INFO: task kworker/u8:5:1154 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:5 state:D stack:0 pid:1154 tgid:1154 ppid:2 task_flags:0x4208060 flags:0x00000010 Workqueue: events_power_efficient crda_timeout_work Call trace: __switch_to+0x2b4/0x6e4 arch/arm64/kernel/process.c:792 (T) context_switch kernel/sched/core.c:5583 [inline] __schedule+0x1368/0x2b50 kernel/sched/core.c:7382 __schedule_loop kernel/sched/core.c:7459 [inline] schedule+0x13c/0x20c kernel/sched/core.c:7474 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7531 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x5d8/0x10b8 kernel/locking/mutex.c:821 mutex_lock_nested+0x24/0x30 kernel/locking/mutex.c:874 crda_timeout_work+0x30/0xa4 net/wireless/reg.c:530 process_one_work kernel/workqueue.c:3495 [inline] process_scheduled_works+0x91c/0x1250 kernel/workqueue.c:3578 worker_thread+0x798/0xbd0 kernel/workqueue.c:3659 kthread+0x304/0x3d4 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854 INFO: task kworker/1:7:4842 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:7 state:D stack:0 pid:4842 tgid:4842 ppid:2 task_flags:0x4208060 flags:0x00000010 Workqueue: events reg_todo Call trace: __switch_to+0x2b4/0x6e4 arch/arm64/kernel/process.c:792 (T) context_switch kernel/sched/core.c:5583 [inline] __schedule+0x1368/0x2b50 kernel/sched/core.c:7382 __schedule_loop kernel/sched/core.c:7459 [inline] schedule+0x13c/0x20c kernel/sched/core.c:7474 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7531 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x5d8/0x10b8 kernel/locking/mutex.c:821 mutex_lock_nested+0x24/0x30 kernel/locking/mutex.c:874 class_wiphy_constructor include/net/cfg80211.h:6990 [inline] reg_process_self_managed_hints+0xb4/0x17c net/wireless/reg.c:3263 reg_todo+0x77c/0x848 net/wireless/reg.c:3277 process_one_work kernel/workqueue.c:3495 [inline] process_scheduled_works+0x91c/0x1250 kernel/workqueue.c:3578 worker_thread+0x798/0xbd0 kernel/workqueue.c:3659 kthread+0x304/0x3d4 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854 Showing all locks held in the system: locks held by kworker/u8:1/13: 2, last CPU#1: #0: ffff0000ce533148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #0: ffff0000ce533148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 kernel/workqueue.c:3578 #1: ffff80008fa57c20 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #1: ffff80008fa57c20 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 kernel/workqueue.c:3578 locks held by kworker/1:0/24: 2, last CPU#1: #0: ffff0000f16c3548 ((wq_completion)wg-crypt-wg2#4){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #0: ffff0000f16c3548 ((wq_completion)wg-crypt-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 kernel/workqueue.c:3578 #1: ffff80008fb17c20 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #1: ffff80008fb17c20 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 kernel/workqueue.c:3578 locks held by khungtaskd/31: 1, last CPU#0: #0: ffff800089aa5660 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff800089aa5660 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff800089aa5660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 kernel/locking/lockdep.c:6871 locks held by kworker/u8:2/40: 3, last CPU#1: #0: ffff0000c004c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #0: ffff0000c004c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 kernel/workqueue.c:3578 #1: ffff800090f97c20 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #1: ffff800090f97c20 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 kernel/workqueue.c:3578 #2: ffff0000e9ad0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6990 [inline] #2: ffff0000e9ad0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xd0/0x464 net/wireless/core.c:596 locks held by kworker/u8:3/48: 3, last CPU#0: #0: ffff0000c004c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #0: ffff0000c004c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 kernel/workqueue.c:3578 #1: ffff800092027c20 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #1: ffff800092027c20 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 kernel/workqueue.c:3578 #2: ffff0000c37e7258 (&devlink->lock_key#4){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 net/devlink/core.c:320 locks held by kworker/u8:5/1154: 3, on CPU#1: #0: ffff0000c004b948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #0: ffff0000c004b948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 kernel/workqueue.c:3578 #1: ffff8000952a7c20 ((crda_timeout).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #1: ffff8000952a7c20 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 kernel/workqueue.c:3578 #2: ffff80008adea2a0 (cfg80211_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x30/0xa4 net/wireless/reg.c:530 locks held by udevd/4346: 2, last CPU#1: #0: ffff800089dffcf8 (tomoyo_ss){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #0: ffff800089dffcf8 (tomoyo_ss){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:320 [inline] #0: ffff800089dffcf8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_read_lock security/tomoyo/common.h:1112 [inline] #0: ffff800089dffcf8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x190/0x394 security/tomoyo/file.c:772 #1: ffff800089bcd0b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #1: ffff800089bcd0b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 include/linux/srcu.h:320 locks held by kworker/1:3/4347: 3, on CPU#1: #0: ffff0000c002ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #0: ffff0000c002ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 kernel/workqueue.c:3578 #1: ffff80009a267c20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #1: ffff80009a267c20 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 kernel/workqueue.c:3578 #2: ffff80008abcf560 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 locks held by getty/4494: 2, on CPU#0: #0: ffff0000d16920a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff8000932bb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x350/0xffc drivers/tty/n_tty.c:2211 locks held by syz-executor/4701: 1, last CPU#1: #0: ffff800089bcd0b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #0: ffff800089bcd0b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 