INFO: task syz.3.2422:14620 blocked for more than 143 seconds. Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.2422 state:D stack:26816 pid:14620 tgid:14619 ppid:12992 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x49d0 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_timeout+0xb0/0x310 kernel/time/timer.c:2557 ___down_common kernel/locking/semaphore.c:225 [inline] __down_common+0x343/0x7f0 kernel/locking/semaphore.c:246 down+0x84/0xc0 kernel/locking/semaphore.c:63 console_lock+0x145/0x1b0 kernel/printk/printk.c:2665 con_install+0x99/0x7f0 drivers/tty/vt/vt.c:3517 tty_driver_install_tty drivers/tty/tty_io.c:1310 [inline] tty_init_dev+0xc1/0x4c0 drivers/tty/tty_io.c:1422 tty_open_by_driver drivers/tty/tty_io.c:2088 [inline] tty_open+0x9e5/0xdf0 drivers/tty/tty_io.c:2135 chrdev_open+0x5b0/0x630 fs/char_dev.c:414 do_dentry_open+0x970/0x1450 fs/open.c:955 vfs_open+0x3e/0x330 fs/open.c:1086 do_open fs/namei.c:3654 [inline] path_openat+0x2c01/0x35f0 fs/namei.c:3813 do_filp_open+0x235/0x490 fs/namei.c:3840 do_sys_openat2+0x13e/0x1d0 fs/open.c:1413 do_sys_open fs/open.c:1428 [inline] __do_sys_openat fs/open.c:1444 [inline] __se_sys_openat fs/open.c:1439 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1439 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f841f174610 RSP: 002b:00007f8420020b80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f841f174610 RDX: 0000000000000002 RSI: 00007f8420020c20 RDI: 00000000ffffff9c RBP: 00007f8420020c20 R08: 0000000000000000 R09: 00007f8420020997 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 000000000000000b R14: 00007f841f303f60 R15: 00007ffd1d865e88 INFO: task syz.0.2461:14748 blocked for more than 143 seconds. Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.2461 state:D stack:26448 pid:14748 tgid:14746 ppid:14069 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x49d0 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 chrdev_open+0x5b0/0x630 fs/char_dev.c:414 do_dentry_open+0x970/0x1450 fs/open.c:955 vfs_open+0x3e/0x330 fs/open.c:1086 do_open fs/namei.c:3654 [inline] path_openat+0x2c01/0x35f0 fs/namei.c:3813 do_filp_open+0x235/0x490 fs/namei.c:3840 do_sys_openat2+0x13e/0x1d0 fs/open.c:1413 do_sys_open fs/open.c:1428 [inline] __do_sys_openat fs/open.c:1444 [inline] __se_sys_openat fs/open.c:1439 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1439 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe4ad774610 RSP: 002b:00007fe4ae4a0b80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe4ad774610 RDX: 0000000000000002 RSI: 00007fe4ae4a0c20 RDI: 00000000ffffff9c RBP: 00007fe4ae4a0c20 R08: 0000000000000000 R09: 00007fe4ae4a0996 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 000000000000000b R14: 00007fe4ad903f60 R15: 00007ffd23611658 INFO: task syz.0.2461:14749 blocked for more than 143 seconds. Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.2461 state:D stack:27360 pid:14749 tgid:14746 ppid:14069 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x49d0 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 chrdev_open+0x5b0/0x630 fs/char_dev.c:414 do_dentry_open+0x970/0x1450 fs/open.c:955 vfs_open+0x3e/0x330 fs/open.c:1086 do_open fs/namei.c:3654 [inline] path_openat+0x2c01/0x35f0 fs/namei.c:3813 do_filp_open+0x235/0x490 fs/namei.c:3840 do_sys_openat2+0x13e/0x1d0 fs/open.c:1413 do_sys_open fs/open.c:1428 [inline] __do_sys_openat fs/open.c:1444 [inline] __se_sys_openat fs/open.c:1439 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1439 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe4ad774610 RSP: 002b:00007fe4ae47fb80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe4ad774610 RDX: 0000000000000002 RSI: 00007fe4ae47fc20 RDI: 00000000ffffff9c RBP: 00007fe4ae47fc20 R08: 0000000000000000 R09: 00007fe4ae47f996 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 000000000000006e R14: 00007fe4ad904038 R15: 00007ffd23611658 INFO: task syz.0.2461:14750 blocked for more than 143 seconds. Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.2461 state:D stack:27360 pid:14750 tgid:14746 ppid:14069 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x49d0 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 chrdev_open+0x5b0/0x630 fs/char_dev.c:414 do_dentry_open+0x970/0x1450 fs/open.c:955 vfs_open+0x3e/0x330 fs/open.c:1086 do_open fs/namei.c:3654 [inline] path_openat+0x2c01/0x35f0 fs/namei.c:3813 do_filp_open+0x235/0x490 fs/namei.c:3840 do_sys_openat2+0x13e/0x1d0 fs/open.c:1413 do_sys_open fs/open.c:1428 [inline] __do_sys_openat fs/open.c:1444 [inline] __se_sys_openat fs/open.c:1439 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1439 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe4ad774610 RSP: 002b:00007fe4ae45eb80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe4ad774610 RDX: 0000000000000002 RSI: 00007fe4ae45ec20 RDI: 00000000ffffff9c RBP: 00007fe4ae45ec20 R08: 0000000000000000 R09: 00007fe4ae45e996 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 000000000000006e R14: 00007fe4ad904110 R15: 00007ffd23611658 INFO: task syz.4.2463:14754 blocked for more than 143 seconds. Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.2463 state:D stack:23800 pid:14754 tgid:14753 ppid:11306 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x49d0 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 ptmx_open+0xcc/0x2c0 drivers/tty/pty.c:823 chrdev_open+0x5b0/0x630 fs/char_dev.c:414 do_dentry_open+0x970/0x1450 fs/open.c:955 vfs_open+0x3e/0x330 fs/open.c:1086 do_open fs/namei.c:3654 [inline] path_openat+0x2c01/0x35f0 fs/namei.c:3813 do_filp_open+0x235/0x490 fs/namei.c:3840 do_sys_openat2+0x13e/0x1d0 fs/open.c:1413 do_sys_open fs/open.c:1428 [inline] __do_sys_openat fs/open.c:1444 [inline] __se_sys_openat fs/open.c:1439 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1439 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f9ea8775bd9 RSP: 002b:00007f9ea9566048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f9ea8903f60 RCX: 00007f9ea8775bd9 RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffff9c RBP: 00007f9ea87e4a98 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f9ea8903f60 R15: 00007ffd77a1e808 INFO: task syz.1.2471:14778 blocked for more than 143 seconds. Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.2471 state:D stack:26816 pid:14778 tgid:14777 ppid:14455 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x49d0 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 chrdev_open+0x5b0/0x630 fs/char_dev.c:414 do_dentry_open+0x970/0x1450 fs/open.c:955 vfs_open+0x3e/0x330 fs/open.c:1086 do_open fs/namei.c:3654 [inline] path_openat+0x2c01/0x35f0 fs/namei.c:3813 do_filp_open+0x235/0x490 fs/namei.c:3840 do_sys_openat2+0x13e/0x1d0 fs/open.c:1413 do_sys_open fs/open.c:1428 [inline] __do_sys_openat fs/open.c:1444 [inline] __se_sys_openat fs/open.c:1439 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1439 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f1099374610 RSP: 002b:00007f109a075b80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1099374610 RDX: 0000000000000002 RSI: 00007f109a075c20 RDI: 00000000ffffff9c RBP: 00007f109a075c20 R08: 0000000000000000 R09: 00007f109a075997 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 000000000000000b R14: 00007f1099503f60 R15: 00007ffd202addd8 INFO: task syz.1.2471:14779 blocked for more than 143 seconds. Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.2471 state:D stack:26936 pid:14779 tgid:14777 ppid:14455 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x49d0 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 chrdev_open+0x5b0/0x630 fs/char_dev.c:414 do_dentry_open+0x970/0x1450 fs/open.c:955 vfs_open+0x3e/0x330 fs/open.c:1086 do_open fs/namei.c:3654 [inline] path_openat+0x2c01/0x35f0 fs/namei.c:3813 do_filp_open+0x235/0x490 fs/namei.c:3840 do_sys_openat2+0x13e/0x1d0 fs/open.c:1413 do_sys_open fs/open.c:1428 [inline] __do_sys_openat fs/open.c:1444 [inline] __se_sys_openat fs/open.c:1439 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1439 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f1099374610 RSP: 002b:00007f1098dfeb80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1099374610 RDX: 0000000000000002 RSI: 00007f1098dfec20 RDI: 00000000ffffff9c RBP: 00007f1098dfec20 R08: 0000000000000000 R09: 00007f1098dfe996 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 000000000000006e R14: 00007f1099504038 R15: 00007ffd202addd8 INFO: task syz.3.2472:14824 blocked for more than 143 seconds. Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.2472 state:D stack:26816 pid:14824 tgid:14823 ppid:14785 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x49d0 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 chrdev_open+0x5b0/0x630 fs/char_dev.c:414 do_dentry_open+0x970/0x1450 fs/open.c:955 vfs_open+0x3e/0x330 fs/open.c:1086 do_open fs/namei.c:3654 [inline] path_openat+0x2c01/0x35f0 fs/namei.c:3813 do_filp_open+0x235/0x490 fs/namei.c:3840 do_sys_openat2+0x13e/0x1d0 fs/open.c:1413 do_sys_open fs/open.c:1428 [inline] __do_sys_openat fs/open.c:1444 [inline] __se_sys_openat fs/open.c:1439 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1439 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe531374610 RSP: 002b:00007fe5321c4b80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe531374610 RDX: 0000000000000002 RSI: 00007fe5321c4c20 RDI: 00000000ffffff9c RBP: 00007fe5321c4c20 R08: 0000000000000000 R09: 00007fe5321c4997 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 000000000000000b R14: 00007fe531503f60 R15: 00007ffe112b6aa8 INFO: task syz.2.2489:14849 blocked for more than 143 seconds. Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.2489 state:D stack:24344 pid:14849 tgid:14846 ppid:12944 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x49d0 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 chrdev_open+0x5b0/0x630 fs/char_dev.c:414 do_dentry_open+0x970/0x1450 fs/open.c:955 vfs_open+0x3e/0x330 fs/open.c:1086 do_open fs/namei.c:3654 [inline] path_openat+0x2c01/0x35f0 fs/namei.c:3813 do_filp_open+0x235/0x490 fs/namei.c:3840 do_sys_openat2+0x13e/0x1d0 fs/open.c:1413 do_sys_open fs/open.c:1428 [inline] __do_sys_openat fs/open.c:1444 [inline] __se_sys_openat fs/open.c:1439 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1439 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe698375bd9 RSP: 002b:00007fe69913b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fe698504110 RCX: 00007fe698375bd9 RDX: 0000000000000100 RSI: 0000000020001180 RDI: ffffffffffffff9c RBP: 00007fe6983e4a98 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007fe698504110 R15: 00007ffc252dbb38 Showing all locks held in the system: 1 lock held by khungtaskd/30: #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:781 [inline] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6614 3 locks held by kworker/u8:2/35: 2 locks held by getty/4831: #0: ffff88802b18e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 3 locks held by kworker/1:4/5130: #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3223 [inline] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc900042cfd00 (deferred_process_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline] #1: ffffc900042cfd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:104 3 locks held by kworker/1:1/11112: #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3223 [inline] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc900038f7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline] #1: ffffc900038f7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:276 6 locks held by kworker/u8:14/12510: 2 locks held by syz.1.2330/14304: 2 locks held by syz.3.2422/14620: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 #1: ffff88802d4061c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: tty_init_dev+0x78/0x4c0 drivers/tty/tty_io.c:1421 1 lock held by syz.0.2461/14748: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 1 lock held by syz.0.2461/14749: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 1 lock held by syz.0.2461/14750: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 1 lock held by syz.4.2463/14754: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: ptmx_open+0xcc/0x2c0 drivers/tty/pty.c:823 1 lock held by syz.1.2471/14778: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 1 lock held by syz.1.2471/14779: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 1 lock held by syz.3.2472/14824: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 1 lock held by syz.2.2489/14849: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 1 lock held by syz.0.2505/14945: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 1 lock held by syz.4.2511/14967: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: ptmx_open+0xcc/0x2c0 drivers/tty/pty.c:823 1 lock held by syz.3.2524/15024: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 1 lock held by syz.3.2524/15025: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 1 lock held by syz.2.2542/15110: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 1 lock held by syz.2.2542/15111: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 1 lock held by syz.3.2590/15321: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 3 locks held by kworker/1:8/15327: #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3223 [inline] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc9000cbf7d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline] #1: ffffc9000cbf7d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 #2: ffff88801d294240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 drivers/net/netdevsim/fib.c:1489 1 lock held by syz.2.2597/15382: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 1 lock held by syz.2.2597/15383: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 1 lock held by syz.0.2639/15545: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 1 lock held by syz.1.2648/15575: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: ptmx_open+0xcc/0x2c0 drivers/tty/pty.c:823 1 lock held by syz.1.2648/15576: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 1 lock held by syz.2.2674/15687: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 1 lock held by syz.3.2685/15728: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: ptmx_open+0xcc/0x2c0 drivers/tty/pty.c:823 1 lock held by syz.3.2685/15729: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 7 locks held by syz-executor/15838: #0: ffff88802ae8c420 (sb_writers#8){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2854 [inline] #0: ffff88802ae8c420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 fs/read_write.c:586 #1: ffff888035346c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 fs/kernfs/file.c:325 #2: ffff8880236091e8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 fs/kernfs/file.c:326 #3: ffffffff8eee1fc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 drivers/net/netdevsim/bus.c:216 #4: ffff88804614f0e8 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #4: ffff88804614f0e8 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1093 [inline] #4: ffff88804614f0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 drivers/base/dd.c:1290 #5: ffff88804614b250 (&devlink->lock_key#35){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 drivers/net/netdevsim/dev.c:1672 #6: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 net/core/dev.c:1913 1 lock held by syz-executor/15864: #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 net/core/rtnetlink.c:6632 1 lock held by syz.2.2710/15883: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x23e/0xdf0 drivers/tty/tty_io.c:2135 1 lock held by syz.1.2714/15896: #0: ffffffff8eaf8f68 (tty_mutex){+.+.}-{3:3}, at: ptmx_open+0xcc/0x2c0 drivers/tty/pty.c:823 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114 nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline] watchdog+0xfde/0x1020 kernel/hung_task.c:379 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 24 Comm: ksoftirqd/1 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 RIP: 0010:lock_release+0x5/0x9f0 kernel/locking/lockdep.c:5762 Code: ff ff 48 c7 c7 a0 53 ac 8f e8 97 05 86 00 e9 26 f6 ff ff 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 00 01 00 RSP: 0018:ffffc900001e6d10 EFLAGS: 00000002 RAX: 000000000000030f RBX: ffffffff84adcbe0 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: ffffffff84adcbe0 RDI: ffffffff8ea2e620 RBP: ffffc900001e6ed0 R08: ffffffff92f71587 R09: 1ffffffff25ee2b0 R10: dffffc0000000000 R11: fffffbfff25ee2b1 R12: 0000000000000000 R13: 1ffff9200003cdb8 R14: dffffc0000000000 R15: ffff888024ed0660 FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055556a59d808 CR3: 000000006994e000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: debug_objects_fill_pool+0xc0/0x9b0 lib/debugobjects.c:616 debug_object_activate+0x135/0x510 lib/debugobjects.c:704 debug_work_activate kernel/workqueue.c:665 [inline] insert_work+0x36/0x330 kernel/workqueue.c:2205 __queue_work+0xc16/0xee0 kernel/workqueue.c:2360 queue_work_on+0x1c2/0x380 kernel/workqueue.c:2411 __ieee80211_queue_skb_to_iface net/mac80211/rx.c:233 [inline] ieee80211_queue_skb_to_iface net/mac80211/rx.c:244 [inline] ieee80211_rx_h_mgmt+0x50f/0x710 net/mac80211/rx.c:4047 ieee80211_rx_handlers+0x6a9d/0xb820 net/mac80211/rx.c:4205 ieee80211_invoke_rx_handlers net/mac80211/rx.c:4235 [inline] ieee80211_prepare_and_rx_handle+0x31ab/0x6360 net/mac80211/rx.c:5083 __ieee80211_rx_handle_packet net/mac80211/rx.c:5324 [inline] ieee80211_rx_list+0x2cde/0x3780 net/mac80211/rx.c:5459 ieee80211_rx_napi+0x18a/0x3c0 net/mac80211/rx.c:5482 ieee80211_rx include/net/mac80211.h:5093 [inline] ieee80211_handle_queued_frames+0xe7/0x1e0 net/mac80211/main.c:437 tasklet_action_common+0x321/0x4d0 kernel/softirq.c:785 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554 run_ksoftirqd+0xca/0x130 kernel/softirq.c:928 smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244