INFO: task kworker/u8:6:1160 blocked for more than 143 seconds. Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:6 state:D stack:21448 pid:1160 tgid:1160 ppid:2 task_flags:0x4208060 flags:0x00004000 Workqueue: events_unbound bpf_map_free_deferred Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x1b9a/0x5250 kernel/sched/core.c:6769 __schedule_loop kernel/sched/core.c:6847 [inline] schedule+0x163/0x360 kernel/sched/core.c:6862 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6919 __mutex_lock_common kernel/locking/mutex.c:678 [inline] __mutex_lock+0x805/0x10c0 kernel/locking/mutex.c:746 rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3752 dev_map_free+0x14c/0x690 kernel/bpf/devmap.c:214 bpf_map_free kernel/bpf/syscall.c:861 [inline] bpf_map_free_deferred+0xe9/0x110 kernel/bpf/syscall.c:887 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xac3/0x18e0 kernel/workqueue.c:3319 worker_thread+0x870/0xd50 kernel/workqueue.c:3400 kthread+0x7b7/0x940 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task syz-executor:5833 blocked for more than 144 seconds. Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:20072 pid:5833 tgid:5833 ppid:1 task_flags:0x40054c flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x1b9a/0x5250 kernel/sched/core.c:6769 __schedule_loop kernel/sched/core.c:6847 [inline] schedule+0x163/0x360 kernel/sched/core.c:6862 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6919 __mutex_lock_common kernel/locking/mutex.c:678 [inline] __mutex_lock+0x805/0x10c0 kernel/locking/mutex.c:746 rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3752 netdev_run_todo+0x380/0xf30 net/core/dev.c:11334 tun_detach drivers/net/tun.c:639 [inline] tun_chr_close+0x137/0x1b0 drivers/net/tun.c:3390 __fput+0x3e9/0x9f0 fs/file_table.c:465 task_work_run+0x251/0x310 kernel/task_work.c:227 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x754/0x2520 kernel/exit.c:949 do_group_exit+0x207/0x2c0 kernel/exit.c:1098 get_signal+0x1696/0x1730 kernel/signal.c:3034 arch_do_signal_or_restart+0x98/0x840 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xce/0x340 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ff42bb8f497 RSP: 002b:00007ffcde911718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 00007ff42bc10854 RCX: 00007ff42bb8f497 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcde9117d0 RBP: 00007ffcde9117d0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcde912860 R13: 00007ff42bc10854 R14: 000000000001c509 R15: 00007ffcde9128a0 INFO: task syz-executor:5836 blocked for more than 145 seconds. Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:20520 pid:5836 tgid:5836 ppid:1 task_flags:0x40054c flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x1b9a/0x5250 kernel/sched/core.c:6769 __schedule_loop kernel/sched/core.c:6847 [inline] schedule+0x163/0x360 kernel/sched/core.c:6862 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6919 __mutex_lock_common kernel/locking/mutex.c:678 [inline] __mutex_lock+0x805/0x10c0 kernel/locking/mutex.c:746 rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3752 netdev_run_todo+0x380/0xf30 net/core/dev.c:11334 tun_detach drivers/net/tun.c:639 [inline] tun_chr_close+0x137/0x1b0 drivers/net/tun.c:3390 __fput+0x3e9/0x9f0 fs/file_table.c:465 task_work_run+0x251/0x310 kernel/task_work.c:227 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x754/0x2520 kernel/exit.c:949 do_group_exit+0x207/0x2c0 kernel/exit.c:1098 get_signal+0x1696/0x1730 kernel/signal.c:3034 arch_do_signal_or_restart+0x98/0x840 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xce/0x340 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2d3238f497 RSP: 002b:00007fffdb3eb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 00007f2d32410854 RCX: 00007f2d3238f497 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffdb3eb0f0 RBP: 00007fffdb3eb0f0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffdb3ec180 R13: 00007f2d32410854 R14: 000000000001ce11 R15: 00007fffdb3ec1c0 INFO: task syz.2.124:6228 blocked for more than 145 seconds. Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.124 state:D stack:23624 pid:6228 tgid:6228 ppid:5830 task_flags:0x40044c flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x1b9a/0x5250 kernel/sched/core.c:6769 __schedule_loop kernel/sched/core.c:6847 [inline] schedule+0x163/0x360 kernel/sched/core.c:6862 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6919 __mutex_lock_common kernel/locking/mutex.c:678 [inline] __mutex_lock+0x805/0x10c0 kernel/locking/mutex.c:746 rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3752 netdev_run_todo+0x380/0xf30 net/core/dev.c:11334 tun_detach drivers/net/tun.c:639 [inline] tun_chr_close+0x137/0x1b0 drivers/net/tun.c:3390 __fput+0x3e9/0x9f0 fs/file_table.c:465 task_work_run+0x251/0x310 kernel/task_work.c:227 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x754/0x2520 kernel/exit.c:949 do_group_exit+0x207/0x2c0 kernel/exit.c:1098 get_signal+0x1696/0x1730 kernel/signal.c:3034 arch_do_signal_or_restart+0x98/0x840 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xce/0x340 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f425a78e169 RSP: 002b:00007ffd545ac588 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 000000000001f800 RCX: 00007f425a78e169 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 00007f425a9b7ba0 R08: 0000000000000001 R09: 00000003545ac87f R10: 00007f425a600000 R11: 0000000000000246 R12: 00007f425a9b5fac R13: 00007f425a9b5fa0 R14: ffffffffffffffff R15: 00007ffd545ac6a0 INFO: task syz.6.284:6714 blocked for more than 146 seconds. Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.6.284 state:D stack:26648 pid:6714 tgid:6714 ppid:6246 task_flags:0x400040 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x1b9a/0x5250 kernel/sched/core.c:6769 __schedule_loop kernel/sched/core.c:6847 [inline] schedule+0x163/0x360 kernel/sched/core.c:6862 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6919 __mutex_lock_common kernel/locking/mutex.c:678 [inline] __mutex_lock+0x805/0x10c0 kernel/locking/mutex.c:746 rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3752 netdev_run_todo+0x380/0xf30 net/core/dev.c:11334 ppp_release+0xf2/0x1f0 drivers/net/ppp/ppp_generic.c:423 __fput+0x3e9/0x9f0 fs/file_table.c:465 task_work_run+0x251/0x310 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x13f/0x340 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb6e638e169 RSP: 002b:00007ffe07e9bcb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 00007fb6e65b7ba0 RCX: 00007fb6e638e169 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 00007fb6e65b7ba0 R08: 0000000000007cec R09: 0000000307e9bfaf R10: 00000000005f36e4 R11: 0000000000000246 R12: 000000000002ffd8 R13: 00007ffe07e9bdb0 R14: ffffffffffffffff R15: 00007ffe07e9bdd0 INFO: task syz.0.307:6774 blocked for more than 147 seconds. Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.307 state:D stack:24936 pid:6774 tgid:6774 ppid:5832 task_flags:0x400040 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x1b9a/0x5250 kernel/sched/core.c:6769 __schedule_loop kernel/sched/core.c:6847 [inline] schedule+0x163/0x360 kernel/sched/core.c:6862 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6919 __mutex_lock_common kernel/locking/mutex.c:678 [inline] __mutex_lock+0x805/0x10c0 kernel/locking/mutex.c:746 rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3752 netdev_run_todo+0x380/0xf30 net/core/dev.c:11334 rtnl_net_unlock include/linux/rtnetlink.h:135 [inline] rtnl_net_dev_unlock net/core/dev.c:2156 [inline] unregister_netdev+0x52/0x60 net/core/dev.c:12109 tty_ldisc_kill+0xa3/0x1a0 drivers/tty/tty_ldisc.c:613 tty_ldisc_release+0x174/0x200 drivers/tty/tty_ldisc.c:781 tty_release_struct+0x2b/0xe0 drivers/tty/tty_io.c:1690 tty_release+0xd07/0x12c0 drivers/tty/tty_io.c:1861 __fput+0x3e9/0x9f0 fs/file_table.c:465 task_work_run+0x251/0x310 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x13f/0x340 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fbf7018e169 RSP: 002b:00007ffcb5bc3d78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 00007fbf703b7ba0 RCX: 00007fbf7018e169 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 00007fbf703b7ba0 R08: 000000000000a704 R09: 00000003b5bc406f R10: 00000000005f4da8 R11: 0000000000000246 R12: 0000000000031d6b R13: 00007ffcb5bc3e70 R14: ffffffffffffffff R15: 00007ffcb5bc3e90 Showing all locks held in the system: 4 locks held by kworker/0:0/9: #0: ffff888034088148 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff888034088148 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc900000e7c60 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc900000e7c60 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffff88805db71308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x151/0xd60 drivers/net/wireguard/noise.c:598 #3: ffff88805be71708 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x711/0xd60 drivers/net/wireguard/noise.c:632 4 locks held by kworker/u8:0/12: #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc90000117c60 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc90000117c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffffffff900f6710 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 net/core/net_namespace.c:608 #3: ffffffff8ed44580 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3752 4 locks held by kworker/1:0/24: 1 lock held by khungtaskd/31: #0: ffffffff8ed3f180 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff8ed3f180 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #0: ffffffff8ed3f180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 