INFO: task syz.1.691:9129 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.691 state:D stack:28792 pid:9129 tgid:9128 ppid:5824 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x10e9/0x6820 kernel/sched/core.c:7183 __schedule_loop kernel/sched/core.c:7262 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7277 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7334 __mutex_lock_common kernel/locking/mutex.c:712 [inline] __mutex_lock+0xced/0x1b10 kernel/locking/mutex.c:806 tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 chrdev_open+0x234/0x6a0 fs/char_dev.c:411 do_dentry_open+0x6d8/0x1660 fs/open.c:947 vfs_open+0x82/0x3f0 fs/open.c:1079 do_open fs/namei.c:4699 [inline] path_openat+0x208c/0x31a0 fs/namei.c:4858 do_file_open+0x20e/0x430 fs/namei.c:4887 do_sys_openat2+0x10d/0x1e0 fs/open.c:1364 do_sys_open fs/open.c:1370 [inline] __do_sys_openat fs/open.c:1386 [inline] __se_sys_openat fs/open.c:1381 [inline] __x64_sys_openat+0x12d/0x210 fs/open.c:1381 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x10b/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f9cbbb9c819 RSP: 002b:00007f9cbca5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f9cbbe15fa0 RCX: 00007f9cbbb9c819 RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c RBP: 00007f9cbbc32c91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f9cbbe16038 R14: 00007f9cbbe15fa0 R15: 00007ffd53be1d78 INFO: task syz.1.691:9130 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.691 state:D stack:27312 pid:9130 tgid:9128 ppid:5824 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x10e9/0x6820 kernel/sched/core.c:7183 __schedule_loop kernel/sched/core.c:7262 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7277 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7334 __mutex_lock_common kernel/locking/mutex.c:712 [inline] __mutex_lock+0xced/0x1b10 kernel/locking/mutex.c:806 tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 chrdev_open+0x234/0x6a0 fs/char_dev.c:411 do_dentry_open+0x6d8/0x1660 fs/open.c:947 vfs_open+0x82/0x3f0 fs/open.c:1079 do_open fs/namei.c:4699 [inline] path_openat+0x208c/0x31a0 fs/namei.c:4858 do_file_open+0x20e/0x430 fs/namei.c:4887 do_sys_openat2+0x10d/0x1e0 fs/open.c:1364 do_sys_open fs/open.c:1370 [inline] __do_sys_openat fs/open.c:1386 [inline] __se_sys_openat fs/open.c:1381 [inline] __x64_sys_openat+0x12d/0x210 fs/open.c:1381 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x10b/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f9cbbb9c819 RSP: 002b:00007f9cbca3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f9cbbe16090 RCX: 00007f9cbbb9c819 RDX: 0000000000040741 RSI: 0000200000000000 RDI: ffffffffffffff9c RBP: 00007f9cbbc32c91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f9cbbe16128 R14: 00007f9cbbe16090 R15: 00007ffd53be1d78 INFO: task syz.1.691:9131 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.691 state:D stack:28792 pid:9131 tgid:9128 ppid:5824 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x10e9/0x6820 kernel/sched/core.c:7183 __schedule_loop kernel/sched/core.c:7262 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7277 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7334 __mutex_lock_common kernel/locking/mutex.c:712 [inline] __mutex_lock+0xced/0x1b10 kernel/locking/mutex.c:806 tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 chrdev_open+0x234/0x6a0 fs/char_dev.c:411 do_dentry_open+0x6d8/0x1660 fs/open.c:947 vfs_open+0x82/0x3f0 fs/open.c:1079 do_open fs/namei.c:4699 [inline] path_openat+0x208c/0x31a0 fs/namei.c:4858 do_file_open+0x20e/0x430 fs/namei.c:4887 do_sys_openat2+0x10d/0x1e0 fs/open.c:1364 do_sys_open fs/open.c:1370 [inline] __do_sys_openat fs/open.c:1386 [inline] __se_sys_openat fs/open.c:1381 [inline] __x64_sys_openat+0x12d/0x210 fs/open.c:1381 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x10b/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f9cbbb9c819 RSP: 002b:00007f9cbca1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f9cbbe16180 RCX: 00007f9cbbb9c819 RDX: 0000000000000201 RSI: 0000200000000000 RDI: ffffffffffffff9c RBP: 00007f9cbbc32c91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f9cbbe16218 R14: 00007f9cbbe16180 R15: 00007ffd53be1d78 INFO: task syz.4.699:9178 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.699 state:D stack:26152 pid:9178 tgid:9177 ppid:9046 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x10e9/0x6820 kernel/sched/core.c:7183 __schedule_loop kernel/sched/core.c:7262 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7277 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7334 __mutex_lock_common kernel/locking/mutex.c:712 [inline] __mutex_lock+0xced/0x1b10 kernel/locking/mutex.c:806 tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 chrdev_open+0x234/0x6a0 fs/char_dev.c:411 do_dentry_open+0x6d8/0x1660 fs/open.c:947 vfs_open+0x82/0x3f0 fs/open.c:1079 do_open fs/namei.c:4699 [inline] path_openat+0x208c/0x31a0 fs/namei.c:4858 do_file_open+0x20e/0x430 fs/namei.c:4887 do_sys_openat2+0x10d/0x1e0 fs/open.c:1364 do_sys_open fs/open.c:1370 [inline] __do_sys_openat fs/open.c:1386 [inline] __se_sys_openat fs/open.c:1381 [inline] __x64_sys_openat+0x12d/0x210 fs/open.c:1381 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x10b/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3ffcb9c819 RSP: 002b:00007f3ffda44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f3ffce15fa0 RCX: 00007f3ffcb9c819 RDX: 0000000000002800 RSI: 0000200000000000 RDI: ffffffffffffff9c RBP: 00007f3ffcc32c91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f3ffce16038 R14: 00007f3ffce15fa0 R15: 00007ffdf3a48b88 INFO: task syz.0.710:9224 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.710 state:D stack:29016 pid:9224 tgid:9222 ppid:5822 task_flags:0x400140 flags:0x00080006 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x10e9/0x6820 kernel/sched/core.c:7183 __schedule_loop kernel/sched/core.c:7262 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7277 schedule_timeout+0x1b2/0x280 kernel/time/sleep_timeout.c:75 ___down_common kernel/locking/semaphore.c:289 [inline] __down_common+0x371/0x8a0 kernel/locking/semaphore.c:314 down+0x74/0xa0 kernel/locking/semaphore.c:100 console_lock+0x5b/0xa0 kernel/printk/printk.c:2896 fbcon_set_con2fb_map_ioctl+0x157/0x220 drivers/video/fbdev/core/fbcon.c:3101 do_fb_ioctl+0x25b/0x7e0 drivers/video/fbdev/core/fb_chrdev.c:138 fb_ioctl+0xe5/0x150 drivers/video/fbdev/core/fb_chrdev.c:169 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x10b/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f9a0479c819 RSP: 002b:00007f9a0561e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f9a04a16090 