TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. INFO: task syz-executor0:8444 blocked for more than 140 seconds. Not tainted 4.19.0-rc4-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor0 D23160 8444 6837 0x00000004 Call Trace: context_switch kernel/sched/core.c:2825 [inline] __schedule+0x836/0x1e90 kernel/sched/core.c:3473 schedule+0xfe/0x460 kernel/sched/core.c:3517 schedule_timeout+0x197/0x220 kernel/time/timer.c:1780 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common kernel/sched/completion.c:115 [inline] wait_for_completion+0x427/0x8a0 kernel/sched/completion.c:136 __flush_work+0x4cb/0x8e0 kernel/workqueue.c:2917 __cancel_work_timer+0x3fd/0x7b0 kernel/workqueue.c:3004 cancel_delayed_work_sync+0xe/0x10 kernel/workqueue.c:3136 tls_sw_free_resources_tx+0x1ce/0xc60 net/tls/tls_sw.c:1564 tls_sk_proto_close+0x4ac/0x6e0 net/tls/tls_main.c:278 inet_release+0xde/0x1c0 net/ipv4/af_inet.c:428 inet6_release+0x46/0x60 net/ipv6/af_inet6.c:458 __sock_release+0xc7/0x230 net/socket.c:579 sock_close+0x10/0x20 net/socket.c:1141 __fput+0x303/0xab0 fs/file_table.c:278 ____fput+0x9/0x10 fs/file_table.c:309 task_work_run+0x19f/0x240 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:193 [inline] exit_to_usermode_loop+0x26e/0x300 arch/x86/entry/common.c:166 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x587/0x700 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x411211 Code: Bad RIP value. RSP: 002b:00007fff3b021d80 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000411211 RDX: 0000000000000000 RSI: 0000000000740b80 RDI: 0000000000000004 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 00007fff3b021cb0 R11: 0000000000000293 R12: 0000000000000000 R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 INFO: task syz-executor1:8454 blocked for more than 140 seconds. Not tainted 4.19.0-rc4-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor1 D23160 8454 6836 0x00000004 Call Trace: context_switch kernel/sched/core.c:2825 [inline] __schedule+0x836/0x1e90 kernel/sched/core.c:3473 schedule+0xfe/0x460 kernel/sched/core.c:3517 schedule_timeout+0x197/0x220 kernel/time/timer.c:1780 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common kernel/sched/completion.c:115 [inline] wait_for_completion+0x427/0x8a0 kernel/sched/completion.c:136 __flush_work+0x4cb/0x8e0 kernel/workqueue.c:2917 __cancel_work_timer+0x3fd/0x7b0 kernel/workqueue.c:3004 cancel_delayed_work_sync+0xe/0x10 kernel/workqueue.c:3136 tls_sw_free_resources_tx+0x1ce/0xc60 net/tls/tls_sw.c:1564 tls_sk_proto_close+0x4ac/0x6e0 net/tls/tls_main.c:278 inet_release+0xde/0x1c0 net/ipv4/af_inet.c:428 inet6_release+0x46/0x60 net/ipv6/af_inet6.c:458 __sock_release+0xc7/0x230 net/socket.c:579 sock_close+0x10/0x20 net/socket.c:1141 __fput+0x303/0xab0 fs/file_table.c:278 ____fput+0x9/0x10 fs/file_table.c:309 task_work_run+0x19f/0x240 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:193 [inline] exit_to_usermode_loop+0x26e/0x300 arch/x86/entry/common.c:166 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x587/0x700 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x411211 Code: Bad RIP value. RSP: 002b:00007fff68b10a10 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000411211 RDX: 0000000000000000 RSI: 0000000000740b80 RDI: 0000000000000004 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 00007fff68b10940 R11: 0000000000000293 R12: 0000000000000000 R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 INFO: task syz-executor2:8474 blocked for more than 140 seconds. Not tainted 4.19.0-rc4-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor2 