INFO: task jbd2/sda1-8:4499 blocked for more than 143 seconds. Not tainted 6.10.0-rc2-syzkaller-00064-g71d7b52cc33b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:jbd2/sda1-8 state:D stack:24576 pid:4499 tgid:4499 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x49d0 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 io_schedule+0x8d/0x110 kernel/sched/core.c:9043 bit_wait_io+0x12/0xd0 kernel/sched/wait_bit.c:209 __wait_on_bit+0xb0/0x2f0 kernel/sched/wait_bit.c:49 out_of_line_wait_on_bit+0x1d5/0x260 kernel/sched/wait_bit.c:64 wait_on_buffer include/linux/buffer_head.h:415 [inline] journal_wait_on_commit_record fs/jbd2/commit.c:171 [inline] jbd2_journal_commit_transaction+0x3d7f/0x6760 fs/jbd2/commit.c:887 kjournald2+0x463/0x850 fs/jbd2/journal.c:201 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task kworker/0:4:5149 blocked for more than 144 seconds. Not tainted 6.10.0-rc2-syzkaller-00064-g71d7b52cc33b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:4 state:D stack:19672 pid:5149 tgid:5149 ppid:2 flags:0x00004000 Workqueue: events linkwatch_event Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x49d0 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 linkwatch_event+0xe/0x60 net/core/link_watch.c:276 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd70 kernel/workqueue.c:3393 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task syz-executor.0:9495 blocked for more than 145 seconds. Not tainted 6.10.0-rc2-syzkaller-00064-g71d7b52cc33b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:20640 pid:9495 tgid:9493 ppid:5457 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x49d0 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 ib_get_eth_speed+0x153/0x800 drivers/infiniband/core/verbs.c:1983 rxe_query_port+0x76/0x260 drivers/infiniband/sw/rxe/rxe_verbs.c:55 __ib_query_port drivers/infiniband/core/device.c:2067 [inline] ib_query_port+0x166/0x7d0 drivers/infiniband/core/device.c:2099 ib_setup_port_attrs+0x299/0x2440 drivers/infiniband/core/sysfs.c:1440 add_one_compat_dev+0x51a/0x710 drivers/infiniband/core/device.c:969 add_compat_devs drivers/infiniband/core/device.c:1027 [inline] enable_device_and_get+0x31a/0x440 drivers/infiniband/core/device.c:1338 ib_register_device+0x10d4/0x13d0 drivers/infiniband/core/device.c:1420 rxe_register_device+0x267/0x380 drivers/infiniband/sw/rxe/rxe_verbs.c:1523 rxe_net_add+0x75/0xd0 drivers/infiniband/sw/rxe/rxe_net.c:541 rxe_newlink+0xde/0x1a0 drivers/infiniband/sw/rxe/rxe.c:197 nldev_newlink+0x5d0/0x640 drivers/infiniband/core/nldev.c:1778 rdma_nl_rcv_skb drivers/infiniband/core/netlink.c:239 [inline] rdma_nl_rcv+0x6dd/0x9e0 drivers/infiniband/core/netlink.c:259 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline] netlink_unicast+0x7ea/0x980 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x8db/0xcb0 net/netlink/af_netlink.c:1905 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 ____sys_sendmsg+0x525/0x7d0 net/socket.c:2585 ___sys_sendmsg net/socket.c:2639 [inline] __sys_sendmsg+0x2b0/0x3a0 net/socket.c:2668 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f38c007cee9 RSP: 002b:00007f38c0e4d0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f38c01b3f80 RCX: 00007f38c007cee9 RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000008 RBP: 00007f38c00da6fe R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f38c01b3f80 R15: 00007fff448c06b8 INFO: task syz-executor.3:9517 blocked for more than 146 seconds. Not tainted 6.10.0-rc2-syzkaller-00064-g71d7b52cc33b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.3 state:D stack:27280 pid:9517 tgid:9514 ppid:7159 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x49d0 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_timeout+0xb0/0x310 kernel/time/timer.c:2557 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common kernel/sched/completion.c:127 [inline] wait_for_completion+0x355/0x620 kernel/sched/completion.c:148 __flush_work+0xaa9/0xd00 