INFO: task kworker/u8:3:51 blocked for more than 143 seconds.
Not tainted 6.9.0-next-20240513-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:3 state:D stack:23152 pid:51 tgid:51 ppid:2 flags:0x00004000
Workqueue: netns cleanup_net
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6837
schedule_timeout+0xb0/0x310 kernel/time/timer.c:2557
do_wait_for_common kernel/sched/completion.c:95 [inline]
__wait_for_common kernel/sched/completion.c:116 [inline]
wait_for_common kernel/sched/completion.c:127 [inline]
wait_for_completion+0x355/0x620 kernel/sched/completion.c:148
__flush_work+0xaa9/0xd00 kernel/workqueue.c:4211
__cancel_work_sync+0xbc/0x110 kernel/workqueue.c:4331
nsim_dev_traps_exit drivers/net/netdevsim/dev.c:935 [inline]
nsim_dev_reload_destroy+0x310/0x490 drivers/net/netdevsim/dev.c:1663
nsim_dev_reload_down+0x98/0xd0 drivers/net/netdevsim/dev.c:965
devlink_reload+0x189/0x870 net/devlink/dev.c:461
devlink_pernet_pre_exit+0x1f3/0x440 net/devlink/core.c:509
ops_pre_exit_list net/core/net_namespace.c:163 [inline]
cleanup_net+0x615/0xcc0 net/core/net_namespace.c:620
process_one_work kernel/workqueue.c:3231 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312
worker_thread+0x86d/0xd70 kernel/workqueue.c:3393
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
INFO: task kworker/u9:7:5116 blocked for more than 144 seconds.
Not tainted 6.9.0-next-20240513-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u9:7 state:D stack:24856 pid:5116 tgid:5116 ppid:2 flags:0x00004000
Workqueue: hci2 hci_cmd_sync_work
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6837
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
kobject_uevent_env+0x57d/0x8e0 lib/kobject_uevent.c:593
device_del+0x7db/0x9b0 drivers/base/core.c:3928
device_unregister+0x20/0xc0 drivers/base/core.c:3951
hci_conn_cleanup net/bluetooth/hci_conn.c:177 [inline]
hci_conn_del+0x8d5/0xc50 net/bluetooth/hci_conn.c:1157
hci_abort_conn_sync+0x583/0xde0 net/bluetooth/hci_sync.c:5451
hci_cmd_sync_work+0x22b/0x400 net/bluetooth/hci_sync.c:310
process_one_work kernel/workqueue.c:3231 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312
worker_thread+0x86d/0xd70 kernel/workqueue.c:3393
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
INFO: task syz-executor.4:8148 blocked for more than 145 seconds.
Not tainted 6.9.0-next-20240513-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.4 state:D
stack:25816 pid:8148 tgid:8148 ppid:1 flags:0x00000002
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6837
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
kobject_uevent_env+0x57d/0x8e0 lib/kobject_uevent.c:593
device_add+0x63b/0xbf0 drivers/base/core.c:3702
hci_register_dev+0x382/0x8b0 net/bluetooth/hci_core.c:2664
__vhci_create_device drivers/bluetooth/hci_vhci.c:430 [inline]
vhci_create_device+0x389/0x6d0 drivers/bluetooth/hci_vhci.c:472
vhci_get_user drivers/bluetooth/hci_vhci.c:529 [inline]
vhci_write+0x3cb/0x480 drivers/bluetooth/hci_vhci.c:609
new_sync_write fs/read_write.c:497 [inline]
vfs_write+0xa72/0xc90 fs/read_write.c:590
ksys_write+0x1a0/0x2c0 fs/read_write.c:643
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f722927ca70
RSP: 002b:00007fffa69f4458 EFLAGS: 00000202
ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f722927ca70
RDX: 0000000000000002 RSI: 00007fffa69f446a RDI: 00000000000000ca
RBP: 00007fffa69f45c0 R08: 0000000000000000 R09: 00007f7229edb320
R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa69f4ba8
R13: 0000000000000003 R14: 00007f72293ac9d8 R15: 000000000000000c
Showing all locks held in the system:
1 lock held by khungtaskd/30:
#0: ffffffff8e333e60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline]
#0: ffffffff8e333e60 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:781 [inline]
#0: ffffffff8e333e60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6614
6 locks held by kworker/1:1/45:
5 locks held by kworker/u8:3/51:
#0:
ffff888015ed5948
(
(wq_completion)netns
){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
#1:
ffffc90000bb7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
ffffc90000bb7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
#2:
ffffffff8f5da250 (
pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 net/core/net_namespace.c:594
#3:
ffff88806a9dd0e8
(
&dev->mutex
){....}-{3:3}
, at: device_lock include/linux/device.h:1009 [inline]
, at: devl_dev_lock net/devlink/devl_internal.h:108 [inline]
, at: devlink_pernet_pre_exit+0x13b/0x440 net/devlink/core.c:506
#4:
ffff88806a9df250
(
&devlink->lock_key
#9
){+.+.}-{3:3}
