1 lock held by dhcpcd/8145: #0: ffff8880665ce258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff8880665ce258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 ============================================= rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8131/1:b..l rcu: (detected by 0, t=10502 jiffies, g=29781, q=759 ncpus=2) task:syz-executor.1 state:R running task stack:22488 pid:8131 tgid:8125 ppid:7893 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6851 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:rcu_read_unlock include/linux/rcupdate.h:867 [inline] RIP: 0010:count_memcg_event_mm+0x334/0x420 include/linux/memcontrol.h:1079 Code: 72 d9 b2 ff 4c 8b 6c 24 18 eb 1f e8 66 d9 b2 ff e8 e1 3a aa 09 4d 85 f6 74 84 e8 57 d9 b2 ff fb 49 be 00 00 00 00 00 fc ff df 77 41 aa 09 89 c3 31 ff 89 c6 e8 7c dd b2 ff 85 db 74 10 e8 a3 RSP: 0000:ffffc90002d66b20 EFLAGS: 00000246 RAX: ffffffff81e06e99 RBX: 0000000000000000 RCX: 0000000000040000 RDX: ffffc90009e14000 RSI: 000000000003ffff RDI: 0000000000040000 RBP: ffffc90002d66bf0 R08: ffffffff81e06e09 R09: 1ffffffff25f96ee R10: dffffc0000000000 R11: fffffbfff25f96ef R12: 0000000000000046 R13: ffffffff81e06c04 R14: dffffc0000000000 R15: 1ffff920005acd68 mm_account_fault mm/memory.c:5679 [inline] handle_mm_fault+0x16c4/0x1ba0 mm/memory.c:5826 faultin_page mm/gup.c:1339 [inline] __get_user_pages+0x6ef/0x1590 mm/gup.c:1638 __get_user_pages_locked mm/gup.c:1906 [inline] __gup_longterm_locked+0xed7/0x17d0 mm/gup.c:2635 gup_fast_fallback+0x2732/0x2b40 mm/gup.c:3552 pin_user_pages_fast+0xcc/0x160 mm/gup.c:3658 iov_iter_extract_user_pages lib/iov_iter.c:1583 [inline] iov_iter_extract_pages+0x3db/0x720 lib/iov_iter.c:1646 extract_user_to_sg lib/scatterlist.c:1125 [inline] extract_iter_to_sg+0x890/0x22b0 lib/scatterlist.c:1351 hash_sendmsg+0x513/0x1110 crypto/algif_hash.c:119 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 ____sys_sendmsg+0x525/0x7d0 net/socket.c:2585 ___sys_sendmsg net/socket.c:2639 [inline] __sys_sendmmsg+0x3b2/0x740 net/socket.c:2725 __do_sys_sendmmsg net/socket.c:2754 [inline] __se_sys_sendmmsg net/socket.c:2751 [inline] __x64_sys_sendmmsg+0xa0/0xb0 net/socket.c:2751 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f007a47cea9 RSP: 002b:00007f007b13a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 00007f007a5b4050 RCX: 00007f007a47cea9 RDX: 0000000004924bd8 RSI: 0000000020004fc0 RDI: 000000000000000a RBP: 00007f007a4ebff4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f007a5b4050 R15: 00007ffda7003768 rcu: rcu_preempt kthread starved for 1809 jiffies! g29781 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:24912 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2029 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2231 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 skipped: idling at native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline] NMI backtrace for cpu 1 skipped: idling at arch_safe_halt arch/x86/include/asm/irqflags.h:86 [inline] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 drivers/acpi/processor_idle.c:112 DEBUG: waiting rtnl_mutex for 10583 jiffies. task:kworker/u8:1 state:D stack:21552 pid:12 tgid:12 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 process_one_work kernel/workqueue.c:3248 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3329 worker_thread+0x86d/0xd50 kernel/workqueue.c:3409 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 DEBUG: holding rtnl_mutex for 10584 jiffies. task:syz-executor.1 state:R running task stack:20656 pid:8133 tgid:8125 ppid:7893 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6851 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__slab_alloc_node mm/slub.c:3823 [inline] RIP: 0010:slab_alloc_node mm/slub.c:4007 [inline] RIP: 0010:kmem_cache_alloc_node_noprof+0x9f/0x320 mm/slub.c:4062 Code: ed 44 8b 4c 24 04 0f 84 2b 01 00 00 85 c0 0f 85 23 01 00 00 cc c2 01 00 00 65 48 8b 05 8a 55 14 7e 49 8b 4d 00 48 8b 54 08 08 <48> 8b 2c 08 48 85 ed 0f 84 3e 01 00 00 48 8b 7c 08 10 48 85 ff 0f RSP: 0018:ffffc90002e86770 EFLAGS: 00000202 RAX: ffff8880b9400000 RBX: 0000000000000000 RCX: 0000000000046900 RDX: 0000000000073898 RSI: 0000000000000280 RDI: ffffffff8e447e20 RBP: 0000000000000080 R08: ffffffff8953b280 R09: 0000000000082820 R10: ffff88806810b500 R11: fffffbfff25f96ea R12: ffffffff8953b2c8 R13: ffff8880196daa00 R14: 00000000ffffffff R15: 0000000000000280 kmalloc_reserve+0xa8/0x2a0 net/core/skbuff.c:575 __alloc_skb+0x1f3/0x440 net/core/skbuff.c:666 alloc_skb include/linux/skbuff.h:1314 [inline] nlmsg_new include/net/netlink.h:1015 [inline] inet6_ifa_notify net/ipv6/addrconf.c:5605 [inline] __ipv6_ifa_notify+0x2e9/0x11f0 net/ipv6/addrconf.c:6254 addrconf_ifdown+0xeea/0x1bc0 net/ipv6/addrconf.c:3979 addrconf_notify+0x3cb/0x1020 notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93 call_netdevice_notifiers_extack net/core/dev.c:2030 [inline] call_netdevice_notifiers net/core/dev.c:2044 [inline] dev_close_many+0x33c/0x4c0 net/core/dev.c:1585 unregister_netdevice_many_notify+0x544/0x16b0 net/core/dev.c:11194 rtnl_newlink_create net/core/rtnetlink.c:3627 [inline] __rtnl_newlink net/core/rtnetlink.c:3816 [inline] rtnl_newlink+0x1f84/0x22b0 net/core/rtnetlink.c:3829 rtnetlink_rcv_msg+0x892/0x1170 net/core/rtnetlink.c:6727 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7ea/0x980 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8db/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 ____sys_sendmsg+0x525/0x7d0 net/socket.c:2585 ___sys_sendmsg net/socket.c:2639 [inline] __sys_sendmsg+0x2b0/0x3a0 net/socket.c:2668 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f007a47cea9 RSP: 002b:00007f007b1190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f007a5b4120 RCX: 00007f007a47cea9 RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006 RBP: 00007f007a4ebff4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f007a5b4120 R15: 00007ffda7003768 DEBUG: waiting rtnl_mutex for 2312 jiffies. task:kworker/0:5 state:D stack:21488 pid:5164 tgid:5164 ppid:2 flags:0x00004000 Workqueue: events_power_efficient reg_check_chans_work Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 reg_check_chans_work+0x91/0xea0 net/wireless/reg.c:2478 process_one_work kernel/workqueue.c:3248 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3329 worker_thread+0x86d/0xd50 kernel/workqueue.c:3409 