INFO: task kworker/u8:6:1122 blocked for more than 143 seconds.
Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:6 state:D stack:19896 pid:1122 tgid:1122 ppid:2 task_flags:0x4208060 flags:0x00004000
Workqueue: ipv6_addrconf addrconf_dad_work
Call Trace:
context_switch kernel/sched/core.c:5378 [inline]
__schedule+0x190e/0x4c90 kernel/sched/core.c:6765
__schedule_loop kernel/sched/core.c:6842 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6857
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
__mutex_lock_common kernel/locking/mutex.c:662 [inline]
__mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
rtnl_net_lock include/linux/rtnetlink.h:129 [inline]
addrconf_dad_work+0x10e/0x16a0 net/ipv6/addrconf.c:4190
process_one_work kernel/workqueue.c:3238 [inline]
process_scheduled_works+0xabe/0x18e0 kernel/workqueue.c:3319
worker_thread+0x870/0xd30 kernel/workqueue.c:3400
kthread+0x7a9/0x920 kernel/kthread.c:464
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
INFO: task syz-executor:7612 blocked for more than 143 seconds.
Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor state:D stack:21008 pid:7612 tgid:7612 ppid:7584 task_flags:0x400140 flags:0x00004002
Call Trace:
context_switch kernel/sched/core.c:5378 [inline]
__schedule+0x190e/0x4c90 kernel/sched/core.c:6765
__schedule_loop kernel/sched/core.c:6842 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6857
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
__mutex_lock_common kernel/locking/mutex.c:662 [inline]
__mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
class_wiphy_constructor include/net/cfg80211.h:6061 [inline]
reg_process_self_managed_hints+0xb9/0x1c0 net/wireless/reg.c:3206
wiphy_register+0x1aaf/0x2650 net/wireless/core.c:1023
ieee80211_register_hw+0x35d9/0x42e0 net/mac80211/main.c:1587
mac80211_hwsim_new_radio+0x2ae8/0x4a40 drivers/net/wireless/virtual/mac80211_hwsim.c:5558
hwsim_new_radio_nl+0xece/0x2290 drivers/net/wireless/virtual/mac80211_hwsim.c:6242
genl_family_rcv_msg_doit net/netlink/genetlink.c:1115 [inline]
genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline]
genl_rcv_msg+0xb1f/0xec0 net/netlink/genetlink.c:1210
netlink_rcv_skb+0x206/0x480 net/netlink/af_netlink.c:2533
genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219
netlink_unicast_kernel net/netlink/af_netlink.c:1312 [inline]
netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1338
netlink_sendmsg+0x8de/0xcb0 net/netlink/af_netlink.c:1882
sock_sendmsg_nosec net/socket.c:718 [inline]
__sock_sendmsg+0x221/0x270 net/socket.c:733
__sys_sendto+0x363/0x4c0 net/socket.c:2187
__do_sys_sendto net/socket.c:2194 [inline]
__se_sys_sendto net/socket.c:2190 [inline]
__x64_sys_sendto+0xde/0x100 net/socket.c:2190
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f54a5f8effc
RSP: 002b:00007f54a62cfe80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f54a6cd4620 RCX: 00007f54a5f8effc
RDX: 0000000000000024 RSI: 00007f54a6cd4670 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00007f54a62cfed4 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
R13: 0000000000000000 R14: 00007f54a6cd4670 R15: 0000000000000000
INFO: task syz-executor:7673 blocked for more than 143 seconds.
Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor state:D stack:20544 pid:7673 tgid:7673 ppid:7656 task_flags:0x400140 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5378 [inline]
__schedule+0x190e/0x4c90 kernel/sched/core.c:6765
__schedule_loop kernel/sched/core.c:6842 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6857
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
__mutex_lock_common kernel/locking/mutex.c:662 [inline]
__mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
nl80211_pre_doit+0x5f/0x8b0 net/wireless/nl80211.c:16664
genl_family_rcv_msg_doit net/netlink/genetlink.c:1110 [inline]
genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline]
genl_rcv_msg+0xab5/0xec0 net/netlink/genetlink.c:1210
netlink_rcv_skb+0x206/0x480 net/netlink/af_netlink.c:2533
genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219
netlink_unicast_kernel net/netlink/af_netlink.c:1312 [inline]
netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1338
netlink_sendmsg+0x8de/0xcb0 net/netlink/af_netlink.c:1882
sock_sendmsg_nosec net/socket.c:718 [inline]
__sock_sendmsg+0x221/0x270 net/socket.c:733
__sys_sendto+0x363/0x4c0 net/socket.c:2187
__do_sys_sendto net/socket.c:2194 [inline]
__se_sys_sendto net/socket.c:2190 [inline]
__x64_sys_sendto+0xde/0x100 net/socket.c:2190
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fda4258effc
RSP: 002b:00007fda428cfdf0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fda432d4620 RCX: 00007fda4258effc
RDX: 0000000000000024 RSI: 00007fda432d4670 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00007fda428cfe44 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
R13: 0000000000000000 R14: 00007fda432d4670 R15: 0000000000000000
Showing all locks held in the system:
3 locks held by kworker/u8:0/11:
3 locks held by kworker/u8:1/12:
2 locks held by kworker/1:0/25:
1 lock held by khungtaskd/30:
#0: ffffffff8eb38fa0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
#0: ffffffff8eb38fa0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#0: ffffffff8eb38fa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6746
3 locks held by kworker/u8:2/35:
3 locks held by kworker/u8:3/51:
3 locks held by kworker/u8:4/75:
3 locks held by kworker/u8:5/967:
3 locks held by kworker/0:2/975:
3 locks held by kworker/u8:6/1122:
#0: ffff88814d239148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline]
#0: ffff88814d239148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 kernel/workqueue.c:3319
#1: ffffc900043afc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline]
#1: ffffc900043afc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 kernel/workqueue.c:3319
#2: ffffffff8fed5388 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:129 [inline]
#2: ffffffff8fed5388 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x10e/0x16a0 net/ipv6/addrconf.c:4190
3 locks held by kworker/u8:7/1140:
3 locks held by kworker/u8:8/1169:
3 locks held by kworker/u8:9/3572:
2 locks held by syslogd/5190:
5 locks held by udevd/5208:
2 locks held by getty/5588:
#0: ffff8880358da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 drivers/tty/n_tty.c:2211
2 locks held by syz-executor/5820:
1 lock held by syz-executor/5852:
2 locks held by kworker/0:4/5883:
3 locks held by kworker/0:6/5889:
#0: ffff88801b081d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline]
#0: ffff88801b081d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 kernel/workqueue.c:3319
#1: ffffc9000446fc60 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline]
#1: ffffc9000446fc60 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 kernel/workqueue.c:3319
#2: ffffffff8fed5388 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x99/0xfb0 net/wireless/reg.c:2480
2 locks held by kworker/0:8/5927:
4 locks held by kworker/u8:11/6853:
3 locks held by kworker/u8:12/6854:
4 locks held by syz-executor/7612:
#0: ffffffff8ff39490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218
#1: ffffffff8ff39348 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline]
#1: ffffffff8ff39348 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline]
#1: ffffffff8ff39348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209
#2: ffffffff8fed5388 (rtnl_mutex){+.+.}-{4:4}, at: wiphy_register+0x1909/0x2650 net/wireless/core.c:1002