, at: devl_lock net/devlink/core.c:276 [inline]
, at: devl_dev_lock net/devlink/devl_internal.h:109 [inline]
, at: devlink_pernet_pre_exit+0x14d/0x440 net/devlink/core.c:506
2 locks held by kworker/1:2/58:
2 locks held by getty/4842:
#0:
ffff88802b3250a0
(
&tty->ldisc_sem
){++++}-{0:0}
, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1:
ffffc900031332f0
(&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2201
4 locks held by udevd/5088:
#0:
ffff888049af7c30 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 fs/seq_file.c:182
#1: ffff88801dc54c88 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154
#2:
ffff88802f4cb2d8
(kn->active#26){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155
#3:
ffff88805cee4190 (&dev->mutex){....}-{3:3}
, at: device_lock_interruptible include/linux/device.h:1014 [inline]
, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
4 locks held by kworker/1:3/5102:
5 locks held by kworker/u9:5/5110:
#0:
ffff88802d389948 (
(wq_completion)hci4
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3206 [inline]
, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
#1:
ffffc90003bb7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
ffffc90003bb7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
#2:
ffff8880471f8d88
(&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:309
#3:
ffff8880471f8078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 net/bluetooth/hci_sync.c:5432
#4: ffffffff8f9482a8 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
#4: ffffffff8f9482a8 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
5 locks held by kworker/u9:7/5116:
#0: ffff8880667ec148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
#0: ffff8880667ec148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
#1: ffffc90003c07d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
#1: ffffc90003c07d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
#2:
ffff8880656a4d88
(
&hdev->req_lock
){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:309
#3:
ffff8880656a4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 net/bluetooth/hci_sync.c:5432
#4: ffffffff8f9482a8 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
#4: ffffffff8f9482a8 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
5 locks held by kworker/u9:9/5118:
#0:
ffff88805f1aa148
(
(wq_completion)hci0
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3206 [inline]
, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
#1: ffffc90003c27d00
(
(work_completion)(&hdev->cmd_sync_work)
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3207 [inline]
, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
#2:
ffff88802c9e0d88
(
&hdev->req_lock
){+.+.}-{3:3}
, at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:309
#3:
ffff88802c9e0078 (
&hdev->lock
){+.+.}-{3:3}
, at: hci_abort_conn_sync+0x1ea/0xde0 net/bluetooth/hci_sync.c:5432
#4:
ffffffff8f9482a8
(
uevent_sock_mutex
){+.+.}-{3:3}
, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
4 locks held by kworker/0:3/5150:
#0:
ffff888063010548 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
ffff888063010548 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
#1: ffffc9000408fd00 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((typeof(*((worker))) *)((worker))); (typeof((typeof(*((worker))) *)((worker)))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
#1: ffffc9000408fd00 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((typeof(*((worker))) *)((worker))); (typeof((typeof(*((worker))) *)((worker)))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
#2: ffff888066511228 (&wg->static_identity.lock){++++}-{3:3}
, at: wg_noise_handshake_consume_initiation+0x156/0xf70 drivers/net/wireguard/noise.c:598
#3:
ffff8880638728b8
(
&handshake->lock
){++++}-{3:3}
, at: wg_noise_handshake_consume_initiation+0x844/0xf70 drivers/net/wireguard/noise.c:632
2 locks held by kworker/1:4/5152:
2 locks held by kworker/1:5/5155:
9 locks held by kworker/1:7/5215:
2 locks held by kworker/1:8/5262:
3 locks held by syz-executor.0/5715:
#0: ffff888067d44d88
(&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close net/bluetooth/hci_core.c:554 [inline]
(&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1d3/0x4e0 net/bluetooth/hci_core.c:2751
#1: ffff888067d44078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 net/bluetooth/hci_sync.c:5051
#2: ffffffff8f9482a8 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
#2: ffffffff8f9482a8 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
2 locks held by syz-executor.3/6701:
