syzbot


INFO: task hung in ppp_exit_net (4)

Status: upstream: reported on 2024/06/13 09:12
Subsystems: ppp
[Documentation on labels]
Reported-by: syzbot+32bd764abd98eb40dea8@syzkaller.appspotmail.com
First crash: 361d, last: 44d
Discussions (3)
Title Replies (including bot) Last reply
[syzbot] Monthly ppp report (Dec 2024) 0 (1) 2024/12/27 23:24
[syzbot] Monthly ppp report (Sep 2024) 0 (1) 2024/09/23 09:02
[syzbot] [ppp?] INFO: task hung in ppp_exit_net (4) 0 (1) 2024/06/13 09:12
Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 INFO: task hung in ppp_exit_net 1 354d 354d 0/3 auto-obsoleted due to no activity on 2024/09/04 17:46
upstream INFO: task hung in ppp_exit_net (2) ppp 1 803d 803d 0/28 auto-obsoleted due to no activity on 2023/06/04 05:29
upstream INFO: task hung in ppp_exit_net (3) ppp 1 640d 640d 0/28 auto-obsoleted due to no activity on 2023/11/13 21:08
upstream INFO: task hung in ppp_exit_net ppp 1 1052d 1052d 0/28 auto-closed as invalid on 2022/09/27 15:01
linux-6.1 INFO: task hung in ppp_exit_net 1 359d 359d 0/3 auto-obsoleted due to no activity on 2024/08/30 06:26

Sample crash report:
INFO: task syz.1.434:7913 blocked for more than 153 seconds.
      Not tainted 6.14.0-syzkaller-12245-g91e5bfe317d8 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.434       state:D stack:26968 pid:7913  tgid:7901  ppid:5843   task_flags:0x400140 flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x116f/0x5de0 kernel/sched/core.c:6767
 __schedule_loop kernel/sched/core.c:6845 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6860
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6917
 __mutex_lock_common kernel/locking/mutex.c:678 [inline]
 __mutex_lock+0x6c7/0xb90 kernel/locking/mutex.c:746
 ppp_exit_net+0xad/0x3b0 drivers/net/ppp/ppp_generic.c:1158
 ops_exit_list+0xb0/0x180 net/core/net_namespace.c:172
 setup_net+0x4e8/0x850 net/core/net_namespace.c:396
 copy_net_ns+0x2a6/0x5f0 net/core/net_namespace.c:518
 create_new_namespaces+0x3ea/0xad0 kernel/nsproxy.c:110
 unshare_nsproxy_namespaces+0xc0/0x1f0 kernel/nsproxy.c:228
 ksys_unshare+0x45b/0xa40 kernel/fork.c:3375
 __do_sys_unshare kernel/fork.c:3446 [inline]
 __se_sys_unshare kernel/fork.c:3444 [inline]
 __x64_sys_unshare+0x31/0x40 kernel/fork.c:3444
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd77a98d169
RSP: 002b:00007fd77b79b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007fd77aba6400 RCX: 00007fd77a98d169
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
RBP: 00007fd77aa0e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fd77aba6400 R15: 00007ffffb167218
 </TASK>
INFO: task syz.2.436:7917 blocked for more than 153 seconds.
