rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-...D } 2680 jiffies s: 104329 root: 0x2/. rcu: blocking rcu_node structures (internal RCU debug): Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 8769 Comm: modprobe Not tainted 6.10.0-rc5-next-20240624-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:19 [inline] RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:87 [inline] RIP: 0010:arch_local_irq_save arch/x86/include/asm/irqflags.h:123 [inline] RIP: 0010:__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline] RIP: 0010:_raw_spin_lock_irqsave+0x75/0x120 kernel/locking/spinlock.c:162 Code: c7 44 24 10 10 7d 98 8b 49 89 e5 49 c1 ed 03 48 b8 f1 f1 f1 f1 00 f3 f3 f3 4b 89 44 3d 00 4c 89 e3 48 c1 eb 03 42 80 3c 3b 00 <74> 08 4c 89 e7 e8 61 98 61 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 RSP: 0018:ffffc90000a18ba0 EFLAGS: 00000046 RAX: f3f3f300f1f1f1f1 RBX: 1ffff92000143178 RCX: 0000000000008db0 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff949db698 RBP: ffffc90000a18c30 R08: ffffc90000a18c8f R09: 0000000000000000 R10: ffffc90000a18c80 R11: fffff52000143192 R12: ffffc90000a18bc0 R13: 1ffff92000143174 R14: ffffffff949db698 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f752c1fefa8 CR3: 000000006944a000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: debug_object_deactivate+0x158/0x390 lib/debugobjects.c:763 debug_hrtimer_deactivate kernel/time/hrtimer.c:428 [inline] debug_deactivate+0x1b/0x220 kernel/time/hrtimer.c:484 __run_hrtimer kernel/time/hrtimer.c:1655 [inline] __hrtimer_run_queues+0x305/0xd50 kernel/time/hrtimer.c:1751 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1813 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0x110/0x3f0 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:___slab_alloc+0x4f7/0x14b0 mm/slub.c:3632 Code: e9 78 fb ff ff e8 19 d5 9e 09 f7 c3 00 02 00 00 74 18 e9 8e fe ff ff 48 c7 43 10 00 00 00 00 4c 89 ff 48 89 de e8 f9 15 00 00 <49> 83 7c 24 18 00 0f 84 89 06 00 00 48 c7 44 24 60 00 00 00 00 9c RSP: 0018:ffffc90003987470 EFLAGS: 00000206 RAX: e4324c7ca7654900 RBX: 0000000000000246 RCX: ffffffff816fd2da RDX: dffffc0000000000 RSI: ffffffff8bcac820 RDI: ffffffff8c2074e0 RBP: ffffe8ffffd00f80 R08: ffffffff92fe47e7 R09: 1ffffffff25fc8fc R10: dffffc0000000000 R11: fffffbfff25fc8fd R12: ffffe8ffffd00f60 R13: ffff888020331e00 R14: 00000000ffffffff R15: ffff888016fd4c80 __slab_alloc+0x58/0xa0 mm/slub.c:3792 __slab_alloc_node mm/slub.c:3845 [inline] slab_alloc_node mm/slub.c:4025 [inline] kmem_cache_alloc_noprof+0x1c1/0x2a0 mm/slub.c:4044 journal_alloc_journal_head fs/jbd2/journal.c:2851 [inline] jbd2_journal_add_journal_head+0x7e/0x480 fs/jbd2/journal.c:2920 jbd2_journal_get_write_access+0x1de/0x240 fs/jbd2/transaction.c:1256 __ext4_journal_get_write_access+0x1c8/0x680 fs/ext4/ext4_jbd2.c:239 ext4_reserve_inode_write+0x271/0x360 fs/ext4/inode.c:5724 __ext4_mark_inode_dirty+0x1ec/0x880 fs/ext4/inode.c:5898 ext4_dirty_inode+0xce/0x110 fs/ext4/inode.c:5935 __mark_inode_dirty+0x325/0xe20 fs/fs-writeback.c:2486 generic_update_time fs/inode.c:1959 [inline] inode_update_time fs/inode.c:1972 [inline] touch_atime+0x413/0x690 fs/inode.c:2044 file_accessed include/linux/fs.h:2480 [inline] ext4_file_mmap+0x192/0x550 fs/ext4/file.c:797 call_mmap include/linux/fs.h:2129 [inline] mmap_region+0xe8f/0x2090 mm/mmap.c:2927 do_mmap+0x8ad/0xfa0 mm/mmap.c:1438 vm_mmap_pgoff+0x1dd/0x3d0 mm/util.c:576 ksys_mmap_pgoff+0x4f1/0x720 mm/mmap.c:1484 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f19a9951b74 Code: 63 08 44 89 e8 5b 41 5c 41 5d c3 41 89 ca 41 f7 c1 ff 0f 00 00 74 0c c7 05 f5 46 01 00 16 00 00 00 eb 17 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 0c f7 d8 89 05 dc 46 01 00 48 83 c8 ff c3 0f RSP: 002b:00007ffd4345f018 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 00007ffd4345f0c8 RCX: 00007f19a9951b74 RDX: 0000000000000003 RSI: 0000000000006000 RDI: 00007f19a9858000 RBP: 00007ffd4345f7b0 R08: 0000000000000000 R09: 000000000019d000 R10: 0000000000000812 R11: 0000000000000246 R12: 00007f19a992e5c0 R13: 00007ffd4345f838 R14: 000000000019d264 R15: 0000000000000000 DEBUG: waiting rtnl_mutex for 2719 jiffies. task:kworker/u8:17 state:D stack:19960 pid:5981 tgid:5981 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd40 kernel/workqueue.c:3383 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 DEBUG: waiting rtnl_mutex for 2718 jiffies. task:syz-executor state:D stack:19664 pid:8479 tgid:8479 ppid:8467 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7f0/0x990 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 __sys_sendto+0x3a4/0x4f0 net/socket.c:2204 __do_sys_sendto net/socket.c:2216 [inline] __se_sys_sendto net/socket.c:2212 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2212 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd9e9d7787c RSP: 002b:00007ffd7da24570 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007fd9eaa34620 RCX: 00007fd9e9d7787c RDX: 0000000000000028 RSI: 00007fd9eaa34670 RDI: 0000000000000003 RBP: 0000000000000000 R08: 00007ffd7da245c4 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 R13: 0000000000000000 R14: 00007fd9eaa34670 R15: 0000000000000000 DEBUG: waiting rtnl_mutex for 2718 jiffies. task:syz-executor state:D