D23160 8474 6845 0x00000004 Call Trace: context_switch kernel/sched/core.c:2825 [inline] __schedule+0x836/0x1e90 kernel/sched/core.c:3473 schedule+0xfe/0x460 kernel/sched/core.c:3517 schedule_timeout+0x197/0x220 kernel/time/timer.c:1780 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common kernel/sched/completion.c:115 [inline] wait_for_completion+0x427/0x8a0 kernel/sched/completion.c:136 __flush_work+0x4cb/0x8e0 kernel/workqueue.c:2917 __cancel_work_timer+0x3fd/0x7b0 kernel/workqueue.c:3004 cancel_delayed_work_sync+0xe/0x10 kernel/workqueue.c:3136 tls_sw_free_resources_tx+0x1ce/0xc60 net/tls/tls_sw.c:1564 tls_sk_proto_close+0x4ac/0x6e0 net/tls/tls_main.c:278 inet_release+0xde/0x1c0 net/ipv4/af_inet.c:428 inet6_release+0x46/0x60 net/ipv6/af_inet6.c:458 __sock_release+0xc7/0x230 net/socket.c:579 sock_close+0x10/0x20 net/socket.c:1141 __fput+0x303/0xab0 fs/file_table.c:278 ____fput+0x9/0x10 fs/file_table.c:309 task_work_run+0x19f/0x240 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:193 [inline] exit_to_usermode_loop+0x26e/0x300 arch/x86/entry/common.c:166 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x587/0x700 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x411211 Code: Bad RIP value. RSP: 002b:00007ffc72ea4f00 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000411211 RDX: 0000000000000000 RSI: 0000000000740b80 RDI: 0000000000000004 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 00007ffc72ea4e30 R11: 0000000000000293 R12: 0000000000000000 R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000002 INFO: task syz-executor4:8479 blocked for more than 140 seconds. Not tainted 4.19.0-rc4-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor4 D20456 8479 6846 0x00000004 Call Trace: context_switch kernel/sched/core.c:2825 [inline] __schedule+0x836/0x1e90 kernel/sched/core.c:3473 schedule+0xfe/0x460 kernel/sched/core.c:3517 schedule_timeout+0x197/0x220 kernel/time/timer.c:1780 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common kernel/sched/completion.c:115 [inline] wait_for_completion+0x427/0x8a0 kernel/sched/completion.c:136 __flush_work+0x4cb/0x8e0 kernel/workqueue.c:2917 __cancel_work_timer+0x3fd/0x7b0 kernel/workqueue.c:3004 cancel_delayed_work_sync+0xe/0x10 kernel/workqueue.c:3136 tls_sw_free_resources_tx+0x1ce/0xc60 net/tls/tls_sw.c:1564 tls_sk_proto_close+0x4ac/0x6e0 net/tls/tls_main.c:278 inet_release+0xde/0x1c0 net/ipv4/af_inet.c:428 inet6_release+0x46/0x60 net/ipv6/af_inet6.c:458 __sock_release+0xc7/0x230 net/socket.c:579 sock_close+0x10/0x20 net/socket.c:1141 __fput+0x303/0xab0 fs/file_table.c:278 ____fput+0x9/0x10 fs/file_table.c:309 task_work_run+0x19f/0x240 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:193 [inline] exit_to_usermode_loop+0x26e/0x300 arch/x86/entry/common.c:166 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x587/0x700 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x411211 Code: Bad RIP value. RSP: 002b:00007ffe30f202b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000411211 RDX: 0000000000000000 RSI: 0000000000740b80 RDI: 0000000000000004 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 00007ffe30f201e0 R11: 0000000000000293 R12: 0000000000000000 R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000004 INFO: task syz-executor5:8482 blocked for more than 140 seconds. Not tainted 4.19.0-rc4-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor5 D23160 8482 6864 0x00000004 Call Trace: context_switch kernel/sched/core.c:2825 [inline] __schedule+0x836/0x1e90 kernel/sched/core.c:3473 schedule+0xfe/0x460 kernel/sched/core.c:3517 