      Not tainted 6.14.0-syzkaller-12245-g91e5bfe317d8 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.436       state:D stack:25688 pid:7917  tgid:7917  ppid:5840   task_flags:0x400040 flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x116f/0x5de0 kernel/sched/core.c:6767
 __schedule_loop kernel/sched/core.c:6845 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6860
 schedule_timeout+0x257/0x290 kernel/time/sleep_timeout.c:75
 ___down_common+0x2d8/0x460 kernel/locking/semaphore.c:229
 __down_common kernel/locking/semaphore.c:250 [inline]
 __down+0x20/0x30 kernel/locking/semaphore.c:258
 down+0x74/0xa0 kernel/locking/semaphore.c:64
 console_lock+0x5b/0xa0 kernel/printk/printk.c:2849
 con_shutdown+0x41/0x90 drivers/tty/vt/vt.c:3565
 release_tty+0xd4/0x5d0 drivers/tty/tty_io.c:1589
 tty_release_struct+0xb7/0xe0 drivers/tty/tty_io.c:1701
 tty_release+0xe29/0x1430 drivers/tty/tty_io.c:1861
 __fput+0x3ff/0xb70 fs/file_table.c:465
 task_work_run+0x14d/0x240 kernel/task_work.c:227
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x27b/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x260 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fdb9878d169
RSP: 002b:00007ffd1d0f1458 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00007fdb989a7ba0 RCX: 00007fdb9878d169
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 00007fdb989a7ba0 R08: 000000000008b3dc R09: 0000001e1d0f174f
R10: 00007fdb989a7ac0 R11: 0000000000000246 R12: 000000000003b8c7
R13: 00007fdb989a6080 R14: ffffffffffffffff R15: 00007ffd1d0f1570
 </TASK>

Showing all locks held in the system:
1 lock held by kthreadd/2:
3 locks held by kworker/0:0/9:
 #0: ffff88814dac1d48 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3213
 #1: ffffc900000e7d18 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3214
 #2: ffff88807def98f0 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x37/0x1c0 drivers/net/wireguard/cookie.c:162
4 locks held by kworker/0:1/10:
8 locks held by kworker/u8:0/12:
4 locks held by kworker/u8:1/13:
1 lock held by kworker/R-mm_pe/14:
 #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline]
 #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 kernel/workqueue.c:3529
3 locks held by kworker/1:0/24:
 #0: ffff8880637e6948 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3213
 #1: ffffc900001e7d18 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3214
 #2: ffff888061f3d278 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe80 drivers/net/wireguard/noise.c:822
1 lock held by khungtaskd/31:
 #0: ffffffff8e3c15c0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8e3c15c0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
 #0: ffffffff8e3c15c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6764
2 locks held by kworker/u8:2/36:
3 locks held by kworker/1:1/47:
 #0: ffff88801b481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3213
 #1: ffffc90000b87d18 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3214
 #2: ffffffff9012b7e8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x83/0x1170 net/wireless/reg.c:2483
3 locks held by kworker/u8:3/53:
3 locks held by kworker/u8:4/62:
3 locks held by kworker/u8:5/82:
4 locks held by kworker/0:2/125:
4 locks held by kworker/u8:6/1092:
3 locks held by kworker/u8:7/1111:
4 locks held by kworker/1:2/1215:
4 locks held by kworker/u8:8/3481:
2 locks held by kworker/u8:9/3512:
 #0: ffff88801b489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3213
 #1: ffffc9000c73fd18 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3214
3 locks held by syslogd/5194:
1 lock held by klogd/5201:
2 locks held by udevd/5212:
1 lock held by dhcpcd/5505:
1 lock held by dhcpcd/5506:
2 locks held by getty/5597:
 #0: ffff888031a050a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfa1/0x1450 drivers/tty/n_tty.c:2211
1 lock held by syz-executor/5827:
3 locks held by syz-executor/5840:
1 lock held by kworker/R-wg-cr/5865:
 #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline]
 #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 kernel/workqueue.c:3529
2 locks held by kworker/R-wg-cr/5866:
1 lock held by kworker/R-wg-cr/5867:
 #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline]
 #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 kernel/workqueue.c:3529
1 lock held by kworker/R-wg-cr/5868:
 #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline]
 #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 kernel/workqueue.c:3529
1 lock held by kworker/R-wg-cr/5870:
 #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline]
 #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 kernel/workqueue.c:3529
1 lock held by kworker/R-wg-cr/5871:
 #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline]
 #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 kernel/workqueue.c:3529
