INFO: task udevd:4547 blocked for more than 143 seconds.
Not tainted 6.9.0-rc5-next-20240426-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd state:D
stack:22104 pid:4547 tgid:4547 ppid:1 flags:0x00000002
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6837
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
kobject_uevent_env+0x57d/0x8e0 lib/kobject_uevent.c:593
kobject_synth_uevent+0x4ef/0xae0 lib/kobject_uevent.c:207
uevent_store+0x24/0x60 drivers/base/core.c:2751
kernfs_fop_write_iter+0x3a1/0x500 fs/kernfs/file.c:334
new_sync_write fs/read_write.c:497 [inline]
vfs_write+0xa72/0xc90 fs/read_write.c:590
ksys_write+0x1a0/0x2c0 fs/read_write.c:643
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f1d0ab16bf2
RSP: 002b:00007ffe042cc878 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00005615838804b0 RCX: 00007f1d0ab16bf2
RDX: 0000000000000007 RSI: 000056158390c900 RDI: 000000000000000c
RBP: 0000000000000007 R08: 000056158390c900 R09: 0000000000000010
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000007
R13: 000056158390c900 R14: 00007ffe042ccc58 R15: 0000000000000000
INFO: task syz-executor.3:5121 blocked for more than 144 seconds.
Not tainted 6.9.0-rc5-next-20240426-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3 state:D stack:18992 pid:5121 tgid:5121 ppid:1 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6837
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
kobject_uevent_env+0x57d/0x8e0 lib/kobject_uevent.c:593
__loop_clr_fd+0x3e3/0x810 drivers/block/loop.c:1163
loop_clr_fd drivers/block/loop.c:1253 [inline]
lo_ioctl+0x174a/0x21a0 drivers/block/loop.c:1555
blkdev_ioctl+0x580/0x6b0 block/ioctl.c:640
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:907 [inline]
__se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f127dc7dc0b
RSP: 002b:00007ffe9db6d9a0 EFLAGS: 00000246
ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f127dc7dc0b
RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003
RBP: 00007ffe9db6da5c R08: 0000000000000000 R09: 00007ffe9db6d747
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032
R13: 000000000001e816 R14: 000000000001e011 R15: 0000000000000003
INFO: task syz-executor.0:6205 blocked for more than 146 seconds.
Not tainted 6.9.0-rc5-next-20240426-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0 state:D
stack:23888 pid:6205 tgid:6202 ppid:5237 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6837
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
kobject_uevent_env+0x57d/0x8e0 lib/kobject_uevent.c:593
device_add+0x63b/0xbf0 drivers/base/core.c:3693
wakeup_source_device_create drivers/base/power/wakeup_stats.c:161 [inline]
wakeup_source_sysfs_add+0x1aa/0x270 drivers/base/power/wakeup_stats.c:181
wakeup_source_register+0x171/0x250 drivers/base/power/wakeup.c:223
ep_create_wakeup_source fs/eventpoll.c:1514 [inline]
ep_modify+0x2e7/0xa40 fs/eventpoll.c:1728
do_epoll_ctl+0x754/0xf70 fs/eventpoll.c:2349
__do_sys_epoll_ctl fs/eventpoll.c:2386 [inline]
__se_sys_epoll_ctl fs/eventpoll.c:2377 [inline]
__x64_sys_epoll_ctl+0x161/0x1a0 fs/eventpoll.c:2377
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f420707dea9
RSP: 002b:00007f4207e920c8 EFLAGS: 00000246
ORIG_RAX: 00000000000000e9
RAX: ffffffffffffffda RBX: 00007f42071abf80 RCX: 00007f420707dea9
RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000004
RBP: 00007f42070ca4a4 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f42071abf80 R15: 00007fff9ec17348
INFO: task syz-executor.0:6208 blocked for more than 147 seconds.