kernel/locking/lockdep.c:6764 3 locks held by kworker/u8:2/36: #0: ffff888023376948 ((wq_completion)wg-kex-wg0#13){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff888023376948 ((wq_completion)wg-kex-wg0#13){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc90000ad7c60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc90000ad7c60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffff88807eee8520 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x41/0x1a0 drivers/net/wireguard/cookie.c:162 3 locks held by kworker/1:1/47: 4 locks held by kworker/u8:3/53: #0: ffff888036684148 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff888036684148 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc90000be7c60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc90000be7c60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffff88805db71308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x112/0xcb0 drivers/net/wireguard/noise.c:529 #3: ffff88805be71708 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x121/0xcb0 drivers/net/wireguard/noise.c:530 4 locks held by kworker/u9:0/55: #0: ffff8880342da148 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff8880342da148 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc9000100fc60 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc9000100fc60 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffff88809c5d0078 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9f/0x9e0 net/bluetooth/hci_event.c:3702 #3: ffffffff90269568 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm include/net/bluetooth/hci_core.h:2051 [inline] #3: ffffffff90269568 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x5b1/0x9e0 net/bluetooth/hci_event.c:3736 4 locks held by kworker/u8:4/62: #0: ffff88802d97b948 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff88802d97b948 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc9000154fc60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc9000154fc60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffff88805de4d308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x112/0xcb0 drivers/net/wireguard/noise.c:529 #3: ffff88807f0a0338 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x121/0xcb0 drivers/net/wireguard/noise.c:530 3 locks held by kworker/u8:5/135: #0: ffff888030f40948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff888030f40948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc90002e57c60 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc90002e57c60 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffffffff90103248 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #2: ffffffff90103248 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 net/ipv6/addrconf.c:4735 3 locks held by kworker/0:2/976: #0: ffff88807edb7148 ((wq_completion)wg-kex-wg0#14){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff88807edb7148 ((wq_completion)wg-kex-wg0#14){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc900039f7c60 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc900039f7c60 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffff88807eee8520 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x41/0x1a0 drivers/net/wireguard/cookie.c:162 3 locks held by kworker/u8:6/1160: #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc9000416fc60 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc9000416fc60 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffffffff8ed44580 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3752 4 locks held by kworker/u8:7/1328: #0: ffff88805b19a948 ((wq_completion)wg-kex-wg2#13){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff88805b19a948 ((wq_completion)wg-kex-wg2#13){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc9000479fc60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc9000479fc60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffff8880482cd308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x112/0xcb0 drivers/net/wireguard/noise.c:529 #3: ffff88807eeeaad8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x121/0xcb0 drivers/net/wireguard/noise.c:530 3 locks held by kworker/1:2/3083: 4 locks held by kworker/u8:8/3493: #0: ffff88805b998948 ((wq_completion)wg-kex-wg2#19){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff88805b998948 ((wq_completion)wg-kex-wg2#19){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc9000c957c60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc9000c957c60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffff88805bbbd308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x112/0xcb0 drivers/net/wireguard/noise.c:529 #3: ffff888047055c60 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x121/0xcb0 drivers/net/wireguard/noise.c:530 4 locks held by kworker/u8:9/3548: #0: ffff888023374148 ((wq_completion)wg-kex-wg1#15){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff888023374148 ((wq_completion)wg-kex-wg1#15){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc9000cb67c60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc9000cb67c60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffff8880608dd308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x112/0xcb0 drivers/net/wireguard/noise.c:529 #3: ffff88807eeed278 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x121/0xcb0 drivers/net/wireguard/noise.c:530 4 locks held by kworker/u9:1/5154: #0: ffff88805ea2b948 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff88805ea2b948 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc9000fddfc60 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc9000fddfc60 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffff888050c10078 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9f/0x9e0 net/bluetooth/hci_event.c:3702 #3: ffffffff90269568 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm include/net/bluetooth/hci_core.h:2051 [inline] #3: ffffffff90269568 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x5b1/0x9e0 net/bluetooth/hci_event.c:3736 2 locks held by getty/5584: #0: ffff88814901a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 drivers/tty/n_tty.c:2222 1 lock held by syz-executor/5833: #0: ffffffff8ed44580 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3752 5 locks held by kworker/u9:2/5835: #0: ffff888143355948 ((wq_completion)hci8){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff888143355948 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc9000424fc60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc9000424fc60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffff888043af0d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:331 #3: ffff888043af0078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1f1/0xeb0 net/bluetooth/hci_sync.c:5597 #4: ffffffff90269568 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm include/net/bluetooth/hci_core.h:2051 [inline] #4: ffffffff90269568 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x15d/0x300 net/bluetooth/hci_conn.c:1269 1 lock held by syz-executor/5836: #0: ffffffff8ed44580 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3752 7 locks held by kworker/u9:3/5840: #0: ffff8880462d9948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff8880462d9948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc9000430fc60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc9000430fc60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffff888062b34d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:331 #3: ffff888062b34078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1f1/0xeb0 net/bluetooth/hci_sync.c:5597 #4: ffffffff90269568 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm include/net/bluetooth/hci_core.h:2051 [inline] #4: ffffffff90269568 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x15d/0x300 net/bluetooth/hci_conn.c:1269 #5: ffff88806a013338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x71/0x690 net/bluetooth/l2cap_core.c:1761 #6: ffffffff8ed446b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:304 [inline] #6: ffffffff8ed446b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x384/0x830 kernel/rcu/tree_exp.h:998 4 locks held by kworker/u9:4/5841: #0: ffff888066ceb948 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff888066ceb948 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc9000431fc60 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc9000431fc60 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffff88807e218078 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9f/0x9e0 net/bluetooth/hci_event.c:3702 #3: ffffffff90269568 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm include/net/bluetooth/hci_core.h:2051 [inline] #3: ffffffff90269568 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x5b1/0x9e0 net/bluetooth/hci_event.c:3736 5 locks held by kworker/u9:5/5843: #0: ffff888027361948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff888027361948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc9000433fc60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc9000433fc60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffff888050f58d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:331 #3: ffff888050f58078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1f1/0xeb0 net/bluetooth/hci_sync.c:5597 #4: ffffffff90269568 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm include/net/bluetooth/hci_core.h:2051 [inline] #4: ffffffff90269568 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x15d/0x300 net/bluetooth/hci_conn.c:1269 5 locks held by kworker/u9:7/5848: #0: ffff88805845a948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff88805845a948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc9000437fc60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc9000437fc60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffff888052200d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:331 #3: ffff888052200078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1f1/0xeb0 net/bluetooth/hci_sync.c:5597 #4: ffffffff90269568 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm include/net/bluetooth/hci_core.h:2051 [inline] #4: ffffffff90269568 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x15d/0x300 net/bluetooth/hci_conn.c:1269 4 locks held by kworker/u9:8/5849: #0: ffff88809c354948 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff88809c354948 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc9000438fc60 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc9000438fc60 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffff88803f058078 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9f/0x9e0 net/bluetooth/hci_event.c:3702 #3: ffffffff90269568 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm include/net/bluetooth/hci_core.h:2051 [inline] #3: ffffffff90269568 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x5b1/0x9e0 net/bluetooth/hci_event.c:3736 4 locks held by kworker/u9:9/5850: #0: ffff888098d12148 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff888098d12148 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc9000439fc60 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc9000439fc60 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffff888098d00078 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9f/0x9e0 net/bluetooth/hci_event.c:3702 #3: ffffffff90269568 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm include/net/bluetooth/hci_core.h:2051 [inline] #3: ffffffff90269568 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x5b1/0x9e0 net/bluetooth/hci_event.c:3736 1 lock held by kworker/R-wg-cr/5873: 1 lock held by kworker/R-wg-cr/5874: #0: ffffffff8ebe60a8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline] #0: ffffffff8ebe60a8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xa44/0x1020 kernel/workqueue.c:3529 1 lock held by kworker/R-wg-cr/5878: 3 locks held by kworker/1:3/5884: 5 locks held by kworker/1:4/5887: 3 locks held by kworker/1:5/5888: 3 locks held by kworker/1:6/5904: 3 locks held by kworker/0:5/5918: #0: ffff888031864148 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff888031864148 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc900045dfc60 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc900045dfc60 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffff88805be720f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xc00 drivers/net/wireguard/noise.c:822 4 locks held by kworker/0:6/5924: #0: ffff8880275b2548 ((wq_completion)wg-kex-wg2#20){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff8880275b2548 ((wq_completion)wg-kex-wg2#20){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc9000462fc60 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc9000462fc60 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffff88805bbbd308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x151/0xd60 drivers/net/wireguard/noise.c:598 #3: ffff888047055c60 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x711/0xd60 drivers/net/wireguard/noise.c:632 3 locks held by kworker/1:7/5947: 1 lock held by syz.2.124/6228: #0: ffffffff8ed44580 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3752 1 lock held by kworker/R-wg-cr/6238: #0: ffffffff8ebe60a8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 kernel/workqueue.c:2678 3 locks held by kworker/1:8/6248: 2 locks held by syz-executor/6254: #0: ffff8880610f40e0 (&type->s_umount_key#64){+.+.}-{4:4}, at: __super_lock fs/super.c:57 [inline] #0: ffff8880610f40e0 (&type->s_umount_key#64){+.+.}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline] #0: ffff8880610f40e0 (&type->s_umount_key#64){+.+.}-{4:4}, at: deactivate_super+0xb5/0xf0 fs/super.c:506 #1: ffffffff8ed44580 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3752 1 lock held by kworker/R-wg-cr/6268: 3 locks held by kworker/1:9/6331: 1 lock held by kworker/R-wg-cr/6338: 1 lock held by kworker/R-wg-cr/6341: #0: ffffffff8ebe60a8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 kernel/workqueue.c:2678 2 locks held by kworker/1:10/6344: 2 locks held by kworker/1:11/6359: 4 locks held by kworker/0:7/6364: #0: ffff88805d425148 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff88805d425148 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc9000b49fc60 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc9000b49fc60 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffff88805de4d308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x151/0xd60 drivers/net/wireguard/noise.c:598 #3: ffff88807f0a0338 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x711/0xd60 drivers/net/wireguard/noise.c:632 2 locks held by kworker/1:12/6469: 1 lock held by syz.5.215/6544: #0: ffffffff8ed44580 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3752 4 locks held by kworker/1:13/6558: 3 locks held by kworker/1:14/6591: 1 lock held by syz.8.231/6601: #0: ffffffff8ed44580 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3752 5 locks held by kworker/1:15/6610: 2 locks held by kworker/1:16/6680: 2 locks held by syz-executor/6685: #0: ffffffff8f483508 (bio_slab_lock){+.