1 lock held by kworker/R-wg-cr/5872:
 #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline]
 #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 kernel/workqueue.c:3529
1 lock held by kworker/R-wg-cr/5875:
 #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline]
 #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 kernel/workqueue.c:3529
1 lock held by kworker/R-wg-cr/5876:
 #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline]
 #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 kernel/workqueue.c:3529
1 lock held by kworker/R-wg-cr/5877:
1 lock held by kworker/R-wg-cr/5878:
 #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline]
 #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 kernel/workqueue.c:3529
4 locks held by kworker/0:3/5879:
4 locks held by kworker/0:4/5880:
3 locks held by kworker/1:4/5899:
3 locks held by kworker/0:6/5903:
3 locks held by kworker/u8:10/6846:
 #0: ffff88814d806148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3213
 #1: ffffc900033a7d18 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3214
 #2: ffffffff9012b7e8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #2: ffffffff9012b7e8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 net/ipv6/addrconf.c:4730
3 locks held by kworker/u8:11/6847:
 #0: ffff88801b489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3213
 #1: ffffc90005277d18 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3214
 #2: ffff8880b8439f18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:613 [inline]
 #2: ffff8880b8439f18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 kernel/sched/core.c:598
2 locks held by kworker/u8:12/6848:
4 locks held by kworker/u8:14/6851:
4 locks held by kworker/u8:15/6853:
3 locks held by kworker/u8:16/7226:
4 locks held by kworker/u8:17/7227:
 #0: ffff88806352d948 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3213
 #1: ffffc9000508fd18 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3214
 #2: ffff888062c2d308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x650 drivers/net/wireguard/noise.c:529
 #3: ffff88807defd278 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x650 drivers/net/wireguard/noise.c:530
4 locks held by kworker/u8:18/7418:
3 locks held by kworker/u8:19/7419:
3 locks held by kworker/u8:20/7420:
 #0: ffff88801b489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3213
 #1: ffffc9000c40fd18 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3214
 #2: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: idle_cull_fn+0x99/0x460 kernel/workqueue.c:2960
3 locks held by kworker/u8:21/7422:
2 locks held by kworker/u8:22/7423:
4 locks held by kworker/u8:23/7425:
 #0: ffff88806364c948 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3213
 #1: ffffc9000c37fd18 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3214
 #2: ffff88805c8f5308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x650 drivers/net/wireguard/noise.c:529
 #3: ffff88807defaad8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x650 drivers/net/wireguard/noise.c:530
3 locks held by kworker/u8:24/7426:
4 locks held by kworker/u8:25/7427:
5 locks held by kworker/u8:26/7433:
4 locks held by kworker/u8:27/7434:
2 locks held by kworker/u8:28/7435:
 #0: ffff88801b489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3213
 #1: ffffc9000c1cfd18 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3214
4 locks held by kworker/u8:29/7436:
3 locks held by kworker/u8:30/7437:
3 locks held by kworker/u8:31/7573:
2 locks held by syz.3.433/7899:
 #0: ffffffff90115950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 net/core/net_namespace.c:514
 #1: ffffffff9012b7e8 (rtnl_mutex){+.+.}-{4:4}, at: mpls_net_exit+0x83/0x350 net/mpls/af_mpls.c:2706
3 locks held by syz.1.434/7904:
2 locks held by syz.1.434/7913:
 #0: ffffffff90115950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 net/core/net_namespace.c:514
 #1: ffffffff9012b7e8 (rtnl_mutex){+.+.}-{4:4}, at: ppp_exit_net+0xad/0x3b0 drivers/net/ppp/ppp_generic.c:1158
1 lock held by syz.2.436/7917:
 #0: ffffffff8f0a5068 (tty_mutex){+.+.}-{4:4}, at: tty_release_struct+0xad/0xe0 drivers/tty/tty_io.c:1700
2 locks held by syz.2.436/7918:
 #0: ffffffff90115950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 net/core/net_namespace.c:514
 #1: ffffffff9012b7e8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21d/0x7d0 net/ipv4/ip_tunnel.c:1160
6 locks held by syz.0.437/7922:
4 locks held by kworker/u8:9/7928:

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-12245-g91e5bfe317d8 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:274 [inline]
 watchdog+0xf70/0x12c0 kernel/hung_task.c:437
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 1111 Comm: kworker/u8:7 Not tainted 6.14.0-syzkaller-12245-g91e5bfe317d8 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker
RIP: 0010:check_kcov_mode kernel/kcov.c:183 [inline]
RIP: 0010:write_comp_data+0x32/0x90 kernel/kcov.c:246
Code: f1 65 48 8b 15 b7 b6 ea 11 65 8b 05 c8 b6 ea 11 a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 <8b> 82 3c 16 00 00 85 c0 74 4f 8b 82 18 16 00 00 83 f8 03 75 44 48
RSP: 0018:ffffc90000a08068 EFLAGS: 00000246
RAX: 0000000080000101 RBX: 1ffff92000141013 RCX: ffffffff8a486c24
RDX: ffff888027cd8000 RSI: 0000000000000000 RDI: 0000000000000005
RBP: 000000000000000a R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002
R13: ffff888036438000 R14: ffff888022bdc000 R15: ffff8880348d1200
FS:  0000000000000000(0000) GS:ffff888124ac1000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd91c9de854 CR3: 000000005dd78000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 nf_hook+0x284/0x7a0 include/linux/netfilter.h:244
 NF_HOOK include/linux/netfilter.h:312 [inline]
 br_nf_forward_ip.part.0+0x5de/0x810 net/bridge/br_netfilter_hooks.c:719
 br_nf_forward_ip net/bridge/br_netfilter_hooks.c:679 [inline]
 br_nf_forward+0xf0f/0x1be0 net/bridge/br_netfilter_hooks.c:776
 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]
 nf_hook_slow+0xbb/0x200 net/netfilter/core.c:626
 nf_hook+0x45e/0x780 include/linux/netfilter.h:269
 NF_HOOK include/linux/netfilter.h:312 [inline]
 __br_forward+0x1be/0x5b0 net/bridge/br_forward.c:115
 deliver_clone net/bridge/br_forward.c:131 [inline]
 br_flood+0x39c/0x650 net/bridge/br_forward.c:249
 br_handle_frame_finish+0xe8e/0x1c20 net/bridge/br_input.c:220
 br_nf_hook_thresh+0x301/0x410 net/bridge/br_netfilter_hooks.c:1170
 br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 net/bridge/br_netfilter_ipv6.c:154
 NF_HOOK include/linux/netfilter.h:314 [inline]
 br_nf_pre_routing_ipv6+0x3cd/0x8c0 net/bridge/br_netfilter_ipv6.c:184
 br_nf_pre_routing+0x860/0x15b0 net/bridge/br_netfilter_hooks.c:508
 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:282 [inline]
 br_handle_frame+0xad5/0x14a0 net/bridge/br_input.c:433
 __netif_receive_skb_core.constprop.0+0xa23/0x4a00 net/core/dev.c:5777
 __netif_receive_skb_one_core+0xb0/0x1e0 net/core/dev.c:5889
 __netif_receive_skb+0x1d/0x160 net/core/dev.c:6004
 process_backlog+0x442/0x15e0 net/core/dev.c:6356
 __napi_poll.constprop.0+0xb7/0x550 net/core/dev.c:7328
 napi_poll net/core/dev.c:7392 [inline]
 net_rx_action+0xa97/0x1010 net/core/dev.c:7514
 handle_softirqs+0x216/0x8e0 kernel/softirq.c:579
 do_softirq kernel/softirq.c:480 [inline]
 do_softirq+0xb2/0xf0 kernel/softirq.c:467
 </IRQ>
 <TASK>
 __local_bh_enable_ip+0x100/0x120 kernel/softirq.c:407
 spin_unlock_bh include/linux/spinlock.h:396 [inline]
 wg_index_hashtable_insert+0x108/0x9f0 drivers/net/wireguard/peerlookup.c:126
 wg_noise_handshake_create_initiation+0x4a0/0x650 drivers/net/wireguard/noise.c:569
 wg_packet_send_handshake_initiation+0x19a/0x360 drivers/net/wireguard/send.c:34
 wg_packet_handshake_send_worker+0x1c/0x30 drivers/net/wireguard/send.c:51
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Crashes (130):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/04/02 11:42 upstream 91e5bfe317d8 c799dfdd .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto INFO: task hung in ppp_exit_net
2025/03/29 08:11 upstream eff5f16bfd87 cf25e2c2 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto INFO: task hung in ppp_exit_net
2025/03/17 15:02 upstream 4701f33a1070 948c34e4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in ppp_exit_net
2024/12/17 12:08 upstream f44d154d6e3d f93b2b55 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in ppp_exit_net
2024/12/15 05:53 upstream a0e3919a2df2 7cbfbb3a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in ppp_exit_net
2024/11/17 21:36 upstream f66d6acccbc0 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in ppp_exit_net
2024/11/15 20:57 upstream f868cd251776 f6ede3a3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in ppp_exit_net
2024/10/26 10:50 upstream 850925a8133c 65e8686b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in ppp_exit_net
2024/10/12 07:52 upstream 9e4c6c1ad9a1 084d8178 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in ppp_exit_net
2024/10/10 22:41 upstream d3d1556696c1 8fbfc0c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in ppp_exit_net
2024/10/10 04:23 upstream b983b271662b 0278d004 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in ppp_exit_net
2024/10/06 22:13 upstream 8f602276d390 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in ppp_exit_net
2024/10/06 11:58 upstream 8f602276d390 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in ppp_exit_net
2024/10/01 11:43 upstream e32cde8d2bd7 bbd4e0a4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in ppp_exit_net
2024/09/28 15:50 upstream ad46e8f95e93 440b26ec .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in ppp_exit_net
