INFO: task syz-executor:16554 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:22392 pid:16554 tgid:16554 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x16d9/0x5700 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] rt_mutex_schedule+0x76/0xf0 kernel/sched/core.c:7668 rt_mutex_slowlock_block+0x55e/0x690 kernel/locking/rtmutex.c:1670 __rt_mutex_slowlock kernel/locking/rtmutex.c:1747 [inline] __rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1787 [inline] rt_mutex_slowlock+0x2d4/0x780 kernel/locking/rtmutex.c:1827 __rt_mutex_lock kernel/locking/rtmutex.c:1842 [inline] __mutex_lock_common kernel/locking/rtmutex_api.c:562 [inline] mutex_lock_nested+0x168/0x1d0 kernel/locking/rtmutex_api.c:580 new_device_store+0x13c/0x6d0 drivers/net/netdevsim/bus.c:184 kernfs_fop_write_iter+0x3a5/0x540 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x61e/0xbb0 fs/read_write.c:687 ksys_write+0x156/0x270 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb9e8a5ed8e RSP: 002b:00007ffc70f29c18 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 000055558bc38500 RCX: 00007fb9e8a5ed8e RDX: 0000000000000003 RSI: 00007ffc70f29ca0 RDI: 0000000000000005 RBP: 00007fb9e8b363a0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 00007ffc70f29ca0 R14: 00007ffc70f2a4e0 R15: 0000000000000003 INFO: task syz-executor:16626 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:22736 pid:16626 tgid:16626 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x16d9/0x5700 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] rt_mutex_schedule+0x76/0xf0 kernel/sched/core.c:7668 rt_mutex_slowlock_block+0x55e/0x690 kernel/locking/rtmutex.c:1670 __rt_mutex_slowlock kernel/locking/rtmutex.c:1747 [inline] __rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1787 [inline] rt_mutex_slowlock+0x2d4/0x780 kernel/locking/rtmutex.c:1827 __rt_mutex_lock kernel/locking/rtmutex.c:1842 [inline] __mutex_lock_common kernel/locking/rtmutex_api.c:562 [inline] mutex_lock_nested+0x168/0x1d0 kernel/locking/rtmutex_api.c:580 del_device_store+0xd6/0x370 drivers/net/netdevsim/bus.c:234 kernfs_fop_write_iter+0x3a5/0x540 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x61e/0xbb0 fs/read_write.c:687 ksys_write+0x156/0x270 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7efe98f7ed8e RSP: 002b:00007ffee92146e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 000055558b54e500 RCX: 00007efe98f7ed8e RDX: 0000000000000001 RSI: 00007ffee9214770 RDI: 0000000000000005 RBP: 00007efe9905637c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffee9214770 R14: 00007ffee9214fb0 R15: 0000000000000003 INFO: task syz-executor:16673 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:22128 pid:16673 tgid:16673 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x16d9/0x5700 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] rt_mutex_schedule+0x76/0xf0 kernel/sched/core.c:7668 rt_mutex_slowlock_block+0x55e/0x690 kernel/locking/rtmutex.c:1670 __rt_mutex_slowlock kernel/locking/rtmutex.c:1747 [inline] __rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1787 [inline] rt_mutex_slowlock+0x2d4/0x780 kernel/locking/rtmutex.c:1827 __rt_mutex_lock kernel/locking/rtmutex.c:1842 [inline] __mutex_lock_common kernel/locking/rtmutex_api.c:562 [inline] mutex_lock_nested+0x168/0x1d0 kernel/locking/rtmutex_api.c:580 del_device_store+0xd6/0x370 drivers/net/netdevsim/bus.c:234 kernfs_fop_write_iter+0x3a5/0x540 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x61e/0xbb0 fs/read_write.c:687 ksys_write+0x156/0x270 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7a6ad3ed8e RSP: 002b:00007ffff594ded8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 000055558960e500 RCX: 00007f7a6ad3ed8e RDX: 0000000000000001 RSI: 00007ffff594df60 RDI: 0000000000000005 RBP: 00007f7a6ae1637c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffff594df60 R14: 00007ffff594e7a0 R15: 0000000000000003 Showing all locks held in the system: locks held by khungtaskd/38: 1, last CPU#0: #0: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6871 locks held by getty/5340: 2, on CPU#1: #0: ffff8880370000a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900044d32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 drivers/tty/n_tty.c:2211 locks held by kworker/u9:1/13401: 3, on CPU#0: #0: ffff88806382f138 ((wq_completion)hci4){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88806382f138 ((wq_completion)hci4){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88806382f138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88806382f138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc900055efc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc900055efc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc900055efc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc900055efc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff8880633bcf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 net/bluetooth/hci_sync.c:337 locks held by syz-executor/16554: 4, on CPU#0: #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2756 [inline] #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 fs/read_write.c:683 #1: ffff88802ae6e478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 fs/kernfs/file.c:336 #2: ffff88802a1373c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline] #2: ffff88802a1373c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 fs/kernfs/file.c:337 #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6d0 drivers/net/netdevsim/bus.c:184 locks held by syz-executor/16558: 7, on CPU#0: #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2756 [inline] #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 fs/read_write.c:683 #1: ffff888050456c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 fs/kernfs/file.c:336 #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline] #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 fs/kernfs/file.c:337 #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 drivers/net/netdevsim/bus.c:234 #4: ffff88803d7a4160 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline] #4: ffff88803d7a4160 (&dev->mutex){....