schedule_timeout+0x197/0x220 kernel/time/timer.c:1780 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common kernel/sched/completion.c:115 [inline] wait_for_completion+0x427/0x8a0 kernel/sched/completion.c:136 __flush_work+0x4cb/0x8e0 kernel/workqueue.c:2917 __cancel_work_timer+0x3fd/0x7b0 kernel/workqueue.c:3004 cancel_delayed_work_sync+0xe/0x10 kernel/workqueue.c:3136 tls_sw_free_resources_tx+0x1ce/0xc60 net/tls/tls_sw.c:1564 tls_sk_proto_close+0x4ac/0x6e0 net/tls/tls_main.c:278 inet_release+0xde/0x1c0 net/ipv4/af_inet.c:428 inet6_release+0x46/0x60 net/ipv6/af_inet6.c:458 __sock_release+0xc7/0x230 net/socket.c:579 sock_close+0x10/0x20 net/socket.c:1141 __fput+0x303/0xab0 fs/file_table.c:278 ____fput+0x9/0x10 fs/file_table.c:309 task_work_run+0x19f/0x240 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:193 [inline] exit_to_usermode_loop+0x26e/0x300 arch/x86/entry/common.c:166 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x587/0x700 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x411211 Code: Bad RIP value. RSP: 002b:00007fff66e8aaa0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000411211 RDX: 0000000000000000 RSI: 0000000000740b80 RDI: 0000000000000004 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 00007fff66e8a9d0 R11: 0000000000000293 R12: 0000000000000000 R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000005 INFO: task syz-executor3:8493 blocked for more than 140 seconds. Not tainted 4.19.0-rc4-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor3 D22752 8493 6833 0x00000004 Call Trace: context_switch kernel/sched/core.c:2825 [inline] __schedule+0x836/0x1e90 kernel/sched/core.c:3473 schedule+0xfe/0x460 kernel/sched/core.c:3517 schedule_timeout+0x197/0x220 kernel/time/timer.c:1780 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common kernel/sched/completion.c:115 [inline] wait_for_completion+0x427/0x8a0 kernel/sched/completion.c:136 __flush_work+0x4cb/0x8e0 kernel/workqueue.c:2917 __cancel_work_timer+0x3fd/0x7b0 kernel/workqueue.c:3004 cancel_delayed_work_sync+0xe/0x10 kernel/workqueue.c:3136 tls_sw_free_resources_tx+0x1ce/0xc60 net/tls/tls_sw.c:1564 tls_sk_proto_close+0x4ac/0x6e0 net/tls/tls_main.c:278 inet_release+0xde/0x1c0 net/ipv4/af_inet.c:428 inet6_release+0x46/0x60 net/ipv6/af_inet6.c:458 __sock_release+0xc7/0x230 net/socket.c:579 sock_close+0x10/0x20 net/socket.c:1141 __fput+0x303/0xab0 fs/file_table.c:278 ____fput+0x9/0x10 fs/file_table.c:309 task_work_run+0x19f/0x240 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:193 [inline] exit_to_usermode_loop+0x26e/0x300 arch/x86/entry/common.c:166 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x587/0x700 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x411211 Code: Bad RIP value. RSP: 002b:00007ffee1258f80 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000411211 RDX: 0000000000000000 RSI: 0000000000740b80 RDI: 0000000000000004 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 00007ffee1258eb0 R11: 0000000000000293 R12: 0000000000000000 R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000003 Showing all locks held in the system: 2 locks held by kworker/0:0/5: #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: __write_once_size include/linux/compiler.h:215 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: process_one_work+0x9d6/0x1a20 kernel/workqueue.c:2124 #1: 00000000b47a6a1b ((work_completion)(&(&sw_ctx_tx->tx_work.work)->work)){+.+.