stack:19464 pid:8525 tgid:8525 ppid:8511 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7f0/0x990 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 __sys_sendto+0x3a4/0x4f0 net/socket.c:2204 __do_sys_sendto net/socket.c:2216 [inline] __se_sys_sendto net/socket.c:2212 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2212 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7c1737787c RSP: 002b:00007ffee506bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f7c18034620 RCX: 00007f7c1737787c RDX: 0000000000000028 RSI: 00007f7c18034670 RDI: 0000000000000003 RBP: 0000000000000000 R08: 00007ffee506bf14 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f7c18034670 R15: 0000000000000000 DEBUG: waiting rtnl_mutex for 2721 jiffies. task:kworker/u8:0 state:D stack:20080 pid:11 tgid:11 ppid:2 flags:0x00004000 Workqueue: netns cleanup_net Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 default_device_exit_batch+0xe9/0xa90 net/core/dev.c:11796 ops_exit_list net/core/net_namespace.c:178 [inline] cleanup_net+0x89d/0xcc0 net/core/net_namespace.c:640 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd40 kernel/workqueue.c:3383 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 DEBUG: waiting rtnl_mutex for 2718 jiffies. task:kworker/0:5 state:D stack:21528 pid:5175 tgid:5175 ppid:2 flags:0x00004000 Workqueue: events linkwatch_event Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 linkwatch_event+0xe/0x60 net/core/link_watch.c:276 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd40 kernel/workqueue.c:3383 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Showing all locks held in the system: 6 locks held by kworker/0:1/9: #0: ffff88801cac5d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff88801cac5d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc900000e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc900000e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffff888023808190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #2: ffff888023808190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5849 #3: ffff8880608e9190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #3: ffff8880608e9190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 drivers/usb/core/hub.c:2295 #4: ffff8880608ee160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #4: ffff8880608ee160 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1094 [inline] #4: ffff8880608ee160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 drivers/base/dd.c:1292 #5: ffffffff8f0b5748 (input_mutex){+.+.}-{3:3}, at: __input_unregister_device+0x308/0x630 drivers/input/input.c:2293 4 locks held by kworker/u8:0/11: #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5ec210 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 net/core/net_namespace.c:594 #3: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 net/core/dev.c:11796 5 locks held by rcu_exp_gp_kthr/19: #0: ffffffff8e210f20 (console_lock){+.+.}-{0:0}, at: nbcon_cpu_emergency_flush+0x121/0x1d0 kernel/printk/nbcon.c:1341 #1: ffffffff8e210b30 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:338 [inline] #1: ffffffff8e210b30 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:267 [inline] #1: ffffffff8e210b30 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:287 [inline] #1: ffffffff8e210b30 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 kernel/printk/printk.c:3088 #2: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 kernel/time/timer.c:1789 #3: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:333 [inline] #3: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:845 [inline] #3: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 net/core/rtnetlink.c:95 #4: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:333 [inline] #4: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:845 [inline] #4: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6688 1 lock held by acpid/4528: #0: ffffffff8e33a9f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:329 [inline] #0: ffffffff8e33a9f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 kernel/rcu/tree_exp.h:959 2 locks held by getty/4852: #0: ffff88802ef220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900034cb2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 2 locks held by syz-executor/5078: #0: ffff88802c81c658 (&vma->vm_lock->lock){++++}-{3:3}, at: vma_start_read include/linux/mm.h:683 [inline] #0: ffff88802c81c658 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 mm/memory.c:5986 #1: ffff88802a350518 (sb_pagefaults){.+.