INFO: task syz.0.784:5897 blocked for more than 430 seconds. Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.784 state:D stack:0 pid:5897 tgid:5897 ppid:3274 flags:0x0000000d Call trace: __switch_to+0x204/0x39c arch/arm64/kernel/process.c:603 context_switch kernel/sched/core.c:5264 [inline] __schedule+0xaf4/0x2df8 kernel/sched/core.c:6607 __schedule_loop kernel/sched/core.c:6684 [inline] schedule+0xd0/0x304 kernel/sched/core.c:6699 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6756 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x4e8/0x840 kernel/locking/mutex.c:752 mutex_lock_nested+0x24/0x30 kernel/locking/mutex.c:804 rcu_barrier+0x48/0x580 kernel/rcu/tree.c:4561 netdev_run_todo+0x250/0xd04 net/core/dev.c:10778 rtnl_unlock+0x10/0x1c net/core/rtnetlink.c:152 tun_detach drivers/net/tun.c:704 [inline] tun_chr_close+0x90/0x1ac drivers/net/tun.c:3517 __fput+0x2c4/0x944 fs/file_table.c:431 ____fput+0x14/0x20 fs/file_table.c:459 task_work_run+0x128/0x210 kernel/task_work.c:228 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] do_notify_resume+0x1d4/0x25c arch/arm64/kernel/entry-common.c:151 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:169 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:178 [inline] el0_svc+0x100/0x180 arch/arm64/kernel/entry-common.c:713 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffff800086dc4ea0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x44/0x2d4 kernel/locking/lockdep.c:6695 1 lock held by klogd/3081: 2 locks held by getty/3212: #0: ffff0000165ac0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80008ce6b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x93c/0xe9c drivers/tty/n_tty.c:2211 2 locks held by sshd/3265: 2 locks held by syz-executor/3267: 4 locks held by kworker/1:4/3417: 4 locks held by kworker/u8:24/5494: #0: ffff00000d95a148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x6e4/0x18a8 kernel/workqueue.c:3204 #1: ffff80008fb37ce0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x708/0x18a8 kernel/workqueue.c:3204 #2: ffff80008813bd30 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xcc/0x890 net/core/net_namespace.c:580 #3: ffff800086dcd9c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x580 kernel/rcu/tree.c:4561 1 lock held by syz-executor/5526: #0: ffff800086dcd9c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x580 kernel/rcu/tree.c:4561 7 locks held by syz-executor/5869: #0: ffff000018368420 (sb_writers#8){.+.+}-{0:0}, at: __sb_start_write include/linux/fs.h:1715 [inline] #0: ffff000018368420 (sb_writers#8){.+.+}-{0:0}, at: sb_start_write include/linux/fs.h:1851 [inline] #0: ffff000018368420 (sb_writers#8){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2930 [inline] #0: ffff000018368420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x66c/0xad0 fs/read_write.c:679 #1: ffff000024213088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ac/0x3c8 fs/kernfs/file.c:325 #2: ffff00001726cd28 (kn->active#35){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1c8/0x3c8 fs/kernfs/file.c:326 #3: ffff80008793cbc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xbc/0x3b8 drivers/net/netdevsim/bus.c:216 #4: ffff0000138b50e8 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1014 [inline] #4: ffff0000138b50e8 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1094 [inline] #4: ffff0000138b50e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0x84/0x47c drivers/base/dd.c:1292 #5: ffff0000138b0250 (&devlink->lock_key#3){+.+.}-{3:3}, at: devl_lock+0x18/0x24 net/devlink/core.c:276 #6: ffff800086dcd9c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x580 kernel/rcu/tree.c:4561 1 lock held by syz.0.784/5897: #0: ffff800086dcd9c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x580 kernel/rcu/tree.c:4561 4 locks held by syz-executor/5905: #0: ffff000018368420 (sb_writers#8){.+.+}-{0:0}, at: __sb_start_write include/linux/fs.h:1715 [inline] #0: ffff000018368420 (sb_writers#8){.+.+}-{0:0}, at: sb_start_write include/linux/fs.h:1851 [inline] #0: ffff000018368420 (sb_writers#8){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2930 [inline] #0: ffff000018368420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x66c/0xad0 fs/read_write.c:679 #1: ffff00002904e088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ac/0x3c8 fs/kernfs/file.c:325 #2: ffff00001726cd28 (kn->active#35){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1c8/0x3c8 fs/kernfs/file.c:326 #3: ffff80008793cbc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xbc/0x3b8 drivers/net/netdevsim/bus.c:216 2 locks held by kworker/1:7/5943: =============================================