Not tainted 6.9.0-rc5-next-20240426-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0 state:D stack:28528 pid:6208 tgid:6202 ppid:5237 flags:0x00000006
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6837
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
ep_loop_check_proc+0x36/0x270 fs/eventpoll.c:2072
ep_loop_check fs/eventpoll.c:2118 [inline]
do_epoll_ctl+0xda2/0xf70 fs/eventpoll.c:2308
__do_sys_epoll_ctl fs/eventpoll.c:2386 [inline]
__se_sys_epoll_ctl fs/eventpoll.c:2377 [inline]
__x64_sys_epoll_ctl+0x161/0x1a0 fs/eventpoll.c:2377
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f420707dea9
RSP: 002b:00007f4207e710c8 EFLAGS: 00000246
ORIG_RAX: 00000000000000e9
RAX: ffffffffffffffda RBX: 00007f42071ac050 RCX: 00007f420707dea9
RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005
RBP: 00007f42070ca4a4 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000020c85000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000006e R14: 00007f42071ac050 R15: 00007fff9ec17348
Showing all locks held in the system:
2 locks held by kworker/1:0/25:
1 lock held by khungtaskd/30:
#0: ffffffff8e333ba0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline]
#0: ffffffff8e333ba0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
#0: ffffffff8e333ba0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6614
9 locks held by kworker/1:1/45:
5 locks held by kworker/u9:0/53:
#0:
ffff88802515a948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3197 [inline]
ffff88802515a948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3303
#1: ffffc90000bd7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3198 [inline]
#1: ffffc90000bd7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3303
#2: ffff8880642fd060 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:309
#3:
ffff8880642fc078
(&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 net/bluetooth/hci_sync.c:5551
#4: ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
#4: ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
2 locks held by kworker/1:2/784:
4 locks held by udevd/4547:
#0:
ffff88802f850420
(
sb_writers#8){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2853 [inline]
sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 fs/read_write.c:586
#1: ffff888029851488
(&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 fs/kernfs/file.c:325
#2: ffff8880205253c8 (kn->active#5
){.+.+}-{0:0}
, at: kernfs_fop_write_iter+0x20f/0x500 fs/kernfs/file.c:326
#3:
ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
2 locks held by getty/4857:
#0:
ffff88802f0290a0
(
&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2201
5 locks held by kworker/u9:3/5117:
#0: ffff8880244e2948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3197 [inline]
#0: ffff8880244e2948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3303
#1:
ffffc90003fe7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3198 [inline]
ffffc90003fe7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3303
#2:
ffff888064305060
(&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:309
#3: ffff888064304078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 net/bluetooth/hci_sync.c:5551
#4:
ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
5 locks held by kworker/u9:4/5118:
#0: ffff888022737148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3197 [inline]
#0: ffff888022737148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3303
#1: ffffc90003ff7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3198 [inline]
#1: ffffc90003ff7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3303
#2:
ffff888064339060
(
&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:309
#3: ffff888064338078 (
&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 net/bluetooth/hci_sync.c:5551
#4: ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}
, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
5 locks held by kworker/u9:5/5119:
#0: ffff888022731948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3197 [inline]
#0: ffff888022731948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3303
#1:
ffffc90004007d00
(
(work_completion)(&hdev->cmd_sync_work)
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3198 [inline]
, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3303
#2:
ffff88802e049060
