INFO: task kworker/1:6:5150 blocked for more than 143 seconds. Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:6 state:D stack:19760 pid:5150 tgid:5150 ppid:2 flags:0x00004000 Workqueue: events_power_efficient reg_check_chans_work Call Trace: context_switch kernel/sched/core.c:5248 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6600 __schedule_loop kernel/sched/core.c:6677 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6692 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 wiphy_lock include/net/cfg80211.h:5969 [inline] reg_leave_invalid_chans net/wireless/reg.c:2468 [inline] reg_check_chans_work+0x164/0xfd0 net/wireless/reg.c:2483 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd40 kernel/workqueue.c:3383 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Showing all locks held in the system: 2 locks held by kthreadd/2: 2 locks held by kworker/0:1/9: 3 locks held by kworker/u8:0/11: 4 locks held by kworker/1:0/25: 1 lock held by khungtaskd/30: #0: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:333 [inline] #0: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:845 [inline] #0: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6704 3 locks held by kworker/u8:2/35: 5 locks held by kworker/1:1/46: 3 locks held by kworker/u8:3/52: 4 locks held by kworker/u8:5/1007: 4 locks held by kworker/0:2/1150: #0: ffff8880647a8548 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff8880647a8548 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc900038a7d00 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((typeof(*((worker))) *)((worker))); (typeof((typeof(*((worker))) *)((worker)))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc900038a7d00 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((typeof(*((worker))) *)((worker))); (typeof((typeof(*((worker))) *)((worker)))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffff888064135248 (&wg->static_identity.lock){++++}-{3:3}, at: wg_noise_handshake_consume_initiation+0x156/0xf70 drivers/net/wireguard/noise.c:598 #3: ffff888062fcce38 (&handshake->lock){++++}-{3:3}, at: wg_noise_handshake_consume_initiation+0x844/0xf70 drivers/net/wireguard/noise.c:632 3 locks held by kworker/u8:6/2479: #0: ffff888029e4b948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888029e4b948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90008447d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90008447d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 net/ipv6/addrconf.c:4733 3 locks held by kworker/u8:7/2800: 3 locks held by kworker/u8:8/3304: 3 locks held by syslogd/4528: 1 lock held by klogd/4535: 3 locks held by udevd/4546: 4 locks held by dhcpcd/4759: 1 lock held by dhcpcd/4760: 2 locks held by getty/4858: #0: ffff88802a4e90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 2 locks held by kworker/0:3/5092: 2 locks held by syz-executor/5103: 4 locks held by kworker/1:3/5108: #0: ffff888029d8bd48 ((wq_completion)wg-kex-wg1#16){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888029d8bd48 ((wq_completion)wg-kex-wg1#16){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90003f1fd00 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((typeof(*((worker))) *)((worker))); (typeof((typeof(*((worker))) *)((worker)))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90003f1fd00 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((typeof(*((worker))) *)((worker))); (typeof((typeof(*((worker))) *)((worker)))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffff888075775248 (&wg->static_identity.lock){++++}-{3:3}, at: wg_noise_handshake_consume_initiation+0x156/0xf70 drivers/net/wireguard/noise.c:598 #3: ffff88805d8973b8 (&handshake->lock){++++}-{3:3}, at: wg_noise_handshake_consume_initiation+0x844/0xf70 drivers/net/wireguard/noise.c:632 4 locks held by kworker/0:5/5147: 3 locks held by kworker/1:4/5148: 2 locks held by kworker/1:5/5149: 4 locks held by kworker/1:6/5150: #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc900040ffd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc900040ffd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 net/wireless/reg.c:2480 #3: ffff888057438768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: wiphy_lock include/net/cfg80211.h:5969 [inline] #3: ffff888057438768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: reg_leave_invalid_chans net/wireless/reg.c:2468 [inline] #3: ffff888057438768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: reg_check_chans_work+0x164/0xfd0 net/wireless/reg.c:2483 2 locks held by kworker/0:6/5151: 4 locks held by kworker/0:7/5152: #0: ffff888024371d48 ((wq_completion)wg-kex-wg0#18){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888024371d48 ((wq_completion)wg-kex-wg0#18){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc9000413fd00 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((typeof(*((worker))) *)((worker))); (typeof((typeof(*((worker))) *)((worker)))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc9000413fd00 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((typeof(*((worker))) *)((worker))); (typeof((typeof(*((worker))) *)((worker)))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffff88805b9d5248 (&wg->static_identity.lock){++++}-{3:3}, at: wg_noise_handshake_consume_initiation+0x156/0xf70 drivers/net/wireguard/noise.c:598 #3: ffff88805d893b78 (&handshake->lock){++++}-{3:3}, at: wg_noise_handshake_consume_initiation+0x844/0xf70 drivers/net/wireguard/noise.c:632 3 locks held by kworker/1:7/5202: 4 locks held by udevd/5316: 3 locks held by kworker/u8:9/5659: 3 locks held by kworker/u8:10/6668: 3 locks held by kworker/u8:11/6669: 1 lock held by syz-executor/9681: 4 locks held by syz-executor/9799: 1 lock held by kworker/R-wg-cr/9825: #0: ffffffff8e1dffa8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_detach_from_pool kernel/workqueue.c:2723 [inline] #0: ffffffff8e1dffa8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 kernel/workqueue.c:3518 1 lock held by kworker/R-wg-cr/9885: #0: ffffffff8e1dffa8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_detach_from_pool kernel/workqueue.c:2723 [inline] #0: ffffffff8e1dffa8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 kernel/workqueue.c:3518 1 lock held by kworker/R-wg-cr/9887: 3 locks held by syz-executor/9908: 1 lock held by kworker/R-wg-cr/9921: #0: ffffffff8e1dffa8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 kernel/workqueue.c:2664 1 lock held by kworker/R-wg-cr/9952: #0: ffffffff8e1dffa8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 kernel/workqueue.c:2664 1 lock held by kworker/R-wg-cr/9953: #0: ffffffff8e1dffa8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 kernel/workqueue.c:2664 6 locks held by syz.2.1706/10365: 2 locks held by kworker/u8:12/10385: 4 locks held by kworker/1:8/10386: #0: ffff888062818148 ((wq_completion)wg-kex-wg2#14){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888062818148 ((wq_completion)wg-kex-wg2#14){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90002f3fd00 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((typeof(*((worker))) *)((worker))); (typeof((typeof(*((worker))) *)((worker)))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90002f3fd00 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((typeof(*((worker))) *)((worker))); (typeof((typeof(*((worker))) *)((worker)))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffff888067c59248 (&wg->static_identity.lock){++++}-{3:3}, at: wg_noise_handshake_consume_initiation+0x156/0xf70 drivers/net/wireguard/noise.c:598 #3: ffff88805d895798 (&handshake->lock){++++}-{3:3}, at: wg_noise_handshake_consume_initiation+0x844/0xf70 drivers/net/wireguard/noise.c:632 6 locks held by kworker/0:8/10388: 3 locks held by syz-executor/10389: ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline] watchdog+0xfee/0x1030 kernel/hung_task.c:379 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 10388 Comm: kworker/0:8 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 Workqueue: events nsim_dev_trap_report_work RIP: 0010:kasan_check_range+0x1ba/0x290 mm/kasan/generic.c:189 Code: fb 48 8d 5d 07 48 85 ed 48 0f 49 dd 48 83 e3 f8 48 29 dd 74 12 41 80 3b 00 0f 85 a6 00 00 00 49 ff c3 48 ff cd 75 ee 5b 41 5c <41> 5e 41 5f 5d c3 cc cc cc cc 40 84 ed 75 5f f7 c5 00 ff 00 00 75 RSP: 0018:ffffc90000007210 EFLAGS: 00000056 RAX: 0000000000000001 RBX: 0000000000000021 RCX: ffffffff816f7278 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff93010780 RBP: 0000000000000000 R08: ffffffff93010787 R09: 1ffffffff26020f0 R10: dffffc0000000000 R11: fffffbfff26020f1 R12: ffff888026aa0bc8 R13: ffff888026aa0ad8 R14: dffffc0000000001 R15: fffffbfff26020f1 FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005555747fd608 CR3: 000000000e132000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: instrument_atomic_read include/linux/instrumented.h:68 [inline] _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline] hlock_class kernel/locking/lockdep.c:228 [inline] check_wait_context kernel/locking/lockdep.c:4824 [inline] __lock_acquire+0x5c8/0x2000 kernel/locking/lockdep.c:5143 lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5816 rcu_lock_acquire include/linux/rcupdate.h:333 [inline] rcu_read_lock include/linux/rcupdate.h:845 [inline] nf_hook include/linux/netfilter.h:238 [inline] NF_HOOK include/linux/netfilter.h:312 [inline] br_nf_pre_routing_ipv6+0x43f/0x770 net/bridge/br_netfilter_ipv6.c:184 