INFO: task dhcpcd:2965 blocked for more than 431 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:dhcpcd state:D stack:0 pid:2965 tgid:2965 ppid:2964 task_flags:0x400140 flags:0x00000000 Call trace: [<81b3b5f0>] (__schedule) from [<81b3ca88>] (__schedule_loop kernel/sched/core.c:7307 [inline]) [<81b3b5f0>] (__schedule) from [<81b3ca88>] (schedule+0x2c/0x134 kernel/sched/core.c:7322) r10:ebf19a34 r9:ebf19a3c r8:00000002 r7:600a0013 r6:82e34fe8 r5:851dee40 r4:851dee40 [<81b3ca5c>] (schedule) from [<81b3cc14>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7379) r5:851dee40 r4:82e34fe4 [<81b3cbfc>] (schedule_preempt_disabled) from [<81b3fd8c>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b3cbfc>] (schedule_preempt_disabled) from [<81b3fd8c>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b3f880>] (__mutex_lock.constprop.0) from [<81b4039c>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:00000002 r9:00000000 r8:00000000 r7:82be31c4 r6:866a3280 r5:00000000 r4:00000046 [<81b40388>] (__mutex_lock_slowpath) from [<81b403dc>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b403a0>] (mutex_lock) from [<8165fdac>] (rtnl_lock net/core/rtnetlink.c:80 [inline]) [<81b403a0>] (mutex_lock) from [<8165fdac>] (rtnl_dump_ifinfo+0x128/0x6f4 net/core/rtnetlink.c:2554) [<8165fc84>] (rtnl_dump_ifinfo) from [<81654614>] (rtnl_dumpit+0x34/0x8c net/core/rtnetlink.c:6937) r10:00002000 r9:00002000 r8:866a3280 r7:866a32e4 r6:8790bd80 r5:866a3280 r4:8165fc84 [<816545e0>] (rtnl_dumpit) from [<8173e388>] (netlink_dump+0x16c/0x4a8 net/netlink/af_netlink.c:2331) r7:866a32e4 r6:00001f00 r5:866a3000 r4:8790bd80 [<8173e21c>] (netlink_dump) from [<8173e8a8>] (netlink_recvmsg+0x1e4/0x284 net/netlink/af_netlink.c:1982) r10:00002000 r9:00001ef4 r8:837c47c0 r7:ebf19f28 r6:00000000 r5:8790bd80 r4:866a3000 [<8173e6c4>] (netlink_recvmsg) from [<81603ac4>] (sock_recvmsg_nosec net/socket.c:1126 [inline]) [<8173e6c4>] (netlink_recvmsg) from [<81603ac4>] (sock_recvmsg+0x50/0x78 net/socket.c:1148) r10:ebf19dec r9:00000000 r8:7e82b1c8 r7:00000000 r6:837c47c0 r5:ebf19f28 r4:8173e6c4 [<81603a74>] (sock_recvmsg) from [<81603cc0>] (____sys_recvmsg+0x90/0x184 net/socket.c:2904) r7:00000000 r6:837c47c0 r5:7e82b1d4 r4:ebf19f28 [<81603c30>] (____sys_recvmsg) from [<81605444>] (___sys_recvmsg+0x88/0xbc net/socket.c:2946) r10:00000129 r9:851dee40 r8:837c47c0 r7:00000000 r6:7e82b1d4 r5:ebf19f28 r4:00000000 [<816053bc>] (___sys_recvmsg) from [<81607804>] (__sys_recvmsg+0x88/0xdc net/socket.c:2979) r8:86bc0800 r7:00000000 r6:7e82b1d4 r5:86bc0800 r4:0000002d [<8160777c>] (__sys_recvmsg) from [<8160786c>] (__do_sys_recvmsg net/socket.c:2985 [inline]) [<8160777c>] (__sys_recvmsg) from [<8160786c>] (sys_recvmsg+0x14/0x18 net/socket.c:2982) r8:8020029c r7:00000129 r6:76faa140 r5:00000000 r4:00000000 [<81607858>] (sys_recvmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xebf19fa8 to 0xebf19ff0) 9fa0: 00000000 00000000 0000002d 7e82b1d4 00000000 00000000 9fc0: 00000000 00000000 76faa140 00000129 7e82b27c 00000000 02326cc0 7e82b1c8 9fe0: 00000001 7e82b158 00000000 76eae590 INFO: task dhcpcd:2965 is blocked on a mutex likely owned by task kworker/u8:7:17964. task:kworker/u8:7 state:R running task stack:0 pid:17964 tgid:17964 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: netns cleanup_net Call trace: [<81b3b5f0>] (__schedule) from [<81b3cd1c>] (preempt_schedule_common kernel/sched/core.c:7409 [inline]) [<81b3b5f0>] (__schedule) from [<81b3cd1c>] (preempt_schedule+0x4c/0xb4 