INFO: task udevd:4534 blocked for more than 143 seconds. Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:22048 pid:4534 tgid:4534 ppid:1 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x49d0 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 rwsem_down_read_slowpath kernel/locking/rwsem.c:1086 [inline] __down_read_common kernel/locking/rwsem.c:1250 [inline] __down_read kernel/locking/rwsem.c:1263 [inline] down_read+0x705/0xa40 kernel/locking/rwsem.c:1528 kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159 lookup_fast+0x1f4/0x4a0 walk_component fs/namei.c:2000 [inline] link_path_walk+0x60b/0xea0 fs/namei.c:2331 path_lookupat+0xa9/0x450 fs/namei.c:2492 filename_lookup+0x256/0x610 fs/namei.c:2522 user_path_at_empty+0x42/0x60 fs/namei.c:2929 do_readlinkat+0x118/0x3b0 fs/stat.c:499 __do_sys_readlink fs/stat.c:532 [inline] __se_sys_readlink fs/stat.c:529 [inline] __x64_sys_readlink+0x7f/0x90 fs/stat.c:529 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc2ae517d47 RSP: 002b:00007ffd57e6e2e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 RAX: ffffffffffffffda RBX: 00007ffd57e6e2f8 RCX: 00007fc2ae517d47 RDX: 0000000000000400 RSI: 00007ffd57e6e2f8 RDI: 00007ffd57e6e7d8 RBP: 0000000000000400 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd57e6e7d8 R13: 00007ffd57e6e748 R14: 000056293dbad910 R15: 0000000000000000 INFO: task udevd:5078 blocked for more than 144 seconds. Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:22656 pid:5078 tgid:5078 ppid:4534 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x49d0 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 device_lock include/linux/device.h:1009 [inline] uevent_show+0x17d/0x340 drivers/base/core.c:2743 dev_attr_show+0x55/0xc0 drivers/base/core.c:2437 sysfs_kf_seq_show+0x331/0x4c0 fs/sysfs/file.c:59 seq_read_iter+0x445/0xd60 fs/seq_file.c:230 new_sync_read fs/read_write.c:395 [inline] vfs_read+0x9bd/0xbc0 fs/read_write.c:476 ksys_read+0x1a0/0x2c0 fs/read_write.c:619 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc2ae516b6a RSP: 002b:00007ffd57e67308 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 000056293dbd00f0 RCX: 00007fc2ae516b6a RDX: 0000000000001000 RSI: 000056293dbca930 RDI: 0000000000000008 RBP: 000056293dbd00f0 R08: 0000000000000008 R09: 0000000000000000 R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000003fff R14: 00007ffd57e677e8 R15: 000000000000000a INFO: task udevd:5348 blocked for more than 145 seconds. Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:24784 pid:5348 tgid:5348 ppid:4534 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x49d0 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 rwsem_down_read_slowpath kernel/locking/rwsem.c:1086 [inline] __down_read_common kernel/locking/rwsem.c:1250 [inline] __down_read kernel/locking/rwsem.c:1263 [inline] down_read+0x705/0xa40 kernel/locking/rwsem.c:1528 kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159 lookup_fast+0x1f4/0x4a0 walk_component fs/namei.c:2000 [inline] link_path_walk+0x60b/0xea0 fs/namei.c:2331 path_lookupat+0xa9/0x450 fs/namei.c:2492 filename_lookup+0x256/0x610 fs/namei.c:2522 vfs_statx+0x105/0x4e0 fs/stat.c:244 vfs_fstatat+0x135/0x190 fs/stat.c:304 __do_sys_newfstatat fs/stat.c:468 [inline] __se_sys_newfstatat fs/stat.c:462 [inline] __x64_sys_newfstatat+0x125/0x1b0 fs/stat.c:462 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc2ae5165f4 RSP: 002b:00007ffd57e68da8 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 000056293dbd2550 RCX: 00007fc2ae5165f4 RDX: 00007ffd57e68db8 RSI: 00007ffd57e68e48 RDI: 00000000ffffff9c RBP: 000056293aa5477b R08: 000056293aa5477b R09: 0000000000000000 R10: 0000000000000100 R11: 0000000000000206 R12: 0000000000000000 R13: 000056293dbd2640 R14: 00007ffd57e68e48 R15: 000056293dbae480 INFO: task syz.0.493:6758 blocked for more than 146 seconds. Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.493 state:D stack:27360 pid:6758 tgid:6753 ppid:5088 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x49d0 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 rwsem_down_write_slowpath+0xeeb/0x13b0 kernel/locking/rwsem.c:1178 __down_write_common+0x1af/0x200 kernel/locking/rwsem.c:1306 kernfs_add_one+0x9a/0x8b0 fs/kernfs/dir.c:778 kernfs_create_dir_ns+0xd9/0x120 fs/kernfs/dir.c:1071 sysfs_create_dir_ns+0x189/0x3a0 fs/sysfs/dir.c:59 create_dir lib/kobject.c:73 [inline] kobject_add_internal+0x435/0x8d0 lib/kobject.c:240 kobject_add_varg lib/kobject.c:374 [inline] kobject_init_and_add+0x124/0x190 lib/kobject.c:457 bus_add_driver+0x25a/0x670 drivers/base/bus.c:666 driver_register+0x23a/0x320 drivers/base/driver.c:246 usb_gadget_register_driver_owner+0xdd/0x230 drivers/usb/gadget/udc/core.c:1701 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:595 [inline] raw_ioctl+0x13ae/0x3ce0 drivers/usb/gadget/legacy/raw_gadget.c:1306 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa394f757db RSP: 002b:00007fa3949dbf20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fa394f757db RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 RBP: 00007fa3949dcff0 R08: 0000000000000010 R09: 00302e6364755f79 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fa3949dbfc0 R14: 00000000200000c0 R15: 00007fa395230b88 INFO: task modprobe:6763 blocked for more than 147 seconds. Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:modprobe state:D stack:23680 pid:6763 tgid:6763 ppid:51 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x49d0 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 rwsem_down_read_slowpath kernel/locking/rwsem.c:1086 [inline] __down_read_common kernel/locking/rwsem.c:1250 [inline] __down_read kernel/locking/rwsem.c:1263 [inline] down_read+0x705/0xa40 kernel/locking/rwsem.c:1528 kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159 lookup_fast+0x1f4/0x4a0 walk_component fs/namei.c:2000 [inline] link_path_walk+0x60b/0xea0 fs/namei.c:2331 path_lookupat+0xa9/0x450 fs/namei.c:2492 filename_lookup+0x256/0x610 fs/namei.c:2522 user_path_at_empty+0x42/0x60 fs/namei.c:2929 user_path_at include/linux/namei.h:58 [inline] user_statfs+0xd9/0x460 fs/statfs.c:103 __do_sys_statfs fs/statfs.c:195 [inline] __se_sys_statfs fs/statfs.c:192 [inline] __x64_sys_statfs+0xe8/0x1a0 fs/statfs.c:192 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ff6627f268a RSP: 002b:00007ffd68bfdd18 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 RAX: ffffffffffffffda RBX: 00007ff6627174f8 RCX: 00007ff6627f268a RDX: 00007ff66271919c RSI: 00007ffd68bfdd90 RDI: 00007ff66270f723 RBP: 00007ff66270f723 R08: 0000000000000000 R09: 000000000000000d R10: 00007ffd68bfdb40 R11: 0000000000000246 R12: 00007ffd68bfdd90 R13: 00007ffd68bfdf08 R14: 00007ffd68bfdf30 R15: 0000000000000000 INFO: task syz.3.496:6766 blocked for more than 148 seconds. Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.496 state:D stack:23792 pid:6766 tgid:6765 ppid:5080 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x49d0 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 rwsem_down_write_slowpath+0xeeb/0x13b0 kernel/locking/rwsem.c:1178 __down_write_common+0x1af/0x200 kernel/locking/rwsem.c:1306 kernfs_add_one+0x9a/0x8b0 fs/kernfs/dir.c:778 kernfs_create_dir_ns+0xd9/0x120 fs/kernfs/dir.c:1071 sysfs_create_dir_ns+0x189/0x3a0 fs/sysfs/dir.c:59 create_dir lib/kobject.c:73 [inline] kobject_add_internal+0x435/0x8d0 lib/kobject.c:240 kobject_add_varg lib/kobject.c:374 [inline] kobject_init_and_add+0x124/0x190 lib/kobject.c:457 bus_add_driver+0x25a/0x670 drivers/base/bus.c:666 driver_register+0x23a/0x320 drivers/base/driver.c:246 