+}-{0:0}, at: __sb_start_write include/linux/fs.h:1675 [inline] #1: ffff88802a350518 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs.h:1840 [inline] #1: ffff88802a350518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1f0/0xdf0 fs/ext4/inode.c:6052 3 locks held by kworker/0:5/5175: #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90008687d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90008687d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:276 3 locks held by kworker/u8:17/5981: #0: ffff88802a468148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff88802a468148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc9001254fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc9001254fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 2 locks held by kworker/u8:18/5983: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc900124dfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc900124dfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 1 lock held by syz-executor/8479: #0: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 1 lock held by syz-executor/8525: #0: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 2 locks held by syz-executor/8743: #0: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 #1: ffffffff8e33a9f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline] #1: ffffffff8e33a9f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:959 3 locks held by modprobe/8769: ============================================= DEBUG: waiting rtnl_mutex for 2825 jiffies. task:kworker/u8:17 state:D stack:19960 pid:5981 tgid:5981 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd40 kernel/workqueue.c:3383 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 DEBUG: waiting rtnl_mutex for 2824 jiffies. task:syz-executor state:D stack:19664 pid:8479 tgid:8479 ppid:8467 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7f0/0x990 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 __sys_sendto+0x3a4/0x4f0 net/socket.c:2204 __do_sys_sendto net/socket.c:2216 [inline] __se_sys_sendto net/socket.c:2212 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2212 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd9e9d7787c RSP: 002b:00007ffd7da24570 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007fd9eaa34620 RCX: 00007fd9e9d7787c RDX: 0000000000000028 RSI: 00007fd9eaa34670 RDI: 0000000000000003 RBP: 0000000000000000 R08: 00007ffd7da245c4 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 R13: 0000000000000000 R14: 00007fd9eaa34670 R15: 0000000000000000 DEBUG: waiting rtnl_mutex for 2824 jiffies. task:syz-executor state:D stack:19464 pid:8525 tgid:8525 ppid:8511 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7f0/0x990 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 __sys_sendto+0x3a4/0x4f0 net/socket.c:2204 __do_sys_sendto net/socket.c:2216 [inline] __se_sys_sendto net/socket.c:2212 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2212 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7c1737787c RSP: 002b:00007ffee506bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f7c18034620 RCX: 00007f7c1737787c RDX: 0000000000000028 RSI: 00007f7c18034670 RDI: 0000000000000003 RBP: 0000000000000000 R08: 00007ffee506bf14 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f7c18034670 R15: 0000000000000000 DEBUG: waiting rtnl_mutex for 2827 jiffies. task:kworker/u8:0 state:D stack:20080 pid:11 tgid:11 ppid:2 flags:0x00004000 Workqueue: netns cleanup_net Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 default_device_exit_batch+0xe9/0xa90 net/core/dev.c:11796 ops_exit_list net/core/net_namespace.c:178 [inline] cleanup_net+0x89d/0xcc0 net/core/net_namespace.c:640 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd40 kernel/workqueue.c:3383 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 DEBUG: waiting rtnl_mutex for 2824 jiffies. task:kworker/0:5 state:D stack:21528 pid:5175 tgid:5175 ppid:2 flags:0x00004000 Workqueue: events linkwatch_event Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 linkwatch_event+0xe/0x60 net/core/link_watch.c:276 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd40 kernel/workqueue.c:3383 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Showing all locks held in the system: 6 locks held by kworker/0:1/9: #0: ffff88801cac5d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff88801cac5d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc900000e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc900000e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffff888023808190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #2: ffff888023808190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5849 #3: ffff8880608e9190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #3: ffff8880608e9190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 drivers/usb/core/hub.c:2295 #4: ffff8880608ee160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #4: ffff8880608ee160 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1094 [inline] #4: ffff8880608ee160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 drivers/base/dd.c:1292 #5: ffffffff8f0b5748 (input_mutex){+.+.}-{3:3}, at: __input_unregister_device+0x308/0x630 drivers/input/input.c:2293 4 locks held by kworker/u8:0/11: #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5ec210 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 net/core/net_namespace.c:594 #3: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 net/core/dev.c:11796 5 locks held by rcu_exp_gp_kthr/19: #0: ffffffff8e210f20 (console_lock){+.+.