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Showing all locks held in the system: 3 locks held by kworker/u8:1/12: #0: ffff88802a094148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3223 [inline] #0: ffff88802a094148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc90000117d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline] #1: ffffc90000117d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 5 locks held by kworker/u8:5/752: 2 locks held by getty/4842: #0: ffff88802acb30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 3 locks held by kworker/u9:5/5121: 3 locks held by kworker/0:5/5164: #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3223 [inline] #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc9000416fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline] #1: ffffc9000416fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x91/0xea0 net/wireless/reg.c:2478 2 locks held by kworker/1:8/5192: 10 locks held by kworker/0:9/5258: #0: ffff88801d2c9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3223 [inline] #0: ffff88801d2c9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc900046cfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline] #1: ffffc900046cfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffff888023cf3190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #2: ffff888023cf3190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5849 #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1003 #4: ffff88805f301160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #4: ffff88805f301160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1003 #5: ffffffff8e210d80 (console_lock){+.+.}-{0:0}, at: console_trylock_spinning kernel/printk/printk.c:2018 [inline] #5: ffffffff8e210d80 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0x4ed/0x900 kernel/printk/printk.c:2419 #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:331 [inline] #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:232 [inline] #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:287 [inline] #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 kernel/printk/printk.c:3033 #7: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 kernel/time/timer.c:1789 #8: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline] #8: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #8: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 net/core/rtnetlink.c:95 #9: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline] #9: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #9: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6689 4 locks held by udevd/6727: #0: ffff8880556ddc30 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 fs/seq_file.c:182 #1: ffff88802d59ac88 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154 #2: ffff88805e146968 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155 #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2743 1 lock held by syz-executor.1/7893: 1 lock held by syz-executor.2/8119: 3 locks held by syz-executor.1/8131: 1 lock held by syz-executor.1/8133: 2 locks held by dhcpcd/8140: #0: ffff88807e016258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff88807e016258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline] #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:959 2 locks held by dhcpcd/8141: #0: ffff88801eece258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff88801eece258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:329 [inline] #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 kernel/rcu/tree_exp.h:959 1 lock held by dhcpcd/8142: #0: ffff888020996258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff888020996258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 1 lock held by dhcpcd/8143: #0: ffff8880665d4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff8880665d4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 1 lock held by dhcpcd/8144: #0: ffff8880665ca258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff8880665ca258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 1 lock held by dhcpcd/8145: #0: ffff8880665ce258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff8880665ce258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 ============================================= DEBUG: waiting rtnl_mutex for 10687 jiffies. task:kworker/u8:1 state:D stack:21552 pid:12 tgid:12 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 process_one_work kernel/workqueue.c:3248 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3329 worker_thread+0x86d/0xd50 kernel/workqueue.c:3409 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 DEBUG: holding rtnl_mutex for 10688 jiffies. task:syz-executor.1 state:R running task stack:20656 pid:8133 tgid:8125 ppid:7893 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6851 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__slab_alloc_node mm/slub.c:3823 [inline] RIP: 0010:slab_alloc_node mm/slub.c:4007 [inline] RIP: 0010:kmem_cache_alloc_node_noprof+0x9f/0x320 mm/slub.c:4062 Code: ed 44 8b 4c 24 04 0f 84 2b 01 00 00 85 c0 0f 85 23 01 00 00 cc c2 01 00 00 65 48 8b 05 8a 55 14 7e 49 8b 4d 00 48 8b 54 08 08 <48> 8b 2c 08 48 85 ed 0f 84 3e 01 00 00 48 8b 7c 08 10 48 85 ff 0f RSP: 0018:ffffc90002e86770 EFLAGS: 00000202 RAX: ffff8880b9400000 RBX: 0000000000000000 RCX: 0000000000046900 RDX: 0000000000073898 RSI: 0000000000000280 RDI: ffffffff8e447e20 RBP: 0000000000000080 R08: ffffffff8953b280 R09: 0000000000082820 R10: ffff88806810b500 R11: fffffbfff25f96ea R12: ffffffff8953b2c8 R13: ffff8880196daa00 R14: 00000000ffffffff R15: 0000000000000280 kmalloc_reserve+0xa8/0x2a0 net/core/skbuff.c:575 __alloc_skb+0x1f3/0x440 net/core/skbuff.c:666 alloc_skb include/linux/skbuff.h:1314 [inline] nlmsg_new include/net/netlink.h:1015 [inline] inet6_ifa_notify net/ipv6/addrconf.c:5605 [inline] __ipv6_ifa_notify+0x2e9/0x11f0 net/ipv6/addrconf.c:6254 addrconf_ifdown+0xeea/0x1bc0 net/ipv6/addrconf.c:3979 addrconf_notify+0x3cb/0x1020 notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93 call_netdevice_notifiers_extack net/core/dev.c:2030 [inline] call_netdevice_notifiers net/core/dev.c:2044 [inline] dev_close_many+0x33c/0x4c0 net/core/dev.c:1585 unregister_netdevice_many_notify+0x544/0x16b0 net/core/dev.c:11194 rtnl_newlink_create net/core/rtnetlink.c:3627 [inline] __rtnl_newlink net/core/rtnetlink.c:3816 [inline] rtnl_newlink+0x1f84/0x22b0 net/core/rtnetlink.c:3829 rtnetlink_rcv_msg+0x892/0x1170 net/core/rtnetlink.c:6727 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7ea/0x980 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8db/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 ____sys_sendmsg+0x525/0x7d0 net/socket.c:2585 ___sys_sendmsg net/socket.c:2639 [inline] __sys_sendmsg+0x2b0/0x3a0 net/socket.c:2668 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f007a47cea9 RSP: 002b:00007f007b1190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f007a5b4120 RCX: 00007f007a47cea9 RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006 RBP: 00007f007a4ebff4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f007a5b4120 R15: 00007ffda7003768 DEBUG: waiting rtnl_mutex for 2416 jiffies. task:kworker/0:5 state:D stack:21488 pid:5164 tgid:5164 ppid:2 flags:0x00004000 Workqueue: events_power_efficient reg_check_chans_work Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 reg_check_chans_work+0x91/0xea0 net/wireless/reg.c:2478 process_one_work kernel/workqueue.c:3248 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3329 worker_thread+0x86d/0xd50 kernel/workqueue.c:3409 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Showing all locks held in the system: 3 locks held by kworker/u8:1/12: #0: ffff88802a094148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3223 [inline] #0: ffff88802a094148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc90000117d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline] #1: ffffc90000117d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 5 locks held by kworker/u8:5/752: 2 locks held by getty/4842: #0: ffff88802acb30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 3 locks held by kworker/u9:5/5121: 3 locks held by kworker/0:5/5164: #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3223 [inline] #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc9000416fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline] #1: ffffc9000416fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x91/0xea0 net/wireless/reg.c:2478 2 locks held by kworker/1:8/5192: 10 locks held by kworker/0:9/5258: #0: ffff88801d2c9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3223 [inline] #0: ffff88801d2c9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc900046cfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline] #1: ffffc900046cfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffff888023cf3190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #2: ffff888023cf3190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5849 #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1003 #4: ffff88805f301160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #4: ffff88805f301160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1003 #5: ffffffff8e210d80 (console_lock){+.+.}-{0:0}, at: console_trylock_spinning kernel/printk/printk.c:2018 [inline] #5: ffffffff8e210d80 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0x4ed/0x900 kernel/printk/printk.c:2419 #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:331 [inline] #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:232 [inline] #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:287 [inline] #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 kernel/printk/printk.c:3033 #7: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 kernel/time/timer.c:1789 #8: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline] #8: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #8: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 net/core/rtnetlink.c:95 #9: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline] #9: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #9: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6689 4 locks held by udevd/6727: #0: ffff8880556ddc30 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 fs/seq_file.c:182 #1: ffff88802d59ac88 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154 #2: ffff88805e146968 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155 #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2743 1 lock held by syz-executor.1/7893: 1 lock held by syz-executor.2/8119: 3 locks held by syz-executor.1/8131: 1 lock held by syz-executor.1/8133: 2 locks held by dhcpcd/8140: #0: ffff88807e016258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff88807e016258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline] #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:959 2 locks held by dhcpcd/8141: #0: ffff88801eece258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff88801eece258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:329 [inline] #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 kernel/rcu/tree_exp.h:959 1 lock held by dhcpcd/8142: #0: ffff888020996258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff888020996258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 1 lock held by dhcpcd/8143: #0: ffff8880665d4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff8880665d4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 1 lock held by dhcpcd/8144: #0: ffff8880665ca258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff8880665ca258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 1 lock held by dhcpcd/8145: #0: ffff8880665ce258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff8880665ce258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 ============================================= DEBUG: waiting rtnl_mutex for 10791 jiffies. task:kworker/u8:1 state:D stack:21552 pid:12 tgid:12 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 process_one_work kernel/workqueue.c:3248 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3329 worker_thread+0x86d/0xd50 kernel/workqueue.c:3409 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 DEBUG: holding rtnl_mutex for 10792 jiffies. task:syz-executor.1 state:R running task stack:20656 pid:8133 tgid:8125 ppid:7893 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6851 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__slab_alloc_node mm/slub.c:3823 [inline] RIP: 0010:slab_alloc_node mm/slub.c:4007 [inline] RIP: 0010:kmem_cache_alloc_node_noprof+0x9f/0x320 mm/slub.c:4062 Code: ed 44 8b 4c 24 04 0f 84 2b 01 00 00 85 c0 0f 85 23 01 00 00 cc c2 01 00 00 65 48 8b 05 8a 55 14 7e 49 8b 4d 00 48 8b 54 08 08 <48> 8b 2c 08 48 85 