(&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:309
#3: ffff88802e048078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 net/bluetooth/hci_sync.c:5551
#4:
ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
1 lock held by syz-executor.3/5121:
#0: ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
#0: ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
1 lock held by syz-executor.2/5120:
#0: ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
#0: ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
5 locks held by kworker/u9:7/5125:
#0: ffff88805dc3b148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3197 [inline]
#0: ffff88805dc3b148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3303
#1: ffffc90004047d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3198 [inline]
#1: ffffc90004047d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3303
#2: ffff88807b5fd060 (&hdev->req_lock){+.+.}-{3:3}
, at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:309
#3: ffff88807b5fc078
(&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 net/bluetooth/hci_sync.c:5551
#4: ffffffff8f93dd68
(
uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
7 locks held by kworker/R-wg-cr/5150:
2 locks held by kworker/R-wg-cr/5152:
2 locks held by kworker/R-wg-cr/5153:
2 locks held by kworker/R-wg-cr/5155:
3 locks held by kworker/1:3/5162:
2 locks held by kworker/1:4/5165:
2 locks held by kworker/1:5/5194:
2 locks held by kworker/1:6/5196:
2 locks held by kworker/1:7/5203:
4 locks held by udevd/5223:
#0:
ffff8880234372f0
(&p->lock
){+.+.}-{3:3}
, at: seq_read_iter+0xb7/0xd60 fs/seq_file.c:182
#1: ffff88807ee08c88
(&of->mutex
#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154
#2: ffff88806192d4b8 (kn->active#20){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155
#3:
ffff8880114df190 (&dev->mutex){....}-{3:3}
, at: device_lock_interruptible include/linux/device.h:995 [inline]
, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
2 locks held by syz-executor.4/6160:
#0:
ffff88802dce00e0 (&type->s_umount_key#53/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 fs/super.c:344
#1:
ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
2 locks held by syz-executor.1/6168:
#0:
ffff8880207640e0
(
&type->s_umount_key#53/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 fs/super.c:344
#1: ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
#1: ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
2 locks held by syz-executor.0/6205:
#0:
ffff88802ee35868
(
&ep->mtx){+.+.}-{3:3}, at: epoll_mutex_lock fs/eventpoll.c:2213 [inline]
&ep->mtx){+.+.}-{3:3}, at: do_epoll_ctl+0x43e/0xf70 fs/eventpoll.c:2293
#1: ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
#1: ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
2 locks held by syz-executor.0/6208:
#0: ffffffff8e482148 (epnested_mutex){+.+.}-{3:3}, at: epoll_mutex_lock+0x4b/0x60 fs/eventpoll.c:2213
#1: ffff88802ee35868 (&ep->mtx/1){+.+.}-{3:3}, at: ep_loop_check_proc+0x36/0x270 fs/eventpoll.c:2072
2 locks held by syz-executor.4/6217:
#0: ffff88801e99b918 (&data->open_mutex){+.+.}-{3:3}
, at: vhci_create_device+0x33/0x720 drivers/bluetooth/hci_vhci.c:479
#1: ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
#1: ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
2 locks held by syz-executor.1/6218:
#0: ffff88804d886118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x33/0x720 drivers/bluetooth/hci_vhci.c:479
#1: ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
#1: ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
2 locks held by syz-executor.0/6220:
#0: ffff8880619cb118
(&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x33/0x720 drivers/bluetooth/hci_vhci.c:479
#1: ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
#1: ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
2 locks held by kworker/1:8/6221:
2 locks held by syz-executor.4/6224:
#0:
ffff88807ec5e918 (&data->open_mutex){+.+.}-{3:3}
, at: vhci_create_device+0x33/0x720 drivers/bluetooth/hci_vhci.c:479
#1: ffffffff8f93dd68
(uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
(uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
2 locks held by syz-executor.1/6225:
#0:
ffff888056e06918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x33/0x720 drivers/bluetooth/hci_vhci.c:479
#1: ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