#0: ffff88802089a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x184/0x700 block/bdev.c:1080
#1:
ffffffff8f9482a8
(
uevent_sock_mutex){+.+.}-{3:3}
, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
6 locks held by syz-executor.1/8008:
#0: ffff88801dd48420 (sb_writers#8){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2854 [inline]
#0: ffff88801dd48420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 fs/read_write.c:586
#1:
ffff8880118be888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 fs/kernfs/file.c:325
#2: ffff88801f291c38 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 fs/kernfs/file.c:326
#3:
ffffffff8eef4908
(
nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 drivers/net/netdevsim/bus.c:216
#4: ffff8880221ce0e8 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
#4: ffff8880221ce0e8 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1093 [inline]
#4: ffff8880221ce0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 drivers/base/dd.c:1290
#5:
ffffffff8f9482a8 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
ffffffff8f9482a8 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
3 locks held by syz-executor.2/8011:
#0: ffff88807b528d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close net/bluetooth/hci_core.c:554 [inline]
#0: ffff88807b528d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1d3/0x4e0 net/bluetooth/hci_core.c:2751
#1: ffff88807b528078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 net/bluetooth/hci_sync.c:5051
#2:
ffffffff8f9482a8
(
uevent_sock_mutex
){+.+.}-{3:3}
, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
1 lock held by kworker/1:9/8070:
2 locks held by syz-executor.4/8148:
#0: ffff888046da5118 (&data->open_mutex
){+.+.}-{3:3}
, at: vhci_create_device+0x34/0x6d0 drivers/bluetooth/hci_vhci.c:471
#1:
ffffffff8f9482a8
(uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
(uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
2 locks held by syz-executor.1/8150:
#0: ffff8880657cd118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 drivers/bluetooth/hci_vhci.c:471
#1: ffffffff8f9482a8
(uevent_sock_mutex
){+.+.}-{3:3}
, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
2 locks held by syz-executor.2/8152:
#0:
ffff88804d0be118
(&data->open_mutex
){+.+.}-{3:3}
, at: vhci_create_device+0x34/0x6d0 drivers/bluetooth/hci_vhci.c:471
#1: ffffffff8f9482a8 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
#1: ffffffff8f9482a8 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
2 locks held by syz-executor.4/8154:
#0:
ffff888052b7e118
(
&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 drivers/bluetooth/hci_vhci.c:471
#1: ffffffff8f9482a8 (
uevent_sock_mutex
){+.+.}-{3:3}
, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
2 locks held by syz-executor.0/8162:
#0:
ffff888023aef118
(
&data->open_mutex
){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 drivers/bluetooth/hci_vhci.c:471
#1:
ffffffff8f9482a8 (
uevent_sock_mutex
){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
3 locks held by kworker/1:10/8163:
2 locks held by syz-executor.1/8166:
#0: ffff888058e89918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 drivers/bluetooth/hci_vhci.c:471
#1:
ffffffff8f9482a8
(uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
(uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
2 locks held by syz-executor.2/8168:
#0:
ffff88806501a918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 drivers/bluetooth/hci_vhci.c:471
#1: ffffffff8f9482a8 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
#1: ffffffff8f9482a8 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
2 locks held by syz-executor.4/8170:
#0:
ffff888066ada118
(
&data->open_mutex){+.+.}-{3:3}
, at: vhci_create_device+0x34/0x6d0 drivers/bluetooth/hci_vhci.c:471
#1:
ffffffff8f9482a8
(
uevent_sock_mutex
){+.+.}-{3:3}
, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
2 locks held by syz-executor.0/8172:
#0:
ffff8880116f9118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 drivers/bluetooth/hci_vhci.c:471
#1:
ffffffff8f9482a8
(
uevent_sock_mutex){+.+.}-{3:3}
, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.9.0-next-20240513-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114
nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
watchdog+0xfde/0x1020 kernel/hung_task.c:379
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Sending NMI from CPU 0 to CPUs 1:
yealink 3-1:36.0: urb_irq_callback - urb status -71
NMI backtrace for cpu 1
CPU: 1 PID: 5215 Comm: kworker/1:7 Not tainted 6.9.0-next-20240513-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker
RIP: 0010:format_decode+0x8c3/0x1bb0 lib/vsprintf.c:2618
Code: 84 c0 0f 85 43 09 00 00 41 0f b6 04 24 89 44 24 48 44 0f b6 f8 4c 89 ff 48 c7 c6 40 f0 94 8f e8 43 f8 11 f6 41 83 ff 6b 7e 1d <41> 83 ff 6c 74 2e 41 83 ff 7a 74 2f 41 83 ff 74 0f 85 15 02 00 00
RSP: 0018:ffffc90000a17680 EFLAGS: 00000002
RAX: 0000000000000002 RBX: 000000000000006c RCX: 000000008bcb7e01
RDX: 0000000000000005 RSI: ffffffff8f94f040 RDI: 000000000000006c
RBP: ffffc90000a17770 R08: 0000000000000001 R09: ffffffff8b8459bd
R10: 0000000000000005 R11: ffff88807bcf3c00 R12: ffffffff8bcb7e69
R13: ffffc90000a17700 R14: dffffc0000000000 R15: 000000000000006c
FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3775dffd80 CR3: 000000000e132000 CR4: 00000000003506f0
DR0: 0000000000002800 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
vsnprintf+0x14f/0x1da0 lib/vsprintf.c:2776
sprintf+0xda/0x120 lib/vsprintf.c:3028
print_time kernel/printk/printk.c:1327 [inline]
info_print_prefix+0x16b/0x310 kernel/printk/printk.c:1353
record_print_text kernel/printk/printk.c:1402 [inline]
printk_get_next_message+0x6da/0xbe0 kernel/printk/printk.c:2855
console_emit_next_record kernel/printk/printk.c:2895 [inline]
console_flush_all+0x410/0xfd0 kernel/printk/printk.c:2994
console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3063
vprintk_emit+0x5a6/0x770 kernel/printk/printk.c:2345
dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4951
dev_printk_emit+0xdd/0x120 drivers/base/core.c:4962
_dev_err+0x122/0x170 drivers/base/core.c:5017
urb_irq_callback+0x37e/0x5b0 drivers/input/misc/yealink.c:416
__usb_hcd_giveback_urb+0x373/0x530 drivers/usb/core/hcd.c:1648
dummy_timer+0x830/0x45d0 drivers/usb/gadget/udc/dummy_hcd.c:1987
__run_hrtimer kernel/time/hrtimer.c:1687 [inline]
__hrtimer_run_queues+0x5a5/0xd50 kernel/time/hrtimer.c:1751
hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1813
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
__sysvec_apic_timer_interrupt+0x110/0x3f0 arch/x86/kernel/apic/apic.c:1049
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1043
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:kasan_quarantine_put+0x88/0x230 mm/kasan/quarantine.c:237
Code: e8 9d 80 a1 ff 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 87 00 00 00 41 f7 c7 00 02 00 00 74 01 fb 31 c0 <48> 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 48 8d 80 00
RSP: 0018:ffffc90000a18ab0 EFLAGS: 00000206
RAX: 26c93c76cb984201 RBX: ffff888023587c00 RCX: ffffffff81730d7a
RDX: dffffc0000000000 RSI: ffffffff8bcab960 RDI: ffffffff8c1fe180
RBP: 0000000000000000 R08: ffffffff92fb5677 R09: 1ffffffff25f6ace
R10: dffffc0000000000 R11: fffffbfff25f6acf R12: ffffea00008d6100
R13: ffff888023587d42 R14: 00000000000ee980 R15: 0000000000000286
kasan_slab_free include/linux/kasan.h:184 [inline]
slab_free_hook mm/slub.c:2195 [inline]
slab_free mm/slub.c:4436 [inline]
kmem_cache_free+0x145/0x350 mm/slub.c:4511
skb_kfree_head net/core/skbuff.c:1067 [inline]
skb_free_head net/core/skbuff.c:1081 [inline]
skb_release_data+0x64d/0x880 net/core/skbuff.c:1108
skb_release_all net/core/skbuff.c:1173 [inline]
__kfree_skb net/core/skbuff.c:1187 [inline]
consume_skb+0xb1/0x160 net/core/skbuff.c:1409
mac80211_hwsim_beacon_tx+0x3bf/0x850 drivers/net/wireless/virtual/mac80211_hwsim.c:2306
__iterate_interfaces+0x223/0x4c0 net/mac80211/util.c:772
ieee80211_iterate_active_interfaces_atomic+0xd8/0x170 net/mac80211/util.c:808
mac80211_hwsim_beacon+0xd4/0x1f0 drivers/net/wireless/virtual/mac80211_hwsim.c:2336
__run_hrtimer kernel/time/hrtimer.c:1687 [inline]
__hrtimer_run_queues+0x5a5/0xd50 kernel/time/hrtimer.c:1751
hrtimer_run_softirq+0x19a/0x2c0 kernel/time/hrtimer.c:1768
handle_softirqs+0x2d6/0x990 kernel/softirq.c:554
do_softirq+0x11b/0x1e0 kernel/softirq.c:455
__local_bh_enable_ip+0x1bb/0x200 kernel/softirq.c:382
wg_packet_send_handshake_response+0x131/0x2e0 drivers/net/wireguard/send.c:98
wg_receive_handshake_packet drivers/net/wireguard/receive.c:154 [inline]
wg_packet_handshake_receive_worker+0x5e6/0xf50 drivers/net/wireguard/receive.c:213
process_one_work kernel/workqueue.c:3231 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312
worker_thread+0x86d/0xd70 kernel/workqueue.c:3393
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
yealink 3-1:36.0: unexpected response 0
yealink 3-1:36.0: urb_ctl_callback - urb status -71
yealink 3-1:36.0: urb_irq_callback - urb status -71
yealink 3-1:36.0: unexpected response 0
yealink 3-1:36.0: urb_ctl_callback - urb status -71
yealink 3-1:36.0: urb_irq_callback - urb status -71