}-{0:0}, at: nbcon_cpu_emergency_flush+0x121/0x1d0 kernel/printk/nbcon.c:1341 #1: ffffffff8e210b30 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:338 [inline] #1: ffffffff8e210b30 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:267 [inline] #1: ffffffff8e210b30 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:287 [inline] #1: ffffffff8e210b30 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 kernel/printk/printk.c:3088 #2: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 kernel/time/timer.c:1789 #3: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:333 [inline] #3: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:845 [inline] #3: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 net/core/rtnetlink.c:95 #4: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:333 [inline] #4: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:845 [inline] #4: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6688 1 lock held by acpid/4528: #0: ffffffff8e33a9f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:329 [inline] #0: ffffffff8e33a9f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 kernel/rcu/tree_exp.h:959 2 locks held by getty/4852: #0: ffff88802ef220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900034cb2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 2 locks held by syz-executor/5078: #0: ffff88802c81c658 (&vma->vm_lock->lock){++++}-{3:3}, at: vma_start_read include/linux/mm.h:683 [inline] #0: ffff88802c81c658 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 mm/memory.c:5986 #1: ffff88802a350518 (sb_pagefaults){.+.+}-{0:0}, at: __sb_start_write include/linux/fs.h:1675 [inline] #1: ffff88802a350518 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs.h:1840 [inline] #1: ffff88802a350518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1f0/0xdf0 fs/ext4/inode.c:6052 3 locks held by kworker/0:5/5175: #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90008687d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90008687d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:276 3 locks held by kworker/u8:17/5981: #0: ffff88802a468148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff88802a468148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc9001254fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc9001254fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 2 locks held by kworker/u8:18/5983: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc900124dfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc900124dfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 1 lock held by syz-executor/8479: #0: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 1 lock held by syz-executor/8525: #0: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 2 locks held by syz-executor/8743: #0: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 #1: ffffffff8e33a9f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline] #1: ffffffff8e33a9f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:959 4 locks held by modprobe/8769: ============================================= DEBUG: waiting rtnl_mutex for 2931 jiffies. task:kworker/u8:17 state:D stack:19960 pid:5981 tgid:5981 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd40 kernel/workqueue.c:3383 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 DEBUG: waiting rtnl_mutex for 2930 jiffies. task:syz-executor state:D stack:19664 pid:8479 tgid:8479 ppid:8467 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7f0/0x990 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 __sys_sendto+0x3a4/0x4f0 net/socket.c:2204 __do_sys_sendto net/socket.c:2216 [inline] __se_sys_sendto net/socket.c:2212 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2212 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd9e9d7787c RSP: 002b:00007ffd7da24570 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007fd9eaa34620 RCX: 00007fd9e9d7787c RDX: 0000000000000028 RSI: 00007fd9eaa34670 RDI: 0000000000000003 RBP: 0000000000000000 R08: 00007ffd7da245c4 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 R13: 0000000000000000 R14: 00007fd9eaa34670 R15: 0000000000000000 DEBUG: waiting rtnl_mutex for 2930 jiffies. task:syz-executor state:D stack:19464 pid:8525 tgid:8525 ppid:8511 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7f0/0x990 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 __sys_sendto+0x3a4/0x4f0 net/socket.c:2204 __do_sys_sendto net/socket.c:2216 [inline] __se_sys_sendto net/socket.c:2212 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2212 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7c1737787c RSP: 002b:00007ffee506bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f7c18034620 RCX: 00007f7c1737787c RDX: 0000000000000028 RSI: 00007f7c18034670 RDI: 0000000000000003 RBP: 0000000000000000 R08: 00007ffee506bf14 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f7c18034670 R15: 0000000000000000 DEBUG: waiting rtnl_mutex for 2933 jiffies. task:kworker/u8:0 state:D stack:20080 pid:11 tgid:11 ppid:2 flags:0x00004000 Workqueue: netns cleanup_net Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 default_device_exit_batch+0xe9/0xa90 net/core/dev.c:11796 ops_exit_list net/core/net_namespace.c:178 [inline] cleanup_net+0x89d/0xcc0 net/core/net_namespace.c:640 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd40 kernel/workqueue.c:3383 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 DEBUG: waiting rtnl_mutex for 2930 jiffies. task:kworker/0:5 state:D stack:21528 pid:5175 tgid:5175 ppid:2 flags:0x00004000 Workqueue: events linkwatch_event Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 