device hsr_slave_0 entered promiscuous mode device hsr_slave_1 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready INFO: task kworker/0:2:2874 blocked for more than 140 seconds. Not tainted 4.14.198-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/0:2 D27152 2874 2 0x80000000 Workqueue: usb_hub_wq hub_event Call Trace: IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready context_switch kernel/sched/core.c:2808 [inline] __schedule+0x88b/0x1de0 kernel/sched/core.c:3384 schedule+0x8d/0x1b0 kernel/sched/core.c:3428 usb_kill_urb.part.0+0x125/0x190 drivers/usb/core/urb.c:691 IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready usb_kill_urb+0x7c/0x90 drivers/usb/core/urb.c:686 8021q: adding VLAN 0 to HW filter on device bond0 usb_start_wait_urb+0x206/0x260 drivers/usb/core/message.c:62 IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready usb_internal_control_msg drivers/usb/core/message.c:100 [inline] usb_control_msg+0x302/0x450 drivers/usb/core/message.c:151 hub_port_init+0xfb1/0x28b0 drivers/usb/core/hub.c:4555 hub_port_connect drivers/usb/core/hub.c:4905 [inline] hub_port_connect_change drivers/usb/core/hub.c:5088 [inline] port_event drivers/usb/core/hub.c:5194 [inline] hub_event+0x1bc5/0x39a0 drivers/usb/core/hub.c:5274 process_one_work+0x793/0x14a0 kernel/workqueue.c:2116 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2250 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 Showing all locks held in the system: 1 lock held by khungtaskd/1068: #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7c/0x21a kernel/locking/lockdep.c:4548 5 locks held by kworker/0:2/2874: #0: ("usb_hub_wq"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 kernel/workqueue.c:2087 #1: ((&hub->events)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 kernel/workqueue.c:2091 IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready #2: (&dev->mutex){....}, at: [] device_lock include/linux/device.h:1081 [inline] #2: (&dev->mutex){....}, at: [] hub_event+0xfc/0x39a0 drivers/usb/core/hub.c:5220 #3: (&port_dev->status_lock){+.+.}, at: [] usb_lock_port drivers/usb/core/hub.c:2934 [inline] #3: (&port_dev->status_lock){+.+.}, at: [] hub_port_connect drivers/usb/core/hub.c:4904 [inline] #3: (&port_dev->status_lock){+.+.}, at: [] hub_port_connect_change drivers/usb/core/hub.c:5088 [inline] #3: (&port_dev->status_lock){+.+.}, at: [] port_event drivers/usb/core/hub.c:5194 [inline] #3: (&port_dev->status_lock){+.+.}, at: [] hub_event+0x1bb0/0x39a0 drivers/usb/core/hub.c:5274 #4: (hcd->address0_mutex){+.+.}, at: [] hub_port_init+0x15b/0x28b0 drivers/usb/core/hub.c:4429 3 locks held by kworker/1:0/6350: #0: ("%s"("ipv6_addrconf")){+.+.}, at: [] process_one_work+0x6b0/0x14a0 kernel/workqueue.c:2087 #1: ((&(&ifa->dad_work)->work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 kernel/workqueue.c:2091 #2: (rtnl_mutex){+.+.}, at: [] addrconf_dad_work+0x89/0xef0 net/ipv6/addrconf.c:3917 1 lock held by syz-executor.0/19326: IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready #0: IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready (rtnl_mutex){+.+.}, at: [] rtnl_lock net/core/rtnetlink.c:72 [inline] (rtnl_mutex){+.+.}, at: [] rtnetlink_rcv_msg+0x31d/0xb10 net/core/rtnetlink.c:4311 8021q: adding VLAN 0 to HW filter on device team0 ============================================= NMI backtrace for cpu 0 IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready CPU: 0 PID: 1068 Comm: khungtaskd Not tainted 4.14.198-syzkaller #0 IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x283 lib/dump_stack.c:58 nmi_cpu_backtrace.cold+0x57/0x93 lib/nmi_backtrace.c:101 bridge0: port 1(bridge_slave_0) entered blocking state nmi_trigger_cpumask_backtrace+0x13a/0x17f lib/nmi_backtrace.c:62 bridge0: port 1(bridge_slave_0) entered forwarding state trigger_all_cpu_backtrace include/linux/nmi.h:140 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:195 [inline] watchdog+0x5b9/0xb40 kernel/hung_task.c:274 IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready kthread+0x30d/0x420 kernel/kthread.c:232 IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 Sending NMI from CPU 0 to CPUs 1: IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready NMI backtrace for cpu 1 CPU: 1 PID: 6587 Comm: kworker/1:3 Not tainted 4.14.198-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events linkwatch_event task: ffff8880941ac040 task.stack: ffff888094d18000 RIP: 0010:reacquire_held_locks+0x5/0x3f0 kernel/locking/lockdep.c:3633 RSP: 0018:ffff888094d1f8b8 EFLAGS: 00000046 RAX: 0000000000000005 RBX: 1ffff110129a3f1b RCX: 1ffff1101283592d RDX: 0000000000000005 RSI: 0000000000000005 RDI: ffff8880941ac040 RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000000 R11: ffff8880941ac040 R12: 11e65c9d028e9ccb R13: ffffffff8a5a8c00 R14: ffff8880941ac040 R15: 0000000000000005 FS: 0000000000000000(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc273539018 CR3: 000000008fd8f000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __lock_release kernel/locking/lockdep.c:3797 [inline] lock_release+0x36b/0x870 kernel/locking/lockdep.c:4017 __raw_spin_unlock include/linux/spinlock_api_smp.h:150 [inline] _raw_spin_unlock+0x17/0x40 kernel/locking/spinlock.c:184 console_unlock+0x326/0xf20 kernel/printk/printk.c:2386 vprintk_emit+0x224/0x620 kernel/printk/printk.c:1923 vprintk_func+0x58/0x152 kernel/printk/printk_safe.c:401 printk+0x9e/0xbc kernel/printk/printk.c:1996 addrconf_notify.cold+0x5e/0x17c net/ipv6/addrconf.c:3450 notifier_call_chain+0x108/0x1a0 kernel/notifier.c:93 call_netdevice_notifiers_info net/core/dev.c:1667 [inline] netdev_state_change net/core/dev.c:1314 [inline] netdev_state_change+0xca/0xf0 net/core/dev.c:1308 linkwatch_do_dev+0x8a/0xf0 net/core/link_watch.c:164 __linkwatch_run_queue+0x260/0x480 net/core/link_watch.c:202 linkwatch_event+0x3c/0x50 net/core/link_watch.c:237 process_one_work+0x793/0x14a0 kernel/workqueue.c:2116 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2250 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 Code: 24 68 4c 8b 54 24 60 0f b6 74 24 58 4c 8b 44 24 50 48 8b 54 24 48 e9 4e d5 ff ff 90 66 2e 0f 1f 84 00 00 00 00 00 48 63 c2 39 d6 <48> 8d 04 80 48 8d 84 c7 88 08 00 00 0f 86 40 02 00 00 83 ee 01