INFO: task syz-executor.1:5530 blocked for more than 143 seconds. Not tainted 6.8.0-syzkaller-01185-g855684c7d938 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:27384 pid:5530 tgid:5529 ppid:5253 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0x17d3/0x4a20 kernel/sched/core.c:6736 __schedule_loop kernel/sched/core.c:6813 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6828 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6885 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 blkdev_ioctl+0x474/0x740 block/ioctl.c:629 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:904 [inline] __se_sys_ioctl+0xfe/0x170 fs/ioctl.c:890 do_syscall_64+0xfd/0x240 entry_SYSCALL_64_after_hwframe+0x6d/0x75 RIP: 0033:0x7f9c6647dda9 RSP: 002b:00007f9c672820c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f9c665abf80 RCX: 00007f9c6647dda9 RDX: 0000000020000380 RSI: 00000000c0481273 RDI: 0000000000000004 RBP: 00007f9c664ca47a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f9c665abf80 R15: 00007fffaa792e88 INFO: task syz-executor.1:5531 blocked for more than 143 seconds. Not tainted 6.8.0-syzkaller-01185-g855684c7d938 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:28400 pid:5531 tgid:5529 ppid:5253 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0x17d3/0x4a20 kernel/sched/core.c:6736 __schedule_loop kernel/sched/core.c:6813 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6828 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6885 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 blkdev_common_ioctl+0xf7e/0x2880 block/ioctl.c:569 blkdev_ioctl+0x532/0x740 block/ioctl.c:634 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:904 [inline] __se_sys_ioctl+0xfe/0x170 fs/ioctl.c:890 do_syscall_64+0xfd/0x240 entry_SYSCALL_64_after_hwframe+0x6d/0x75 RIP: 0033:0x7f9c6647dda9 RSP: 002b:00007f9c672610c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f9c665ac050 RCX: 00007f9c6647dda9 RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000004 RBP: 00007f9c664ca47a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f9c665ac050 R15: 00007fffaa792e88 INFO: task syz-executor.0:5533 blocked for more than 144 seconds. Not tainted 6.8.0-syzkaller-01185-g855684c7d938 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:27384 pid:5533 tgid:5532 ppid:5272 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0x17d3/0x4a20 kernel/sched/core.c:6736 __schedule_loop kernel/sched/core.c:6813 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6828 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6885 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 blkdev_ioctl+0x474/0x740 block/ioctl.c:629 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:904 [inline] __se_sys_ioctl+0xfe/0x170 fs/ioctl.c:890 do_syscall_64+0xfd/0x240 entry_SYSCALL_64_after_hwframe+0x6d/0x75 RIP: 0033:0x7f0e5707dda9 RSP: 002b:00007f0e57e180c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f0e571abf80 RCX: 00007f0e5707dda9 RDX: 0000000020000380 RSI: 00000000c0481273 RDI: 0000000000000004 RBP: 00007f0e570ca47a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f0e571abf80 R15: 00007ffef2775dc8 INFO: task syz-executor.0:5534 blocked for more than 145 seconds. Not tainted 6.8.0-syzkaller-01185-g855684c7d938 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:28400 pid:5534 tgid:5532 ppid:5272 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0x17d3/0x4a20 kernel/sched/core.c:6736 __schedule_loop kernel/sched/core.c:6813 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6828 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6885 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 blkdev_common_ioctl+0xf7e/0x2880 block/ioctl.c:569 blkdev_ioctl+0x532/0x740 block/ioctl.c:634 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:904 [inline] __se_sys_ioctl+0xfe/0x170 fs/ioctl.c:890 do_syscall_64+0xfd/0x240 entry_SYSCALL_64_after_hwframe+0x6d/0x75 RIP: 0033:0x7f0e5707dda9 RSP: 002b:00007f0e57df70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f0e571ac050 RCX: 00007f0e5707dda9 RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000004 RBP: 00007f0e570ca47a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f0e571ac050 R15: 00007ffef2775dc8 INFO: task syz-executor.2:5536 blocked for more than 145 seconds. Not tainted 6.8.0-syzkaller-01185-g855684c7d938 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:27384 pid:5536 tgid:5535 ppid:5269 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0x17d3/0x4a20 kernel/sched/core.c:6736 __schedule_loop kernel/sched/core.c:6813 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6828 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6885 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 blkdev_ioctl+0x474/0x740 block/ioctl.c:629 