linkwatch_event+0xe/0x60 net/core/link_watch.c:276 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd40 kernel/workqueue.c:3383 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Showing all locks held in the system: 6 locks held by kworker/0:1/9: #0: ffff88801cac5d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff88801cac5d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc900000e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc900000e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffff888023808190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #2: ffff888023808190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5849 #3: ffff8880608e9190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #3: ffff8880608e9190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 drivers/usb/core/hub.c:2295 #4: ffff8880608ee160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #4: ffff8880608ee160 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1094 [inline] #4: ffff8880608ee160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 drivers/base/dd.c:1292 #5: ffffffff8f0b5748 (input_mutex){+.+.}-{3:3}, at: __input_unregister_device+0x308/0x630 drivers/input/input.c:2293 4 locks held by kworker/u8:0/11: #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5ec210 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 net/core/net_namespace.c:594 #3: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 net/core/dev.c:11796 5 locks held by rcu_exp_gp_kthr/19: #0: ffffffff8e210f20 (console_lock){+.+.}-{0:0}, at: nbcon_cpu_emergency_flush+0x121/0x1d0 kernel/printk/nbcon.c:1341 #1: ffffffff8e210b30 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:338 [inline] #1: ffffffff8e210b30 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:267 [inline] #1: ffffffff8e210b30 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:287 [inline] #1: ffffffff8e210b30 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 kernel/printk/printk.c:3088 #2: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 kernel/time/timer.c:1789 #3: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:333 [inline] #3: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:845 [inline] #3: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 net/core/rtnetlink.c:95 #4: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:333 [inline] #4: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:845 [inline] #4: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6688 1 lock held by acpid/4528: #0: ffffffff8e33a9f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:329 [inline] #0: ffffffff8e33a9f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 kernel/rcu/tree_exp.h:959 2 locks held by getty/4852: #0: ffff88802ef220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900034cb2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 2 locks held by syz-executor/5078: #0: ffff88802c81c658 (&vma->vm_lock->lock){++++}-{3:3}, at: vma_start_read include/linux/mm.h:683 [inline] #0: ffff88802c81c658 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 mm/memory.c:5986 #1: ffff88802a350518 (sb_pagefaults){.+.+}-{0:0}, at: __sb_start_write include/linux/fs.h:1675 [inline] #1: ffff88802a350518 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs.h:1840 [inline] #1: ffff88802a350518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1f0/0xdf0 fs/ext4/inode.c:6052 3 locks held by kworker/0:5/5175: #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90008687d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90008687d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:276 3 locks held by kworker/u8:17/5981: #0: ffff88802a468148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff88802a468148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc9001254fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc9001254fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 2 locks held by kworker/u8:18/5983: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc900124dfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc900124dfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 1 lock held by syz-executor/8479: #0: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 1 lock held by syz-executor/8525: #0: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 2 locks held by syz-executor/8743: #0: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 #1: ffffffff8e33a9f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline] #1: ffffffff8e33a9f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:959 4 locks held by modprobe/8769: ============================================= DEBUG: waiting rtnl_mutex for 3041 jiffies. task:kworker/u8:17 state:D stack:19960 pid:5981 tgid:5981 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd40 kernel/workqueue.c:3383 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 DEBUG: waiting rtnl_mutex for 3040 jiffies. task:syz-executor state:D stack:19664 pid:8479 tgid:8479 ppid:8467 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7f0/0x990 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 __sys_sendto+0x3a4/0x4f0 net/socket.c:2204 __do_sys_sendto net/socket.c:2216 [inline] __se_sys_sendto net/socket.c:2212 