#1: ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
2 locks held by syz-executor.0/6227:
#0:
ffff88804d885118
(&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x33/0x720 drivers/bluetooth/hci_vhci.c:479
#1:
ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
4 locks held by kworker/1:9/6234:
2 locks held by syz-executor.4/6238:
#0: ffff88805f545118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x33/0x720 drivers/bluetooth/hci_vhci.c:479
#1: ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
#1: ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
2 locks held by syz-executor.1/6239:
#0: ffff88805dc35118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x33/0x720 drivers/bluetooth/hci_vhci.c:479
#1: ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline]
#1: ffffffff8f93dd68 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.9.0-rc5-next-20240426-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114
nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
watchdog+0xfde/0x1020 kernel/hung_task.c:379
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Sending NMI from CPU 0 to CPUs 1:
imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored
NMI backtrace for cpu 1
CPU: 1 PID: 5148 Comm: kworker/R-wg-cr Not tainted 6.9.0-rc5-next-20240426-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
Workqueue: wg-crypt-wg0 wg_packet_tx_worker
RIP: 0010:io_serial_in+0x76/0xb0 drivers/tty/serial/8250/8250_port.c:406
Code: 50 29 58 fc 89 e9 41 d3 e6 48 83 c3 40 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 c1 dd bd fc 44 03 33 44 89 f2 ec <0f> b6 c0 5b 41 5e 41 5f 5d c3 cc cc cc cc 89 e9 80 e1 07 38 c1 7c
RSP: 0018:ffffc90000a16a78 EFLAGS: 00000002
RAX: 1ffffffff2957700 RBX: ffffffff94abbd20 RCX: 0000000000000000
RDX: 00000000000003fd RSI: 000000000001c4ca RDI: 000000000001c4cb
RBP: 0000000000000000 R08: ffffffff853e2bd6 R09: 1ffff11003ee9046
R10: dffffc0000000000 R11: ffffffff853e2b90 R12: dffffc0000000000
R13: 00000000000026ab R14: 00000000000003fd R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b32c24000 CR3: 000000000e132000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
serial_in drivers/tty/serial/8250/8250.h:117 [inline]
serial_lsr_in drivers/tty/serial/8250/8250.h:139 [inline]
wait_for_lsr drivers/tty/serial/8250/8250_port.c:2068 [inline]
serial8250_console_fifo_write drivers/tty/serial/8250/8250_port.c:3315 [inline]
serial8250_console_write+0x1099/0x1770 drivers/tty/serial/8250/8250_port.c:3393
console_emit_next_record kernel/printk/printk.c:2928 [inline]
console_flush_all+0x865/0xfd0 kernel/printk/printk.c:2994
console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3063
vprintk_emit+0x5a6/0x770 kernel/printk/printk.c:2345
dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4942
dev_printk_emit+0xdd/0x120 drivers/base/core.c:4953
_dev_warn+0x122/0x170 drivers/base/core.c:5009
usb_rx_callback_intf0+0x15a/0x1a0 drivers/media/rc/imon.c:1771
__usb_hcd_giveback_urb+0x373/0x530 drivers/usb/core/hcd.c:1648
dummy_timer+0x830/0x45d0 drivers/usb/gadget/udc/dummy_hcd.c:1987
__run_hrtimer kernel/time/hrtimer.c:1687 [inline]
__hrtimer_run_queues+0x5a5/0xd50 kernel/time/hrtimer.c:1751
hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1813
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
__sysvec_apic_timer_interrupt+0x110/0x3f0 arch/x86/kernel/apic/apic.c:1049
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1043
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:206 [inline]
RIP: 0010:unwind_next_frame+0x1ef/0x2a00 arch/x86/kernel/unwind_orc.c:494
Code: c3 00 00 00 81 48 89 ef 48 c7 c6 00 00 00 81 e8 57 76 55 00 49 c7 c6 00 00 c0 8b 48 89 ef 48 c7 c6 00 00 c0 8b e8 41 76 55 00 <48> 39 dd 48 89 6c 24 38 0f 82 27 01 00 00 4c 39 f5 0f 83 1e 01 00
RSP: 0018:ffffc90000a17aa8 EFLAGS: 00000246
RAX: 0000000080000303 RBX: ffffffff81000000 RCX: ffff8880289d5a00
RDX: ffffc90000a17bb5 RSI: ffffffff8bc00000 RDI: ffffffff865cabae
RBP: ffffffff865cabae R08: ffffffff8140e14f R09: ffffc90000a17c70
R10: 0000000000000003 R11: ffffffff818224e0 R12: ffffc90000a17b80
R13: ffffc90000a17bd0 R14: ffffffff8bc00000 R15: ffffffff865cabaf
arch_stack_walk+0x151/0x1b0 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122
kasan_save_stack mm/kasan/common.c:47 [inline]
kasan_save_track+0x3f/0x80 mm/kasan/common.c:68