INFO: task syz.1.1037:10323 blocked for more than 145 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.1037 state:D stack:0 pid:10323 tgid:10323 ppid:8084 task_flags:0x400040 flags:0x00800011 Call trace: __switch_to+0x2b0/0x6e0 arch/arm64/kernel/process.c:810 (T) context_switch kernel/sched/core.c:5387 [inline] __schedule+0x1b74/0x2d24 kernel/sched/core.c:7188 __schedule_loop kernel/sched/core.c:7267 [inline] schedule+0xa4/0x140 kernel/sched/core.c:7282 request_wait_answer fs/fuse/dev.c:590 [inline] __fuse_request_send fs/fuse/dev.c:604 [inline] __fuse_simple_request+0xaf0/0x1328 fs/fuse/dev.c:699 fuse_simple_request fs/fuse/fuse_i.h:1262 [inline] fuse_flush+0x3fc/0x5e4 fs/fuse/file.c:500 filp_flush+0xb8/0x190 fs/open.c:1467 filp_close+0x28/0x48 fs/open.c:1480 __range_close fs/file.c:794 [inline] __do_sys_close_range fs/file.c:855 [inline] __se_sys_close_range fs/file.c:819 [inline] __arm64_sys_close_range+0x354/0x808 fs/file.c:819 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:140 el0_svc+0x60/0x25c arch/arm64/kernel/entry-common.c:723 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:742 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 INFO: task syz.1.1037:10339 blocked for more than 145 seconds. Tainted: G L syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.1037 state:D stack:0 pid:10339 tgid:10339 ppid:10323 task_flags:0x40044c flags:0x00000019 Call trace: __switch_to+0x2b0/0x6e0 arch/arm64/kernel/process.c:810 (T) context_switch kernel/sched/core.c:5387 [inline] __schedule+0x1b74/0x2d24 kernel/sched/core.c:7188 __schedule_loop kernel/sched/core.c:7267 [inline] schedule+0xa4/0x140 kernel/sched/core.c:7282 request_wait_answer fs/fuse/dev.c:590 [inline] __fuse_request_send fs/fuse/dev.c:604 [inline] __fuse_simple_request+0xaf0/0x1328 fs/fuse/dev.c:699 fuse_simple_request fs/fuse/fuse_i.h:1262 [inline] fuse_flush+0x3fc/0x5e4 fs/fuse/file.c:500 filp_flush+0xb8/0x190 fs/open.c:1467 filp_close+0x28/0x48 fs/open.c:1480 close_files fs/file.c:494 [inline] put_files_struct+0x18c/0x2b8 fs/file.c:509 exit_files+0x78/0x98 fs/file.c:526 do_exit+0x53c/0x1a6c kernel/exit.c:970 do_group_exit+0x194/0x22c kernel/exit.c:1117 get_signal+0xfb0/0x1094 kernel/signal.c:3037 arch_do_signal_or_restart+0x284/0x43bc arch/arm64/kernel/signal.c:1665 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline] exit_to_user_mode_loop+0x70/0x17c kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] exit_to_user_mode_prepare_legacy include/linux/irq-entry-common.h:224 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:86 [inline] el0_svc+0x180/0x25c arch/arm64/kernel/entry-common.c:724 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:742 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 Showing all locks held in the system: 3 locks held by kworker/0:0/9: #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x640/0x173c kernel/workqueue.c:3276 #1: ffff80008e9d7be0 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x6a4/0x173c kernel/workqueue.c:3276 #2: ffff800089b85900 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 3 locks held by kworker/u8:0/12: 8 locks held by kworker/u8:1/14: 1 lock held by khungtaskd/31: #0: ffff800088ac66e0 (rcu_read_lock){....}-{1:3}, at: __ll_sc_atomic64_fetch_or arch/arm64/include/asm/atomic_ll_sc.h:-1 [inline] #0: ffff800088ac66e0 (rcu_read_lock){....}-{1:3}, at: arch_atomic64_fetch_or arch/arm64/include/asm/atomic.h:86 [inline] #0: ffff800088ac66e0 (rcu_read_lock){....}-{1:3}, at: raw_atomic64_fetch_or include/linux/atomic/atomic-arch-fallback.h:3816 [inline] #0: ffff800088ac66e0 (rcu_read_lock){....}-{1:3}, at: raw_atomic_long_fetch_or include/linux/atomic/atomic-long.h:1090 [inline] #0: ffff800088ac66e0 (rcu_read_lock){....}-{1:3}, at: arch_test_and_set_bit include/asm-generic/bitops/atomic.h:42 [inline] #0: ffff800088ac66e0 (rcu_read_lock){....}-{1:3}, at: test_and_set_bit include/asm-generic/bitops/instrumented-atomic.h:72 [inline] #0: ffff800088ac66e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x0/0x44 kernel/sched/sched.h:3869 3 locks held by kworker/u8:2/39: 2 locks held by kworker/u8:3/40: 3 locks held by kworker/u8:4/1153: 3 locks held by kworker/u8:5/1860: 3 locks held by kworker/u8:6/1873: 3 locks held by kworker/u8:7/1879: 3 locks held by kworker/u8:8/1898: 3 locks held by kworker/u8:9/1912: 4 locks held by kworker/u8:10/1918: #0: ffff0000c004b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x640/0x173c kernel/workqueue.c:3276 #1: ffff8000974a7be0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x6a4/0x173c kernel/workqueue.c:3276 #2: ffff800089b85900 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 #3: ffff0000f4f70780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6645 [inline] #3: ffff0000f4f70780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_leave_invalid_chans net/wireless/reg.c:2454 [inline] #3: ffff0000f4f70780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x14c/0x112c net/wireless/reg.c:2469 3 locks held by kworker/R-ipv6_/2788: #0: ffff0000cf5ae140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x640/0x173c kernel/workqueue.c:3276 #1: ffff8000996d7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a4/0x173c kernel/workqueue.c:3276 #2: ffff800089b85900 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 1 lock held by jbd2/nvme0n1p2-/4268: 2 locks held by getty/4452: #0: ffff0000d4c8b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80009228b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x354/0xf84 drivers/tty/n_tty.c:2211 1 lock held by syz-executor/4658: 2 locks held by kworker/u8:11/4992: 4 locks held by kworker/u8:12/4994: 2 locks held by kworker/u8:13/4996: #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x640/0x173c kernel/workqueue.c:3276 #1: ffff8000982d7be0 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_one_work+0x6a4/0x173c kernel/workqueue.c:3276 3 locks held by kworker/u8:14/5001: 4 locks held by kworker/u8:15/5006: 3 locks held by kworker/u8:16/5009: 3 locks held by kworker/u8:17/5012: 2 locks held by syz-executor/5803: 1 lock held by syz-executor/6737: 1 lock held by kmmpd-loop3/8242: 2 locks held by kworker/1:9/8488: 1 lock held by syz-executor/9834: 4 locks held by kworker/u8:18/10375: #0: ffff0001ae11c420 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x44 kernel/sched/core.c:652 #1: ffff0001ae107208 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x68/0x478 kernel/sched/psi.c:933 #2: ffff800088ac6740 (rcu_read_lock_bh){....}-{1:3}, at: rcu_lock_acquire+0x10/0x4c include/linux/rcupdate.h:299 #3: ffff0001ae108b58 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x3f0/0x8ac kernel/time/timer.c:1117 2 locks held by syz-executor/10376: 3 locks held by kworker/u8:20/10378: 3 locks held by kworker/u8:22/10380: 3 locks held by kworker/u8:23/10381: =============================================