.c:2677 #1: ffff8880b9a3a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 kernel/sched/core.c:475 1 lock held by syz-executor.1/25034: 2 locks held by syz-executor.1/25041: 1 lock held by syz-executor.1/25046: 1 lock held by syz-executor.0/25048: 2 locks held by syz-executor.1/25052: 2 locks held by syz-executor.0/25057: 1 lock held by syz-executor.1/25060: 1 lock held by syz-executor.0/25063: 4 locks held by syz-executor.1/25066: 2 locks held by syz-executor.0/25070: 1 lock held by syz-executor.1/25075: 1 lock held by syz-executor.0/25076: 1 lock held by syz-executor.1/25080: 1 lock held by syz-executor.0/25087: 1 lock held by syz-executor.2/25088: #0: ffffffff8d9db908 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:72 [inline] #0: ffffffff8d9db908 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 net/core/rtnetlink.c:5626 1 lock held by syz-executor.4/25090: #0: ffffffff8d9db908 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:72 [inline] #0: ffffffff8d9db908 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 net/core/rtnetlink.c:5626 1 lock held by syz-executor.1/25093: 1 lock held by syz-executor.0/25097: 1 lock held by syz-executor.0/25103: #0: ffff88807f67cbd8 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x1f6/0x3d10 fs/ext4/inode.c:2677 1 lock held by syz-executor.3/25107: #0: ffffffff8d9db908 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:72 [inline] #0: ffffffff8d9db908 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 net/core/rtnetlink.c:5626 1 lock held by syz-executor.0/25109: 1 lock held by syz-executor.1/25112: 3 locks held by syz-executor.1/25120: 1 lock held by syz-executor.1/25128: 1 lock held by syz-executor.1/25133: 1 lock held by syz-executor.0/25134: 1 lock held by syz-executor.0/25138: 1 lock held by syz-executor.0/25245: 2 locks held by syz-executor.1/25246: 3 locks held by syz-executor.0/25251: 1 lock held by syz-executor.1/25252: 2 locks held by syz-executor.1/25256: 3 locks held by syz-executor.0/25258: 4 locks held by syz-executor.1/25430: 4 locks held by syz-executor.1/25458: 4 locks held by syz-executor.1/25461: 2 locks held by syz-executor.1/25464: 4 locks held by syz-executor.1/25467: 4 locks held by syz-executor.1/25470: 1 lock held by syz-executor.1/25473: ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.151-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1e3/0x2cb lib/dump_stack.c:106 nmi_cpu_backtrace+0x46a/0x4a0 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x181/0x2a0 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:210 [inline] watchdog+0xe72/0xeb0 kernel/hung_task.c:295 kthread+0x3f6/0x4f0 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted 5.15.151-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 Workqueue: phy12 ieee80211_iface_work RIP: 0010:hlock_class kernel/locking/lockdep.c:197 [inline] RIP: 0010:check_wait_context kernel/locking/lockdep.c:4686 [inline] RIP: 0010:__lock_acquire+0x4a3/0x1ff0 kernel/locking/lockdep.c:4962 Code: 0f 85 29 13 00 00 44 89 33 44 89 e3 41 c1 ec 06 4a 8d 3c e5 c0 f0 bc 8f be 08 00 00 00 e8 75 61 67 00 48 0f a3 1d 9d 5e 5a 0e <73> 20 48 8d 04 5b 48 c1 e0 06 48 8d 98 c0 4f 8c 8f 48 ba 00 00 00 RSP: 0018:ffffc90000ce7240 EFLAGS: 00000057 RAX: 0000000000000001 RBX: 00000000000005f8 RCX: ffffffff8162921b RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8fbcf178 RBP: 000000000000000f R08: dffffc0000000000 R09: fffffbfff1f79e30 R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000017 R13: ffff88813fe90ae8 R14: 0000000000000000 R15: ffff88813fe90b88 FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f05f80466c6 CR3: 000000005e5d8000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_acquire+0x1db/0x4f0 kernel/locking/lockdep.c:5623 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:135 [inline] _raw_spin_lock_bh+0x31/0x40 kernel/locking/spinlock.c:178 spin_lock_bh include/linux/spinlock.h:368 [inline] cfg80211_bss_update+0x88/0x21e0 net/wireless/scan.c:1761 cfg80211_inform_single_bss_frame_data net/wireless/scan.c:2492 [inline] cfg80211_inform_bss_frame_data+0xa13/0x20f0 net/wireless/scan.c:2525 ieee80211_bss_info_update+0x7a6/0xc80 net/mac80211/scan.c:190 ieee80211_rx_bss_info net/mac80211/ibss.c:1123 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1614 [inline] ieee80211_ibss_rx_queued_mgmt+0x175e/0x2af0 net/mac80211/ibss.c:1643 ieee80211_iface_process_skb net/mac80211/iface.c:1441 [inline] ieee80211_iface_work+0x78f/0xcc0 net/mac80211/iface.c:1495 process_one_work+0x8a1/0x10c0 kernel/workqueue.c:2310 worker_thread+0xaca/0x1280 kernel/workqueue.c:2457 kthread+0x3f6/0x4f0 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298