INFO: task dhcpcd:4760 blocked for more than 158 seconds.
Not tainted 6.10.0-rc5-syzkaller-00253-gde0a9f448633 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:dhcpcd state:D
stack:20384 pid:4760 tgid:4760 ppid:4759 flags:0x00000002
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0x17e8/0x4a20 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6837
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
netlink_dump+0x5d3/0xe50 net/netlink/af_netlink.c:2336
__netlink_dump_start+0x59d/0x780 net/netlink/af_netlink.c:2454
netlink_dump_start include/linux/netlink.h:340 [inline]
rtnetlink_dump_start net/core/rtnetlink.c:6524 [inline]
rtnetlink_rcv_msg+0xda2/0x1180 net/core/rtnetlink.c:6591
netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2564
netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline]
netlink_unicast+0x7ea/0x980 net/netlink/af_netlink.c:1361
netlink_sendmsg+0x8db/0xcb0 net/netlink/af_netlink.c:1905
sock_sendmsg_nosec net/socket.c:730 [inline]
__sock_sendmsg+0x221/0x270 net/socket.c:745
__sys_sendto+0x3a4/0x4f0 net/socket.c:2192
__do_sys_sendto net/socket.c:2204 [inline]
__se_sys_sendto net/socket.c:2200 [inline]
__x64_sys_sendto+0xde/0x100 net/socket.c:2200
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f06007edad7
RSP: 002b:00007fffd4a295b8 EFLAGS: 00000246
ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fffd4a2a6e0 RCX: 00007f06007edad7
RDX: 0000000000000014 RSI: 00007fffd4a2a600 RDI: 000000000000000e
RBP: 00007fffd4a2a670 R08: 00007fffd4a2a5e4 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012
R13: 00007fffd4a2a5e4 R14: 00007fffd4a2a600 R15: 0000000000000105
INFO: task udevd:5080 blocked for more than 160 seconds.
Not tainted 6.10.0-rc5-syzkaller-00253-gde0a9f448633 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd state:D
stack:22048 pid:5080 tgid:5080 ppid:4546 flags:0x00000002
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0x17e8/0x4a20 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6837
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
device_lock include/linux/device.h:1009 [inline]
uevent_show+0x17d/0x340 drivers/base/core.c:2743
dev_attr_show+0x55/0xc0 drivers/base/core.c:2437
sysfs_kf_seq_show+0x331/0x4c0 fs/sysfs/file.c:59
seq_read_iter+0x445/0xd60 fs/seq_file.c:230
new_sync_read fs/read_write.c:395 [inline]
vfs_read+0x9c4/0xbd0 fs/read_write.c:476
ksys_read+0x1a0/0x2c0 fs/read_write.c:619
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f889e316b6a
RSP: 002b:00007fff14a0cc48 EFLAGS: 00000246
ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000055ab1aa15c10 RCX: 00007f889e316b6a
RDX: 0000000000001000 RSI: 000055ab1aa0c930 RDI: 0000000000000008
RBP: 000055ab1aa15c10 R08: 0000000000000008 R09: 0000000000000000
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007fff14a0d128 R15: 000000000000000a
INFO: task syz-executor:11116 blocked for more than 161 seconds.
Not tainted 6.10.0-rc5-syzkaller-00253-gde0a9f448633 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor state:D
stack:20288 pid:11116 tgid:11116 ppid:1 flags:0x00004002
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0x17e8/0x4a20 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6837
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
tun_detach drivers/net/tun.c:698 [inline]
tun_chr_close+0x3e/0x1b0 drivers/net/tun.c:3500
__fput+0x406/0x8b0 fs/file_table.c:422
task_work_run+0x24f/0x310 kernel/task_work.c:180
exit_task_work include/linux/task_work.h:38 [inline]
do_exit+0xa27/0x27e0 kernel/exit.c:874
do_group_exit+0x207/0x2c0 kernel/exit.c:1023
__do_sys_exit_group kernel/exit.c:1034 [inline]
__se_sys_exit_group kernel/exit.c:1032 [inline]
__x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1032
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f122c575b99
RSP: 002b:00007f122c82eb68 EFLAGS: 00000246
ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f122c5e366f RCX: 00007f122c575b99
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
RBP: 000000000000006b R08: 00007f122c82c905 R09: 00007f122c82fde0
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f122c82fde0
R13: 00007f122c5e364a R14: 0000000000050bb7 R15: 00007f122c82fe20
Showing all locks held in the system:
3 locks held by kworker/0:1/9:
#0: ffff888015080948
(
(wq_completion)events
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3223 [inline]
, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329
#1:
ffffc900000e7d00 (deferred_process_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline]
