INFO: task syz-executor:5236 blocked for more than 143 seconds. Not tainted 6.11.0-rc6-syzkaller-01324-gf3b6129b7d25 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:19920 pid:5236 tgid:5236 ppid:1 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 rwsem_down_write_slowpath+0xeeb/0x13b0 kernel/locking/rwsem.c:1178 __down_write_common kernel/locking/rwsem.c:1306 [inline] __down_write kernel/locking/rwsem.c:1315 [inline] down_write+0x1d7/0x220 kernel/locking/rwsem.c:1580 mmap_write_lock include/linux/mmap_lock.h:106 [inline] exit_mmap+0x2a9/0xc80 mm/mmap.c:3420 __mmput+0x115/0x390 kernel/fork.c:1345 exit_mm+0x220/0x310 kernel/exit.c:571 do_exit+0x9b2/0x27f0 kernel/exit.c:869 do_group_exit+0x207/0x2c0 kernel/exit.c:1031 get_signal+0x16a1/0x1740 kernel/signal.c:2917 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f1732574753 RSP: 002b:00007ffc80ab93e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: fffffffffffffff4 RBX: 0000000000000000 RCX: 00007f1732574753 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 R10: 00005555849547d0 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000012847 R14: 00000000000124f9 R15: 00007ffc80ab9570 INFO: task syz-executor:5242 blocked for more than 144 seconds. Not tainted 6.11.0-rc6-syzkaller-01324-gf3b6129b7d25 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:19152 pid:5242 tgid:5242 ppid:1 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 rwsem_down_write_slowpath+0xeeb/0x13b0 kernel/locking/rwsem.c:1178 __down_write_common kernel/locking/rwsem.c:1306 [inline] __down_write kernel/locking/rwsem.c:1315 [inline] down_write+0x1d7/0x220 kernel/locking/rwsem.c:1580 mmap_write_lock include/linux/mmap_lock.h:106 [inline] exit_mmap+0x2a9/0xc80 mm/mmap.c:3420 __mmput+0x115/0x390 kernel/fork.c:1345 exit_mm+0x220/0x310 kernel/exit.c:571 do_exit+0x9b2/0x27f0 kernel/exit.c:869 do_group_exit+0x207/0x2c0 kernel/exit.c:1031 get_signal+0x16a1/0x1740 kernel/signal.c:2917 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f45dd574753 RSP: 002b:00007fff7f5f1818 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: fffffffffffffff4 RBX: 0000000000000000 RCX: 00007f45dd574753 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 R10: 0000555594de77d0 R11: 0000000000000246 R12: 0000000000000000 R13: 00000000000125f9 R14: 00000000000123d3 R15: 00007fff7f5f19a0 INFO: task syz-executor:5240 blocked for more than 146 seconds. Not tainted 6.11.0-rc6-syzkaller-01324-gf3b6129b7d25 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:19408 pid:5240 tgid:5240 ppid:1 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 rwsem_down_write_slowpath+0xeeb/0x13b0 kernel/locking/rwsem.c:1178 __down_write_common kernel/locking/rwsem.c:1306 [inline] __down_write kernel/locking/rwsem.c:1315 [inline] down_write+0x1d7/0x220 kernel/locking/rwsem.c:1580 mmap_write_lock include/linux/mmap_lock.h:106 [inline] exit_mmap+0x2a9/0xc80 mm/mmap.c:3420 __mmput+0x115/0x390 kernel/fork.c:1345 exit_mm+0x220/0x310 kernel/exit.c:571 do_exit+0x9b2/0x27f0 kernel/exit.c:869 do_group_exit+0x207/0x2c0 kernel/exit.c:1031 get_signal+0x16a1/0x1740 kernel/signal.c:2917 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f32db774157 RSP: 002b:00007ffd900a9b60 EFLAGS: 00000293 ORIG_RAX: 000000000000003d RAX: fffffffffffffe00 RBX: 0000000000000038 RCX: 00007f32db774157 RDX: 0000000040000000 RSI: 00007ffd900a9bbc RDI: 00000000ffffffff RBP: 00007ffd900a9bbc R08: 0000000000000000 R09: 7fffffffffffffff R10: 0000000000000000 R11: 0000000000000293 R12: 000055555a6425eb R13: 000055555a642590 R14: 0000000000012641 R15: 00007ffd900a9c10 INFO: task syz-executor:5251 blocked for more than 147 seconds. Not tainted 6.11.0-rc6-syzkaller-01324-gf3b6129b7d25 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:20992 pid:5251 tgid:5251 ppid:1 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 rwsem_down_write_slowpath+0xeeb/0x13b0 kernel/locking/rwsem.c:1178 __down_write_common kernel/locking/rwsem.c:1306 [inline] __down_write kernel/locking/rwsem.c:1315 [inline] down_write+0x1d7/0x220 kernel/locking/rwsem.c:1580 mmap_write_lock include/linux/mmap_lock.h:106 [inline] exit_mmap+0x2a9/0xc80 mm/mmap.c:3420 __mmput+0x115/0x390 kernel/fork.c:1345 exit_mm+0x220/0x310 kernel/exit.c:571 do_exit+0x9b2/0x27f0 kernel/exit.c:869 do_group_exit+0x207/0x2c0 kernel/exit.c:1031 get_signal+0x16a1/0x1740 kernel/signal.c:2917 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb6f3974157 RSP: 002b:00007ffd3aed8b00 EFLAGS: 00000293 ORIG_RAX: 000000000000003d RAX: fffffffffffffe00 RBX: 000000000000005c RCX: 00007fb6f3974157 RDX: 0000000040000000 RSI: 00007ffd3aed8b5c RDI: 00000000ffffffff RBP: 00007ffd3aed8b5c R08: 0000000000000000 R09: 7fffffffffffffff R10: 0000000000000000 R11: 0000000000000293 R12: 0000555556a3b5eb R13: 0000555556a3b590 R14: 0000000000012455 R15: 00007ffd3aed8bb0 INFO: task syz.1.93:5657 blocked for more than 149 seconds. Not tainted 6.11.0-rc6-syzkaller-01324-gf3b6129b7d25 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.93 state:D stack:24672 pid:5657 tgid:5657 ppid:5251 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 rwsem_down_write_slowpath+0xeeb/0x13b0 kernel/locking/rwsem.c:1178 __down_write_common kernel/locking/rwsem.c:1306 [inline] __down_write kernel/locking/rwsem.c:1315 [inline] down_write+0x1d7/0x220 kernel/locking/rwsem.c:1580 mmap_write_lock include/linux/mmap_lock.h:106 [inline] exit_mmap+0x2a9/0xc80 mm/mmap.c:3420 __mmput+0x115/0x390 kernel/fork.c:1345 exit_mm+0x220/0x310 kernel/exit.c:571 do_exit+0x9b2/0x27f0 kernel/exit.c:869 do_group_exit+0x207/0x2c0 kernel/exit.c:1031 __do_sys_exit_group kernel/exit.c:1042 [inline] __se_sys_exit_group kernel/exit.c:1040 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1040 x64_sys_call+0x2634/0x2640 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb6f397def9 RSP: 002b:00007ffd3aed8b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb6f397def9 RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007ffd3aed8b5c R08: 00007ffd3aed8bef R09: 00000000000123d9 R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000032 R13: 00000000000123d9 R14: 0000000000012398 R15: 00007ffd3aed8bb0 INFO: task syz.3.96:5675 blocked for more than 150 seconds. Not tainted 6.11.0-rc6-syzkaller-01324-gf3b6129b7d25 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.96 state:D stack:21240 pid:5675 tgid:5674 ppid:5240 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 rwsem_down_write_slowpath+0xeeb/0x13b0 kernel/locking/rwsem.c:1178 __down_write_common kernel/locking/rwsem.c:1306 [inline] __down_write kernel/locking/rwsem.c:1315 [inline] down_write+0x1d7/0x220 kernel/locking/rwsem.c:1580 mmap_write_lock include/linux/mmap_lock.h:106 [inline] exit_mmap+0x2a9/0xc80 mm/mmap.c:3420 __mmput+0x115/0x390 kernel/fork.c:1345 exit_mm+0x220/0x310 kernel/exit.c:571 do_exit+0x9b2/0x27f0 kernel/exit.c:869 do_group_exit+0x207/0x2c0 kernel/exit.c:1031 get_signal+0x16a1/0x1740 kernel/signal.c:2917 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f32db77def9 RSP: 002b:00007f32dc64b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f32db935f88 RCX: 00007f32db77def9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f32db935f88 RBP: 00007f32db935f80 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f32db935f8c R13: 0000000000000000 R14: 00007ffd900a9710 R15: 00007ffd900a97f8 Showing all locks held in the system: 1 lock held by khungtaskd/30: #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6626 2 locks held by kworker/u8:11/2960: #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90009fb7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90009fb7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by udevd/4690: #0: ffffffff8e9e5310 (dup_mmap_sem){.+.+}-{0:0}, at: dup_mmap kernel/fork.c:635 [inline] #0: ffffffff8e9e5310 (dup_mmap_sem){.+.