INFO: task kworker/1:2:58 blocked for more than 143 seconds. Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:2 state:D stack:20664 pid:58 tgid:58 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0xb0/0x310 kernel/time/timer.c:2557 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common kernel/sched/completion.c:127 [inline] wait_for_completion+0x355/0x620 kernel/sched/completion.c:148 __flush_work+0xaa9/0xd00 kernel/workqueue.c:4208 __cancel_work_sync+0xbc/0x110 kernel/workqueue.c:4328 cancel_autoload_drivers sound/core/seq_device.c:139 [inline] snd_seq_device_dev_free+0x44/0xa0 sound/core/seq_device.c:158 __snd_device_free+0x1d0/0x2e0 sound/core/device.c:76 snd_device_free_all+0xcd/0x180 sound/core/device.c:233 snd_card_do_free sound/core/init.c:587 [inline] release_card_device+0x72/0x1c0 sound/core/init.c:153 device_release+0x99/0x1c0 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x22f/0x480 lib/kobject.c:737 usb_audio_disconnect+0x5f8/0x700 sound/usb/card.c:999 usb_unbind_interface+0x25e/0x940 drivers/usb/core/driver.c:461 device_remove drivers/base/dd.c:568 [inline] __device_release_driver drivers/base/dd.c:1270 [inline] device_release_driver_internal+0x503/0x7c0 drivers/base/dd.c:1293 bus_remove_device+0x34f/0x420 drivers/base/bus.c:574 device_del+0x57a/0x9b0 drivers/base/core.c:3868 usb_disable_device+0x3bf/0x850 drivers/usb/core/message.c:1418 usb_disconnect+0x340/0x950 drivers/usb/core/hub.c:2304 hub_port_connect drivers/usb/core/hub.c:5361 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x1eb9/0x5150 drivers/usb/core/hub.c:5903 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd40 kernel/workqueue.c:3390 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task kworker/0:3:5104 blocked for more than 143 seconds. Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:3 state:D stack:21200 pid:5104 tgid:5104 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0xb0/0x310 kernel/time/timer.c:2557 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common kernel/sched/completion.c:127 [inline] wait_for_completion+0x355/0x620 kernel/sched/completion.c:148 __flush_work+0xaa9/0xd00 kernel/workqueue.c:4208 __cancel_work_sync+0xbc/0x110 kernel/workqueue.c:4328 cancel_autoload_drivers sound/core/seq_device.c:139 [inline] snd_seq_device_dev_free+0x44/0xa0 sound/core/seq_device.c:158 __snd_device_free+0x1d0/0x2e0 sound/core/device.c:76 snd_device_free_all+0xcd/0x180 sound/core/device.c:233 snd_card_do_free sound/core/init.c:587 [inline] release_card_device+0x72/0x1c0 sound/core/init.c:153 device_release+0x99/0x1c0 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x22f/0x480 lib/kobject.c:737 usb_audio_disconnect+0x5f8/0x700 sound/usb/card.c:999 usb_unbind_interface+0x25e/0x940 drivers/usb/core/driver.c:461 device_remove drivers/base/dd.c:568 [inline] __device_release_driver drivers/base/dd.c:1270 [inline] device_release_driver_internal+0x503/0x7c0 drivers/base/dd.c:1293 bus_remove_device+0x34f/0x420 drivers/base/bus.c:574 device_del+0x57a/0x9b0 drivers/base/core.c:3868 usb_disable_device+0x3bf/0x850 drivers/usb/core/message.c:1418 usb_disconnect+0x340/0x950 drivers/usb/core/hub.c:2304 hub_port_connect drivers/usb/core/hub.c:5361 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x1eb9/0x5150 drivers/usb/core/hub.c:5903 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd40 kernel/workqueue.c:3390 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task kworker/0:6:5161 blocked for more than 144 seconds. Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:6 state:D stack:22256 pid:5161 tgid:5161 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0xb0/0x310 kernel/time/timer.c:2557 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common kernel/sched/completion.c:127 [inline] wait_for_completion+0x355/0x620 kernel/sched/completion.c:148 __flush_work+0xaa9/0xd00 kernel/workqueue.c:4208 __cancel_work_sync+0xbc/0x110 kernel/workqueue.c:4328 cancel_autoload_drivers sound/core/seq_device.c:139 [inline] snd_seq_device_dev_free+0x44/0xa0 sound/core/seq_device.c:158 __snd_device_free+0x1d0/0x2e0 sound/core/device.c:76 snd_device_free_all+0xcd/0x180 sound/core/device.c:233 snd_card_do_free sound/core/init.c:587 [inline] release_card_device+0x72/0x1c0 sound/core/init.c:153 device_release+0x99/0x1c0 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x22f/0x480 lib/kobject.c:737 usb_audio_disconnect+0x5f8/0x700 sound/usb/card.c:999 usb_unbind_interface+0x25e/0x940 drivers/usb/core/driver.c:461 device_remove drivers/base/dd.c:568 [inline] __device_release_driver drivers/base/dd.c:1270 [inline] device_release_driver_internal+0x503/0x7c0 drivers/base/dd.c:1293 bus_remove_device+0x34f/0x420 drivers/base/bus.c:574 device_del+0x57a/0x9b0 drivers/base/core.c:3868 usb_disable_device+0x3bf/0x850 drivers/usb/core/message.c:1418 usb_disconnect+0x340/0x950 drivers/usb/core/hub.c:2304 hub_port_connect drivers/usb/core/hub.c:5361 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x1eb9/0x5150 drivers/usb/core/hub.c:5903 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd40 kernel/workqueue.c:3390 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task udevd:5220 blocked for more than 144 seconds. Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:24864 pid:5220 tgid:5220 ppid:4555 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 device_lock include/linux/device.h:1009 [inline] uevent_show+0x17d/0x340 drivers/base/core.c:2743 dev_attr_show+0x55/0xc0 drivers/base/core.c:2437 sysfs_kf_seq_show+0x331/0x4c0 fs/sysfs/file.c:59 seq_read_iter+0x445/0xd60 fs/seq_file.c:230 new_sync_read fs/read_write.c:395 [inline] vfs_read+0x9bd/0xbc0 fs/read_write.c:476 ksys_read+0x1a0/0x2c0 fs/read_write.c:619 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f4ade316b6a RSP: 002b:00007ffc3b1ac468 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 0000564ac61b0590 RCX: 00007f4ade316b6a RDX: 0000000000001000 RSI: 0000564ac61dd610 RDI: 0000000000000008 RBP: 0000564ac61b0590 R08: 0000000000000008 R09: 0000000000000020 R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000003fff R14: 00007ffc3b1ac948 R15: 000000000000000a INFO: task rm:11648 blocked for more than 145 seconds. Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:rm state:D stack:23680 pid:11648 tgid:11648 ppid:11619 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 __wait_on_freeing_inode+0x2a4/0x3f0 fs/inode.c:2300 find_inode_fast+0x2a0/0x460 fs/inode.c:957 iget_locked+0xab/0x820 fs/inode.c:1320 __ext4_iget+0x267/0x4090 fs/ext4/inode.c:4761 ext4_lookup+0x3e3/0x750 fs/ext4/namei.c:1811 __lookup_slow+0x28c/0x3f0 fs/namei.c:1718 lookup_slow+0x53/0x70 fs/namei.c:1735 walk_component fs/namei.c:2039 [inline] link_path_walk+0x99b/0xea0 fs/namei.c:2404 path_openat+0x25d/0x3470 fs/namei.c:3882 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f9f773e3a46 RSP: 002b:00007ffd31661278 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007ffd316614d8 RCX: 00007f9f773e3a46 RDX: 0000000000080000 RSI: 00007ffd316612f0 RDI: 00000000ffffff9c RBP: 00007ffd316612e0 R08: 0000000000080000 R09: 00007ffd316612f0 R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffd316612f0 R13: 0000000000000009 R14: 00007ffd316614bf R15: 00000000ffffffff INFO: task modprobe:11650 blocked for more than 145 seconds. Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:modprobe state:D stack:23680 pid:11650 tgid:11650 ppid:1281 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 d_wait_lookup fs/dcache.c:2458 [inline] d_alloc_parallel+0xc16/0x1600 fs/dcache.c:2540 __lookup_slow+0x117/0x3f0 fs/namei.c:1703 lookup_slow+0x53/0x70 fs/namei.c:1735 walk_component fs/namei.c:2039 [inline] link_path_walk+0x99b/0xea0 fs/namei.c:2404 path_openat+0x25d/0x3470 fs/namei.c:3882 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f0f33879a46 RSP: 002b:00007ffedfbd8048 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007ffedfbd82a8 RCX: 00007f0f33879a46 RDX: 0000000000080000 RSI: 00007ffedfbd80c0 RDI: 00000000ffffff9c RBP: 00007ffedfbd80b0 R08: 0000000000080000 R09: 00007ffedfbd80c0 R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffedfbd80c0 R13: 0000000000000009 R14: 00007ffedfbd828f R15: 00000000ffffffff INFO: task kworker/u8:7:11654 blocked for more than 145 seconds. Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:7 state:D stack:26800 pid:11654 tgid:11654 ppid:1101 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 d_wait_lookup fs/dcache.c:2458 [inline] d_alloc_parallel+0xc16/0x1600 fs/dcache.c:2540 __lookup_slow+0x117/0x3f0 fs/namei.c:1703 lookup_slow+0x53/0x70 fs/namei.c:1735 walk_component fs/namei.c:2039 [inline] link_path_walk+0x99b/0xea0 fs/namei.c:2404 path_openat+0x25d/0x3470 fs/namei.c:3882 do_filp_open+0x235/0x490 fs/namei.c:3913 do_open_execat fs/exec.c:972 [inline] open_exec+0xc0/0x2a0 fs/exec.c:1010 load_elf_binary+0x191f/0x2680 fs/binfmt_elf.c:893 search_binary_handler fs/exec.c:1821 [inline] exec_binprm fs/exec.c:1863 [inline] bprm_execve+0xaf8/0x1770 fs/exec.c:1914 kernel_execve+0x931/0xa50 fs/exec.c:2081 call_usermodehelper_exec_async+0x237/0x380 kernel/umh.c:110 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task kworker/u8:6:11671 blocked for more than 146 seconds. Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:6 state:D stack:26800 pid:11671 tgid:11671 ppid:1094 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 d_wait_lookup fs/dcache.c:2458 [inline] d_alloc_parallel+0xc16/0x1600 fs/dcache.c:2540 __lookup_slow+0x117/0x3f0 fs/namei.c:1703 lookup_slow+0x53/0x70 fs/namei.c:1735 walk_component fs/namei.c:2039 [inline] link_path_walk+0x99b/0xea0 fs/namei.c:2404 path_openat+0x25d/0x3470 fs/namei.c:3882 do_filp_open+0x235/0x490 fs/namei.c:3913 do_open_execat fs/exec.c:972 [inline] open_exec+0xc0/0x2a0 fs/exec.c:1010 load_elf_binary+0x191f/0x2680 fs/binfmt_elf.c:893 search_binary_handler fs/exec.c:1821 [inline] exec_binprm fs/exec.c:1863 [inline] bprm_execve+0xaf8/0x1770 fs/exec.c:1914 kernel_execve+0x931/0xa50 fs/exec.c:2081 call_usermodehelper_exec_async+0x237/0x380 kernel/umh.c:110 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task kworker/u8:9:11684 blocked for more than 146 seconds. Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:9 state:D stack:26800 pid:11684 tgid:11684 ppid:2466 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 d_wait_lookup fs/dcache.c:2458 [inline] d_alloc_parallel+0xc16/0x1600 fs/dcache.c:2540 __lookup_slow+0x117/0x3f0 fs/namei.c:1703 lookup_slow+0x53/0x70 fs/namei.c:1735 walk_component fs/namei.c:2039 [inline] link_path_walk+0x99b/0xea0 fs/namei.c:2404 path_openat+0x25d/0x3470 fs/namei.c:3882 do_filp_open+0x235/0x490 fs/namei.c:3913 do_open_execat fs/exec.c:972 [inline] open_exec+0xc0/0x2a0 fs/exec.c:1010 load_elf_binary+0x191f/0x2680 fs/binfmt_elf.c:893 search_binary_handler fs/exec.c:1821 [inline] exec_binprm fs/exec.c:1863 [inline] bprm_execve+0xaf8/0x1770 fs/exec.c:1914 kernel_execve+0x931/0xa50 fs/exec.c:2081 call_usermodehelper_exec_async+0x237/0x380 kernel/umh.c:110 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task kworker/u8:1:11698 blocked for more than 146 seconds. Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:1 state:D stack:26800 pid:11698 tgid:11698 ppid:12 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 d_wait_lookup fs/dcache.c:2458 [inline] d_alloc_parallel+0xc16/0x1600 fs/dcache.c:2540 __lookup_slow+0x117/0x3f0 fs/namei.c:1703 lookup_slow+0x53/0x70 fs/namei.c:1735 walk_component fs/namei.c:2039 [inline] link_path_walk+0x99b/0xea0 fs/namei.c:2404 path_openat+0x25d/0x3470 fs/namei.c:3882 do_filp_open+0x235/0x490 fs/namei.c:3913 do_open_execat fs/exec.c:972 [inline] open_exec+0xc0/0x2a0 fs/exec.c:1010 load_elf_binary+0x191f/0x2680 fs/binfmt_elf.c:893 search_binary_handler fs/exec.c:1821 [inline] exec_binprm fs/exec.c:1863 [inline] bprm_execve+0xaf8/0x1770 fs/exec.c:1914 kernel_execve+0x931/0xa50 fs/exec.c:2081 call_usermodehelper_exec_async+0x237/0x380 kernel/umh.c:110 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task kworker/u8:4:11699 blocked for more than 147 seconds. Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:4 state:D stack:26800 pid:11699 tgid:11699 ppid:63 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 d_wait_lookup fs/dcache.c:2458 [inline] d_alloc_parallel+0xc16/0x1600 fs/dcache.c:2540 __lookup_slow+0x117/0x3f0 fs/namei.c:1703 lookup_slow+0x53/0x70 fs/namei.c:1735 walk_component fs/namei.c:2039 [inline] link_path_walk+0x99b/0xea0 fs/namei.c:2404 path_openat+0x25d/0x3470 fs/namei.c:3882 do_filp_open+0x235/0x490 fs/namei.c:3913 do_open_execat fs/exec.c:972 [inline] open_exec+0xc0/0x2a0 fs/exec.c:1010 load_elf_binary+0x191f/0x2680 fs/binfmt_elf.c:893 search_binary_handler fs/exec.c:1821 [inline] exec_binprm fs/exec.c:1863 [inline] bprm_execve+0xaf8/0x1770 fs/exec.c:1914 kernel_execve+0x931/0xa50 fs/exec.c:2081 call_usermodehelper_exec_async+0x237/0x380 kernel/umh.c:110 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task kworker/u8:2:11731 blocked for more than 147 seconds. Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:2 state:D stack:26752 pid:11731 tgid:11731 ppid:35 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 d_wait_lookup fs/dcache.c:2458 [inline] d_alloc_parallel+0xc16/0x1600 fs/dcache.c:2540 __lookup_slow+0x117/0x3f0 fs/namei.c:1703 lookup_slow+0x53/0x70 fs/namei.c:1735 walk_component fs/namei.c:2039 [inline] link_path_walk+0x99b/0xea0 fs/namei.c:2404 path_openat+0x25d/0x3470 fs/namei.c:3882 do_filp_open+0x235/0x490 fs/namei.c:3913 do_open_execat fs/exec.c:972 [inline] open_exec+0xc0/0x2a0 fs/exec.c:1010 load_elf_binary+0x191f/0x2680 fs/binfmt_elf.c:893 search_binary_handler fs/exec.c:1821 [inline] exec_binprm fs/exec.c:1863 [inline] bprm_execve+0xaf8/0x1770 fs/exec.c:1914 kernel_execve+0x931/0xa50 fs/exec.c:2081 call_usermodehelper_exec_async+0x237/0x380 kernel/umh.c:110 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task kworker/u8:0:11789 blocked for more than 147 seconds. Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:0 state:D stack:26752 pid:11789 tgid:11789 ppid:11 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 d_wait_lookup fs/dcache.c:2458 [inline] d_alloc_parallel+0xc16/0x1600 fs/dcache.c:2540 __lookup_slow+0x117/0x3f0 fs/namei.c:1703 lookup_slow+0x53/0x70 fs/namei.c:1735 walk_component fs/namei.c:2039 [inline] link_path_walk+0x99b/0xea0 fs/namei.c:2404 path_openat+0x25d/0x3470 fs/namei.c:3882 do_filp_open+0x235/0x490 fs/namei.c:3913 do_open_execat fs/exec.c:972 [inline] open_exec+0xc0/0x2a0 fs/exec.c:1010 load_elf_binary+0x191f/0x2680 fs/binfmt_elf.c:893 search_binary_handler fs/exec.c:1821 [inline] exec_binprm fs/exec.c:1863 [inline] bprm_execve+0xaf8/0x1770 fs/exec.c:1914 kernel_execve+0x931/0xa50 fs/exec.c:2081 call_usermodehelper_exec_async+0x237/0x380 kernel/umh.c:110 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task kworker/u8:11:11799 blocked for more than 148 seconds. Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:11 state:D stack:26800 pid:11799 tgid:11799 ppid:2849 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 d_wait_lookup fs/dcache.c:2458 [inline] d_alloc_parallel+0xc16/0x1600 fs/dcache.c:2540 __lookup_slow+0x117/0x3f0 fs/namei.c:1703 lookup_slow+0x53/0x70 fs/namei.c:1735 walk_component fs/namei.c:2039 [inline] link_path_walk+0x99b/0xea0 fs/namei.c:2404 path_openat+0x25d/0x3470 fs/namei.c:3882 do_filp_open+0x235/0x490 fs/namei.c:3913 do_open_execat fs/exec.c:972 [inline] open_exec+0xc0/0x2a0 fs/exec.c:1010 load_elf_binary+0x191f/0x2680 fs/binfmt_elf.c:893 search_binary_handler fs/exec.c:1821 [inline] exec_binprm fs/exec.c:1863 [inline] bprm_execve+0xaf8/0x1770 fs/exec.c:1914 kernel_execve+0x931/0xa50 fs/exec.c:2081 call_usermodehelper_exec_async+0x237/0x380 kernel/umh.c:110 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings Showing all locks held in the system: 1 lock held by pool_workqueue_/3: #0: ffffffff8e33ca38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:328 [inline] #0: ffffffff8e33ca38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 kernel/rcu/tree_exp.h:958 2 locks held by kworker/u8:0/11: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90000107d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90000107d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:1/12: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90000117d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90000117d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 1 lock held by khungtaskd/30: #0: ffffffff8e337660 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline] #0: ffffffff8e337660 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #0: ffffffff8e337660 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6620 2 locks held by kworker/u8:2/35: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90000ab7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90000ab7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 5 locks held by kworker/1:2/58: #0: ffff88801cee1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff88801cee1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc9000123fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc9000123fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 #2: ffff88802377b190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #2: ffff88802377b190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5849 #3: ffff88801c2f9190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #3: ffff88801c2f9190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 drivers/usb/core/hub.c:2295 #4: ffff88801ce9b160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #4: ffff88801ce9b160 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1093 [inline] #4: ffff88801ce9b160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 drivers/base/dd.c:1290 2 locks held by kworker/u8:4/63: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc900015e7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc900015e7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/0:2/928: #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90003e7fd00 (autoload_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90003e7fd00 (autoload_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:6/1094: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90004437d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90004437d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:7/1101: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc900043c7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc900043c7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:8/1281: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc900049b7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc900049b7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:9/2466: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90009327d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90009327d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:11/2849: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90009967d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90009967d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by