+.}-{4:4}, at: bio_put_slab block/bio.c:140 [inline] #0: ffffffff8f483508 (bio_slab_lock){+.+.}-{4:4}, at: bioset_exit+0x42d/0x650 block/bio.c:1664 #1: ffffffff8ed44580 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3752 2 locks held by kworker/R-wg-cr/6705: 1 lock held by syz.6.284/6714: #0: ffffffff8ed44580 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3752 7 locks held by syz-executor/6721: #0: ffff8880366de428 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:3045 [inline] #0: ffff8880366de428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 fs/read_write.c:680 #1: ffff88804fafbc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 fs/kernfs/file.c:325 #2: ffff888028053878 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 fs/kernfs/file.c:326 #3: ffffffff8f99c888 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 drivers/net/netdevsim/bus.c:216 #4: ffff88805b9200e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:922 [inline] #4: ffff88805b9200e8 (&dev->mutex){....}-{4:4}, at: __device_driver_lock drivers/base/dd.c:1095 [inline] #4: ffff88805b9200e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xce/0x7c0 drivers/base/dd.c:1293 #5: ffff88805b921250 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 drivers/net/netdevsim/dev.c:1675 #6: ffffffff8ed44580 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3752 2 locks held by syz.0.307/6774: #0: ffff88805ce540a0 (&tty->ldisc_sem){++++}-{0:0}, at: __tty_ldisc_lock drivers/tty/tty_ldisc.c:289 [inline] #0: ffff88805ce540a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_lock_pair_timeout drivers/tty/tty_ldisc.c:352 [inline] #0: ffff88805ce540a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_lock_pair drivers/tty/tty_ldisc.c:366 [inline] #0: ffff88805ce540a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x110/0x200 drivers/tty/tty_ldisc.c:780 #1: ffffffff8ed44580 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3752 4 locks held by syz-executor/6826: #0: ffff8880366de428 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:3045 [inline] #0: ffff8880366de428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 fs/read_write.c:680 #1: ffff88806e0c9888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 fs/kernfs/file.c:325 #2: ffff888028053878 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 fs/kernfs/file.c:326 #3: ffffffff8f99c888 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 drivers/net/netdevsim/bus.c:216 4 locks held by kworker/u8:10/6842: #0: ffff888036686948 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff888036686948 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc90003f7fc60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc90003f7fc60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffff88805db75308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x112/0xcb0 drivers/net/wireguard/noise.c:529 #3: ffff88805be720f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x121/0xcb0 drivers/net/wireguard/noise.c:530 4 locks held by syz-executor/6888: #0: ffff8880366de428 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:3045 [inline] #0: ffff8880366de428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 fs/read_write.c:680 #1: ffff888028cda888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 fs/kernfs/file.c:325 #2: ffff888028053878 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 fs/kernfs/file.c:326 #3: ffffffff8f99c888 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 drivers/net/netdevsim/bus.c:216 3 locks held by kworker/u8:11/7030: #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319 #1: ffffc9000b4efc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc9000b4efc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319 #2: ffffffff90103248 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:303 4 locks held by syz-executor/7191: #0: ffff8880366de428 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:3045 [inline] #0: ffff8880366de428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 fs/read_write.c:680 #1: ffff88803899e088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 fs/kernfs/file.c:325