#3: ffff888028df0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6061 [inline]
#3: ffff888028df0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0xb9/0x1c0 net/wireless/reg.c:3206
2 locks held by syz-executor/7673:
#0: ffffffff8ff39490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218
#1: ffffffff8fed5388 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x8b0 net/wireless/nl80211.c:16664
6 locks held by syz.9.391/7902:
4 locks held by dhcpcd-run-hook/7908:
2 locks held by syz.8.393/7913:
5 locks held by kworker/u8:13/7915:
3 locks held by kworker/u8:14/7916:
4 locks held by kworker/u8:15/7917:
3 locks held by kworker/u8:17/7920:
2 locks held by syz-executor/7921:
=============================================
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:236 [inline]
watchdog+0x1058/0x10a0 kernel/hung_task.c:399
kthread+0x7a9/0x920 kernel/kthread.c:464
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 7915 Comm: kworker/u8:13 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Workqueue: bat_events batadv_tt_purge
RIP: 0010:kasan_check_range+0x9/0x290 mm/kasan/generic.c:188
Code: e3 ff 90 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 41 57 41 56 <41> 54 53 b0 01 48 85 f6 0f 84 a0 01 00 00 4c 8d 04 37 49 39 f8 0f
RSP: 0018:ffffc90000a17830 EFLAGS: 00000046
RAX: 000000000000000f RBX: 00000000000003e6 RCX: ffffffff819cbd0c
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff945498b8
RBP: 00000000000223e6 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: fffffbfff2079daf R12: ffff888025d0a8d4
R13: 000000000000001e R14: 00000000000003e6 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fb3ed0dd040 CR3: 000000000e938000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
instrument_atomic_read include/linux/instrumented.h:68 [inline]
_test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
hlock_class kernel/locking/lockdep.c:230 [inline]
check_wait_context kernel/locking/lockdep.c:4852 [inline]
__lock_acquire+0x4ac/0x2100 kernel/locking/lockdep.c:5178
lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5851
rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
rcu_read_lock_bh include/linux/rcupdate.h:903 [inline]
__dev_queue_xmit+0x325/0x3f50 net/core/dev.c:4574
dev_queue_xmit include/linux/netdevice.h:3313 [inline]
neigh_hh_output include/net/neighbour.h:523 [inline]
neigh_output include/net/neighbour.h:537 [inline]
ip6_finish_output2+0x127d/0x17c0 net/ipv6/ip6_output.c:141
ip6_finish_output+0x41e/0x840 net/ipv6/ip6_output.c:226
synproxy_send_tcp_ipv6+0x55e/0x770 net/netfilter/nf_synproxy_core.c:851
synproxy_send_client_synack_ipv6+0x827/0xcc0 net/netfilter/nf_synproxy_core.c:897
nft_synproxy_eval_v6 net/netfilter/nft_synproxy.c:90 [inline]
nft_synproxy_do_eval+0x739/0xa60 net/netfilter/nft_synproxy.c:145
expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline]
nft_do_chain+0x4ad/0x1da0 net/netfilter/nf_tables_core.c:288
nft_do_chain_inet+0x418/0x6b0 net/netfilter/nft_chain_filter.c:161
nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]
nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626
nf_hook include/linux/netfilter.h:269 [inline]
NF_HOOK+0x29e/0x450 include/linux/netfilter.h:312
ip6_input+0x169/0x270 net/ipv6/ip6_input.c:491
NF_HOOK+0x3a4/0x450 include/linux/netfilter.h:314
__netif_receive_skb_one_core net/core/dev.c:5893 [inline]
__netif_receive_skb+0x1ea/0x650 net/core/dev.c:6006
process_backlog+0x662/0x15b0 net/core/dev.c:6354
__napi_poll+0xcb/0x490 net/core/dev.c:7188
napi_poll net/core/dev.c:7257 [inline]
net_rx_action+0x89b/0x1240 net/core/dev.c:7379
handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561
do_softirq+0x11b/0x1e0 kernel/softirq.c:462
__local_bh_enable_ip+0x1bb/0x200 kernel/softirq.c:389
spin_unlock_bh include/linux/spinlock.h:396 [inline]
batadv_tt_local_purge+0x2a0/0x340 net/batman-adv/translation-table.c:1315
batadv_tt_purge+0x35/0xa40 net/batman-adv/translation-table.c:3509
process_one_work kernel/workqueue.c:3238 [inline]
process_scheduled_works+0xabe/0x18e0 kernel/workqueue.c:3319
worker_thread+0x870/0xd30 kernel/workqueue.c:3400
kthread+0x7a9/0x920 kernel/kthread.c:464
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244