+}-{0:0}, at: dup_mm kernel/fork.c:1672 [inline] #0: ffffffff8e9e5310 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x277/0x1f30 kernel/fork.c:1721 #1: ffff88806d0bba98 (&mm->mmap_lock){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:122 [inline] #1: ffff88806d0bba98 (&mm->mmap_lock){++++}-{3:3}, at: dup_mmap kernel/fork.c:636 [inline] #1: ffff88806d0bba98 (&mm->mmap_lock){++++}-{3:3}, at: dup_mm kernel/fork.c:1672 [inline] #1: ffff88806d0bba98 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x29a/0x1f30 kernel/fork.c:1721 2 locks held by getty/4990: #0: ffff8880305e40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 drivers/tty/n_tty.c:2211 1 lock held by syz-executor/5232: #0: ffff888012956a18 (&mm->mmap_lock){++++}-{3:3}, at: mmap_write_lock include/linux/mmap_lock.h:106 [inline] #0: ffff888012956a18 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2a9/0xc80 mm/mmap.c:3420 1 lock held by syz-executor/5236: #0: ffff8880298f0b18 (&mm->mmap_lock){++++}-{3:3}, at: mmap_write_lock include/linux/mmap_lock.h:106 [inline] #0: ffff8880298f0b18 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2a9/0xc80 mm/mmap.c:3420 1 lock held by udevd/5237: #0: ffff8880298f6a18 (&mm->mmap_lock){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:122 [inline] #0: ffff8880298f6a18 (&mm->mmap_lock){++++}-{3:3}, at: __vm_munmap+0x1ae/0x400 mm/mmap.c:3106 1 lock held by syz-executor/5242: #0: ffff8880298f1e18 (&mm->mmap_lock){++++}-{3:3}, at: mmap_write_lock include/linux/mmap_lock.h:106 [inline] #0: ffff8880298f1e18 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2a9/0xc80 mm/mmap.c:3420 1 lock held by syz-executor/5240: #0: ffff8880298f3a98 (&mm->mmap_lock){++++}-{3:3}, at: mmap_write_lock include/linux/mmap_lock.h:106 [inline] #0: ffff8880298f3a98 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2a9/0xc80 mm/mmap.c:3420 1 lock held by syz-executor/5251: #0: ffff8880298f1498 (&mm->mmap_lock){++++}-{3:3}, at: mmap_write_lock include/linux/mmap_lock.h:106 [inline] #0: ffff8880298f1498 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2a9/0xc80 mm/mmap.c:3420 1 lock held by syz.1.93/5657: #0: ffff88806d83c418 (&mm->mmap_lock){++++}-{3:3}, at: mmap_write_lock include/linux/mmap_lock.h:106 [inline] #0: ffff88806d83c418 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2a9/0xc80 mm/mmap.c:3420 1 lock held by modprobe/5673: #0: ffff8880244be098 (&mm->mmap_lock){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:122 [inline] #0: ffff8880244be098 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x17c/0x3d0 mm/util.c:586 1 lock held by syz.3.96/5675: #0: ffff888024631498 (&mm->mmap_lock){++++}-{3:3}, at: mmap_write_lock include/linux/mmap_lock.h:106 [inline] #0: ffff888024631498 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2a9/0xc80 mm/mmap.c:3420 1 lock held by syz-executor/5803: #0: ffff888024fdb118 (&mm->mmap_lock){++++}-{3:3}, at: mmap_write_lock include/linux/mmap_lock.h:106 [inline] #0: ffff888024fdb118 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2a9/0xc80 mm/mmap.c:3420 1 lock held by syz-executor/5813: #0: ffff88806ccfba98 (&mm->mmap_lock){++++}-{3:3}, at: mmap_write_lock include/linux/mmap_lock.h:106 [inline] #0: ffff88806ccfba98 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2a9/0xc80 mm/mmap.c:3420 1 lock held by syz-executor/5835: #0: ffff88806ccfd718 (&mm->mmap_lock){++++}-{3:3}, at: mmap_write_lock include/linux/mmap_lock.h:106 [inline] #0: ffff88806ccfd718 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2a9/0xc80 mm/mmap.c:3420 2 locks held by kworker/u8:15/6158: 1 lock held by syz.1.238/6266: #0: ffff888024637398 (&mm->mmap_lock){++++}-{3:3}, at: mmap_write_lock include/linux/mmap_lock.h:106 [inline] #0: ffff888024637398 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2a9/0xc80 mm/mmap.c:3420 1 lock held by syz.0.241/6273: #0: ffff888024632798 (&mm->mmap_lock){++++}-{3:3}, at: mmap_write_lock include/linux/mmap_lock.h:106 [inline] #0: ffff888024632798 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2a9/0xc80 mm/mmap.c:3420 1 lock held by syz.2.242/6272: #0: ffff88806d07f398 (&mm->mmap_lock){++++}-{3:3}, at: mmap_write_lock include/linux/mmap_lock.h:106 [inline] #0: ffff88806d07f398 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2a9/0xc80 mm/mmap.c:3420 1 lock held by syz.4.243/6274: #0: ffff88806d07ea18 (&mm->mmap_lock){++++}-{3:3}, at: mmap_write_lock include/linux/mmap_lock.h:106 [inline] #0: ffff88806d07ea18 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2a9/0xc80 mm/mmap.c:3420