usb_gadget_register_driver_owner+0xdd/0x230 drivers/usb/gadget/udc/core.c:1701 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:595 [inline] raw_ioctl+0x13ae/0x3ce0 drivers/usb/gadget/legacy/raw_gadget.c:1306 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f90621757db RSP: 002b:00007f9061bfcf20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f90621757db RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 RBP: 00007f9061bfdff0 R08: 0000000000000010 R09: 00332e6364755f79 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f9061bfcfc0 R14: 0000000020000200 R15: 00007f9062430320 INFO: task syz.2.497:6768 blocked for more than 149 seconds. Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.497 state:D stack:26816 pid:6768 tgid:6767 ppid:5075 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x49d0 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 rwsem_down_write_slowpath+0xeeb/0x13b0 kernel/locking/rwsem.c:1178 __down_write_common+0x1af/0x200 kernel/locking/rwsem.c:1306 kernfs_add_one+0x9a/0x8b0 fs/kernfs/dir.c:778 kernfs_create_dir_ns+0xd9/0x120 fs/kernfs/dir.c:1071 sysfs_create_dir_ns+0x189/0x3a0 fs/sysfs/dir.c:59 create_dir lib/kobject.c:73 [inline] kobject_add_internal+0x435/0x8d0 lib/kobject.c:240 kobject_add_varg lib/kobject.c:374 [inline] kobject_init_and_add+0x124/0x190 lib/kobject.c:457 bus_add_driver+0x25a/0x670 drivers/base/bus.c:666 driver_register+0x23a/0x320 drivers/base/driver.c:246 usb_gadget_register_driver_owner+0xdd/0x230 drivers/usb/gadget/udc/core.c:1701 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:595 [inline] raw_ioctl+0x13ae/0x3ce0 drivers/usb/gadget/legacy/raw_gadget.c:1306 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2fc33757db RSP: 002b:00007f2fc405cf20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f2fc33757db RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 RBP: 00007f2fc405dff0 R08: 0000000000000010 R09: 00322e6364755f79 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f2fc405cfc0 R14: 0000000020000200 R15: 00007f2fc3630320 INFO: task modprobe:6769 blocked for more than 150 seconds. Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:modprobe state:D stack:23680 pid:6769 tgid:6769 ppid:3987 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x49d0 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 rwsem_down_read_slowpath kernel/locking/rwsem.c:1086 [inline] __down_read_common kernel/locking/rwsem.c:1250 [inline] __down_read kernel/locking/rwsem.c:1263 [inline] down_read+0x705/0xa40 kernel/locking/rwsem.c:1528 kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159 lookup_fast+0x1f4/0x4a0 walk_component fs/namei.c:2000 [inline] link_path_walk+0x60b/0xea0 fs/namei.c:2331 path_lookupat+0xa9/0x450 fs/namei.c:2492 filename_lookup+0x256/0x610 fs/namei.c:2522 user_path_at_empty+0x42/0x60 fs/namei.c:2929 user_path_at include/linux/namei.h:58 [inline] user_statfs+0xd9/0x460 fs/statfs.c:103 __do_sys_statfs fs/statfs.c:195 [inline] __se_sys_statfs fs/statfs.c:192 [inline] __x64_sys_statfs+0xe8/0x1a0 fs/statfs.c:192 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3ded77768a RSP: 002b:00007ffc27a8d098 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 RAX: ffffffffffffffda RBX: 00007f3ded69c4f8 RCX: 00007f3ded77768a RDX: 00007f3ded69e19c RSI: 00007ffc27a8d110 RDI: 00007f3ded694723 RBP: 00007f3ded694723 R08: 0000000000000000 R09: 000000000000000d R10: 00007ffc27a8cec0 R11: 0000000000000246 R12: 00007ffc27a8d110 R13: 00007ffc27a8d288 R14: 00007ffc27a8d2b0 R15: 0000000000000000 Showing all locks held in the system: 3 locks held by kworker/0:0/8: 6 locks held by kworker/0:1/9: 1 lock held by khungtaskd/30: #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:781 [inline] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6614 2 locks held by