ed 0f 84 3e 01 00 00 48 8b 7c 08 10 48 85 ff 0f RSP: 0018:ffffc90002e86770 EFLAGS: 00000202 RAX: ffff8880b9400000 RBX: 0000000000000000 RCX: 0000000000046900 RDX: 0000000000073898 RSI: 0000000000000280 RDI: ffffffff8e447e20 RBP: 0000000000000080 R08: ffffffff8953b280 R09: 0000000000082820 R10: ffff88806810b500 R11: fffffbfff25f96ea R12: ffffffff8953b2c8 R13: ffff8880196daa00 R14: 00000000ffffffff R15: 0000000000000280 kmalloc_reserve+0xa8/0x2a0 net/core/skbuff.c:575 __alloc_skb+0x1f3/0x440 net/core/skbuff.c:666 alloc_skb include/linux/skbuff.h:1314 [inline] nlmsg_new include/net/netlink.h:1015 [inline] inet6_ifa_notify net/ipv6/addrconf.c:5605 [inline] __ipv6_ifa_notify+0x2e9/0x11f0 net/ipv6/addrconf.c:6254 addrconf_ifdown+0xeea/0x1bc0 net/ipv6/addrconf.c:3979 addrconf_notify+0x3cb/0x1020 notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93 call_netdevice_notifiers_extack net/core/dev.c:2030 [inline] call_netdevice_notifiers net/core/dev.c:2044 [inline] dev_close_many+0x33c/0x4c0 net/core/dev.c:1585 unregister_netdevice_many_notify+0x544/0x16b0 net/core/dev.c:11194 rtnl_newlink_create net/core/rtnetlink.c:3627 [inline] __rtnl_newlink net/core/rtnetlink.c:3816 [inline] rtnl_newlink+0x1f84/0x22b0 net/core/rtnetlink.c:3829 rtnetlink_rcv_msg+0x892/0x1170 net/core/rtnetlink.c:6727 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7ea/0x980 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8db/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 ____sys_sendmsg+0x525/0x7d0 net/socket.c:2585 ___sys_sendmsg net/socket.c:2639 [inline] __sys_sendmsg+0x2b0/0x3a0 net/socket.c:2668 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f007a47cea9 RSP: 002b:00007f007b1190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f007a5b4120 RCX: 00007f007a47cea9 RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006 RBP: 00007f007a4ebff4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f007a5b4120 R15: 00007ffda7003768 DEBUG: waiting rtnl_mutex for 2520 jiffies. task:kworker/0:5 state:D stack:21488 pid:5164 tgid:5164 ppid:2 flags:0x00004000 Workqueue: events_power_efficient reg_check_chans_work Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 reg_check_chans_work+0x91/0xea0 net/wireless/reg.c:2478 process_one_work kernel/workqueue.c:3248 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3329 worker_thread+0x86d/0xd50 kernel/workqueue.c:3409 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Showing all locks held in the system: 3 locks held by kworker/u8:1/12: #0: ffff88802a094148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3223 [inline] #0: ffff88802a094148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc90000117d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline] #1: ffffc90000117d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 5 locks held by kworker/u8:5/752: 2 locks held by getty/4842: #0: ffff88802acb30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 3 locks held by kworker/u9:5/5121: 3 locks held by kworker/0:5/5164: #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3223 [inline] #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc9000416fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline] #1: ffffc9000416fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x91/0xea0 net/wireless/reg.c:2478 2 locks held by kworker/1:8/5192: 10 locks held by kworker/0:9/5258: #0: ffff88801d2c9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3223 [inline] #0: ffff88801d2c9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc900046cfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline] #1: ffffc900046cfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffff888023cf3190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #2: ffff888023cf3190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5849 #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1003 #4: ffff88805f301160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #4: ffff88805f301160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1003 #5: ffffffff8e210d80 (console_lock){+.+.}-{0:0}, at: console_trylock_spinning kernel/printk/printk.c:2018 [inline] #5: ffffffff8e210d80 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0x4ed/0x900 kernel/printk/printk.c:2419 #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:331 [inline] #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:232 [inline] #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:287 [inline] #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 kernel/printk/printk.c:3033 #7: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 kernel/time/timer.c:1789 #8: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline] #8: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #8: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 net/core/rtnetlink.c:95 #9: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline] #9: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #9: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6689 4 locks held by udevd/6727: #0: ffff8880556ddc30 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 fs/seq_file.c:182 #1: ffff88802d59ac88 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154 #2: ffff88805e146968 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155 #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2743 1 lock held by syz-executor.1/7893: 1 lock held by syz-executor.2/8119: 3 locks held by syz-executor.1/8131: 1 lock held by syz-executor.1/8133: 2 locks held by dhcpcd/8140: #0: ffff88807e016258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff88807e016258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline] #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:959 2 locks held by dhcpcd/8141: #0: ffff88801eece258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff88801eece258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:329 [inline] #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 kernel/rcu/tree_exp.h:959 1 lock held by dhcpcd/8142: #0: ffff888020996258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff888020996258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 1 lock held by dhcpcd/8143: #0: ffff8880665d4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff8880665d4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 1 lock held by dhcpcd/8144: #0: ffff8880665ca258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff8880665ca258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 1 lock held by dhcpcd/8145: #0: ffff8880665ce258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff8880665ce258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 ============================================= DEBUG: waiting rtnl_mutex for 10895 jiffies. task:kworker/u8:1 state:D stack:21552 pid:12 tgid:12 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 process_one_work kernel/workqueue.c:3248 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3329 worker_thread+0x86d/0xd50 kernel/workqueue.c:3409 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 DEBUG: holding rtnl_mutex for 10896 jiffies. task:syz-executor.1 state:R running task stack:20656 pid:8133 tgid:8125 ppid:7893 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6851 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__slab_alloc_node mm/slub.c:3823 [inline] RIP: 0010:slab_alloc_node mm/slub.c:4007 [inline] RIP: 0010:kmem_cache_alloc_node_noprof+0x9f/0x320 mm/slub.c:4062 Code: ed 44 8b 4c 24 04 0f 84 2b 01 00 00 85 c0 0f 85 23 01 00 00 cc c2 01 00 00 65 48 8b 05 8a 55 14 7e 49 8b 4d 00 48 8b 54 08 08 <48> 8b 2c 08 48 85 ed 0f 84 3e 01 00 00 48 8b 7c 08 10 48 85 ff 0f RSP: 0018:ffffc90002e86770 EFLAGS: 00000202 RAX: ffff8880b9400000 RBX: 0000000000000000 RCX: 0000000000046900 RDX: 0000000000073898 RSI: 0000000000000280 RDI: ffffffff8e447e20 RBP: 0000000000000080 R08: ffffffff8953b280 R09: 0000000000082820 R10: ffff88806810b500 R11: fffffbfff25f96ea R12: ffffffff8953b2c8 R13: ffff8880196daa00 R14: 00000000ffffffff R15: 0000000000000280 kmalloc_reserve+0xa8/0x2a0 net/core/skbuff.c:575 __alloc_skb+0x1f3/0x440 net/core/skbuff.c:666 alloc_skb include/linux/skbuff.h:1314 [inline] nlmsg_new include/net/netlink.h:1015 [inline] inet6_ifa_notify net/ipv6/addrconf.c:5605 [inline] __ipv6_ifa_notify+0x2e9/0x11f0 net/ipv6/addrconf.c:6254 addrconf_ifdown+0xeea/0x1bc0 net/ipv6/addrconf.c:3979 addrconf_notify+0x3cb/0x1020 notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93 call_netdevice_notifiers_extack net/core/dev.c:2030 [inline] call_netdevice_notifiers net/core/dev.c:2044 [inline] dev_close_many+0x33c/0x4c0 net/core/dev.c:1585 unregister_netdevice_many_notify+0x544/0x16b0 net/core/dev.c:11194 rtnl_newlink_create net/core/rtnetlink.c:3627 [inline] __rtnl_newlink net/core/rtnetlink.c:3816 [inline] rtnl_newlink+0x1f84/0x22b0 net/core/rtnetlink.c:3829 rtnetlink_rcv_msg+0x892/0x1170 net/core/rtnetlink.c:6727 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7ea/0x980 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8db/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 ____sys_sendmsg+0x525/0x7d0 net/socket.c:2585 ___sys_sendmsg net/socket.c:2639 [inline] __sys_sendmsg+0x2b0/0x3a0 net/socket.c:2668 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f007a47cea9 RSP: 002b:00007f007b1190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f007a5b4120 RCX: 00007f007a47cea9 RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006 RBP: 00007f007a4ebff4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f007a5b4120 R15: 00007ffda7003768 DEBUG: waiting rtnl_mutex for 2624 jiffies. task:kworker/0:5 state:D stack:21488 pid:5164 tgid:5164 ppid:2 flags:0x00004000 Workqueue: events_power_efficient reg_check_chans_work Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 reg_check_chans_work+0x91/0xea0 net/wireless/reg.c:2478 process_one_work kernel/workqueue.c:3248 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3329 worker_thread+0x86d/0xd50 kernel/workqueue.c:3409 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Showing all locks held in the system: 3 locks held by kworker/u8:1/12: #0: ffff88802a094148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3223 [inline] #0: ffff88802a094148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc90000117d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline] #1: ffffc90000117d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 5 locks held by kworker/u8:5/752: 2 locks held by getty/4842: #0: ffff88802acb30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 3 locks held by kworker/u9:5/5121: 3 locks held by kworker/0:5/5164: #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3223 [inline] #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc9000416fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline] #1: ffffc9000416fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x91/0xea0 net/wireless/reg.c:2478 2 locks held by kworker/1:8/5192: 10 locks held by kworker/0:9/5258: #0: ffff88801d2c9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3223 [inline] #0: ffff88801d2c9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc900046cfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline] #1: ffffc900046cfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffff888023cf3190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #2: ffff888023cf3190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5849 #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1003 #4: ffff88805f301160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #4: ffff88805f301160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1003 #5: ffffffff8e210d80 (console_lock){+.+.}-{0:0}, at: console_trylock_spinning kernel/printk/printk.c:2018 [inline] #5: ffffffff8e210d80 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0x4ed/0x900 kernel/printk/printk.c:2419 #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:331 [inline] #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:232 [inline] #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:287 [inline] #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 kernel/printk/printk.c:3033 #7: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 kernel/time/timer.c:1789 #8: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline] #8: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #8: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 net/core/rtnetlink.c:95 #9: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline] #9: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #9: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6689 4 locks held by udevd/6727: #0: ffff8880556ddc30 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 fs/seq_file.c:182 #1: ffff88802d59ac88 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154 #2: ffff88805e146968 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155 #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2743 1 lock held by syz-executor.1/7893: 1 lock held by syz-executor.2/8119: 3 locks held by syz-executor.1/8131: 1 lock held by syz-executor.1/8133: 2 locks held by dhcpcd/8140: #0: ffff88807e016258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff88807e016258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline] #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:959 2 locks held by dhcpcd/8141: #0: ffff88801eece258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff88801eece258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:329 [inline] #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 kernel/rcu/tree_exp.h:959 1 lock held by dhcpcd/8142: #0: ffff888020996258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff888020996258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 1 lock held by dhcpcd/8143: #0: ffff8880665d4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff8880665d4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 1 lock held by dhcpcd/8144: #0: ffff8880665ca258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff8880665ca258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 1 lock held by dhcpcd/8145: #0: ffff8880665ce258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff8880665ce258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 ============================================= DEBUG: waiting rtnl_mutex for 10999 jiffies. task:kworker/u8:1 state:D stack:21552 pid:12 tgid:12 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 process_one_work kernel/workqueue.c:3248 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3329 worker_thread+0x86d/0xd50 kernel/workqueue.c:3409 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 DEBUG: holding rtnl_mutex for 11000 jiffies. task:syz-executor.1 state:R running task stack:20656 pid:8133 tgid:8125 ppid:7893 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6851 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__slab_alloc_node mm/slub.c:3823 [inline] RIP: 0010:slab_alloc_node mm/slub.c:4007 [inline] RIP: 0010:kmem_cache_alloc_node_noprof+0x9f/0x320 mm/slub.c:4062 Code: ed 44 8b 4c 24 04 0f 84 2b 01 00 00 85 c0 0f 85 23 01 00 00 cc c2 01 00 00 65 48 8b 05 8a 55 14 7e 49 8b 4d 00 48 8b 54 08 08 <48> 8b 2c 08 48 85 ed 0f 84 3e 01 00 00 48 8b 7c 08 10 48 85 ff 0f RSP: 0018:ffffc90002e86770 EFLAGS: 00000202 RAX: ffff8880b9400000 RBX: 0000000000000000 RCX: 0000000000046900 RDX: 0000000000073898 RSI: 0000000000000280 RDI: ffffffff8e447e20 RBP: 0000000000000080 R08: ffffffff8953b280 R09: 0000000000082820 R10: ffff88806810b500 R11: fffffbfff25f96ea R12: ffffffff8953b2c8 R13: ffff8880196daa00 R14: 00000000ffffffff R15: 0000000000000280 kmalloc_reserve+0xa8/0x2a0 net/core/skbuff.c:575 __alloc_skb+0x1f3/0x440 net/core/skbuff.c:666 alloc_skb include/linux/skbuff.h:1314 [inline] nlmsg_new include/net/netlink.h:1015 [inline] inet6_ifa_notify net/ipv6/addrconf.c:5605 [inline] __ipv6_ifa_notify+0x2e9/0x11f0 net/ipv6/addrconf.c:6254 addrconf_ifdown+0xeea/0x1bc0 net/ipv6/addrconf.c:3979 addrconf_notify+0x3cb/0x1020 notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93 call_netdevice_notifiers_extack net/core/dev.c:2030 [inline] call_netdevice_notifiers net/core/dev.c:2044 [inline] dev_close_many+0x33c/0x4c0 net/core/dev.c:1585 unregister_netdevice_many_notify+0x544/0x16b0 net/core/dev.c:11194 rtnl_newlink_create net/core/rtnetlink.c:3627 [inline] __rtnl_newlink net/core/rtnetlink.c:3816 [inline] rtnl_newlink+0x1f84/0x22b0 net/core/rtnetlink.c:3829 rtnetlink_rcv_msg+0x892/0x1170 net/core/rtnetlink.c:6727 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7ea/0x980 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8db/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 ____sys_sendmsg+0x525/0x7d0 net/socket.c:2585 ___sys_sendmsg net/socket.c:2639 [inline] __sys_sendmsg+0x2b0/0x3a0 net/socket.c:2668 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f007a47cea9 RSP: 002b:00007f007b1190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f007a5b4120 RCX: 00007f007a47cea9 RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006 RBP: 00007f007a4ebff4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f007a5b4120 R15: 00007ffda7003768 DEBUG: waiting rtnl_mutex for 2728 jiffies. task:kworker/0:5 state:D stack:21488 pid:5164 tgid:5164 ppid:2 flags:0x00004000 Workqueue: events_power_efficient reg_check_chans_work Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 reg_check_chans_work+0x91/0xea0 net/wireless/reg.c:2478 process_one_work kernel/workqueue.c:3248 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3329 worker_thread+0x86d/0xd50 kernel/workqueue.c:3409 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Showing all locks held in the system: 3 locks held by kworker/u8:1/12: #0: ffff88802a094148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3223 [inline] #0: ffff88802a094148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc90000117d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline] #1: ffffc90000117d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 5 locks held by kworker/u8:5/752: 2 locks held by getty/4842: #0: ffff88802acb30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 3 locks held by kworker/u9:5/5121: 3 locks held by kworker/0:5/5164: #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3223 [inline] #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc9000416fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline] #1: ffffc9000416fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x91/0xea0 net/wireless/reg.c:2478 2 locks held by kworker/1:8/5192: 10 locks held by kworker/0:9/5258: #0: ffff88801d2c9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3223 [inline] #0: ffff88801d2c9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc900046cfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline] #1: ffffc900046cfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffff888023cf3190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #2: ffff888023cf3190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5849 #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1003 #4: ffff88805f301160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #4: ffff88805f301160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1003 #5: ffffffff8e210d80 (console_lock){+.