INFO: task kworker/u8:0:11 blocked for more than 143 seconds. Not tainted 6.10.0-rc3-next-20240611-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:0 state:D stack:21968 pid:11 tgid:11 ppid:2 flags:0x00004000 Workqueue: netns cleanup_net Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 tc_action_net_exit include/net/act_api.h:173 [inline] tunnel_key_exit_net+0x30/0x100 net/sched/act_tunnel_key.c:856 ops_exit_list net/core/net_namespace.c:178 [inline] cleanup_net+0x89d/0xcc0 net/core/net_namespace.c:640 process_one_work kernel/workqueue.c:3248 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3329 worker_thread+0x86d/0xd50 kernel/workqueue.c:3409 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task dhcpcd:4759 blocked for more than 143 seconds. Not tainted 6.10.0-rc3-next-20240611-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:dhcpcd state:D stack:19416 pid:4759 tgid:4759 ppid:4758 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 rtnl_lock net/core/rtnetlink.c:148 [inline] rtnl_dumpit+0x1bd/0x300 net/core/rtnetlink.c:6586 netlink_dump+0x645/0xd80 net/netlink/af_netlink.c:2325 netlink_recvmsg+0x6bb/0x11d0 net/netlink/af_netlink.c:1983 sock_recvmsg_nosec net/socket.c:1046 [inline] sock_recvmsg+0x22f/0x280 net/socket.c:1068 ____sys_recvmsg+0x1db/0x470 net/socket.c:2804 ___sys_recvmsg net/socket.c:2846 [inline] __sys_recvmsg+0x2f0/0x3e0 net/socket.c:2876 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe3a02c991e RSP: 002b:00007ffd0dabcfa8 EFLAGS: 00000246 ORIG_RAX: 000000000000002f RAX: ffffffffffffffda RBX: 00007ffd0dabe0d0 RCX: 00007fe3a02c991e RDX: 0000000000000000 RSI: 00007ffd0dabdff0 RDI: 0000000000000018 RBP: 00007ffd0dabe060 R08: 0000000000000000 R09: 0000000080000000 R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000f00 R13: 00007ffd0dabdfd4 R14: 00007ffd0dabdff0 R15: 00007ffd0dabdfe0 INFO: task kworker/0:3:5162 blocked for more than 144 seconds. Not tainted 6.10.0-rc3-next-20240611-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:3 state:D stack:19608 pid:5162 tgid:5162 ppid:2 flags:0x00004000 Workqueue: events linkwatch_event Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 linkwatch_event+0xe/0x60 net/core/link_watch.c:276 process_one_work kernel/workqueue.c:3248 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3329 worker_thread+0x86d/0xd50 kernel/workqueue.c:3409 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task syz-executor.1:5833 blocked for more than 145 seconds. Not tainted 6.10.0-rc3-next-20240611-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:21024 pid:5833 tgid:5833 ppid:1 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 unregister_netdevice_notifier_net+0x89/0x3a0 net/core/dev.c:1913 nsim_dev_hwstats_exit+0x81/0x290 drivers/net/netdevsim/hwstats.c:483 nsim_dev_reload_destroy+0x2ad/0x490 drivers/net/netdevsim/dev.c:1659 nsim_drv_remove+0x58/0x160 drivers/net/netdevsim/dev.c:1673 device_remove drivers/base/dd.c:566 [inline] __device_release_driver drivers/base/dd.c:1270 [inline] device_release_driver_internal+0x4a9/0x7c0 drivers/base/dd.c:1293 bus_remove_device+0x34f/0x420 drivers/base/bus.c:574 device_del+0x57a/0x9b0 drivers/base/core.c:3868 device_unregister+0x20/0xc0 drivers/base/core.c:3909 nsim_bus_dev_del drivers/net/netdevsim/bus.c:462 [inline] del_device_store+0x363/0x480 drivers/net/netdevsim/bus.c:226 kernfs_fop_write_iter+0x3a1/0x500 fs/kernfs/file.c:334 new_sync_write fs/read_write.c:497 [inline] vfs_write+0xa72/0xc90 fs/read_write.c:590 ksys_write+0x1a0/0x2c0 fs/read_write.c:643 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f57b847bbef RSP: 002b:00007ffd06eeb540 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f57b847bbef RDX: 0000000000000001 RSI: 00007ffd06eeb590 RDI: 0000000000000005 RBP: 00007f57b84da2aa R08: 0000000000000000 R09: 00007ffd06eeb397 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 R13: 00007ffd06eeb590 R14: 00007f57b90e4620 R15: 0000000000000003 INFO: task syz-executor.0:6143 blocked for more than 146 seconds. Not tainted 6.10.0-rc3-next-20240611-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:26200 pid:6143 tgid:6142 ppid:5118 