kernel/sched/core.c:7433) r10:860477e4 r9:85e02638 r8:0000023c r7:8025a804 r6:00000001 r5:84853100 r4:8025a804 [<81b3ccd0>] (preempt_schedule) from [<8025a804>] (__local_bh_enable_ip+0x6c/0xd0 kernel/softirq.c:457) r7:dfcfdc20 r6:00000000 r5:00000001 r4:84853100 [<8025a798>] (__local_bh_enable_ip) from [<81b45e4c>] (__raw_spin_unlock_bh include/linux/spinlock_api_smp.h:196 [inline]) [<8025a798>] (__local_bh_enable_ip) from [<81b45e4c>] (_raw_spin_unlock_bh+0x34/0x38 kernel/locking/spinlock.c:214) r5:00000000 r4:87869400 [<81b45e18>] (_raw_spin_unlock_bh) from [<81915848>] (spin_unlock_bh include/linux/spinlock.h:396 [inline]) [<81b45e18>] (_raw_spin_unlock_bh) from [<81915848>] (addrconf_ifdown+0x150/0x768 net/ipv6/addrconf.c:3936) [<819156f8>] (addrconf_ifdown) from [<8191c010>] (addrconf_notify+0x60/0x8d0 net/ipv6/addrconf.c:3805) r10:00000006 r9:00000000 r8:dfcfdda4 r7:86047000 r6:00000006 r5:87869400 r4:86f79800 [<8191bfb0>] (addrconf_notify) from [<802860c4>] (notifier_call_chain+0x8c/0x218 kernel/notifier.c:85) r10:00000006 r9:00000000 r8:ffffffd1 r7:00000002 r6:82bf545c r5:82bf61d0 r4:8191bfb0 [<80286038>] (notifier_call_chain) from [<80286334>] (raw_notifier_call_chain+0x20/0x28 kernel/notifier.c:453) r10:81644e90 r9:00000000 r8:86f79e68 r7:00000002 r6:86047000 r5:00000006 r4:dfcfdda4 [<80286314>] (raw_notifier_call_chain) from [<816393e8>] (call_netdevice_notifiers_info+0x54/0xa0 net/core/dev.c:2250) [<81639394>] (call_netdevice_notifiers_info) from [<81645d24>] (call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]) [<81639394>] (call_netdevice_notifiers_info) from [<81645d24>] (call_netdevice_notifiers net/core/dev.c:2302 [inline]) [<81639394>] (call_netdevice_notifiers_info) from [<81645d24>] (unregister_netdevice_many_notify+0x5fc/0xb9c net/core/dev.c:12438) r6:00000180 r5:dfcfde08 r4:86f79800 [<81645728>] (unregister_netdevice_many_notify) from [<81647138>] (unregister_netdevice_many net/core/dev.c:12499 [inline]) [<81645728>] (unregister_netdevice_many_notify) from [<81647138>] (default_device_exit_batch+0x304/0x384 net/core/dev.c:13091) r10:86047190 r9:86047000 r8:82e33ec0 r7:dfcfde98 r6:86047190 r5:dfcfdeb8 r4:86047094 [<81646e34>] (default_device_exit_batch) from [<816265e0>] (ops_exit_list net/core/net_namespace.c:205 [inline]) [<81646e34>] (default_device_exit_batch) from [<816265e0>] (ops_undo_list+0x10c/0x238 net/core/net_namespace.c:252) r10:00000001 r9:dfcfde58 r8:82be2a7c r7:82be3090 r6:82be2a7c r5:dfcfde98 r4:dfcfdeb8 [<816264d4>] (ops_undo_list) from [<81628dc4>] (cleanup_net+0x208/0x358 net/core/net_namespace.c:702) r10:8604a000 r9:82be2a60 r8:00000cc0 r7:86047020 r6:dfcfdeb8 r5:ffffffd4 r4:82e33e80 [<81628bbc>] (cleanup_net) from [<80276218>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r10:8302d215 r9:84853100 r8:02000000 r7:83012a00 r6:8302d200 r5:82be2a50 r4:8799fa80 [<80276050>] (process_one_work) from [<80276ec4>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<80276050>] (process_one_work) from [<80276ec4>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:83012a00 r9:8799fab0 r8:84853100 r7:82a03d80 r6:83012a20 r5:83012a00 r4:8799fa80 [<80276d58>] (worker_thread) from [<80281740>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:ea639e88 r8:8799a880 r7:8799fa80 r6:80276d58 r5:84853100 r4:86b38b00 [<80281624>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfcfdfb0 to 0xdfcfdff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281624 r4:86b38b00 INFO: task syz-executor:17953 blocked for more