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2212 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd9e9d7787c RSP: 002b:00007ffd7da24570 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007fd9eaa34620 RCX: 00007fd9e9d7787c RDX: 0000000000000028 RSI: 00007fd9eaa34670 RDI: 0000000000000003 RBP: 0000000000000000 R08: 00007ffd7da245c4 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 R13: 0000000000000000 R14: 00007fd9eaa34670 R15: 0000000000000000 DEBUG: waiting rtnl_mutex for 3040 jiffies. task:syz-executor state:D stack:19464 pid:8525 tgid:8525 ppid:8511 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7f0/0x990 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 __sys_sendto+0x3a4/0x4f0 net/socket.c:2204 __do_sys_sendto net/socket.c:2216 [inline] __se_sys_sendto net/socket.c:2212 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2212 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7c1737787c RSP: 002b:00007ffee506bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f7c18034620 RCX: 00007f7c1737787c RDX: 0000000000000028 RSI: 00007f7c18034670 RDI: 0000000000000003 RBP: 0000000000000000 R08: 00007ffee506bf14 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f7c18034670 R15: 0000000000000000 DEBUG: waiting rtnl_mutex for 3043 jiffies. task:kworker/u8:0 state:D stack:20080 pid:11 tgid:11 ppid:2 flags:0x00004000 Workqueue: netns cleanup_net Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 default_device_exit_batch+0xe9/0xa90 net/core/dev.c:11796 ops_exit_list net/core/net_namespace.c:178 [inline] cleanup_net+0x89d/0xcc0 net/core/net_namespace.c:640 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd40 kernel/workqueue.c:3383 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 DEBUG: waiting rtnl_mutex for 3040 jiffies. task:kworker/0:5 state:D stack:21528 pid:5175 tgid:5175 ppid:2 flags:0x00004000 Workqueue: events linkwatch_event Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 linkwatch_event+0xe/0x60 net/core/link_watch.c:276 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd40 kernel/workqueue.c:3383 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Showing all locks held in the system: 6 locks held by kworker/0:1/9: #0: ffff88801cac5d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff88801cac5d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc900000e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc900000e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffff888023808190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #2: ffff888023808190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5849 #3: ffff8880608e9190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #3: ffff8880608e9190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 drivers/usb/core/hub.c:2295 #4: ffff8880608ee160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #4: ffff8880608ee160 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1094 [inline] #4: ffff8880608ee160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 drivers/base/dd.c:1292 #5: ffffffff8f0b5748 (input_mutex){+.+.}-{3:3}, at: __input_unregister_device+0x308/0x630 drivers/input/input.c:2293 4 locks held by kworker/u8:0/11: #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5ec210 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 net/core/net_namespace.c:594 #3: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 net/core/dev.c:11796 5 locks held by rcu_exp_gp_kthr/19: #0: ffffffff8e210f20 (console_lock){+.+.}-{0:0}, at: nbcon_cpu_emergency_flush+0x121/0x1d0 kernel/printk/nbcon.c:1341 #1: ffffffff8e210b30 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:338 [inline] #1: ffffffff8e210b30 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:267 [inline] #1: ffffffff8e210b30 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:287 [inline] #1: ffffffff8e210b30 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 kernel/printk/printk.c:3088 #2: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 kernel/time/timer.c:1789 #3: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:333 [inline] #3: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:845 [inline] #3: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 net/core/rtnetlink.c:95 #4: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:333 [inline] #4: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:845 [inline] #4: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6688 1 lock held by acpid/4528: #0: ffffffff8e33a9f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:329 [inline] #0: ffffffff8e33a9f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 kernel/rcu/tree_exp.h:959 2 locks held by getty/4852: #0: ffff88802ef220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900034cb2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 2 locks held by syz-executor/5078: #0: ffff88802c81c658 (&vma->vm_lock->lock){++++}-{3:3}, at: vma_start_read include/linux/mm.h:683 [inline] #0: ffff88802c81c658 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 mm/memory.c:5986 #1: ffff88802a350518 (sb_pagefaults){.+.