}-{4:4}, at: __device_driver_lock drivers/base/dd.c:1171 [inline] #4: ffff88803d7a4160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 drivers/base/dd.c:1369 #5: ffff888026296310 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 drivers/net/netdevsim/dev.c:1724 #6: ffff88806184c890 (&sb->s_type->i_mutex_key#8/2){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1069 [inline] #6: ffff88806184c890 (&sb->s_type->i_mutex_key#8/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x19a/0x520 fs/libfs.c:619 locks held by syz-executor/16626: 4, on CPU#0: #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2756 [inline] #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 fs/read_write.c:683 #1: ffff888023739078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 fs/kernfs/file.c:336 #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline] #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 fs/kernfs/file.c:337 #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 drivers/net/netdevsim/bus.c:234 locks held by syz-executor/16673: 4, on CPU#0: #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2756 [inline] #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 fs/read_write.c:683 #1: ffff888062688c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 fs/kernfs/file.c:336 #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline] #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 fs/kernfs/file.c:337 #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 drivers/net/netdevsim/bus.c:234 locks held by syz.4.2196/16796: 3, on CPU#0: #0: ffff888025c57128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 fs/file.c:1259 #1: ffff88801fad6510 (sb_writers#8){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2756 [inline] #1: ffff88801fad6510 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 fs/read_write.c:683 #2: ffff888026296310 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_health_report+0x305/0xb20 net/devlink/health.c:680 locks held by syz-executor/16981: 4, on CPU#0: #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2756 [inline] #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 fs/read_write.c:683 #1: ffff888062570878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 fs/kernfs/file.c:336 #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline] #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 fs/kernfs/file.c:337 #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 drivers/net/netdevsim/bus.c:234 locks held by syz-executor/17118: 4, on CPU#0: #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2756 [inline] #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 fs/read_write.c:683 #1: ffff88803bf3a478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 fs/kernfs/file.c:336 #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline] #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 fs/kernfs/file.c:337 #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 drivers/net/netdevsim/bus.c:234 locks held by syz-executor/17147: 4, on CPU#0: #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2756 [inline] #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 fs/read_write.c:683 #1: ffff88804c662878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 fs/kernfs/file.c:336 #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline] #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 fs/kernfs/file.c:337 #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 drivers/net/netdevsim/bus.c:234 locks held by syz-executor/17239: 4, on CPU#0: #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2756 [inline] #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 fs/read_write.c:683 #1: ffff88802e8eb078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 fs/kernfs/file.c:336 #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline] #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 fs/kernfs/file.c:337 #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 drivers/net/netdevsim/bus.c:234 locks held by syz-executor/17333: 4, on CPU#0: #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2756 [inline] #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 fs/read_write.c:683 #1: ffff8880342a7c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 fs/kernfs/file.c:336 #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline] #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 fs/kernfs/file.c:337 #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 drivers/net/netdevsim/bus.c:234 locks held by syz-executor/17519: 4, on CPU#0: #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2756 [inline] #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 fs/read_write.c:683 #1: ffff8880373c0c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 fs/kernfs/file.c:336 #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline] #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 fs/kernfs/file.c:337 #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 drivers/net/netdevsim/bus.c:234 locks held by syz-executor/17540: 4, on CPU#0: #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2756 [inline] #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 fs/read_write.c:683 #1: ffff888026b0f078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 fs/kernfs/file.c:336 #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline] #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 fs/kernfs/file.c:337 #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 drivers/net/netdevsim/bus.c:234 locks held by syz-executor/17561: 4, on CPU#0: #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2756 [inline] #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 fs/read_write.c:683 #1: ffff888060e49878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 fs/kernfs/file.c:336 #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline] #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 fs/kernfs/file.c:337 #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 drivers/net/netdevsim/bus.c:234 locks held by syz-executor/17580: 4, on CPU#0: #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2756 [inline] #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 fs/read_write.c:683 #1: ffff888085f0e478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 fs/kernfs/file.c:336 #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline] #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 fs/kernfs/file.c:337 #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 drivers/net/netdevsim/bus.c:234 locks held by syz-executor/17603: 4, on CPU#0: #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2756 [inline] #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 fs/read_write.c:683 #1: ffff888085c92078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 fs/kernfs/file.c:336 #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline] #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 fs/kernfs/file.c:337 #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 drivers/net/netdevsim/bus.c:234 locks held by syz-executor/17622: 4, on CPU#0: #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2756 [inline] #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 fs/read_write.c:683 #1: ffff88801b708078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 fs/kernfs/file.c:336 #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline] #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 fs/kernfs/file.c:337 #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 drivers/net/netdevsim/bus.c:234 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:123 nmi_trigger_cpumask_backtrace+0x17d/0x390 lib/nmi_backtrace.c:66 trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xfd7/0x1030 kernel/hung_task.c:561 kthread+0x38b/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245