than 431 seconds. Tainted: G L syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:17953 tgid:17953 ppid:1 task_flags:0x40054c flags:0x00000005 Call trace: [<81b3b5f0>] (__schedule) from [<81b3ca88>] (__schedule_loop kernel/sched/core.c:7307 [inline]) [<81b3b5f0>] (__schedule) from [<81b3ca88>] (schedule+0x2c/0x134 kernel/sched/core.c:7322) r10:dfc31d84 r9:dfc31d8c r8:00000002 r7:60000113 r6:82e34fe8 r5:84878000 r4:84878000 [<81b3ca5c>] (schedule) from [<81b3cc14>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7379) r5:84878000 r4:82e34fe4 [<81b3cbfc>] (schedule_preempt_disabled) from [<81b3fd8c>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b3cbfc>] (schedule_preempt_disabled) from [<81b3fd8c>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b3f880>] (__mutex_lock.constprop.0) from [<81b4039c>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:833b6f40 r9:00000000 r8:83fbfb10 r7:84487678 r6:834f2f68 r5:0c0e001b r4:86575800 [<81b40388>] (__mutex_lock_slowpath) from [<81b403dc>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b403a0>] (mutex_lock) from [<816545c4>] (rtnl_lock+0x14/0x1c net/core/rtnetlink.c:80) [<816545b0>] (rtnl_lock) from [<80dcd19c>] (tun_detach drivers/net/tun.c:641 [inline]) [<816545b0>] (rtnl_lock) from [<80dcd19c>] (tun_chr_close+0x14/0xa8 drivers/net/tun.c:3506) [<80dcd188>] (tun_chr_close) from [<805990dc>] (__fput+0xd8/0x2f4 fs/file_table.c:512) r5:0c0e001b r4:8389a280 [<80599004>] (__fput) from [<8059938c>] (____fput+0x14/0x18 fs/file_table.c:540) r9:00000000 r8:84878894 r7:82c7f6ac r6:84878000 r5:84878860 r4:8389a3d8 [<80599378>] (____fput) from [<8027d7f8>] (task_work_run+0x8c/0xb4 kernel/task_work.c:233) [<8027d76c>] (task_work_run) from [<802578c8>] (exit_task_work include/linux/task_work.h:40 [inline]) [<8027d76c>] (task_work_run) from [<802578c8>] (do_exit+0x2ac/0xadc kernel/exit.c:1004) r9:00000000 r8:dfc31e90 r7:84878890 r6:8520694c r5:84878000 r4:85206800 [<8025761c>] (do_exit) from [<802582cc>] (do_group_exit+0x40/0x8c kernel/exit.c:1147) r7:00000122 [<8025828c>] (do_group_exit) from [<80269388>] (get_signal+0xa68/0xa90 kernel/signal.c:3038) r7:00000122 r4:84878000 [<80268920>] (get_signal) from [<8022a630>] (do_signal arch/arm/kernel/signal.c:579 [inline]) [<80268920>] (get_signal) from [<8022a630>] (do_work_pending+0x124/0x4f0 arch/arm/kernel/signal.c:619) r10:00000122 r9:84878000 r8:00000028 r7:00000122 r6:8020029c r5:dfc31fb0 r4:84878000 [<8022a50c>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) Exception stack(0xdfc31fb0 to 0xdfc31ff8) 1fa0: 00000028 00e74218 00000028 00000000 1fc0: 7ebaa50c 0000000c 00000028 00000122 7ebaa734 00000001 00e74218 00000027 1fe0: 00000001 7ebaa4a0 0010b9e4 0010ba74 20000010 00000003 r10:00000122 r9:84878000 r8:8020029c r7:00000122 r6:00000028 r5:0000000c r4:7ebaa50c INFO: task syz-executor:17953 is blocked on a mutex likely owned by task kworker/u8:7:17964. task:kworker/u8:7 state:R running task stack:0 pid:17964 tgid:17964 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: netns cleanup_net Call trace: [] (0xdfcfdbb4) from [] (0xdfcfdbd4) [] (0xe89da7f4) from [] (0xeb6375a4) Backtrace aborted due to bad frame pointer INFO: task kworker/1:1:18225 blocked for more than 431 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:1 state:D stack:0 pid:18225 tgid:18225 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events netdev_rx_mode_work Call trace: [<81b3b5f0>] (__schedule) from [<81b3ca88>] (__schedule_loop kernel/sched/core.c:7307 [inline]) [<81b3b5f0>] (__schedule) from [<81b3ca88>] (schedule+0x2c/0x134 kernel/sched/core.c:7322) r10:dfbd9e54 r9:dfbd9e5c r8:00000002 r7:60000013 r6:82e34fe8 r5:845d24c0 r4:845d24c0 [<81b3ca5c>] (schedule) from [<81b3cc14>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7379) r5:845d24c0 r4:82e34fe4 [<81b3cbfc>] (schedule_preempt_disabled) from [<81b3fd8c>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b3cbfc>] (schedule_preempt_disabled) from [<81b3fd8c>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b3f880>] (__mutex_lock.constprop.0) from [<81b4039c>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:8302ae15 r9:845d24c0 r8:000006cc r7:82e34fd4 r6:82be30e4 r5:82be30ec r4:85f65080 [<81b40388>] (__mutex_lock_slowpath) from [<81b403dc>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b403a0>] (mutex_lock) from [<816545c4>] (rtnl_lock+0x14/0x1c net/core/rtnetlink.c:80) [<816545b0>] (rtnl_lock) from [<8164a1f4>] (netdev_rx_mode_work+0x24/0x134 net/core/dev_addr_lists.c:1346) [<8164a1d0>] (netdev_rx_mode_work) from [<80276218>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r9:845d24c0 r8:01800000 r7:ddde4f00 r6:8302ae00 r5:82be30ec r4:85f65080 [<80276050>] (process_one_work) from [<80276ec4>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<80276050>] (process_one_work) from [<80276ec4>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:85f650b0 r8:845d24c0 r7:82a03d80 r6:ddde4f20 r5:ddde4f00 r4:85f65080 [<80276d58>] (worker_thread) from [<80281740>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfb11e88 r8:87913f80 r7:85f65080 r6:80276d58 r5:845d24c0 r4:86bca180 [<80281624>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfbd9fb0 to 0xdfbd9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281624 r4:86bca180 INFO: task kworker/1:1:18225 is blocked on a mutex likely owned by task kworker/u8:7:17964. task:kworker/u8:7 state:R running task stack:0 pid:17964 tgid:17964 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: netns cleanup_net Call trace: [] (0xdfcfdbb4) from [] (0xdfcfdbd4) [] (0xe89da7f4) from [] (0xeb6375a4) Backtrace aborted due to bad frame pointer INFO: task kworker/u8:14:18230 blocked for more than 431 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:14 state:D stack:0 pid:18230 tgid:18230 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events_unbound linkwatch_event Call trace: [<81b3b5f0>] (__schedule) from [<81b3ca88>] (__schedule_loop kernel/sched/core.c:7307 [inline]) [<81b3b5f0>] (__schedule) from [<81b3ca88>] (schedule+0x2c/0x134 kernel/sched/core.c:7322) r10:dfd61e64 r9:dfd61e6c r8:00000002 r7:60000113 r6:82e34fe8 r5:84868c40 r4:84868c40 [<81b3ca5c>] (schedule) from [<81b3cc14>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7379) r5:84868c40 r4:82e34fe4 [<81b3cbfc>] (schedule_preempt_disabled) from [<81b3fd8c>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b3cbfc>] (schedule_preempt_disabled) from [<81b3fd8c>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b3f880>] (__mutex_lock.constprop.0) from [<81b4039c>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:83029a15 r9:84868c40 r8:02000000 r7:83012a00 r6:83029a00 r5:82be3220 r4:8792cc00 [<81b40388>] (__mutex_lock_slowpath) from [<81b403dc>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b403a0>] (mutex_lock) from [<816545c4>] (rtnl_lock+0x14/0x1c net/core/rtnetlink.c:80) [<816545b0>] (rtnl_lock) from [<81662344>] (linkwatch_event+0x14/0x4c net/core/link_watch.c:313) [<81662330>] (linkwatch_event) from [<80276218>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) [<80276050>] (process_one_work) from [<80276ec4>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<80276050>] (process_one_work) from [<80276ec4>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:8792cc30 r8:84868c40 r7:82a03d80 r6:83012a20 r5:83012a00 r4:8792cc00 [<80276d58>] (worker_thread) from [<80281740>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfcd5e88 r8:87914c00 r7:8792cc00 r6:80276d58 r5:84868c40 r4:864e9240 [<80281624>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfd61fb0 to 0xdfd61ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281624 r4:864e9240 INFO: task kworker/u8:14:18230 is blocked on a mutex likely owned by task kworker/u8:7:17964. task:kworker/u8:7 state:R running task stack:0 pid:17964 tgid:17964 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: netns cleanup_net Call trace: [] (0xdfcfdbb4) from [] (0xdfcfdbd4) [] (0xe89da7f4) from [] (0xeb6375a4) Backtrace aborted due to bad frame pointer INFO: task syz.4.3144:18233 blocked for more than 431 seconds. Tainted: G L syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.3144 state:D stack:0 pid:18233 tgid:18232 ppid:14951 task_flags:0x40054c flags:0x00000004 Call trace: [<81b3b5f0>] (__schedule) from [<81b3ca88>] (__schedule_loop kernel/sched/core.c:7307 [inline]) [<81b3b5f0>] (__schedule) from [<81b3ca88>] (schedule+0x2c/0x134 kernel/sched/core.c:7322) r10:dfd65d84 r9:dfd65d8c r8:00000002 r7:60000113 r6:82e34fe8 r5:851a0000 r4:851a0000 [<81b3ca5c>] (schedule) from [<81b3cc14>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7379) r5:851a0000 r4:82e34fe4 [<81b3cbfc>] (schedule_preempt_disabled) from [<81b3fd8c>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b3cbfc>] (schedule_preempt_disabled) from [<81b3fd8c>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b3f880>] (__mutex_lock.constprop.0) from [<81b4039c>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:831c2a00 r9:00000000 r8:83843510 r7:84487678 r6:834f2f68 r5:0c0e001b r4:86432000 [<81b40388>] (__mutex_lock_slowpath) from [<81b403dc>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b403a0>] (mutex_lock) from [<816545c4>] (rtnl_lock+0x14/0x1c net/core/rtnetlink.c:80) [<816545b0>] (rtnl_lock) from [<80dcd19c>] (tun_detach drivers/net/tun.c:641 [inline]) [<816545b0>] (rtnl_lock) from [<80dcd19c>] (tun_chr_close+0x14/0xa8 drivers/net/tun.c:3506) [<80dcd188>] (tun_chr_close) from [<805990dc>] (__fput+0xd8/0x2f4 fs/file_table.c:512) r5:0c0e001b r4:85454880 [<80599004>] (__fput) from [<8059938c>] (____fput+0x14/0x18 fs/file_table.c:540) r9:00000000 r8:851a0894 r7:82c7f6ac r6:851a0000 r5:851a0860 r4:838990d8 [<80599378>] (____fput) from [<8027d7f8>] (task_work_run+0x8c/0xb4 kernel/task_work.c:233) [<8027d76c>] (task_work_run) from [<802578c8>] (exit_task_work include/linux/task_work.h:40 [inline]) [<8027d76c>] (task_work_run) from [<802578c8>] (do_exit+0x2ac/0xadc kernel/exit.c:1004) r9:00000000 r8:dfd65e90 r7:851a0890 r6:854c214c r5:851a0000 r4:854c2000 [<8025761c>] (do_exit) from [<802582cc>] (do_group_exit+0x40/0x8c kernel/exit.c:1147) r7:00000036 [<8025828c>] (do_group_exit) from [<80269388>] (get_signal+0xa68/0xa90 kernel/signal.c:3038) r7:00000036 r4:851a0000 [<80268920>] (get_signal) from [<8022a630>] (do_signal arch/arm/kernel/signal.c:579 [inline]) [<80268920>] (get_signal) from [<8022a630>] (do_work_pending+0x124/0x4f0 arch/arm/kernel/signal.c:619) r10:00000036 r9:851a0000 r8:00000000 r7:00000036 r6:8020029c