+}-{0:0}, at: __sb_start_write include/linux/fs.h:1675 [inline] #1: ffff88802a350518 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs.h:1840 [inline] #1: ffff88802a350518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1f0/0xdf0 fs/ext4/inode.c:6052 3 locks held by kworker/0:5/5175: #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90008687d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90008687d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:276 3 locks held by kworker/u8:17/5981: #0: ffff88802a468148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff88802a468148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc9001254fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc9001254fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 2 locks held by kworker/u8:18/5983: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc900124dfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc900124dfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 1 lock held by syz-executor/8479: #0: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 1 lock held by syz-executor/8525: #0: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 2 locks held by syz-executor/8743: #0: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 #1: ffffffff8e33a9f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline] #1: ffffffff8e33a9f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:959 4 locks held by modprobe/8769: ============================================= DEBUG: waiting rtnl_mutex for 3144 jiffies. task:kworker/u8:17 state:D stack:19960 pid:5981 tgid:5981 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd40 kernel/workqueue.c:3383 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 DEBUG: waiting rtnl_mutex for 3143 jiffies. task:syz-executor state:D stack:19664 pid:8479 tgid:8479 ppid:8467 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7f0/0x990 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 __sys_sendto+0x3a4/0x4f0 net/socket.c:2204 __do_sys_sendto net/socket.c:2216 [inline] __se_sys_sendto net/socket.c:2212 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2212 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd9e9d7787c RSP: 002b:00007ffd7da24570 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007fd9eaa34620 RCX: 00007fd9e9d7787c RDX: 0000000000000028 RSI: 00007fd9eaa34670 RDI: 0000000000000003 RBP: 0000000000000000 R08: 00007ffd7da245c4 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 R13: 0000000000000000 R14: 00007fd9eaa34670 R15: 0000000000000000 DEBUG: waiting rtnl_mutex for 3143 jiffies. task:syz-executor state:D stack:19464 pid:8525 tgid:8525 ppid:8511 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7f0/0x990 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 __sys_sendto+0x3a4/0x4f0 net/socket.c:2204 __do_sys_sendto net/socket.c:2216 [inline] __se_sys_sendto net/socket.c:2212 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2212 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7c1737787c RSP: 002b:00007ffee506bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f7c18034620 RCX: 00007f7c1737787c RDX: 0000000000000028 RSI: 00007f7c18034670 RDI: 0000000000000003 RBP: 0000000000000000 R08: 00007ffee506bf14 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f7c18034670 R15: 0000000000000000 DEBUG: waiting rtnl_mutex for 3146 jiffies. task:kworker/u8:0 state:D stack:20080 pid:11 tgid:11 ppid:2 flags:0x00004000 Workqueue: netns cleanup_net Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 default_device_exit_batch+0xe9/0xa90 net/core/dev.c:11796 ops_exit_list net/core/net_namespace.c:178 [inline] cleanup_net+0x89d/0xcc0 net/core/net_namespace.c:640 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd40 kernel/workqueue.c:3383 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 DEBUG: waiting rtnl_mutex for 3143 jiffies. task:kworker/0:5 state:D stack:21528 pid:5175 tgid:5175 ppid:2 flags:0x00004000 Workqueue: events linkwatch_event Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 linkwatch_event+0xe/0x60 net/core/link_watch.c:276 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd40 kernel/workqueue.c:3383 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Showing all locks held in the system: 6 locks held by kworker/0:1/9: #0: ffff88801cac5d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff88801cac5d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc900000e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc900000e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffff888023808190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #2: ffff888023808190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5849 #3: ffff8880608e9190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #3: ffff8880608e9190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 drivers/usb/core/hub.c:2295 #4: ffff8880608ee160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #4: ffff8880608ee160 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1094 [inline] #4: ffff8880608ee160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 drivers/base/dd.c:1292 #5: ffffffff8f0b5748 (input_mutex){+.+.}-{3:3}, at: __input_unregister_device+0x308/0x630 drivers/input/input.c:2293 4 locks held by kworker/u8:0/11: #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5ec210 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 net/core/net_namespace.c:594 #3: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 net/core/dev.c:11796 5 locks held by rcu_exp_gp_kthr/19: #0: ffffffff8e210f20 (console_lock){+.