getty/4857: #0: ffff88802a1f60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 5 locks held by kworker/0:3/5104: #0: ffff88801cee1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff88801cee1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc900020bfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc900020bfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 #2: ffff88802383b190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #2: ffff88802383b190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5849 #3: ffff88806aa27190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #3: ffff88806aa27190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 drivers/usb/core/hub.c:2295 #4: ffff888029616160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #4: ffff888029616160 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1093 [inline] #4: ffff888029616160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 drivers/base/dd.c:1290 5 locks held by kworker/0:6/5161: #0: ffff88801cee1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff88801cee1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc9000384fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc9000384fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 #2: ffff88802395a190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #2: ffff88802395a190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5849 #3: ffff88801ffde190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #3: ffff88801ffde190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 drivers/usb/core/hub.c:2295 #4: ffff88802dca1160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #4: ffff88802dca1160 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1093 [inline] #4: ffff88802dca1160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 drivers/base/dd.c:1290 4 locks held by udevd/5220: #0: ffff88805f8ca0a0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 fs/seq_file.c:182 #1: ffff888068ab7088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154 #2: ffff88806e224e18 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155 #3: ffff88806aa27190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #3: ffff88806aa27190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2743 5 locks held by kworker/1:8/9954: #0: ffff88801cee1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff88801cee1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90003f57d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90003f57d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 #2: ffff8880238a3190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #2: ffff8880238a3190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5849 #3: ffff88806595c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #3: ffff88806595c190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 drivers/usb/core/hub.c:2295 #4: ffff88806c411160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #4: ffff88806c411160 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1093 [inline] #4: ffff88806c411160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 drivers/base/dd.c:1290 1 lock held by rm/11648: #0: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 1 lock held by modprobe/11650: #0: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:7/11654: #0: ffff888024f2d648 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff888024f2d648 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:6/11671: #0: ffff888024f2c8c8 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff888024f2c8c8 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:9/11684: #0: ffff88802298bb48 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff88802298bb48 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:1/11698: #0: ffff88802298b488 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff88802298b488 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:4/11699: #0: ffff888024f2bb48 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff888024f2bb48 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:3/11701: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc9000b17fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc9000b17fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:5/11705: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc9000b2e7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc9000b2e7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:2/11731: #0: ffff888022f5dd08 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff888022f5dd08 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:10/11736: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc9000abbfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc9000abbfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:12/11782: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc900034dfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc900034dfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:0/11789: #0: ffff8880212c12c8 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff8880212c12c8 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:11/11799: #0: ffff888024e5ea88 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff888024e5ea88 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:13/11832: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc900042dfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc900042dfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:14/11889: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90004427d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90004427d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:3/11994: #0: ffff88802127b488 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff88802127b488 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:15/12027: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc9000d44fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc9000d44fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:16/12043: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc900032e7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc900032e7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:13/12092: #0: ffff888025e9ea88 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff888025e9ea88 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:17/12093: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc9000b84fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc9000b84fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:15/12111: #0: ffff888022858c08 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff888022858c08 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:14/12178: #0: ffff888027dcb488 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff888027dcb488 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:12/12309: #0: ffff88802f13f808 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff88802f13f808 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:18/12310: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc9000d45fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc9000d45fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:16/12333: #0: ffff888025e9bb48 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff888025e9bb48 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:19/12338: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc9000d83fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc9000d83fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:18/12377: #0: ffff888022858548 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff888022858548 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:20/12378: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90003d7fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90003d7fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:17/12399: #0: ffff88802b2eea88 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff88802b2eea88 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:21/12431: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc9000315fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc9000315fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:21/12458: #0: ffff888026ee1988 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff888026ee1988 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:19/12460: #0: ffff8880287eadc8 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff8880287eadc8 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:5/12462: #0: ffff8880287ec208 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff8880287ec208 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:10/12464: #0: ffff88802f13ea88 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff88802f13ea88 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:23/12473: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc9000374fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc9000374fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 4 locks held by kworker/u8:24/12479: #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc900039a7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc900039a7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 #2: ffffffff8f5fbc90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 net/core/net_namespace.c:594 #3: ffffffff8f608808 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 drivers/net/wireguard/device.c:414 1 lock held by syz-executor/12485: #0: ffffffff8f608808 (rtnl_mutex){+.+.}-{3:3}, at: tun_detach drivers/net/tun.c:698 [inline] #0: ffffffff8f608808 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 drivers/net/tun.c:3507 2 locks held by kworker/u8:23/12488: #0: ffff88801ba85d08 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff88801ba85d08 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:25/12489: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90009747d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90009747d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 1 lock held by syz-executor/12498: #0: ffffffff8f608808 (rtnl_mutex){+.+.}-{3:3}, at: tun_detach drivers/net/tun.c:698 [inline] #0: ffffffff8f608808 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 drivers/net/tun.c:3507 2 locks held by kworker/u8:20/12503: #0: ffff8880220148c8 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff8880220148c8 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:26/12504: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc900030cfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc900030cfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 1 lock held by syz-executor/12533: #0: ffffffff8f608808 (rtnl_mutex){+.+.}-{3:3}, at: tun_detach drivers/net/tun.c:698 [inline] #0: ffffffff8f608808 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 drivers/net/tun.c:3507 2 locks held by kworker/u8:25/12538: #0: ffff888026ecf148 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff888026ecf148 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 1 lock held by syz-executor/12551: #0: ffffffff8f608808 (rtnl_mutex){+.+.}-{3:3}, at: tun_detach drivers/net/tun.c:698 [inline] #0: ffffffff8f608808 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 drivers/net/tun.c:3507 2 locks held by kworker/u8:26/12556: #0: ffff88802a5c63c8 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: prepare_bprm_creds fs/exec.c:1539 [inline] #0: ffff88802a5c63c8 (&sig->cred_guard_mutex){+.+.}-{3:3}, at: bprm_execve+0xd1/0x1770 fs/exec.c:1894 #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #1: ffff888025318df0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 1 lock held by syz.3.1655/12561: #0: ffffffff8e33c900 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:4486 5 locks held by kworker/u8:29/12562: ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 Call Trace: __dump_stack lib/dump_stack.c:93 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119 nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline] watchdog+0xfee/0x1030 kernel/hung_task.c:379 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 4537 Comm: syslogd Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 RIP: 0010:preempt_count_add+0x20/0x190 kernel/sched/core.c:5648 Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 89 fb 48 c7 c0 80 a9 7f 94 48 c1 e8 03 49 bf 00 00 00 00 00 fc ff df <42> 0f b6 04 38 84 c0 0f 85 ed 00 00 00 83 3d ac c9 1c 13 00 75 07 RSP: 0018:ffffc90002fef7e0 EFLAGS: 00000a06 RAX: 1ffffffff28ff530 RBX: 0000000000000001 RCX: ffffffff947fa903 RDX: dffffc0000000000 RSI: ffff88807edd9e00 RDI: 0000000000000001 RBP: ffffc90002fef950 R08: ffffc90002fef8c7 R09: 0000000000000000 R10: ffffc90002fef8a0 R11: fffff520005fdf19 R12: dffffc0000000000 R13: ffff88802f2f2d18 R14: 0000000000000000 R15: dffffc0000000000 FS: 00007f14e8be0380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055bb2ebf3058 CR3: 000000002930c000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __mutex_lock_common kernel/locking/mutex.c:607 [inline] __mutex_lock+0x112/0xd70 kernel/locking/mutex.c:752 __unix_dgram_recvmsg+0x246/0x12f0 net/unix/af_unix.c:2439 sock_recvmsg_nosec net/socket.c:1046 [inline] sock_recvmsg+0x22f/0x280 net/socket.c:1068 sock_read_iter+0x2ca/0x3e0 net/socket.c:1138 new_sync_read fs/read_write.c:395 [inline] vfs_read+0x9bd/0xbc0 fs/read_write.c:476 ksys_read+0x1a0/0x2c0 fs/read_write.c:619 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f14e8d34b6a Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83 RSP: 002b:00007ffe2bcd5448 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f14e8d34b6a RDX: 00000000000000ff RSI: 00005641dce99950 RDI: 0000000000000000 RBP: 00005641dce99910 R08: 0000000000000001 R09: 0000000000000000 R10: 00007f14e8ed33a3 R11: 0000000000000246 R12: 00005641dce9998d R13: 00005641dce99950 R14: 0000000000000000 R15: 00007f14e8f17a80