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:904 [inline] __se_sys_ioctl+0xfe/0x170 fs/ioctl.c:890 do_syscall_64+0xfd/0x240 entry_SYSCALL_64_after_hwframe+0x6d/0x75 RIP: 0033:0x7fbba027dda9 RSP: 002b:00007fbba0fe70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fbba03abf80 RCX: 00007fbba027dda9 RDX: 0000000020000380 RSI: 00000000c0481273 RDI: 0000000000000004 RBP: 00007fbba02ca47a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007fbba03abf80 R15: 00007ffda618cb28 INFO: task syz-executor.2:5537 blocked for more than 146 seconds. Not tainted 6.8.0-syzkaller-01185-g855684c7d938 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:28400 pid:5537 tgid:5535 ppid:5269 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0x17d3/0x4a20 kernel/sched/core.c:6736 __schedule_loop kernel/sched/core.c:6813 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6828 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6885 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 blkdev_common_ioctl+0xf7e/0x2880 block/ioctl.c:569 blkdev_ioctl+0x532/0x740 block/ioctl.c:634 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:904 [inline] __se_sys_ioctl+0xfe/0x170 fs/ioctl.c:890 do_syscall_64+0xfd/0x240 entry_SYSCALL_64_after_hwframe+0x6d/0x75 RIP: 0033:0x7fbba027dda9 RSP: 002b:00007fbba0fc60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fbba03ac050 RCX: 00007fbba027dda9 RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000004 RBP: 00007fbba02ca47a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007fbba03ac050 R15: 00007ffda618cb28 INFO: task syz-executor.4:5539 blocked for more than 147 seconds. Not tainted 6.8.0-syzkaller-01185-g855684c7d938 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:26136 pid:5539 tgid:5538 ppid:5263 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0x17d3/0x4a20 kernel/sched/core.c:6736 __schedule_loop kernel/sched/core.c:6813 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6828 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6885 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 blkdev_ioctl+0x474/0x740 block/ioctl.c:629 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:904 [inline] __se_sys_ioctl+0xfe/0x170 fs/ioctl.c:890 do_syscall_64+0xfd/0x240 entry_SYSCALL_64_after_hwframe+0x6d/0x75 RIP: 0033:0x7f3d4d27dda9 RSP: 002b:00007f3d4df400c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f3d4d3abf80 RCX: 00007f3d4d27dda9 RDX: 0000000020000380 RSI: 00000000c0481273 RDI: 0000000000000004 RBP: 00007f3d4d2ca47a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f3d4d3abf80 R15: 00007ffd6738dfa8 INFO: task syz-executor.4:5540 blocked for more than 148 seconds. Not tainted 6.8.0-syzkaller-01185-g855684c7d938 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:28400 pid:5540 tgid:5538 ppid:5263 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0x17d3/0x4a20 kernel/sched/core.c:6736 __schedule_loop kernel/sched/core.c:6813 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6828 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6885 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 blkdev_common_ioctl+0xf7e/0x2880 block/ioctl.c:569 blkdev_ioctl+0x532/0x740 block/ioctl.c:634 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:904 [inline] __se_sys_ioctl+0xfe/0x170 fs/ioctl.c:890 do_syscall_64+0xfd/0x240 entry_SYSCALL_64_after_hwframe+0x6d/0x75 RIP: 0033:0x7f3d4d27dda9 RSP: 002b:00007f3d4df1f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f3d4d3ac050 RCX: 00007f3d4d27dda9 RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000004 RBP: 00007f3d4d2ca47a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f3d4d3ac050 R15: 00007ffd6738dfa8 INFO: task syz-executor.5:5542 blocked for more than 149 seconds. Not tainted 6.8.0-syzkaller-01185-g855684c7d938 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.5 state:D stack:27384 pid:5542 tgid:5541 ppid:5258 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0x17d3/0x4a20 kernel/sched/core.c:6736 __schedule_loop kernel/sched/core.c:6813 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6828 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6885 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 blkdev_ioctl+0x474/0x740 block/ioctl.c:629 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:904 [inline] __se_sys_ioctl+0xfe/0x170 fs/ioctl.c:890 do_syscall_64+0xfd/0x240 entry_SYSCALL_64_after_hwframe+0x6d/0x75 RIP: 0033:0x7fc72ae7dda9 RSP: 002b:00007fc72bc220c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fc72afabf80 RCX: 00007fc72ae7dda9 RDX: 0000000020000380 RSI: 00000000c0481273 RDI: 0000000000000004 RBP: 00007fc72aeca47a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007fc72afabf80 R15: 00007fff07eeec18 INFO: task syz-executor.5:5543 blocked for more than 149 seconds. Not tainted 6.8.0-syzkaller-01185-g855684c7d938 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.5 state:D stack:28400 pid:5543 tgid:5541 ppid:5258 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0x17d3/0x4a20 kernel/sched/core.c:6736 __schedule_loop kernel/sched/core.c:6813 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6828 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6885 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 blkdev_common_ioctl+0xf7e/0x2880 block/ioctl.c:569 blkdev_ioctl+0x532/0x740 block/ioctl.c:634 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:904 [inline] __se_sys_ioctl+0xfe/0x170 fs/ioctl.c:890 do_syscall_64+0xfd/0x240 entry_SYSCALL_64_after_hwframe+0x6d/0x75 RIP: 0033:0x7fc72ae7dda9 RSP: 002b:00007fc72bc010c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fc72afac050 RCX: 00007fc72ae7dda9 RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000004 RBP: 00007fc72aeca47a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007fc72afac050 R15: 00007fff07eeec18 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings Showing all locks held in the system: 1 lock held by khungtaskd/29: #0: ffffffff8e1316a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:298 [inline] #0: ffffffff8e1316a0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:750 [inline] #0: ffffffff8e1316a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6614 5 locks held by kworker/u8:2/43: 3 locks held by kworker/u8:3/50: 2 locks held by getty/4818: #0: ffff88802a7d70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2201 3 locks held by kworker/u9:2/5085: #0: ffff88806ed7b948 ((wq_completion)hci19){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3229 [inline] #0: ffff88806ed7b948 ((wq_completion)hci19){+.+.}-{0:0}, at: process_scheduled_works+0x8e0/0x1770 kernel/workqueue.c:3335 #1: ffffc9000463fd00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3230 [inline] #1: ffffc9000463fd00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x91b/0x1770 kernel/workqueue.c:3335 #2: ffff88804b57c970 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x2c8/0x400 net/bluetooth/hci_sync.c:289 3 locks held by kworker/1:6/5147: #0: ffff8880b953e158 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 kernel/sched/core.c:559 #1: ffffc9000496fd00 ((gc_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3230 [inline] #1: ffffc9000496fd00 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x91b/0x1770 kernel/workqueue.c:3335 #2: ffff8880b952a758 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 kernel/time/timer.c:1051 3 locks held by kworker/0:5/5152: #0: ffff888029c98548 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3229 [inline] #0: ffff888029c98548 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x8e0/0x1770 kernel/workqueue.c:3335 #1: ffffc9000499fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3230 [inline] #1: ffffc9000499fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x91b/0x1770 kernel/workqueue.c:3335 #2: ffffffff8f37b008 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4144 3 locks held by syz-executor.3/5527: 1 lock held by syz-executor.1/5530: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.1/5531: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.0/5533: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.0/5534: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.2/5536: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.2/5537: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.4/5539: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.4/5540: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.5/5542: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.5/5543: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.3/5644: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.3/5645: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.1/5648: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.1/5649: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.0/5651: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.0/5652: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.2/5657: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.2/5658: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.5/5661: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.5/5663: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.4/5665: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.4/5666: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.3/5742: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.3/5743: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.0/5780: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.0/5781: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.1/5783: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.1/5784: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.2/5787: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.2/5789: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.4/5792: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.4/5794: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.5/5793: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 1 lock held by syz-executor.5/5795: #0: ffff888020650878 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 kernel/trace/blktrace.c:736 3 locks held by syz-executor.3/5797: #0: ffffffff8f37b008 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #0: ffffffff8f37b008 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 net/core/rtnetlink.c:6614 #1: ffff88804d5413e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_open+0x22d/0x420 drivers/net/wireguard/device.c:50 #2: ffffffff8e136a38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:291 [inline] #2: ffffffff8e136a38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x39a/0x820 kernel/rcu/tree_exp.h:939 1 lock held by syz-executor.0/5814: #0: ffffffff8f37b008 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #0: ffffffff8f37b008 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 net/core/rtnetlink.c:6614 1 lock held by syz-executor.1/5817: #0: ffffffff8f37b008 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #0: ffffffff8f37b008 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 net/core/rtnetlink.c:6614 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.8.0-syzkaller-01185-g855684c7d938 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1e7/0x2e0 lib/dump_stack.c:106 nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline] watchdog+0xfb0/0xff0 kernel/hung_task.c:379 kthread+0x2f2/0x390 kernel/kthread.c:388 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:243 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 4505 Comm: klogd Not tainted 6.8.0-syzkaller-01185-g855684c7d938 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 RIP: 0010:rcu_dynticks_curr_cpu_in_eqs include/linux/context_tracking.h:122 [inline] RIP: 0010:rcu_is_watching+0x35/0xb0 kernel/rcu/tree.c:700 Code: 05 78 5d 88 7e e8 6b 1e ef 09 89 c3 83 f8 08 73 7a 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 09 af 8d 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 7c c3 7b 00 48 c7 c3 08 7d 03 00 RSP: 0018:ffffc90003177160 EFLAGS: 00000212 RAX: 1ffffffff1b5e13b RBX: 0000000000000001 RCX: ffffffff8171ce90 RDX: 0000000000000000 RSI: ffffffff8bfe91c0 RDI: ffffffff8bfe9180 RBP: ffffc900031772b0 R08: ffffffff8f85d76f R09: 1ffffffff1f0baed R10: dffffc0000000000 R11: fffffbfff1f0baee R12: 1ffff9200062ee3c R13: ffffffff81a344d6 R14: ffffffff8daf09d8 R15: dffffc0000000000 FS: 00007f3327055380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb3b07f3870 CR3: 000000002bd6c000 CR4: 0000000000350ef0 Call Trace: trace_lock_release include/trace/events/lock.h:69 [inline] lock_release+0xbf/0x9d0 kernel/locking/lockdep.c:5765 rcu_lock_release include/linux/rcupdate.h:308 [inline] rcu_read_unlock include/linux/rcupdate.h:783 [inline] is_bpf_text_address+0x28d/0x2b0 kernel/bpf/core.c:764 kernel_text_address+0xa7/0xe0 kernel/extable.c:125 __kernel_text_address+0xd/0x40 kernel/extable.c:79 unwind_get_return_address+0x5d/0xc0 arch/x86/kernel/unwind_orc.c:369 arch_stack_walk+0x125/0x1b0 arch/x86/kernel/stacktrace.c:26 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 unpoison_slab_object mm/kasan/common.c:312 [inline] __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:338 kasan_slab_alloc include/linux/kasan.h:201 [inline] slab_post_alloc_hook mm/slub.c:3813 [inline] slab_alloc_node mm/slub.c:3860 [inline] kmem_cache_alloc_node+0x192/0x380 mm/slub.c:3903 __alloc_skb+0x181/0x420 net/core/skbuff.c:641 alloc_skb include/linux/skbuff.h:1296 [inline] alloc_skb_with_frags+0xc3/0x780 net/core/skbuff.c:6394 sock_alloc_send_pskb+0x91a/0xa60 net/core/sock.c:2783 unix_dgram_sendmsg+0x696/0x2210 net/unix/af_unix.c:1959 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x223/0x270 net/socket.c:745 __sys_sendto+0x3a4/0x4f0 net/socket.c:2191 __do_sys_sendto net/socket.c:2203 [inline] __se_sys_sendto net/socket.c:2199 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2199 do_syscall_64+0xfd/0x240 entry_SYSCALL_64_after_hwframe+0x6d/0x75 RIP: 0033:0x7f33271b79b5 Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83 RSP: 002b:00007ffd6df927d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f33271b79b5 RDX: 000000000000004d RSI: 000056543d97d5a0 RDI: 0000000000000003 RBP: 000056543d978910 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013 R13: 00007f3327345212 R14: 00007ffd6df928d8 R15: 0000000000000000