INFO: task hung in tty_change_softcar (2)

Status: auto-obsoleted due to no activity on 2026/09/13 20:43
Subsystems: serial
Labels: prio:high
[Documentation on labels]
First crash: 210d, last: 107d
▶ ▼ ✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision
b52eeba6 assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ✅ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ INFO: task hung in tty_change_softcar (2) 2026/05/23 01:49 2026/05/23 01:49 2026/05/23 02:55 df8ac09c
▶ ▼ Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: task hung in tty_change_softcar serial 1 1 489d 489d 0/29 auto-obsoleted due to no activity on 2025/08/28 04:20

Sample crash report:
INFO: task syz.0.3430:16008 blocked for more than 147 seconds.
      Tainted: G             L      syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.3430      state:D stack:29144 pid:16008 tgid:16006 ppid:15595  task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5504 [inline]
 __schedule+0x17d9/0x56c0 kernel/sched/core.c:7228
 __schedule_loop kernel/sched/core.c:7307 [inline]
 schedule+0x164/0x360 kernel/sched/core.c:7322
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7379
 rwsem_down_write_slowpath+0x87d/0x1080 kernel/locking/rwsem.c:1215
 __down_write_common kernel/locking/rwsem.c:1347 [inline]
 __down_write kernel/locking/rwsem.c:1356 [inline]
 down_write+0x1bc/0x200 kernel/locking/rwsem.c:1632
 tty_change_softcar+0xae/0x240 drivers/tty/tty_ioctl.c:743
 tty_mode_ioctl+0x6d7/0x7c0 drivers/tty/tty_ioctl.c:886
 tty_ioctl+0x9bd/0xdd0 drivers/tty/tty_io.c:2801
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f32b179ce59
RSP: 002b:00007f32b26ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f32b1a16090 RCX: 00007f32b179ce59
RDX: 0000200000000240 RSI: 000000000000541a RDI: 0000000000000004
RBP: 00007f32b1832d6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f32b1a16128 R14: 00007f32b1a16090 R15: 00007f32b1b3fa48
 </TASK>
INFO: lockdep is turned off.
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 __sys_info lib/sys_info.c:157 [inline]
 sys_info+0x135/0x170 lib/sys_info.c:165
 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]
 watchdog+0xfd7/0x1030 kernel/hung_task.c:561
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 5001 Comm: udevd Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
RIP: 0010:orc_ip arch/x86/kernel/unwind_orc.c:81 [inline]
RIP: 0010:__orc_find arch/x86/kernel/unwind_orc.c:103 [inline]
RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:238 [inline]
RIP: 0010:unwind_next_frame+0x4f4/0x2550 arch/x86/kernel/unwind_orc.c:510
Code: 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 49 8d 1c 47 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 48 63 03 48 01 d8 48 8d 4b 04 48 39 e8 4c 0f 46 f9 48
RSP: 0018:ffffc9000390f820 EFLAGS: 00000a03
RAX: 0000000000000000 RBX: ffffffff90531e9c RCX: dffffc0000000000
RDX: ffffffff90531e84 RSI: ffffffff90d3e31c RDI: ffffffff8c28c740
RBP: ffffffff82497089 R08: 0000000000000009 R09: 0000000000000000
R10: ffffc9000390f918 R11: ffffffff81b11450 R12: ffffffff90531ea4
R13: ffffffff90531e94 R14: ffffc9000390f8c8 R15: ffffffff90531e98
FS:  00007f1faef5a880(0000) GS:ffff8881252aa000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fed2da01000 CR3: 000000007d3a4000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 kasan_save_stack+0x3e/0x60 mm/kasan/common.c:57
 kasan_record_aux_stack+0xbd/0xd0 mm/kasan/generic.c:556
 __call_rcu_common kernel/rcu/tree.c:3159 [inline]
 call_rcu+0xee/0x8b0 kernel/rcu/tree.c:3279
 dentry_kill+0x4d3/0x880 fs/dcache.c:845
 finish_dput+0x1a/0x260 fs/dcache.c:1001
 lookup_one_qstr_excl+0x1ca/0x360 fs/namei.c:-1
 __start_dirop fs/namei.c:2920 [inline]
 start_dirop fs/namei.c:2942 [inline]
 filename_unlinkat+0x2ba/0x610 fs/namei.c:5562
 __do_sys_unlink fs/namei.c:5616 [inline]
 __se_sys_unlink+0x2e/0x140 fs/namei.c:5613
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f1fae915937
Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8
RSP: 002b:00007fffc40d6f88 EFLAGS: 00000202 ORIG_RAX: 0000000000000057
RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f1fae915937
RDX: 0000000000000000 RSI: 000000002da83b80 RDI: 00005645010a202e
RBP: 0000000000000000 R08: 000000002db0bfc3 R09: 3fffffffffffffff
R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000000000
R13: 00005645010bd100 R14: 0000000000000001 R15: 0000000000000000
 </TASK>

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/06/15 20:36 upstream 0e0611827f33 50bb0618 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in tty_change_softcar
2026/03/10 20:46 upstream 1f318b96cc84 4683d576 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in tty_change_softcar
2026/03/05 15:13 upstream c107785c7e8d d20b04c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in tty_change_softcar
2026/03/31 09:26 upstream d0c3bcd5b897 d0af506e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in tty_change_softcar
* Struck through repros no longer work on HEAD.