2024/09/28 07:51 upstream ad46e8f95e93 440b26ec .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in ppp_exit_net
2024/09/24 19:01 upstream abf2050f51fd 5643e0e9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in ppp_exit_net
2024/09/22 16:37 upstream 88264981f208 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in ppp_exit_net
2024/09/21 23:23 upstream 88264981f208 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root INFO: task hung in ppp_exit_net
2024/06/12 03:59 upstream 2ef5971ff345 4d75f4f7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in ppp_exit_net
2024/06/09 08:59 upstream 771ed66105de 82c05ab8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in ppp_exit_net
2024/10/15 17:39 upstream eca631b8fe80 14943bb8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in ppp_exit_net
2024/10/14 04:59 upstream ba01565ced22 084d8178 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in ppp_exit_net
2024/10/10 17:04 upstream d3d1556696c1 8fbfc0c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in ppp_exit_net
2024/10/06 14:28 upstream 8f602276d390 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in ppp_exit_net
2024/10/05 15:58 upstream 27cc6fdf7201 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in ppp_exit_net
2024/09/30 15:06 upstream 9852d85ec9d4 bbd4e0a4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in ppp_exit_net
2024/09/24 21:15 upstream abf2050f51fd 5643e0e9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in ppp_exit_net
2024/09/23 12:35 upstream de5cb0dcb74c 89298aad .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in ppp_exit_net
2024/09/22 14:40 upstream 88264981f208 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in ppp_exit_net
2024/10/14 17:14 net 0b84db5d8f25 084d8178 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in ppp_exit_net
2024/10/11 18:59 net 1d227fcc7222 cd942402 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in ppp_exit_net
2024/10/08 16:42 net f15b8d6eb638 402f1df0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in ppp_exit_net
2024/10/07 10:31 net 9234a2549cb6 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in ppp_exit_net
2024/07/24 19:07 net 863ff546fb62 b24754ac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in ppp_exit_net
2024/06/02 17:45 net 33700a0c9b56 3113787f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in ppp_exit_net
2025/02/15 04:49 net-next 7a7e0197133d 40a34ec9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/11/26 18:47 net-next fcc79e1714e8 11dbc254 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/11/07 19:43 net-next 2a6f99ee1a80 c069283c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/10/27 08:40 net-next 6d858708d465 65e8686b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/10/26 03:58 net-next 6d858708d465 65e8686b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/10/25 20:43 net-next 6d858708d465 65e8686b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/10/25 11:29 net-next 6d858708d465 c79b8ca5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/10/23 21:50 net-next 6d858708d465 15fa2979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/10/23 16:04 net-next 6d858708d465 15fa2979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/10/22 23:59 net-next 6d858708d465 9d74f456 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/10/21 19:51 net-next 6d858708d465 a93682b3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/10/21 00:25 net-next 6d858708d465 cd6fc0a3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/10/18 21:48 net-next 6d858708d465 cd6fc0a3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/10/15 15:35 net-next 60b4d49b9621 14943bb8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/10/13 00:07 net-next c531f2269a53 084d8178 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/10/12 22:39 net-next c531f2269a53 084d8178 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/10/12 04:30 net-next d677aebd663d 084d8178 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/10/06 10:31 net-next d521db38f339 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/10/03 19:27 net-next 7c2f1c2690a5 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/10/02 20:47 net-next 44badc908f2c a4c7fd36 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/10/02 16:03 net-next 44badc908f2c a4c7fd36 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/09/30 11:44 net-next c824deb1a897 ba29ff75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/09/29 18:11 net-next c824deb1a897 ba29ff75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/09/28 10:59 net-next c824deb1a897 440b26ec .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ppp_exit_net
2024/10/15 09:41 linux-next b852e1e7a038 14943bb8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root INFO: task hung in ppp_exit_net
* Struck through repros no longer work on HEAD.