}, at: process_one_work+0xa20/0x1a20 kernel/workqueue.c:2128 2 locks held by kworker/0:1/14: #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: __write_once_size include/linux/compiler.h:215 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: process_one_work+0x9d6/0x1a20 kernel/workqueue.c:2124 #1: 00000000c5d74f2c ((work_completion)(&(&sw_ctx_tx->tx_work.work)->work)){+.+.}, at: process_one_work+0xa20/0x1a20 kernel/workqueue.c:2128 2 locks held by kworker/1:0/19: #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: __write_once_size include/linux/compiler.h:215 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: process_one_work+0x9d6/0x1a20 kernel/workqueue.c:2124 #1: 0000000076e9f146 ((work_completion)(&(&sw_ctx_tx->tx_work.work)->work)){+.+.}, at: process_one_work+0xa20/0x1a20 kernel/workqueue.c:2128 2 locks held by kworker/1:1/24: #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: __write_once_size include/linux/compiler.h:215 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: process_one_work+0x9d6/0x1a20 kernel/workqueue.c:2124 #1: 00000000b9ae2b87 ((work_completion)(&(&sw_ctx_tx->tx_work.work)->work)){+.+.}, at: process_one_work+0xa20/0x1a20 kernel/workqueue.c:2128 1 lock held by khungtaskd/1023: #0: 000000004a6a29d1 (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x424 kernel/locking/lockdep.c:4435 2 locks held by kworker/1:2/2726: #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: __write_once_size include/linux/compiler.h:215 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: process_one_work+0x9d6/0x1a20 kernel/workqueue.c:2124 #1: 0000000034898476 ((work_completion)(&(&sw_ctx_tx->tx_work.work)->work)){+.+.}, at: process_one_work+0xa20/0x1a20 kernel/workqueue.c:2128 1 lock held by rsyslogd/6634: #0: 000000004b0513fb (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x170/0x1d0 fs/file.c:766 2 locks held by getty/6725: #0: 00000000c0d8f150 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 drivers/tty/tty_ldsem.c:353 #1: 00000000ad0ce7a1 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2fd/0x1b60 drivers/tty/n_tty.c:2140 2 locks held by getty/6726: #0: 0000000037b33ea8 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 drivers/tty/tty_ldsem.c:353 #1: 00000000c38fc073 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2fd/0x1b60 drivers/tty/n_tty.c:2140 2 locks held by getty/6727: #0: 000000003161cc34 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 drivers/tty/tty_ldsem.c:353 #1: 0000000060229d69 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2fd/0x1b60 drivers/tty/n_tty.c:2140 2 locks held by getty/6728: #0: 00000000801624f7 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 drivers/tty/tty_ldsem.c:353 #1: 0000000023ad799e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2fd/0x1b60 drivers/tty/n_tty.c:2140 2 locks held by getty/6729: #0: 00000000f09b7742 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 drivers/tty/tty_ldsem.c:353 #1: 0000000046992977 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2fd/0x1b60 drivers/tty/n_tty.c:2140 2 locks held by getty/6730: #0: 000000006804bd48 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 drivers/tty/tty_ldsem.c:353 #1: 00000000722d9258 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2fd/0x1b60 drivers/tty/n_tty.c:2140 2 locks held by getty/6731: #0: 000000009c88759f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 drivers/tty/tty_ldsem.c:353 #1: 0000000044498deb (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2fd/0x1b60 drivers/tty/n_tty.c:2140 2 locks held by kworker/1:3/7288: #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: __write_once_size include/linux/compiler.h:215 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: 000000008cfdef9b ((wq_completion)"events"){+.