include/linux/srcu.h:320 locks held by udevd/4703: 2, last CPU#1: #0: ffff800089dffcf8 (tomoyo_ss){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #0: ffff800089dffcf8 (tomoyo_ss){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:320 [inline] #0: ffff800089dffcf8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_read_lock security/tomoyo/common.h:1112 [inline] #0: ffff800089dffcf8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x190/0x394 security/tomoyo/file.c:772 #1: ffff800089bcd0b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #1: ffff800089bcd0b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 include/linux/srcu.h:320 locks held by syz-executor/4712: 1, on CPU#1: #0: ffff80008abcf560 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 locks held by kworker/0:3/4797: 2, last CPU#0: #0: ffff0000f16c3548 ((wq_completion)wg-crypt-wg2#4){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #0: ffff0000f16c3548 ((wq_completion)wg-crypt-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 kernel/workqueue.c:3578 #1: ffff800095fb7c20 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #1: ffff800095fb7c20 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 kernel/workqueue.c:3578 locks held by kworker/1:7/4842: 4, on CPU#1: #0: ffff0000c002ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #0: ffff0000c002ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 kernel/workqueue.c:3578 #1: ffff800095b67c20 (reg_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #1: ffff800095b67c20 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 kernel/workqueue.c:3578 #2: ffff80008adea2a0 (cfg80211_mutex){+.+.}-{4:4}, at: class_mutex_constructor include/linux/mutex.h:253 [inline] #2: ffff80008adea2a0 (cfg80211_mutex){+.+.}-{4:4}, at: reg_todo+0x8c/0x848 net/wireless/reg.c:3273 #3: ffff0000e9ad0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6990 [inline] #3: ffff0000e9ad0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0xb4/0x17c net/wireless/reg.c:3263 locks held by kworker/0:7/4974: 2, last CPU#0: #0: ffff0000d9e3c548 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #0: ffff0000d9e3c548 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 kernel/workqueue.c:3578 #1: ffff800095557c20 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #1: ffff800095557c20 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 kernel/workqueue.c:3578 locks held by kworker/u8:12/5185: 3, last CPU#1: #0: ffff0000c004c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #0: ffff0000c004c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 kernel/workqueue.c:3578 #1: ffff80009a2a7c20 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #1: ffff80009a2a7c20 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 kernel/workqueue.c:3578 #2: ffff0000c55de258 (&devlink->lock_key#6){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 net/devlink/core.c:320 locks held by kworker/u8:13/5186: 4, last CPU#0: #0: ffff0000dbc36148 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #0: ffff0000dbc36148 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 kernel/workqueue.c:3578 #1: ffff80009a297c20 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #1: ffff80009a297c20 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 kernel/workqueue.c:3578 #2: ffff0000fcddd480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xe8/0x484 drivers/net/wireguard/noise.c:529 #3: ffff0000c1d50330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xf0/0x484 drivers/net/wireguard/noise.c:530 locks held by kworker/u8:19/5196: 4, on CPU#1: #0: ffff0000c004e148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #0: ffff0000c004e148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 kernel/workqueue.c:3578 #1: ffff800096fb7c20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #1: ffff800096fb7c20 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 kernel/workqueue.c:3578 #2: ffff80008abc21c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x104/0x6c4 net/core/net_namespace.c:679 #3: ffff80008abcf560 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 locks held by kworker/u8:20/5197: 5, last CPU#1: #0: ffff0000c242f948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #0: ffff0000c242f948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 kernel/workqueue.c:3578 #1: ffff80009b927c20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #1: ffff80009b927c20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 kernel/workqueue.c:3578 #2: ffff0000d1302100 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc fs/super.c:642 #3: ffff0000d115ccd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: percpu_down_read include/linux/percpu-rwsem.h:77 [inline] #3: ffff0000d115ccd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages_down_read fs/ext4/ext4.h:1892 [inline] #3: ffff0000d115ccd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2dc fs/ext4/inode.c:3170 #4: ffff800089bcd0b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #4: ffff800089bcd0b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 include/linux/srcu.h:320 locks held by kworker/u8:25/5205: 8, last CPU#1: #0: ffff0000c004c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #0: ffff0000c004c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 kernel/workqueue.c:3578 #1: ffff80009b897c20 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #1: ffff80009b897c20 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 kernel/workqueue.c:3578 #2: ffff0000c6ef7258 (&devlink->lock_key#7){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 net/devlink/core.c:320 #3: ffff0000d885f8e0 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: spin_lock include/linux/spinlock.h:347 [inline] #3: ffff0000d885f8e0 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report drivers/net/netdevsim/dev.c:787 [inline] #3: ffff0000d885f8e0 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x168/0x9cc drivers/net/netdevsim/dev.c:847 #4: ffff800089aa5660 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #4: ffff800089aa5660 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #4: ffff800089aa5660 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x4ec/0x14e0 net/core/dev.c:6896 #5: ffff800089aa5660 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #5: ffff800089aa5660 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #5: ffff800089aa5660 (rcu_read_lock){....