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_bridge_pre net/bridge/br_input.c:277 [inline] br_handle_frame+0x9fd/0x1530 net/bridge/br_input.c:424 __netif_receive_skb_core+0x13e8/0x4570 net/core/dev.c:5549 __netif_receive_skb_one_core net/core/dev.c:5653 [inline] __netif_receive_skb+0x12f/0x650 net/core/dev.c:5769 process_backlog+0x662/0x15b0 net/core/dev.c:6102 __napi_poll+0xcb/0x490 net/core/dev.c:6766 napi_poll net/core/dev.c:6835 [inline] net_rx_action+0x89b/0x1240 net/core/dev.c:6957 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554 do_softirq+0x11b/0x1e0 kernel/softirq.c:455 __local_bh_enable_ip+0x1bb/0x200 kernel/softirq.c:382 spin_unlock_bh include/linux/spinlock.h:396 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline] nsim_dev_trap_report_work+0x75d/0xaa0 drivers/net/netdevsim/dev.c:850 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd40 kernel/workqueue.c:3383 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 DEBUG: holding rtnl_mutex for 15615 jiffies. task:kworker/1:6 state:D stack:19760 pid:5150 tgid:5150 ppid:2 flags:0x00004000 Workqueue: events_power_efficient reg_check_chans_work Call Trace: context_switch kernel/sched/core.c:5248 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6600 __schedule_loop kernel/sched/core.c:6677 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6692 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 wiphy_lock include/net/cfg80211.h:5969 [inline] reg_leave_invalid_chans net/wireless/reg.c:2468 [inline] reg_check_chans_work+0x164/0xfd0 net/wireless/reg.c:2483 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd40 kernel/workqueue.c:3383 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 DEBUG: waiting rtnl_mutex for 11977 jiffies. task:kworker/u8:6 state:D stack:20056 pid:2479 tgid:2479 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_verify_work Call Trace: context_switch kernel/sched/core.c:5248 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6600 __schedule_loop kernel/sched/core.c:6677 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6692 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6749 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 addrconf_verify_work+0x19/0x30 net/ipv6/addrconf.c:4733 process_one_work kernel/workqueue.c:3224 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3305 worker_thread+0x86d/0xd40 kernel/workqueue.c:3383 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Showing all locks held in the system: 2 locks held by kthreadd/2: 2 locks held by kworker/0:1/9: 3 locks held by kworker/u8:0/11: 2 locks held by kworker/u8:1/12: 1 lock held by kworker/R-mm_pe/13: 4 locks held by kworker/1:0/25: 3 locks held by kworker/u8:2/35: 5 locks held by kworker/1:1/46: 3 locks held by kworker/u8:3/52: 4 locks held by kworker/u8:4/62: 4 locks held by kworker/u8:5/1007: 4 locks held by kworker/0:2/1150: #0: ffff8880647a8548 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff8880647a8548 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc900038a7d00 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((typeof(*((worker))) *)((worker))); (typeof((typeof(*((worker))) *)((worker)))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc900038a7d00 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((typeof(*((worker))) *)((worker))); (typeof((typeof(*((worker))) *)((worker)))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffff888064135248 (&wg->static_identity.lock){++++}-{3:3}, at: wg_noise_handshake_consume_initiation+0x156/0xf70 drivers/net/wireguard/noise.c:598 #3: ffff888062fcce38 (&handshake->lock){++++}-{3:3}, at: wg_noise_handshake_consume_initiation+0x844/0xf70 drivers/net/wireguard/noise.c:632 3 locks held by kworker/u8:6/2479: #0: ffff888029e4b948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888029e4b948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90008447d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90008447d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 net/ipv6/addrconf.c:4733 3 locks held by kworker/u8:7/2800: 3 locks held by kworker/u8:8/3304: 2 locks held by syslogd/4528: 2 locks held by klogd/4535: 2 locks held by udevd/4546: 4 locks held by dhcpcd/4759: 1 lock held by dhcpcd/4760: 2 locks held by getty/4858: #0: ffff88802a4e90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 2 locks held by kworker/0:3/5092: 3 locks held by syz-executor/5103: 4 locks held by kworker/1:3/5108: #0: ffff888029d8bd48 ((wq_completion)wg-kex-wg1#16){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888029d8bd48 ((wq_completion)wg-kex-wg1#16){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90003f1fd00 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((typeof(*((worker))) *)((worker))); (typeof((typeof(*((worker))) *)((worker)))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90003f1fd00 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((typeof(*((worker))) *)((worker))); (typeof((typeof(*((worker))) *)((worker)))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffff888075775248 (&wg->static_identity.lock){++++}-{3:3}, at: wg_noise_handshake_consume_initiation+0x156/0xf70 drivers/net/wireguard/noise.c:598 #3: ffff88805d8973b8 (&handshake->lock){++++}-{3:3}, at: wg_noise_handshake_consume_initiation+0x844/0xf70 drivers/net/wireguard/noise.c:632 3 locks held by kworker/0:4/5145: 4 locks held by kworker/0:5/5147: 3 locks held by kworker/1:4/5148: 3 locks held by kworker/1:5/5149: 4 locks held by kworker/1:6/5150: #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc900040ffd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc900040ffd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 net/wireless/reg.c:2480 #3: ffff888057438768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: wiphy_lock include/net/cfg80211.h:5969 [inline] #3: ffff888057438768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: reg_leave_invalid_chans net/wireless/reg.c:2468 [inline] #3: ffff888057438768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: reg_check_chans_work+0x164/0xfd0 net/wireless/reg.c:2483 2 locks held by kworker/0:6/5151: 4 locks held by kworker/0:7/5152: 2 locks held by kworker/1:7/5202: 4 locks held by udevd/5316: 3 locks held by kworker/u8:9/5659: 5 locks held by kworker/u8:10/6668: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90012b8fd00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90012b8fd00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffff88802dc58768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: wiphy_lock include/net/cfg80211.h:5969 [inline] #2: ffff88802dc58768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0xd9/0x490 net/wireless/core.c:426 #3: ffffc90000a18ca0 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 kernel/time/timer.c:1789 #4: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:333 [inline] #4: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:845 [inline] #4: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6704 3 locks held by kworker/u8:11/6669: 1 lock held by syz-executor/9681: 1 lock held by syz-executor/9799: 1 lock held by kworker/R-wg-cr/9825: #0: ffffffff8e1dffa8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_detach_from_pool kernel/workqueue.c:2723 [inline] #0: ffffffff8e1dffa8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 kernel/workqueue.c:3518 1 lock held by kworker/R-wg-cr/9885: #0: ffffffff8e1dffa8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_detach_from_pool kernel/workqueue.c:2723 [inline] #0: ffffffff8e1dffa8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 kernel/workqueue.c:3518 2 locks held by kworker/R-wg-cr/9887: 3 locks held by syz-executor/9908: 1 lock held by kworker/R-wg-cr/9921: #0: ffffffff8e1dffa8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 kernel/workqueue.c:2664 1 lock held by kworker/R-wg-cr/9952: #0: ffffffff8e1dffa8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 kernel/workqueue.c:2664 1 lock held by kworker/R-wg-cr/9953: 6 locks held by syz.2.1706/10365: 2 locks held by kworker/u8:12/10385: 4 locks held by kworker/1:8/10386: #0: ffff888062818148 ((wq_completion)wg-kex-wg2#14){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline] #0: ffff888062818148 ((wq_completion)wg-kex-wg2#14){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305 #1: ffffc90002f3fd00 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((typeof(*((worker))) *)((worker))); (typeof((typeof(*((worker))) *)((worker)))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline] #1: ffffc90002f3fd00 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((typeof(*((worker))) *)((worker))); (typeof((typeof(*((worker))) *)((worker)))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305 #2: ffff888067c59248 (&wg->static_identity.lock){++++}-{3:3}, at: wg_noise_handshake_consume_initiation+0x156/0xf70 drivers/net/wireguard/noise.c:598 #3: ffff88805d895798 (&handshake->lock){++++}-{3:3}, at: wg_noise_handshake_consume_initiation+0x844/0xf70 drivers/net/wireguard/noise.c:632 5 locks held by kworker/0:8/10388: 3 locks held by syz-executor/10389: ============================================= net_ratelimit: 13955 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:7a:70:72:a2:9d, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:7a:70:72:a2:9d, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:7a:70:72:a2:9d, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)