kworker/u8:2/35: #0: ffff8880b953e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 kernel/sched/core.c:559 #1: ffff8880b9528948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 kernel/sched/psi.c:988 2 locks held by kworker/u8:3/51: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3223 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc90000bb7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline] ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 2 locks held by kworker/u8:9/3987: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3223 [inline] ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3329 #1: ffffc9000c1b7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3224 [inline] #1: ffffc9000c1b7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3329 1 lock held by udevd/4534: #0: ffff888015ed4148 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159 2 locks held by getty/4832: #0: ffff88802a71b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 1 lock held by syz-executor/5075: #0: ffff888015ed4148 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159 1 lock held by syz-executor/5076: #0: ffff888015ed4148 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159 4 locks held by udevd/5078: #0: ffff88802bb89668 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 fs/seq_file.c:182 #1: ffff888024fbd088 (&of->mutex#2){+.+.}-{3:3} , at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154 #2: ffff88802d032b48 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155 #3: ffff8880259c7190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline] #3: ffff8880259c7190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2743 1 lock held by syz-executor/5080: #0: ffff888015ed4148 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159 1 lock held by syz-executor/5088: #0: ffff888015ed4148 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159 1 lock held by udevd/5348: #0: ffff888015ed4148 ( &root->kernfs_rwsem ){++++}-{3:3}, at: kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159 1 lock held by syz-executor/5982: #0: ffff888015ed4148 (&root->kernfs_rwsem){++++}-{3:3} , at: kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159 1 lock held by syz.1.490/6743: #0: ffff888015ed4148 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_remove_by_name_ns+0x7a/0x160 fs/kernfs/dir.c:1689 1 lock held by syz.0.493/6758: #0: ffff888015ed4148 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_add_one+0x9a/0x8b0 fs/kernfs/dir.c:778 1 lock held by modprobe/6763: #0: ffff888015ed4148 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159 1 lock held by syz.3.496/6766: #0: ffff888015ed4148 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_add_one+0x9a/0x8b0 fs/kernfs/dir.c:778 1 lock held by syz.2.497/6768: #0: ffff888015ed4148 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_add_one+0x9a/0x8b0 fs/kernfs/dir.c:778 1 lock held by modprobe/6769: #0: ffff888015ed4148 ( &root->kernfs_rwsem ){++++}-{3:3} , at: kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159 7 locks held by syz.4.498/6770: 1 lock held by syz-executor/6772: #0: ffff888015ed4148 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159 1 lock held by syz-executor/6773: #0: ffff888015ed4148 ( &root->kernfs_rwsem ){++++}-{3:3} , at: kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159 1 lock held by syz-executor/6774: #0: ffff888015ed4148 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159 1 lock held by syz-executor/6775: #0: ffff888015ed4148 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159 1 lock held by syz-executor/6776: #0: ffff888015ed4148 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_dop_revalidate+0xd4/0x560 fs/kernfs/dir.c:1159 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0