+.}-{0:0}, at: console_trylock_spinning kernel/printk/printk.c:2018 [inline] #5: ffffffff8e210d80 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0x4ed/0x900 kernel/printk/printk.c:2419 #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:331 [inline] #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:232 [inline] #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:287 [inline] #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 kernel/printk/printk.c:3033 #7: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 kernel/time/timer.c:1789 #8: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline] #8: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #8: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 net/core/rtnetlink.c:95 #9: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline] #9: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #9: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6689 4 locks held by udevd/6727: #0: ffff8880556ddc30 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 fs/seq_file.c:182 #1: ffff88802d59ac88 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154 #2: ffff88805e146968 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155 #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2743 1 lock held by syz-executor.1/7893: 1 lock held by syz-executor.2/8119: 3 locks held by syz-executor.1/8131: 1 lock held by syz-executor.1/8133: 2 locks held by dhcpcd/8140: #0: ffff88807e016258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff88807e016258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline] #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:959 2 locks held by dhcpcd/8141: #0: ffff88801eece258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff88801eece258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:329 [inline] #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 kernel/rcu/tree_exp.h:959 1 lock held by dhcpcd/8142: #0: ffff888020996258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff888020996258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 1 lock held by dhcpcd/8143: #0: ffff8880665d4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff8880665d4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 1 lock held by dhcpcd/8144: #0: ffff8880665ca258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff8880665ca258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 1 lock held by dhcpcd/8145: #0: ffff8880665ce258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff8880665ce258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 ============================================= DEBUG: waiting rtnl_mutex for 11103 jiffies. task:kworker/u8:1 state:D stack:21552 pid:12 tgid:12 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 process_one_work kernel/workqueue.c:3248 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3329 worker_thread+0x86d/0xd50 kernel/workqueue.c:3409 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 DEBUG: holding rtnl_mutex for 11104 jiffies. task:syz-executor.1 state:R running task stack:20656 pid:8133 tgid:8125 ppid:7893 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6851 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__slab_alloc_node mm/slub.c:3823 [inline] RIP: 0010:slab_alloc_node mm/slub.c:4007 [inline] RIP: 0010:kmem_cache_alloc_node_noprof+0x9f/0x320 mm/slub.c:4062 Code: ed 44 8b 4c 24 04 0f 84 2b 01 00 00 85 c0 0f 85 23 01 00 00 cc c2 01 00 00 65 48 8b 05 8a 55 14 7e 49 8b 4d 00 48 8b 54 08 08 <48> 8b 2c 08 48 85 ed 0f 84 3e 01 00 00 48 8b 7c 08 10 48 85 ff 0f RSP: 0018:ffffc90002e86770 EFLAGS: 00000202 RAX: ffff8880b9400000 RBX: 0000000000000000 RCX: 0000000000046900 RDX: 0000000000073898 RSI: 0000000000000280 RDI: ffffffff8e447e20 RBP: 0000000000000080 R08: ffffffff8953b280 R09: 0000000000082820 R10: ffff88806810b500 R11: fffffbfff25f96ea R12: ffffffff8953b2c8 R13: ffff8880196daa00 R14: 00000000ffffffff R15: 0000000000000280 kmalloc_reserve+0xa8/0x2a0 net/core/skbuff.c:575 __alloc_skb+0x1f3/0x440 net/core/skbuff.c:666 alloc_skb include/linux/skbuff.h:1314 [inline] nlmsg_new include/net/netlink.h:1015 [inline] inet6_ifa_notify net/ipv6/addrconf.c:5605 [inline] __ipv6_ifa_notify+0x2e9/0x11f0 net/ipv6/addrconf.c:6254 addrconf_ifdown+0xeea/0x1bc0 net/ipv6/addrconf.c:3979 addrconf_notify+0x3cb/0x1020 notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93 call_netdevice_notifiers_extack net/core/dev.c:2030 [inline] call_netdevice_notifiers net/core/dev.c:2044 [inline] dev_close_many+0x33c/0x4c0 net/core/dev.c:1585 unregister_netdevice_many_notify+0x544/0x16b0 net/core/dev.c:11194 rtnl_newlink_create net/core/rtnetlink.c:3627 [inline] __rtnl_newlink net/core/rtnetlink.c:3816 [inline] rtnl_newlink+0x1f84/0x22b0 net/core/rtnetlink.c:3829 rtnetlink_rcv_msg+0x892/0x1170 net/core/rtnetlink.c:6727 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7ea/0x980 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8db/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 ____sys_sendmsg+0x525/0x7d0 net/socket.c:2585 ___sys_sendmsg net/socket.c:2639 [inline] __sys_sendmsg+0x2b0/0x3a0 net/socket.c:2668 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f007a47cea9 RSP: 002b:00007f007b1190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f007a5b4120 RCX: 00007f007a47cea9 RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006 RBP: 00007f007a4ebff4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f007a5b4120 R15: 00007ffda7003768 DEBUG: waiting rtnl_mutex for 2832 jiffies. task:kworker/0:5 state:D stack:21488 pid:5164 tgid:5164 ppid:2 flags:0x00004000 Workqueue: events_power_efficient reg_check_chans_work Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 reg_check_chans_work+0x91/0xea0 net/wireless/reg.c:2478 process_one_work kernel/workqueue.c:3248 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3329 worker_thread+0x86d/0xd50 kernel/workqueue.c:3409 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Showing all locks held in the system: 3 locks held by kworker/u8:1/12: #0: ffff88802a094148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3223 [inline] #0: ffff88802a094148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc90000117d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline] #1: ffffc90000117d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 