ffffc900000e7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329
#2: ffffffff8f5e7188 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:104
1 lock held by khungtaskd/30:
#0:
ffffffff8e333f60
(
rcu_read_lock
){....}-{1:2}
, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:781 [inline]
, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6614
6 locks held by kworker/1:1/45:
3 locks held by kworker/1:2/784:
#0:
ffff888015080948
(
(wq_completion)events
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3223 [inline]
, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329
#1: ffffc90003bd7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline]
#1: ffffc90003bd7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329
#2:
ffffffff8f5e7188
(
rtnl_mutex
){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:276
4 locks held by kworker/u8:9/2510:
#0:
ffff888015ed5948
(
(wq_completion)netns
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3223 [inline]
, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329
#1:
ffffc90009adfd00
(
net_cleanup_work
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3224 [inline]
, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329
#2:
ffffffff8f5da950 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 net/core/net_namespace.c:594
#3:
ffffffff8f5e7188
(
rtnl_mutex
){+.+.}-{3:3}
, at: ieee80211_unregister_hw+0x55/0x2c0 net/mac80211/main.c:1651
5 locks held by kworker/u8:10/2526:
3 locks held by kworker/R-ipv6_/2623:
#0:
ffff888029ec6148
(
(wq_completion)ipv6_addrconf
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3223 [inline]
, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329
#1:
ffffc90009e1fca0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3224 [inline]
, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329
#2: ffffffff8f5e7188
(
rtnl_mutex
){+.+.}-{3:3}
, at: addrconf_verify_work+0x19/0x30 net/ipv6/addrconf.c:4733
2 locks held by dhcpcd/4760:
#0:
ffff88805f778678
(
nlk_cb_mutex-ROUTE
){+.+.}-{3:3}
, at: __netlink_dump_start+0x119/0x780 net/netlink/af_netlink.c:2418
#1: ffffffff8f5e7188 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0x5d3/0xe50 net/netlink/af_netlink.c:2336
2 locks held by getty/4844:
#0:
ffff88807a4180a0
(&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1:
ffffc90002f0e2f0
(
&ldata->atomic_read_lock
){+.+.}-{3:3}
, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211
4 locks held by udevd/5080:
#0:
ffff88807d6edc30
(
&p->lock
){+.+.}-{3:3}
, at: seq_read_iter+0xb7/0xd60 fs/seq_file.c:182
#1:
ffff888063746c88
(
&of->mutex#2){+.+.}-{3:3}
, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154
#2:
ffff888073d0c698
(
kn->active
#5
){++++}-{0:0}
, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155
#3:
ffff88805f77b190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
ffff88805f77b190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2743
3 locks held by kworker/u9:2/5367:
#0:
ffff88806486c948
(
(wq_completion)hci6
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3223 [inline]
, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329
#1:
ffffc90003957d00
((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline]
((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329
#2:
ffff888066118d88 (&hdev->req_lock){+.+.}-{3:3}
, at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:309
2 locks held by kworker/1:3/5399:
3 locks held by kworker/u9:4/5441:
#0:
ffff888074e24948
(
(wq_completion)hci3
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3223 [inline]
, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329
#1:
ffffc90003a47d00
(
(work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline]
(work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329
#2:
ffff88806c300d88
(&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:309
1 lock held by kworker/R-wg-cr/5472:
#0:
ffffffff8e1deb28
(
wq_pool_attach_mutex
){+.+.}-{3:3}
, at: worker_attach_to_pool+0x31/0x390 kernel/workqueue.c:2690
2 locks held by kworker/1:5/5497:
2 locks held by kworker/1:6/5513:
2 locks held by kworker/1:8/5522:
1 lock held by syz-executor/9646:
#0:
ffffffff8f5e7188
(rtnl_mutex
){+.+.}-{3:3}, at: tun_detach drivers/net/tun.c:698 [inline]
){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 drivers/net/tun.c:3500
1 lock held by kworker/R-wg-cr/9744:
1 lock held by kworker/R-wg-cr/9747:
#0:
ffffffff8e1deb28
(wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 kernel/workqueue.c:2690
1 lock held by kworker/R-wg-cr/9749:
#0:
ffffffff8e1deb28
(
wq_pool_attach_mutex