r5:dfd65fb0 r4:851a0000 [<8022a50c>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) Exception stack(0xdfd65fb0 to 0xdfd65ff8) 5fa0: 00000000 400454ca 200000c0 00000000 5fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76fb80dc 5fe0: 76fb7e88 76fb7e78 00018ebc 00130820 60000010 00000003 r10:00000036 r9:851a0000 r8:8020029c r7:00000036 r6:00346310 r5:00000000 r4:00000000 INFO: task syz.4.3144:18233 is blocked on a mutex likely owned by task kworker/u8:7:17964. task:kworker/u8:7 state:R running task stack:0 pid:17964 tgid:17964 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: netns cleanup_net Call trace: [] (0xdfcfdbb4) from [] (0xdfcfdbd4) [] (0xe89da7f4) from [] (0xeb6375a4) Backtrace aborted due to bad frame pointer NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 29 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: ARM-Versatile Express Call trace: [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:60000093 r6:60000093 r5:8232a110 r4:00000000 [<80201a74>] (show_stack) from [<8021e494>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201a74>] (show_stack) from [<8021e494>] (dump_stack_lvl+0x5c/0x70 lib/dump_stack.c:120) [<8021e438>] (dump_stack_lvl) from [<8021e4c0>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r7:00000000 r6:00000013 r5:00000001 r4:00000001 [<8021e4a8>] (dump_stack) from [<81b24c88>] (nmi_cpu_backtrace+0x150/0x170 lib/nmi_backtrace.c:113) [<81b24b38>] (nmi_cpu_backtrace) from [<81b24dd8>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000001 r6:82a0b150 r5:82a1c738 r4:ffffffff [<81b24ca8>] (nmi_trigger_cpumask_backtrace) from [<8022f0f4>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851) r9:82a0b2f0 r8:00000005 r7:82a1ce00 r6:82cc5e2c r5:00007f12 r4:00000048 [<8022f0dc>] (arch_trigger_cpumask_backtrace) from [<81b2c924>] (trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]) [<8022f0dc>] (arch_trigger_cpumask_backtrace) from [<81b2c924>] (__sys_info lib/sys_info.c:157 [inline]) [<8022f0dc>] (arch_trigger_cpumask_backtrace) from [<81b2c924>] (sys_info+0x68/0xa8 lib/sys_info.c:165) [<81b2c8bc>] (sys_info) from [<8038f83c>] (check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]) [<81b2c8bc>] (sys_info) from [<8038f83c>] (watchdog+0x3a0/0x848 kernel/hung_task.c:561) r5:00007f12 r4:0000000a [<8038f49c>] (watchdog) from [<80281740>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df819e60 r8:83110f00 r7:00000000 r6:8038f49c r5:83978000 r4:8386c480 [<80281624>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8d5fb0 to 0xdf8d5ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281624 r4:8386c480 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 17964 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: ARM-Versatile Express Workqueue: netns cleanup_net PC is at nft_synproxy_tcp_options net/netfilter/nft_synproxy.c:31 [inline] PC is at nft_synproxy_eval_v4 net/netfilter/nft_synproxy.c:59 [inline] PC is at nft_synproxy_do_eval+0x268/0x37c net/netfilter/nft_synproxy.c:142 LR is at rcu_read_unlock include/linux/rcupdate.h:873 [inline] LR is at net_generic include/net/netns/generic.h:48 [inline] LR is at synproxy_pernet include/net/netfilter/nf_synproxy.h:32 [inline] LR is at nft_synproxy_eval_v4 net/netfilter/nft_synproxy.c:54 [inline] LR is at nft_synproxy_do_eval+0x1c8/0x37c net/netfilter/nft_synproxy.c:142 pc : [<817dfa9c>] lr : [<817df9fc>] psr: 20070013 sp : df801b70 ip : df801b70 fp : df801bcc r10: 81e7cf20 r9 : 869bf0d4 r8 : 86207340 r7 : 8746de98 r6 : df801c4c r5 : 86049000 r4 : 87263d80 r3 : a428a494 r2 : 007e5125 r1 : 5b4fe000 r0 : 20070013 Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 84c4ff00 DAC: fffffffd Call trace: frame pointer underflow [<817df834>] (nft_synproxy_do_eval) from [<817dfbdc>] (nft_synproxy_eval+0x14/0x18 net/netfilter/nft_synproxy.c:248) r9:df801ce8 r8:8746de88 r7:81e7d1c4 r6:81e7cee0 r5:8746dea0 r4:8746de90 [<817dfbc8>] (nft_synproxy_eval) from [<817a6c58>] (expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline]) [<817dfbc8>] (nft_synproxy_eval) from [<817a6c58>] (nft_do_chain+0x130/0x590 net/netfilter/nf_tables_core.c:285) [<817a6b28>] (nft_do_chain) from [<817c1528>] (nft_do_chain_inet+0x5c/0x150 net/netfilter/nft_chain_filter.c:162) r10:81e7740a r9:83307220 r8:df801d54 r7:87263d80 r6:83307200 r5:87073700 r4:00000000 [<817c14cc>] (nft_do_chain_inet) from [<8176c0d0>] (nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]) [<817c14cc>] (nft_do_chain_inet) from [<8176c0d0>] (nf_hook_slow+0x44/0x104 net/netfilter/core.c:619) r5:00000004 r4:00000001 [<8176c08c>] (nf_hook_slow) from [<8180527c>] (nf_hook include/linux/netfilter.h:273 [inline]) [<8176c08c>] (nf_hook_slow) from [<8180527c>] (NF_HOOK include/linux/netfilter.h:316 [inline]) [<8176c08c>] (nf_hook_slow) from [<8180527c>] (ip_local_deliver+0xcc/0x10c net/ipv4/ip_input.c:262) r10:dddd25a0 r9:dddd2488 r8:00000040 r7:00000000 r6:86049000 r5:86823000 r4:87263d80 r3:00000000 [<818051b0>] (ip_local_deliver) from [<818049dc>] (dst_input include/net/dst.h:480 [inline]) [<818051b0>] (ip_local_deliver) from [<818049dc>] (ip_rcv_finish+0x98/0xb0 net/ipv4/ip_input.c:492) r6:86823000 r5:86049000 r4:87263d80 [<81804944>] (ip_rcv_finish) from [<8180530c>] (NF_HOOK include/linux/netfilter.h:318 [inline]) [<81804944>] (ip_rcv_finish) from [<8180530c>] (NF_HOOK include/linux/netfilter.h:312 [inline]) [<81804944>] (ip_rcv_finish) from [<8180530c>] (ip_rcv+0x50/0xec net/ipv4/ip_input.c:612) r7:00000000 r6:86049000 r5:86823000 r4:87263d80 [<818052bc>] (ip_rcv) from [<8163f7e8>] (__netif_receive_skb_one_core+0x60/0x84 net/core/dev.c:6206) r6:00000000 r5:818052bc r4:86823000 [<8163f788>] (__netif_receive_skb_one_core) from [<8163f854>] (__netif_receive_skb+0x18/0x5c net/core/dev.c:6319) r5:00000014 r4:87263d80 [<8163f83c>] (__netif_receive_skb) from [<8163fba0>] (process_backlog+0xa0/0x17c net/core/dev.c:6670) r5:00000014 r4:87263d80 [<8163fb00>] (process_backlog) from [<81640380>] (__napi_poll+0x34/0x268 net/core/dev.c:7729) r10:df801ec8 r9:00000000 r8:0000012c r7:00000040 r6:df801ec3 r5:dddd25a0 r4:00000001 [<8164034c>] (__napi_poll) from [<81640910>] (napi_poll net/core/dev.c:7792 [inline]) [<8164034c>] (__napi_poll) from [<81640910>] (net_rx_action+0x35c/0x3e8 net/core/dev.c:7949) r9:00000000 r8:0000012c r7:dddd25a0 r6:dddd25a4 r5:dddd2480 r4:ffffffff [<816405b4>] (net_rx_action) from [<8025a11c>] (handle_softirqs+0x160/0x4e4 kernel/softirq.c:622) r10:84853100 r9:00000082 r8:00000101 r7:0000000c r6:00000002 r5:00000003 r4:82a0308c [<80259fbc>] (handle_softirqs) from [<802012f0>] (__do_softirq+0x14/0x18 kernel/softirq.c:656) r10:860477e4 r9:85e02654 r8:00000258 r7:dfcfdc20 r6:00000000 r5:00000001 r4:60070013 [<802012dc>] (__do_softirq) from [<8022729c>] (____do_softirq+0x10/0x14 arch/arm/kernel/irq.c:77) [<8022728c>] (____do_softirq) from [<81b04988>] (call_with_stack+0x1c/0x20 arch/arm/lib/call_with_stack.S:40) [<81b0496c>] (call_with_stack) from [<802272d8>] (do_softirq_own_stack+0x38/0x3c arch/arm/kernel/irq.c:82) [<802272a0>] (do_softirq_own_stack) from [<8025a790>] (do_softirq kernel/softirq.c:523 [inline]) [<802272a0>] (do_softirq_own_stack) from [<8025a790>] (do_softirq+0x5c/0x64 kernel/softirq.c:510) [<8025a734>] (do_softirq) from [<8025a864>] (__local_bh_enable_ip+0xcc/0xd0 kernel/softirq.c:450) r5:00000001 r4:84853100 [<8025a798>] (__local_bh_enable_ip) from [<81b45e4c>] (__raw_spin_unlock_bh include/linux/spinlock_api_smp.h:196 [inline]) [<8025a798>] (__local_bh_enable_ip) from [<81b45e4c>] (_raw_spin_unlock_bh+0x34/0x38 kernel/locking/spinlock.c:214) r5:00000000 r4:87869400 [<81b45e18>] (_raw_spin_unlock_bh) from [<81915848>] (spin_unlock_bh include/linux/spinlock.h:396 [inline]) [<81b45e18>] (_raw_spin_unlock_bh) from [<81915848>] (addrconf_ifdown+0x150/0x768 net/ipv6/addrconf.c:3936) [<819156f8>] (addrconf_ifdown) from [<8191c010>] (addrconf_notify+0x60/0x8d0 net/ipv6/addrconf.c:3805) r10:00000006 r9:00000000 r8:dfcfdda4 r7:86047000 r6:00000006 r5:87869400 r4:86f79800 [<8191bfb0>] (addrconf_notify) from [<802860c4>] (notifier_call_chain+0x8c/0x218 kernel/notifier.c:85) r10:00000006 r9:00000000 r8:ffffffd1 r7:00000002 r6:82bf545c r5:82bf61d0 r4:8191bfb0 [<80286038>] (notifier_call_chain) from [<80286334>] (raw_notifier_call_chain+0x20/0x28 kernel/notifier.c:453) r10:81644e90 r9:00000000 r8:86f79e68 r7:00000002 r6:86047000 r5:00000006 r4:dfcfdda4 [<80286314>] (raw_notifier_call_chain) from [<816393e8>] (call_netdevice_notifiers_info+0x54/0xa0 net/core/dev.c:2250) [<81639394>] (call_netdevice_notifiers_info) from [<81645d24>] (call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]) [<81639394>] (call_netdevice_notifiers_info) from [<81645d24>] (call_netdevice_notifiers net/core/dev.c:2302 [inline]) [<81639394>] (call_netdevice_notifiers_info) from [<81645d24>] (unregister_netdevice_many_notify+0x5fc/0xb9c net/core/dev.c:12438) r6:00000180 r5:dfcfde08 r4:86f79800 [<81645728>] (unregister_netdevice_many_notify) from [<81647138>] (unregister_netdevice_many net/core/dev.c:12499 [inline]) [<81645728>] (unregister_netdevice_many_notify) from [<81647138>] (default_device_exit_batch+0x304/0x384 net/core/dev.c:13091) r10:86047190 r9:86047000 r8:82e33ec0 r7:dfcfde98 r6:86047190 r5:dfcfdeb8 r4:86047094 [<81646e34>] (default_device_exit_batch) from [<816265e0>] (ops_exit_list net/core/net_namespace.c:205 [inline]) [<81646e34>] (default_device_exit_batch) from [<816265e0>] (ops_undo_list+0x10c/0x238 net/core/net_namespace.c:252) r10:00000001 r9:dfcfde58 r8:82be2a7c r7:82be3090 r6:82be2a7c r5:dfcfde98 r4:dfcfdeb8 [<816264d4>] (ops_undo_list) from [<81628dc4>] (cleanup_net+0x208/0x358 net/core/net_namespace.c:702) r10:8604a000 r9:82be2a60 r8:00000cc0 r7:86047020 r6:dfcfdeb8 r5:ffffffd4 r4:82e33e80 [<81628bbc>] (cleanup_net) from [<80276218>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r10:8302d215 r9:84853100 r8:02000000 r7:83012a00 r6:8302d200 r5:82be2a50 r4:8799fa80 [<80276050>] (process_one_work) from [<80276ec4>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<80276050>] (process_one_work) from [<80276ec4>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:83012a00 r9:8799fab0 r8:84853100 r7:82a03d80 r6:83012a20 r5:83012a00 r4:8799fa80 [<80276d58>] (worker_thread) from [<80281740>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:ea639e88 r8:8799a880 r7:8799fa80 r6:80276d58 r5:84853100 r4:86b38b00 [<80281624>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfcfdfb0 to 0xdfcfdff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281624 r4:86b38b00