flags:0x00000006 Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6724 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7ea/0x980 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8db/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 ____sys_sendmsg+0x525/0x7d0 net/socket.c:2585 ___sys_sendmsg net/socket.c:2639 [inline] __sys_sendmsg+0x2b0/0x3a0 net/socket.c:2668 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fef74e7cea9 RSP: 002b:00007fef75b850c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fef74fb3f80 RCX: 00007fef74e7cea9 RDX: 0000000000000000 RSI: 0000000020000c80 RDI: 0000000000000004 RBP: 00007fef74eebff4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007fef74fb3f80 R15: 00007ffc4a7669b8 INFO: task syz-executor.3:6157 blocked for more than 147 seconds. Not tainted 6.10.0-rc3-next-20240611-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.3 state:D stack:26688 pid:6157 tgid:6156 ppid:5121 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 register_nexthop_notifier+0x84/0x290 net/ipv4/nexthop.c:3871 ops_init+0x359/0x610 net/core/net_namespace.c:139 setup_net+0x515/0xca0 net/core/net_namespace.c:343 copy_net_ns+0x4e2/0x7b0 net/core/net_namespace.c:508 create_new_namespaces+0x425/0x7b0 kernel/nsproxy.c:110 unshare_nsproxy_namespaces+0x124/0x180 kernel/nsproxy.c:228 ksys_unshare+0x619/0xc10 kernel/fork.c:3304 __do_sys_unshare kernel/fork.c:3375 [inline] __se_sys_unshare kernel/fork.c:3373 [inline] __x64_sys_unshare+0x38/0x40 kernel/fork.c:3373 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f4bc387cea9 RSP: 002b:00007f4bc33ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 RAX: ffffffffffffffda RBX: 00007f4bc39b3f80 RCX: 00007f4bc387cea9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 RBP: 00007f4bc38ebff4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f4bc39b3f80 R15: 00007ffe23c90538 INFO: task syz-executor.4:6164 blocked for more than 148 seconds. Not tainted 6.10.0-rc3-next-20240611-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:26800 pid:6164 tgid:6161 ppid:5115 flags:0x00000006 Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 rtnetlink_rcv_msg+0x839/0x1170 net/core/rtnetlink.c:6724 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7ea/0x980 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8db/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 ____sys_sendmsg+0x525/0x7d0 net/socket.c:2585 ___sys_sendmsg net/socket.c:2639 [inline] __sys_sendmsg+0x2b0/0x3a0 net/socket.c:2668 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f11d387cea9 RSP: 002b:00007f11d45e20c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f11d39b4120 RCX: 00007f11d387cea9 RDX: 0000000000000000 RSI: 0000000020000d40 RDI: 0000000000000009 RBP: 00007f11d38ebff4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f11d39b4120 R15: 00007fffc0a5de08 Showing all locks held in the system: 4 locks held by kworker/u8:0/11: #0: ffff888015ed5948 ( (wq_completion)netns ){+.+.}-{0:0} , at: process_one_work kernel/workqueue.c:3223 [inline] , at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc90000107d00 ( net_cleanup_work ){+.+.}-{0:0} , at: process_one_work kernel/workqueue.c:3224 [inline] , at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffffffff8f5e2c90 ( pernet_ops_rwsem ){++++}-{3:3} , at: cleanup_net+0x16a/0xcc0 net/core/net_namespace.c:594 #3: ffffffff8f5ef4c8 ( rtnl_mutex ){+.+.}-{3:3} , at: tc_action_net_exit include/net/act_api.h:173 [inline] , at: tunnel_key_exit_net+0x30/0x100 net/sched/act_tunnel_key.c:856 1 lock held by khungtaskd/30: #0: ffffffff8e3354a0 ( rcu_read_lock ){....}-{1:2} , at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline] , at: rcu_read_lock include/linux/rcupdate.h:838 [inline] , at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6689 6 locks held by kworker/u9:0/55: #0: ffff88802af0f148 ( (wq_completion)hci8){+.+.}-{0:0} , at: process_one_work kernel/workqueue.c:3223 [inline] , at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc90000bf7d00 ((work_completion)(&hdev->cmd_sync_work) ){+.+.}-{0:0} , at: process_one_work kernel/workqueue.c:3224 [inline] , at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffff88802394cd88 ( &hdev->req_lock){+.