+.}-{0:0}, at: nbcon_cpu_emergency_flush+0x121/0x1d0 kernel/printk/nbcon.c:1341 #1: ffffffff8e210b30 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:338 [inline] #1: ffffffff8e210b30 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:267 [inline] #1: ffffffff8e210b30 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:287 [inline] #1: ffffffff8e210b30 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 kernel/printk/printk.c:3088 #2: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 kernel/time/timer.c:1789 #3: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:333 [inline] #3: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:845 [inline] #3: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 net/core/rtnetlink.c:95 #4: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:333 [inline] #4: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:845 [inline] #4: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6688 1 lock held by acpid/4528: #0: ffffffff8e33a9f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:329 [inline] #0: ffffffff8e33a9f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 kernel/rcu/tree_exp.h:959 2 locks held by getty/4852: #0: ffff88802ef220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900034cb2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 2 locks held by syz-executor/5078: #0: ffff88802c81c658 (&vma->vm_lock->lock){++++}-{3:3}, at: vma_start_read include/linux/mm.h:683 [inline] #0: ffff88802c81c658 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 mm/memory.c:5986 #1: ffff88802a350518 (sb_pagefaults){.+.+}-{0:0}, at: __sb_start_write include/linux/fs.h:1675 [inline] #1: ffff88802a350518 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs.h:1840 [inline] #1: ffff88802a350518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1f0/0xdf0 fs/ext4/inode.c:6052 3 locks held by kworker/0:5/5175: #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90008687d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90008687d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:276 3 locks held by kworker/u8:17/5981: #0: ffff88802a468148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff88802a468148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc9001254fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc9001254fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 2 locks held by kworker/u8:18/5983: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc900124dfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc900124dfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 1 lock held by syz-executor/8479: #0: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 1 lock held by syz-executor/8525: #0: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 2 locks held by syz-executor/8743: #0: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 #1: ffffffff8e33a9f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline] #1: ffffffff8e33a9f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:959 4 locks held by modprobe/8769: ============================================= DEBUG: waiting rtnl_mutex for 3250 jiffies. task:kworker/u8:17 state:D stack:19960 pid:5981 tgid:5981 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4193 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd40 kernel/workqueue.c:3383 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 DEBUG: waiting rtnl_mutex for 3249 jiffies. task:syz-executor state:D stack:19664 pid:8479 tgid:8479 ppid:8467 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7f0/0x990 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 __sys_sendto+0x3a4/0x4f0 net/socket.c:2204 __do_sys_sendto net/socket.c:2216 [inline] __se_sys_sendto net/socket.c:2212 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2212 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd9e9d7787c RSP: 002b:00007ffd7da24570 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007fd9eaa34620 RCX: 00007fd9e9d7787c RDX: 0000000000000028 RSI: 00007fd9eaa34670 RDI: 0000000000000003 RBP: 0000000000000000 R08: 00007ffd7da245c4 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 R13: 0000000000000000 R14: 00007fd9eaa34670 R15: 0000000000000000 DEBUG: waiting rtnl_mutex for 3249 jiffies. task:syz-executor state:D stack:19464 pid:8525 tgid:8525 ppid:8511 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5249 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6597 __schedule_loop kernel/sched/core.c:6674 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6689 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6746 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6723 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7f0/0x990 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 __sys_sendto+0x3a4/0x4f0 net/socket.c:2204 __do_sys_sendto net/socket.c:2216 [inline] __se_sys_sendto net/socket.c:2212 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2212 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7c1737787c RSP: 002b:00007ffee506bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f7c18034620 RCX: 00007f7c1737787c