}-{1:3}, at: nf_hook include/linux/netfilter.h:249 [inline] #5: ffff800089aa5660 (rcu_read_lock){....}-{1:3}, at: NF_HOOK include/linux/netfilter.h:323 [inline] #5: ffff800089aa5660 (rcu_read_lock){....}-{1:3}, at: br_nf_pre_routing_ipv6+0x374/0x5f8 net/bridge/br_netfilter_ipv6.c:183 #6: ffff800089aa5660 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0xbc/0x394 include/linux/netfilter.h:326 #7: ffff800089aa5660 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #7: ffff800089aa5660 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock_bh include/linux/rcupdate.h:905 [inline] #7: ffff800089aa5660 (rcu_read_lock){....}-{1:3}, at: __dev_queue_xmit+0x220/0x2a68 net/core/dev.c:5000 locks held by kworker/u8:27/5207: 3, last CPU#1: #0: ffff0000c004c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #0: ffff0000c004c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 kernel/workqueue.c:3578 #1: ffff80009b877c20 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #1: ffff80009b877c20 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 kernel/workqueue.c:3578 #2: ffff0000d904e258 (&devlink->lock_key#2){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 net/devlink/core.c:320 locks held by kworker/u8:33/5213: 2, on CPU#0: #0: ffff0000c004c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #0: ffff0000c004c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 kernel/workqueue.c:3578 #1: ffff80009b817c20 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #1: ffff80009b817c20 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 kernel/workqueue.c:3578 locks held by kworker/u8:34/5214: 3, on CPU#1: #0: ffff0000c3d95948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #0: ffff0000c3d95948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 kernel/workqueue.c:3578 #1: ffff80009b807c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #1: ffff80009b807c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 kernel/workqueue.c:3578 #2: ffff80008abcf560 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 locks held by syz-executor/5515: 2, last CPU#1: #0: ffff0000ce5e6ce0 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x64/0x3c0 net/netfilter/x_tables.c:1336 #1: ffff800089bcd0b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #1: ffff800089bcd0b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 include/linux/srcu.h:320 locks held by kworker/u8:36/5844: 3, last CPU#1: #0: ffff0000c004b948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #0: ffff0000c004b948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 kernel/workqueue.c:3578 #1: ffff800094157c20 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #1: ffff800094157c20 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 kernel/workqueue.c:3578 #2: ffff800089aa5660 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #2: ffff800089aa5660 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #2: ffff800089aa5660 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x210/0x144c net/netfilter/nf_conntrack_core.c:1530 locks held by kworker/u8:37/5845: 2, on CPU#1: #0: ffff0000c004c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #0: ffff0000c004c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 kernel/workqueue.c:3578 #1: ffff800097ed7c20 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #1: ffff800097ed7c20 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 kernel/workqueue.c:3578 locks held by kworker/u8:38/5846: 3, last CPU#1: #0: ffff0000c004c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #0: ffff0000c004c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 kernel/workqueue.c:3578 #1: ffff800094107c20 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline] #1: ffff800094107c20 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 kernel/workqueue.c:3578 #2: ffff0000e9b80800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6990 [inline] #2: ffff0000e9b80800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xd0/0x464 net/wireless/core.c:596 locks held by syz-executor/6120: 3, last CPU#1: #0: ffff8000898bc6a0 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #0: ffff8000898bc6a0 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:320 [inline] #0: ffff8000898bc6a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x17c/0x26c net/core/rtnetlink.c:602 #1: ffff80008abcf560 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #1: ffff80008abcf560 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock+0x38/0x10c net/core/rtnetlink.c:366 #2: ffff800089bcd0b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #2: ffff800089bcd0b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 include/linux/srcu.h:320 locks held by syz-executor/6178: 1, last CPU#1: #0: ffff0000d1a2cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x2c/0xbc net/bluetooth/hci_core.c:500 locks held by dhcpcd-run-hook/6209: 1, last CPU#1: #0: ffff800089bcd0b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #0: ffff800089bcd0b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 include/linux/srcu.h:320 locks held by modprobe/6218: 3, last CPU#1: #0: ffff0000dced1308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1c4/0x498 mm/mmap_lock.c:337 #1: ffff0000ceb40300 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_trylock+0x2c/0x94 include/linux/mmap_lock.h:619 #2: ffff800089bcd0b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #2: ffff800089bcd0b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 include/linux/srcu.h:320 locks held by modprobe/6219: 2, last CPU#0: #0: ffff0000ceb43780 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_trylock include/linux/mmap_lock.h:619 [inline] #0: ffff0000ceb43780 (&mm->mmap_lock){++++}-{4:4}, at: get_mmap_lock_carefully mm/mmap_lock.c:539 [inline] #0: ffff0000ceb43780 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x38/0x2c0 mm/mmap_lock.c:599 #1: ffff800089bcd0b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #1: ffff800089bcd0b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 include/linux/srcu.h:320 =============================================