RCX: 00007f9a0479c819 RDX: 0000000000000000 RSI: 0000000000004610 RDI: 0000000000000003 RBP: 00007f9a04832c91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f9a04a16128 R14: 00007f9a04a16090 R15: 00007ffe3920b3d8 Showing all locks held in the system: 1 lock held by khungtaskd/30: #0: ffffffff8e7e73e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffffffff8e7e73e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #0: ffffffff8e7e73e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775 2 locks held by kworker/u8:7/1153: #0: ffff88801d77a940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 kernel/workqueue.c:3277 #1: ffffc900056efd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 kernel/workqueue.c:3278 2 locks held by getty/5583: #0: ffff8880389610a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 drivers/tty/n_tty.c:2211 3 locks held by kworker/0:3/5827: #0: ffff88813fe6b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 kernel/workqueue.c:3277 #1: ffffc90004517d08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 kernel/workqueue.c:3278 #2: ffff888021af5230 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x63b0 drivers/net/netdevsim/fib.c:1490 2 locks held by kworker/u8:8/5926: #0: ffff88801d77a940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 kernel/workqueue.c:3277 #1: ffffc9000521fd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 kernel/workqueue.c:3278 2 locks held by kworker/u8:9/6046: #0: ffff88801d77a940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 kernel/workqueue.c:3277 #1: ffffc900053efd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 kernel/workqueue.c:3278 2 locks held by kworker/u8:15/6052: #0: ffff88801d77a940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 kernel/workqueue.c:3277 #1: ffffc90003bf7d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 kernel/workqueue.c:3278 2 locks held by kworker/u8:24/7343: #0: ffff88801d77a940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 kernel/workqueue.c:3277 #1: ffffc90003907d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 kernel/workqueue.c:3278 3 locks held by kworker/u8:29/7349: #0: ffff888033c81140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 kernel/workqueue.c:3277 #1: ffffc900024cfd08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 kernel/workqueue.c:3278 #2: ffffffff906263e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #2: ffffffff906263e0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 net/ipv6/addrconf.c:4206 2 locks held by kworker/u8:31/7351: #0: ffff88813feac940 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 kernel/workqueue.c:3277 #1: ffffc9000249fd08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 kernel/workqueue.c:3278 4 locks held by syz.2.690/9124: 1 lock held by syz.1.691/9129: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.1.691/9130: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.1.691/9131: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.4.699/9178: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 3 locks held by kworker/0:7/9291: #0: ffff88813fe6b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 kernel/workqueue.c:3277 #1: ffffc9000541fd08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 kernel/workqueue.c:3278 #2: ffff8880a38d7230 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x63b0 drivers/net/netdevsim/fib.c:1490 1 lock held by syz.6.714/9318: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.5.719/9347: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.7.720/9357: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.7.720/9358: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.8.729/9428: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.8.729/9429: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.1.739/9530: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.9.742/9550: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.9.742/9551: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.9.742/9555: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.2.744/9660: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: class_mutex_constructor include/linux/mutex.h:253 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: ptmx_open drivers/tty/pty.c:798 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x11a/0x370 drivers/tty/pty.c:765 1 lock held by syz.4.748/9687: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.0.745/9707: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.6.762/9884: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.6.762/9885: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.6.762/9887: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.8.773/9986: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.5.777/10012: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.7.778/10015: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: class_mutex_constructor include/linux/mutex.h:253 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: ptmx_open drivers/tty/pty.c:798 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x11a/0x370 drivers/tty/pty.c:765 1 lock held by syz.3.789/10265: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.1.785/10303: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: class_mutex_constructor include/linux/mutex.h:253 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: ptmx_open drivers/tty/pty.c:798 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x11a/0x370 drivers/tty/pty.c:765 1 lock held by syz.2.796/10354: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.9.797/10357: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.9.797/10358: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.9.797/10359: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.9.797/10361: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.4.803/10420: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.4.803/10421: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 1 lock held by syz.0.799/10439: #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open_by_driver drivers/tty/tty_io.c:2037 [inline] #0: ffffffff8f4fdf00 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 drivers/tty/tty_io.c:2120 8 locks held by syz-executor/10448: 2 locks held by modprobe/10469: ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x1d7/0x230 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:161 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x141/0x190 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline] watchdog+0xd18/0x1040 kernel/hung_task.c:515 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245