5 locks held by kworker/u8:5/752: 2 locks held by getty/4842: #0: ffff88802acb30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 3 locks held by kworker/u9:5/5121: 3 locks held by kworker/0:5/5164: #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3223 [inline] #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc9000416fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline] #1: ffffc9000416fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x91/0xea0 net/wireless/reg.c:2478 2 locks held by kworker/1:8/5192: 10 locks held by kworker/0:9/5258: #0: ffff88801d2c9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3223 [inline] #0: ffff88801d2c9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc900046cfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline] #1: ffffc900046cfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffff888023cf3190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #2: ffff888023cf3190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5849 #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1003 #4: ffff88805f301160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #4: ffff88805f301160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1003 #5: ffffffff8e210d80 (console_lock){+.+.}-{0:0}, at: console_trylock_spinning kernel/printk/printk.c:2018 [inline] #5: ffffffff8e210d80 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0x4ed/0x900 kernel/printk/printk.c:2419 #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:331 [inline] #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:232 [inline] #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:287 [inline] #6: ffffffff8e210990 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 kernel/printk/printk.c:3033 #7: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 kernel/time/timer.c:1789 #8: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline] #8: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #8: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 net/core/rtnetlink.c:95 #9: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline] #9: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #9: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6689 4 locks held by udevd/6727: #0: ffff8880556ddc30 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 fs/seq_file.c:182 #1: ffff88802d59ac88 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154 #2: ffff88805e146968 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155 #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #3: ffff88805dfaf190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2743 1 lock held by syz-executor.1/7893: 1 lock held by syz-executor.2/8119: 3 locks held by syz-executor.1/8131: 1 lock held by syz-executor.1/8133: 2 locks held by dhcpcd/8140: #0: ffff88807e016258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff88807e016258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline] #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:959 2 locks held by dhcpcd/8141: #0: ffff88801eece258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff88801eece258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:329 [inline] #1: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 kernel/rcu/tree_exp.h:959 1 lock held by dhcpcd/8142: #0: ffff888020996258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff888020996258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 1 lock held by dhcpcd/8143: #0: ffff8880665d4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff8880665d4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 1 lock held by dhcpcd/8144: #0: ffff8880665ca258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff8880665ca258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 1 lock held by dhcpcd/8145: #0: ffff8880665ce258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1602 [inline] #0: ffff8880665ce258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 net/packet/af_packet.c:3200 ============================================= DEBUG: waiting rtnl_mutex for 11207 jiffies. task:kworker/u8:1 state:D stack:21552 pid:12 tgid:12 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 process_one_work kernel/workqueue.c:3248 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3329 worker_thread+0x86d/0xd50 kernel/workqueue.c:3409 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 DEBUG: holding rtnl_mutex for 11208 jiffies. task:syz-executor.1 state:R running task stack:20656 pid:8133 tgid:8125 ppid:7893 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6851 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__slab_alloc_node mm/slub.c:3823 [inline] RIP: 0010:slab_alloc_node mm/slub.c:4007 [inline] RIP: 0010:kmem_cache_alloc_node_noprof+0x9f/0x320 mm/slub.c:4062 Code: ed 44 8b 4c 24 04 0f 84 2b 01 00 00 85 c0 0f 85 23 01 00 00 cc c2 01 00 00 65 48 8b 05 8a 55 14 7e 49 8b 4d 00 48 8b 54 08 08 <48> 8b 2c 08 48 85 ed 0f 84 3e 01 00 00 48 8b 7c 08 10 48 85 ff 0f RSP: 0018:ffffc90002e86770 EFLAGS: 00000202 RAX: ffff8880b9400000 RBX: 0000000000000000 RCX: 0000000000046900 RDX: 0000000000073898 RSI: 0000000000000280 RDI: ffffffff8e447e20 RBP: 0000000000000080 R08: ffffffff8953b280 R09: 0000000000082820 R10: ffff88806810b500 R11: fffffbfff25f96ea R12: ffffffff8953b2c8 R13: ffff8880196daa00 R14: 00000000ffffffff R15: 0000000000000280 kmalloc_reserve+0xa8/0x2a0 net/core/skbuff.c:575 __alloc_skb+0x1f3/0x440 net/core/skbuff.c:666 alloc_skb include/linux/skbuff.h:1314 [inline] nlmsg_new include/net/netlink.h:1015 [inline] inet6_ifa_notify net/ipv6/addrconf.c:5605 [inline] __ipv6_ifa_notify+0x2e9/0x11f0 net/ipv6/addrconf.c:6254 addrconf_ifdown+0xeea/0x1bc0 net/ipv6/addrconf.c:3979 addrconf_notify+0x3cb/0x1020 notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93 call_netdevice_notifiers_extack net/core/dev.c:2030 [inline] call_netdevice_notifiers net/core/dev.c:2044 [inline] dev_close_many+0x33c/0x4c0 net/core/dev.c:1585 unregister_netdevice_many_notify+0x544/0x16b0 net/core/dev.c:11194 rtnl_newlink_create net/core/rtnetlink.c:3627 [inline] __rtnl_newlink net/core/rtnetlink.c:3816 [inline] rtnl_newlink+0x1f84/0x22b0 net/core/rtnetlink.c:3829 rtnetlink_rcv_msg+0x892/0x1170 net/core/rtnetlink.c:6727 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7ea/0x980 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8db/0xcb0 net/netlink/af_netlink.c:1901