kernel/workqueue.c:4211 flush_all_backlogs net/core/dev.c:5999 [inline] unregister_netdevice_many_notify+0x8a0/0x16b0 net/core/dev.c:11200 unregister_netdevice_many net/core/dev.c:11276 [inline] unregister_netdevice_queue+0x303/0x370 net/core/dev.c:11155 unregister_netdevice include/linux/netdevice.h:3119 [inline] __tun_detach+0x6b6/0x1600 drivers/net/tun.c:685 tun_detach drivers/net/tun.c:701 [inline] tun_chr_close+0x108/0x1b0 drivers/net/tun.c:3500 __fput+0x406/0x8b0 fs/file_table.c:422 task_work_run+0x24f/0x310 kernel/task_work.c:180 get_signal+0x15e6/0x1740 kernel/signal.c:2681 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fce70e7cee9 RSP: 002b:00007fce71c830c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: 0000000000000000 RBX: 00007fce70fb4120 RCX: 00007fce70e7cee9 RDX: 0000000020000040 RSI: 00000000800454d2 RDI: 0000000000000003 RBP: 00007fce70eda6fe R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007fce70fb4120 R15: 00007ffc7f1a9ef8 INFO: task syz-executor.2:9520 blocked for more than 148 seconds. Not tainted 6.10.0-rc2-syzkaller-00064-g71d7b52cc33b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:28496 pid:9520 tgid:9518 ppid:7827 flags:0x00000006 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x49d0 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 arp_ioctl+0x371/0x530 net/ipv4/arp.c:1296 inet_ioctl+0x2b5/0x4f0 net/ipv4/af_inet.c:981 sock_do_ioctl+0x158/0x460 net/socket.c:1222 sock_ioctl+0x629/0x8e0 net/socket.c:1341 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fac1aa7cee9 RSP: 002b:00007fac1b82f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fac1abb4050 RCX: 00007fac1aa7cee9 RDX: 0000000020000080 RSI: 0000000000008953 RDI: 0000000000000005 RBP: 00007fac1aada6fe R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007fac1abb4050 R15: 00007ffe6feef9f8 INFO: task syz-executor.4:9532 blocked for more than 149 seconds. Not tainted 6.10.0-rc2-syzkaller-00064-g71d7b52cc33b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:26048 pid:9532 tgid:9531 ppid:8489 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x49d0 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 netlink_dump+0x5d3/0xe50 net/netlink/af_netlink.c:2336 __netlink_dump_start+0x59d/0x780 net/netlink/af_netlink.c:2454 netlink_dump_start include/linux/netlink.h:340 [inline] rtnetlink_rcv_msg+0xcf7/0x10d0 net/core/rtnetlink.c:6551 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2564 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline] netlink_unicast+0x7ea/0x980 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x8db/0xcb0 net/netlink/af_netlink.c:1905 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 ____sys_sendmsg+0x525/0x7d0 net/socket.c:2585 ___sys_sendmsg net/socket.c:2639 [inline] __sys_sendmsg+0x2b0/0x3a0 net/socket.c:2668 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f608847cee9 RSP: 002b:00007f60892340c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f60885b3f80 RCX: 00007f608847cee9 RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 RBP: 00007f60884da6fe R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f60885b3f80 R15: 00007ffdcfe9c208 Showing all locks held in the system: 1 lock held by khungtaskd/30: #0: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline] #0: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:781 [inline] #0: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6614 6 locks held by kworker/1:1/45: 3 locks held by kworker/u8:3/51: #0: ffff8880b943e798 ( &rq->__lock ){-.-.}-{2:2} , at: process_one_work kernel/workqueue.c:3206 [inline] , at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffff8880b9428948 ( &per_cpu_ptr(group->pcpu, cpu)->seq ){-.-.}-{0:0} , at: psi_task_switch+0x441/0x770 kernel/sched/psi.c:988 #2: ffff8880b942a718 ( &base->lock ){-.-.}-{2:2} , at: static_key_enable+0x12/0x20 kernel/jump_label.c:217 8 locks held by kworker/1:2/783: 3 locks held by kworker/u8:9/2849: #0: ffff88802a65e948 ((wq_completion)ipv6_addrconf ){+.