+.}-{3:3} , at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:309 #3: ffff88802394c078 ( &hdev->lock){+.+.}-{3:3} , at: hci_abort_conn_sync+0x1ea/0xde0 net/bluetooth/hci_sync.c:5431 #4: ffffffff8f759f08 ( hci_cb_list_lock){+.+.}-{3:3} , at: hci_connect_cfm include/net/bluetooth/hci_core.h:1968 [inline] , at: hci_conn_failed+0x185/0x340 net/bluetooth/hci_conn.c:1257 #5: ffffffff8e33a878 ( rcu_state.exp_mutex){+.+.}-{3:3} , at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline] , at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:959 3 locks held by kworker/u8:6/1096: #0: ffff88802a0f7948 ( (wq_completion)ipv6_addrconf){+.+.}-{0:0} , at: process_one_work kernel/workqueue.c:3223 [inline] , at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc90004847d00 ( (work_completion)(&(&net->ipv6.addr_chk_work)->work) ){+.+.}-{0:0} , at: process_one_work kernel/workqueue.c:3224 [inline] , at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffffffff8f5ef4c8 (rtnl_mutex ){+.+.}-{3:3} , at: addrconf_verify_work+0x19/0x30 net/ipv6/addrconf.c:4733 5 locks held by kworker/u9:1/4489: #0: ffff88802e8f0148 ( (wq_completion)hci7 ){+.+.}-{0:0} , at: process_one_work kernel/workqueue.c:3223 [inline] , at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc9000d62fd00 ( (work_completion)(&hdev->cmd_sync_work) ){+.+.}-{0:0} , at: process_one_work kernel/workqueue.c:3224 [inline] , at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffff88805d548d88 ( &hdev->req_lock){+.+.}-{3:3} , at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:309 #3: ffff88805d548078 ( &hdev->lock){+.+.}-{3:3} , at: hci_abort_conn_sync+0x1ea/0xde0 net/bluetooth/hci_sync.c:5431 #4: ffffffff8f759f08 ( hci_cb_list_lock ){+.+.}-{3:3} , at: hci_connect_cfm include/net/bluetooth/hci_core.h:1968 [inline] , at: hci_conn_failed+0x185/0x340 net/bluetooth/hci_conn.c:1257 2 locks held by dhcpcd/4759: #0: ffff88806ac4f678 ( nlk_cb_mutex-ROUTE){+.+.}-{3:3} , at: netlink_dump+0xcb/0xd80 net/netlink/af_netlink.c:2271 #1: ffffffff8f5ef4c8 ( rtnl_mutex){+.+.}-{3:3} , at: rtnl_lock net/core/rtnetlink.c:148 [inline] , at: rtnl_dumpit+0x1bd/0x300 net/core/rtnetlink.c:6586 2 locks held by getty/4849: #0: ffff88802ae1d0a0 ( &tty->ldisc_sem){++++}-{0:0} , at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90002f162f0 (&ldata->atomic_read_lock ){+.+.}-{3:3} , at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 8 locks held by syz-fuzzer/5087: 5 locks held by kworker/u9:2/5117: #0: ffff888059edd948 ((wq_completion)hci9 ){+.+.}-{0:0} , at: process_one_work kernel/workqueue.c:3223 [inline] , at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc900037ffd00 ( (work_completion)(&hdev->cmd_sync_work) ){+.+.}-{0:0} , at: process_one_work kernel/workqueue.c:3224 [inline] , at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffff88807d47cd88 ( &hdev->req_lock ){+.+.}-{3:3} , at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:309 #3: ffff88807d47c078 ( &hdev->lock ){+.+.}-{3:3} , at: hci_abort_conn_sync+0x1ea/0xde0 net/bluetooth/hci_sync.c:5431 #4: ffffffff8f759f08 ( hci_cb_list_lock ){+.+.}-{3:3} , at: hci_connect_cfm include/net/bluetooth/hci_core.h:1968 [inline] , at: hci_conn_failed+0x185/0x340 net/bluetooth/hci_conn.c:1257 5 locks held by kworker/u9:3/5122: #0: ffff88802cc45148 ( (wq_completion)hci6 ){+.+.}-{0:0} , at: process_one_work kernel/workqueue.c:3223 [inline] , at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc9000383fd00 ( (work_completion)(&hdev->cmd_sync_work) ){+.+.}-{0:0} , at: process_one_work kernel/workqueue.c:3224 [inline] , at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffff88805c7c4d88 ( &hdev->req_lock ){+.+.}-{3:3} , at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:309 #3: ffff88805c7c4078 ( &hdev->lock ){+.+.}-{3:3} , at: hci_abort_conn_sync+0x1ea/0xde0 net/bluetooth/hci_sync.c:5431 #4: ffffffff8f759f08 ( hci_cb_list_lock ){+.+.}-{3:3} , at: hci_connect_cfm include/net/bluetooth/hci_core.h:1968 [inline] , at: hci_conn_failed+0x185/0x340 net/bluetooth/hci_conn.c:1257 5 locks held by kworker/u9:6/5127: