INFO: task kworker/u8:8:708 blocked for more than 143 seconds. Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:8 state:D stack:0 pid:708 tgid:708 ppid:2 task_flags:0x4208060 flags:0x00000010 Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker Call trace: __switch_to+0x414/0x834 arch/arm64/kernel/process.c:735 (T) context_switch kernel/sched/core.c:5382 [inline] __schedule+0x13b0/0x28d4 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6860 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6917 rwsem_down_write_slowpath+0xa80/0x10f0 kernel/locking/rwsem.c:1176 __down_write_common kernel/locking/rwsem.c:1304 [inline] __down_write kernel/locking/rwsem.c:1313 [inline] down_write+0xb4/0xc0 kernel/locking/rwsem.c:1578 wg_noise_handshake_create_initiation+0x114/0x6c8 drivers/net/wireguard/noise.c:530 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:34 [inline] wg_packet_handshake_send_worker+0x13c/0x2a0 drivers/net/wireguard/send.c:51 process_one_work+0x7e8/0x156c kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3400 kthread+0x5fc/0x75c kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:847 INFO: task kworker/1:2:1805 blocked for more than 143 seconds. Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:2 state:D stack:0 pid:1805 tgid:1805 ppid:2 task_flags:0x4208060 flags:0x00000010 Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker Call trace: __switch_to+0x414/0x834 arch/arm64/kernel/process.c:735 (T) context_switch kernel/sched/core.c:5382 [inline] __schedule+0x13b0/0x28d4 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6860 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6917 rwsem_down_read_slowpath+0x4ac/0x7c8 kernel/locking/rwsem.c:1084 __down_read_common kernel/locking/rwsem.c:1248 [inline] __down_read kernel/locking/rwsem.c:1261 [inline] down_read+0x9c/0x2f8 kernel/locking/rwsem.c:1526 wg_noise_handshake_consume_initiation+0x414/0x748 drivers/net/wireguard/noise.c:632 wg_receive_handshake_packet drivers/net/wireguard/receive.c:144 [inline] wg_packet_handshake_receive_worker+0x4dc/0xc20 drivers/net/wireguard/receive.c:213 process_one_work+0x7e8/0x156c kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3400 kthread+0x5fc/0x75c kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:847 INFO: task kworker/1:7:6569 blocked for more than 143 seconds. Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:7 state:D stack:0 pid:6569 tgid:6569 ppid:2 task_flags:0x4208060 flags:0x00000010 Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker Call trace: __switch_to+0x414/0x834 arch/arm64/kernel/process.c:735 (T) context_switch kernel/sched/core.c:5382 [inline] __schedule+0x13b0/0x28d4 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6860 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6917 rwsem_down_read_slowpath+0x4ac/0x7c8 kernel/locking/rwsem.c:1084 __down_read_common kernel/locking/rwsem.c:1248 [inline] __down_read kernel/locking/rwsem.c:1261 [inline] down_read+0x9c/0x2f8 kernel/locking/rwsem.c:1526 wg_noise_handshake_consume_response+0x20c/0x988 drivers/net/wireguard/noise.c:753 wg_receive_handshake_packet drivers/net/wireguard/receive.c:166 [inline] wg_packet_handshake_receive_worker+0x50c/0xc20 drivers/net/wireguard/receive.c:213 process_one_work+0x7e8/0x156c kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3400 kthread+0x5fc/0x75c kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:847 INFO: task kworker/u8:22:6952 blocked for more than 143 seconds. Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:22 state:D stack:0 pid:6952 tgid:6952 ppid:2 task_flags:0x4208060 flags:0x00000010 Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker Call trace: __switch_to+0x414/0x834 arch/arm64/kernel/process.c:735 (T) context_switch kernel/sched/core.c:5382 [inline] __schedule+0x13b0/0x28d4 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6860 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6917 rwsem_down_write_slowpath+0xa80/0x10f0 kernel/locking/rwsem.c:1176 __down_write_common kernel/locking/rwsem.c:1304 [inline] __down_write kernel/locking/rwsem.c:1313 [inline] down_write+0xb4/0xc0 kernel/locking/rwsem.c:1578 wg_noise_handshake_create_initiation+0x114/0x6c8 drivers/net/wireguard/noise.c:530 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:34 [inline] wg_packet_handshake_send_worker+0x13c/0x2a0 drivers/net/wireguard/send.c:51 process_one_work+0x7e8/0x156c kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3400 kthread+0x5fc/0x75c kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:847 Showing all locks held in the system: 1 lock held by kworker/R-rcu_g/4: #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline] #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x86c/0xec8 kernel/workqueue.c:3529 2 locks held by kworker/0:0/9: 2 locks held by kworker/0:1/11: 1 lock held by kworker/R-mm_pe/13: #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline] #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x86c/0xec8 kernel/workqueue.c:3529 1 lock held by khungtaskd/32: #0: ffff80008f508920 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 include/linux/rcupdate.h:330 3 locks held by kworker/u8:2/44: #0: ffff0000c0031148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212 #1: ffff800097d57bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212 #2: ffff80009248e928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 3 locks held by kworker/u8:4/207: 4 locks held by kworker/u8:8/708: #0: ffff0000d7f4d148 ((wq_completion)wg-kex-wg2#11){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212 #1: ffff80009d107bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212 #2: ffff0000d8145308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10c/0x6c8 drivers/net/wireguard/noise.c:529 #3: ffff0000fb15a0f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x114/0x6c8 drivers/net/wireguard/noise.c:530 4 locks held by kworker/1:2/1805: #0: ffff0000c730c548 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212 #1: ffff8000a0797bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212 #2: ffff0000d8139308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x130/0x748 drivers/net/wireguard/noise.c:598 #3: ffff0000f1eda0f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x414/0x748 drivers/net/wireguard/noise.c:632 3 locks held by kworker/0:2/2302: 4 locks held by kworker/0:3/2310: 3 locks held by dhcpcd/6161: 2 locks held by getty/6253: #0: ffff0000d32fe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80009a0032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x34c/0xfa0 drivers/tty/n_tty.c:2222 1 lock held by kworker/R-wg-cr/6522: #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline] #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x86c/0xec8 kernel/workqueue.c:3529 1 lock held by kworker/R-wg-cr/6527: 1 lock held by kworker/R-wg-cr/6530: #0: ffff80008f508920 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x18/0x54 include/linux/rcupdate.h:330 1 lock held by kworker/R-wg-cr/6535: #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline] #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x86c/0xec8 kernel/workqueue.c:3529 1 lock held by kworker/R-wg-cr/6536: #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline] #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x86c/0xec8 kernel/workqueue.c:3529 2 locks held by kworker/0:4/6544: 4 locks held by kworker/1:7/6569: #0: ffff0000d1d20148 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212 #1: ffff8000a1b27bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212 #2: ffff0000d8145308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x180/0x988 drivers/net/wireguard/noise.c:742 #3: ffff0000fb15a0f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x20c/0x988 drivers/net/wireguard/noise.c:753 2 locks held by kworker/0:5/6600: 4 locks held by kworker/0:6/6640: 3 locks held by kworker/u8:14/6942: #0: ffff0000c0031148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212 #1: ffff8000a2df7bc0 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212 #2: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: idle_cull_fn+0xc4/0x60c kernel/workqueue.c:2960 2 locks held by kworker/u8:16/6944: #0: ffff0000c0031148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212 #1: ffff8000a34d7bc0 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212 4 locks held by kworker/u8:22/6952: #0: ffff0000f012d148 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212 #1: ffff8000a2a17bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212 #2: ffff0000d8139308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10c/0x6c8 drivers/net/wireguard/noise.c:529 #3: ffff0000f1eda0f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x114/0x6c8 drivers/net/wireguard/noise.c:530 2 locks held by kworker/u8:24/6954: #0: ffff0000c0031148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212 #1: ffff8000a29f7bc0 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212 2 locks held by kworker/u8:26/6957: 6 locks held by kworker/u8:27/6958: #0: ffff0000c183a148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212 #1: ffff8000a1d17bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212 #2: ffff800092481e50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x138/0x9c0 net/core/net_namespace.c:608 #3: ffff0000f192d0e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:922 [inline] #3: ffff0000f192d0e8 (&dev->mutex){....}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:108 [inline] #3: ffff0000f192d0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0xe4/0x380 net/devlink/core.c:506 #4: ffff0000f192e250 (&devlink->lock_key){+.+.}-{4:4}, at: devl_lock net/devlink/core.c:276 [inline] #4: ffff0000f192e250 (&devlink->lock_key){+.+.}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:109 [inline] #4: ffff0000f192e250 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0xf0/0x380 net/devlink/core.c:506 #5: ffff80008f50e300 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x58/0x528 kernel/rcu/tree.c:3774 3 locks held by syz-executor/7567: #0: ffff80008fc26ea8 (bio_slab_lock){+.+.}-{4:4}, at: bio_put_slab block/bio.c:140 [inline] #0: ffff80008fc26ea8 (bio_slab_lock){+.+.}-{4:4}, at: bioset_exit+0x1f8/0x3dc block/bio.c:1664 #1: ffff80008f3a24b0 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x48/0x178 mm/slab_common.c:510 #2: ffff80008f5e5b78 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x58/0x178 mm/slab_common.c:511 1 lock held by kworker/0:7/7721: 1 lock held by kworker/R-wg-cr/7742: #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x348 kernel/workqueue.c:2678 2 locks held by kworker/R-wg-cr/7745: 1 lock held by kworker/R-wg-cr/7806: #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x348 kernel/workqueue.c:2678 1 lock held by kworker/R-wg-cr/7807: 1 lock held by kworker/R-wg-cr/7808: #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline] #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x86c/0xec8 kernel/workqueue.c:3529 1 lock held by syz-executor/7830: #0: ffff80008f50e300 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x58/0x528 kernel/rcu/tree.c:3774 7 locks held by syz-executor/7857: #0: ffff0000d89b8420 (sb_writers#6){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:3041 [inline] #0: ffff0000d89b8420 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x244/0x97c fs/read_write.c:680 #1: ffff0000f9837488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b4/0x488 fs/kernfs/file.c:325 #2: ffff0000cac4a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1d0/0x488 fs/kernfs/file.c:326 #3: ffff800091543d68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd4/0x31c drivers/net/netdevsim/bus.c:216 #4: ffff0000f22320e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:922 [inline] #4: ffff0000f22320e8 (&dev->mutex){....}-{4:4}, at: __device_driver_lock drivers/base/dd.c:1094 [inline] #4: ffff0000f22320e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0x9c/0x658 drivers/base/dd.c:1292 #5: ffff0000cfd5d250 (&devlink->lock_key#5){+.+.}-{4:4}, at: devl_lock+0x24/0x34 net/devlink/core.c:276 #6: ffff80008f50e300 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x58/0x528 kernel/rcu/tree.c:3774 5 locks held by kworker/R-wg-cr/7869: 1 lock held by kworker/R-wg-cr/7873: 1 lock held by kworker/R-wg-cr/7876: #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline] #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x86c/0xec8 kernel/workqueue.c:3529 2 locks held by kworker/R-wg-cr/7878: 1 lock held by syz.9.283/7989: #0: ffff80008f50e300 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x58/0x528 kernel/rcu/tree.c:3774 4 locks held by syz-executor/8013: #0: ffff0000d89b8420 (sb_writers#6){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:3041 [inline] #0: ffff0000d89b8420 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x244/0x97c fs/read_write.c:680 #1: ffff0001092f8888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b4/0x488 fs/kernfs/file.c:325 #2: ffff0000cac4a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1d0/0x488 fs/kernfs/file.c:326 #3: ffff800091543d68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd4/0x31c drivers/net/netdevsim/bus.c:216 4 locks held by syz-executor/8030: #0: ffff0000d89b8420 (sb_writers#6){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:3041 [inline] #0: ffff0000d89b8420 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x244/0x97c fs/read_write.c:680 #1: ffff000112eaa488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b4/0x488 fs/kernfs/file.c:325 #2: ffff0000cac4a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1d0/0x488 fs/kernfs/file.c:326 #3: ffff800091543d68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd4/0x31c drivers/net/netdevsim/bus.c:216 4 locks held by syz-executor/8043: #0: ffff0000d89b8420 (sb_writers#6){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:3041 [inline] #0: ffff0000d89b8420 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x244/0x97c fs/read_write.c:680 #1: ffff0000d5df4888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b4/0x488 fs/kernfs/file.c:325 #2: ffff0000cac4a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1d0/0x488 fs/kernfs/file.c:326 #3: ffff800091543d68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd4/0x31c drivers/net/netdevsim/bus.c:216 1 lock held by syz.8.311/8111: #0: ffff80008f50e300 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x58/0x528 kernel/rcu/tree.c:3774 2 locks held by syz-executor/8127: #0: ffff80008f322568 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_lock_acquire+0x18/0x54 include/linux/srcu.h:160 #1: ffff80009248e928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #1: ffff80009248e928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline] #1: ffff80009248e928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x710/0x15dc net/core/rtnetlink.c:4064 2 locks held by syz-executor/8137: #0: ffff8000912db7a0 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_lock_acquire+0x18/0x54 include/linux/srcu.h:160 #1: ffff80009248e928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #1: ffff80009248e928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline] #1: ffff80009248e928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x710/0x15dc net/core/rtnetlink.c:4064 3 locks held by syz-executor/8161: 2 locks held by syz-executor/8169: #0: ffff8000913299e0 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_lock_acquire+0x18/0x54 include/linux/srcu.h:160 #1: ffff80009248e928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #1: ffff80009248e928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline] #1: ffff80009248e928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x710/0x15dc net/core/rtnetlink.c:4064 1 lock held by kworker/R-wg-cr/8202: #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: set_pf_worker kernel/workqueue.c:3325 [inline] #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x80/0xec8 kernel/workqueue.c:3452 1 lock held by kworker/R-wg-cr/8205: #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: set_pf_worker kernel/workqueue.c:3325 [inline] #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x80/0xec8 kernel/workqueue.c:3452 1 lock held by kworker/R-wg-cr/8206: #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: set_pf_worker kernel/workqueue.c:3325 [inline] #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x80/0xec8 kernel/workqueue.c:3452 1 lock held by kworker/R-wg-cr/8207: #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: set_pf_worker kernel/workqueue.c:3325 [inline] #0: ffff80008f3b0f48 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x80/0xec8 kernel/workqueue.c:3452 1 lock held by dhcpcd/8228: #0: ffff0000f2481a08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: inode_lock include/linux/fs.h:867 [inline] #0: ffff0000f2481a08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release net/socket.c:646 [inline] #0: ffff0000f2481a08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x7c/0x1e4 net/socket.c:1391 2 locks held by dhcpcd/8229: #0: ffff000110036258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1651 [inline] #0: ffff000110036258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x48/0xafc net/packet/af_packet.c:3252 #1: ffff80008f50e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:336 [inline] #1: ffff80008f50e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x290/0x624 kernel/rcu/tree_exp.h:998 2 locks held by dhcpcd/8230: #0: ffff0000c865c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1651 [inline] #0: ffff0000c865c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x48/0xafc net/packet/af_packet.c:3252 #1: ffff80008f50e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:336 [inline] #1: ffff80008f50e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x290/0x624 kernel/rcu/tree_exp.h:998 =============================================