+.}-{0:0} , at: process_one_work kernel/workqueue.c:3206 [inline] , at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc9000a04fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work) ){+.+.}-{0:0} , at: process_one_work kernel/workqueue.c:3207 [inline] , at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 #2: ffffffff8f5d4dc8 ( rtnl_mutex ){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 net/ipv6/addrconf.c:4733 5 locks held by kworker/u8:11/2895: 2 locks held by getty/4832: #0: ffff88802b4840a0 ( &tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2201 2 locks held by syz-fuzzer/5084: #0: ffff88823bcb6420 ( sb_writers #4 ){.+.+}-{0:0} , at: mnt_want_write+0x3f/0x90 fs/namespace.c:409 #1: ffff88807d752c00 ( &type->i_mutex_dir_key #3 /1 ){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:826 [inline] ){+.+.}-{3:3}, at: do_unlinkat+0x26a/0x830 fs/namei.c:4394 2 locks held by syz-fuzzer/5087: #0: ffff88823bcb6420 ( sb_writers#4 ){.+.+}-{0:0} , at: mnt_want_write+0x3f/0x90 fs/namespace.c:409 #1: ffff88807d752c00 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:826 [inline] #1: ffff88807d752c00 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x260/0x540 fs/namei.c:3900 2 locks held by syz-fuzzer/5088: #0: ffff88823bcb6420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 fs/namespace.c:409 #1: ffff88807d752c00 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:826 [inline] #1: ffff88807d752c00 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: do_unlinkat+0x26a/0x830 fs/namei.c:4394 3 locks held by syz-fuzzer/5090: #0: ffff88823bcb6420 ( sb_writers#4 ){.+.+}-{0:0} , at: mnt_want_write+0x3f/0x90 fs/namespace.c:409 #1: ffff88805ab20e00 ( &type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:826 [inline] &type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: do_unlinkat+0x26a/0x830 fs/namei.c:4394 #2: ffff88805ab20400 (&sb->s_type->i_mutex_key#7 ){++++}-{3:3}, at: inode_lock include/linux/fs.h:791 [inline] ){++++}-{3:3}, at: vfs_unlink+0xe4/0x650 fs/namei.c:4332 2 locks held by syz-fuzzer/5269: #0: ffff88823bcb6420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 fs/namespace.c:409 #1: ffff88807d752c00 ( &type->i_mutex_dir_key #3 /1 ){+.+.}-{3:3} , at: inode_lock_nested include/linux/fs.h:826 [inline] , at: do_unlinkat+0x26a/0x830 fs/namei.c:4394 3 locks held by kworker/0:3/5148: #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc9000414fd00 (deferred_process_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc9000414fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 #2: ffffffff8f5d4dc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:104 3 locks held by kworker/0:4/5149: #0: ffff888015080948 ( (wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] (wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc9000416fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 #2: ffffffff8f5d4dc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:276 3 locks held by kworker/0:5/5150: #0: ffff888015081948 ( (wq_completion)events_power_efficient ){+.+.}-{0:0} , at: process_one_work kernel/workqueue.c:3206 [inline] , at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc900041cfd00 ( (reg_check_chans).work){+.+.}-{0:0} , at: process_one_work kernel/workqueue.c:3207 [inline] , at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 #2: ffffffff8f5d4dc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x91/0xea0 net/wireless/reg.c:2478 3 locks held by kworker/1:4/5152: 7 locks held by syz-executor.0/9495: #0: ffffffff94b0eb98 ( &rdma_nl_types[idx].sem ){.+.+}-{3:3} , at: rdma_nl_rcv_msg drivers/infiniband/core/netlink.c:164 [inline] , at: rdma_nl_rcv_skb drivers/infiniband/core/netlink.c:239 [inline] , at: rdma_nl_rcv+0x32d/0x9e0 drivers/infiniband/core/netlink.c:259 #1: ffffffff8f375ef0 ( link_ops_rwsem ){++++}-{3:3} , at: nldev_newlink+0x439/0x640 drivers/infiniband/core/nldev.c:1768 #2: ffffffff8f368b90