+.}, at: process_one_work+0x9d6/0x1a20 kernel/workqueue.c:2124 #1: 00000000b2f30e8e ((work_completion)(&(&sw_ctx_tx->tx_work.work)->work)){+.+.}, at: process_one_work+0xa20/0x1a20 kernel/workqueue.c:2128 2 locks held by syz-executor0/8444: #0: 000000003267ee46 (&sb->s_type->i_mutex_key#12){+.+.}, at: inode_lock include/linux/fs.h:738 [inline] #0: 000000003267ee46 (&sb->s_type->i_mutex_key#12){+.+.}, at: __sock_release+0x7d/0x230 net/socket.c:578 #1: 00000000bbcbb66e (sk_lock-AF_INET6){+.+.}, at: lock_sock include/net/sock.h:1492 [inline] #1: 00000000bbcbb66e (sk_lock-AF_INET6){+.+.}, at: wait_on_pending_writer+0x260/0x550 net/tls/tls_main.c:87 2 locks held by syz-executor1/8454: #0: 00000000dcf89476 (&sb->s_type->i_mutex_key#12){+.+.}, at: inode_lock include/linux/fs.h:738 [inline] #0: 00000000dcf89476 (&sb->s_type->i_mutex_key#12){+.+.}, at: __sock_release+0x7d/0x230 net/socket.c:578 #1: 00000000437b2e41 (sk_lock-AF_INET6){+.+.}, at: lock_sock include/net/sock.h:1492 [inline] #1: 00000000437b2e41 (sk_lock-AF_INET6){+.+.}, at: wait_on_pending_writer+0x260/0x550 net/tls/tls_main.c:87 2 locks held by syz-executor2/8474: #0: 0000000033a1e2b9 (&sb->s_type->i_mutex_key#12){+.+.}, at: inode_lock include/linux/fs.h:738 [inline] #0: 0000000033a1e2b9 (&sb->s_type->i_mutex_key#12){+.+.}, at: __sock_release+0x7d/0x230 net/socket.c:578 #1: 00000000ba0404fc (sk_lock-AF_INET6){+.+.}, at: lock_sock include/net/sock.h:1492 [inline] #1: 00000000ba0404fc (sk_lock-AF_INET6){+.+.}, at: wait_on_pending_writer+0x260/0x550 net/tls/tls_main.c:87 2 locks held by syz-executor4/8479: #0: 000000004256a71d (&sb->s_type->i_mutex_key#12){+.+.}, at: inode_lock include/linux/fs.h:738 [inline] #0: 000000004256a71d (&sb->s_type->i_mutex_key#12){+.+.}, at: __sock_release+0x7d/0x230 net/socket.c:578 #1: 00000000a151b706 (sk_lock-AF_INET6){+.+.}, at: lock_sock include/net/sock.h:1492 [inline] #1: 00000000a151b706 (sk_lock-AF_INET6){+.+.}, at: wait_on_pending_writer+0x260/0x550 net/tls/tls_main.c:87 2 locks held by syz-executor5/8482: #0: 00000000765001e9 (&sb->s_type->i_mutex_key#12){+.+.}, at: inode_lock include/linux/fs.h:738 [inline] #0: 00000000765001e9 (&sb->s_type->i_mutex_key#12){+.+.}, at: __sock_release+0x7d/0x230 net/socket.c:578 #1: 00000000cdf0379e (sk_lock-AF_INET6){+.+.}, at: lock_sock include/net/sock.h:1492 [inline] #1: 00000000cdf0379e (sk_lock-AF_INET6){+.+.}, at: wait_on_pending_writer+0x260/0x550 net/tls/tls_main.c:87 2 locks held by syz-executor3/8493: #0: 00000000121ceb45 (&sb->s_type->i_mutex_key#12){+.+.}, at: inode_lock include/linux/fs.h:738 [inline] #0: 00000000121ceb45 (&sb->s_type->i_mutex_key#12){+.+.}, at: __sock_release+0x7d/0x230 net/socket.c:578 #1: 00000000e902cda0 (sk_lock-AF_INET6){+.+.}, at: lock_sock include/net/sock.h:1492 [inline] #1: 00000000e902cda0 (sk_lock-AF_INET6){+.+.}, at: wait_on_pending_writer+0x260/0x550 net/tls/tls_main.c:87 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 1023 Comm: khungtaskd Not tainted 4.19.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x16e/0x22a lib/dump_stack.c:113 nmi_cpu_backtrace.cold.3+0x3e/0x76 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0xf5/0x119 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:144 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:204 [inline] watchdog+0x749/0xc80 kernel/hung_task.c:265 kthread+0x327/0x3f0 kernel/kthread.c:246 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:413 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0x6/0x10 arch/x86/include/asm/irqflags.h:57