){+.+.}-{3:3}
, at: worker_attach_to_pool+0x31/0x390 kernel/workqueue.c:2690
1 lock held by kworker/R-wg-cr/10963:
#0:
ffffffff8e1deb28 (wq_pool_attach_mutex){+.+.}-{3:3}
, at: worker_attach_to_pool+0x31/0x390 kernel/workqueue.c:2690
1 lock held by kworker/R-wg-cr/10964:
#0: ffffffff8e1deb28 (wq_pool_attach_mutex){+.+.}-{3:3}
, at: worker_attach_to_pool+0x31/0x390 kernel/workqueue.c:2690
1 lock held by kworker/R-wg-cr/10970:
#0:
ffffffff8e1deb28
(
wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 kernel/workqueue.c:2690
1 lock held by syz-executor/11040:
#0:
ffffffff8f5e7188 (rtnl_mutex
){+.+.}-{3:3}
, at: tun_detach drivers/net/tun.c:698 [inline]
, at: tun_chr_close+0x3e/0x1b0 drivers/net/tun.c:3500
1 lock held by kworker/R-wg-cr/11111:
#0:
ffffffff8e1deb28
(
wq_pool_attach_mutex
){+.+.}-{3:3}
, at: worker_attach_to_pool+0x31/0x390 kernel/workqueue.c:2690
1 lock held by kworker/R-wg-cr/11112:
#0:
ffffffff8e1deb28 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 kernel/workqueue.c:2690
1 lock held by syz-executor/11116:
#0:
ffffffff8f5e7188
(
rtnl_mutex
){+.+.}-{3:3}
, at: tun_detach drivers/net/tun.c:698 [inline]
, at: tun_chr_close+0x3e/0x1b0 drivers/net/tun.c:3500
1 lock held by kworker/R-wg-cr/11117:
#0: ffffffff8e1deb28 (wq_pool_attach_mutex){+.+.}-{3:3}
, at: worker_attach_to_pool+0x31/0x390 kernel/workqueue.c:2690
1 lock held by kworker/R-wg-cr/11121:
#0:
ffffffff8e1deb28
(wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 kernel/workqueue.c:2690
1 lock held by kworker/R-wg-cr/11122:
#0: ffffffff8e1deb28 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 kernel/workqueue.c:2690
1 lock held by kworker/R-wg-cr/11123:
#0:
ffffffff8e1deb28 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 kernel/workqueue.c:2690
1 lock held by kworker/R-wg-cr/11224:
#0: ffffffff8e1deb28 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 kernel/workqueue.c:2690
1 lock held by kworker/R-wg-cr/11225:
#0:
ffffffff8e1deb28
(
wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 kernel/workqueue.c:2690
1 lock held by kworker/R-wg-cr/11236:
#0:
ffffffff8e1deb28
(
wq_pool_attach_mutex
){+.+.}-{3:3}
, at: worker_attach_to_pool+0x31/0x390 kernel/workqueue.c:2690
1 lock held by syz.0.1673/11545:
#0:
ffffffff8f5e7188
(
rtnl_mutex
){+.+.}-{3:3}
, at: tun_detach drivers/net/tun.c:698 [inline]
, at: tun_chr_close+0x3e/0x1b0 drivers/net/tun.c:3500
2 locks held by syz-executor/11555:
#0: ffffffff8f5da950 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 net/core/net_namespace.c:504
#1:
ffffffff8f5e7188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 net/ipv4/nexthop.c:3871
2 locks held by syz-executor/11558:
#0:
ffffffff8f5da950
(
pernet_ops_rwsem
){++++}-{3:3}
, at: copy_net_ns+0x4c6/0x7b0 net/core/net_namespace.c:504
#1:
ffffffff8f5e7188
(
rtnl_mutex
){+.+.}-{3:3}
, at: register_nexthop_notifier+0x84/0x290 net/ipv4/nexthop.c:3871
2 locks held by syz-executor/11564:
#0:
ffffffff8f5da950 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 net/core/net_namespace.c:504
#1: ffffffff8f5e7188
(rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 net/ipv4/nexthop.c:3871
2 locks held by syz-executor/11567:
#0:
ffffffff8f5da950
(
pernet_ops_rwsem
){++++}-{3:3}
, at: copy_net_ns+0x4c6/0x7b0 net/core/net_namespace.c:504
#1:
ffffffff8f5e7188
(
rtnl_mutex
){+.+.}-{3:3}
, at: register_nexthop_notifier+0x84/0x290 net/ipv4/nexthop.c:3871
2 locks held by syz-executor/11570:
#0:
ffffffff8f5da950
(pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 net/core/net_namespace.c:504
#1:
ffffffff8f5e7188
(rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 net/ipv4/nexthop.c:3871
8 locks held by syz-executor/11574:
#0: ffff88807a5f8420 (sb_writers#8){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2854 [inline]
#0: ffff88807a5f8420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 fs/read_write.c:586
#1:
ffff888018ece088
(&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 fs/kernfs/file.c:325
#2:
ffff888019bc03c8
(
kn->active
#54
){.+.+}-{0:0}
, at: kernfs_fop_write_iter+0x20f/0x500 fs/kernfs/file.c:326
#3:
ffffffff8eef4848
(nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 drivers/net/netdevsim/bus.c:216
#4:
ffff8880183100e8
(&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
(&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1093 [inline]
(&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 drivers/base/dd.c:1290
#5: ffff888018316250 (
&devlink->lock_key
#43
){+.+.}-{3:3}
, at: nsim_drv_remove+0x50/0x160 drivers/net/netdevsim/dev.c:1672
#6: