syzbot

INFO: task kworker/1:0:24 blocked for more than 143 seconds.
      Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:0     state:D stack:22088 pid:24    tgid:24    ppid:2      task_flags:0x4208060 flags:0x00004000
Workqueue: events vc_SAK
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5396 [inline]
 __schedule+0x116a/0x5de0 kernel/sched/core.c:6785
 __schedule_loop kernel/sched/core.c:6863 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6878
 schedule_timeout+0x257/0x290 kernel/time/sleep_timeout.c:75
 ___down_common+0x2d8/0x460 kernel/locking/semaphore.c:268
 __down_common kernel/locking/semaphore.c:293 [inline]
 __down+0x20/0x30 kernel/locking/semaphore.c:303
 down+0x74/0xa0 kernel/locking/semaphore.c:100
 console_lock+0x5b/0xa0 kernel/printk/printk.c:2849
 vc_SAK+0x13/0x310 drivers/tty/vt/vt_ioctl.c:999
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3321 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3402
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x5d4/0x6f0 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
INFO: task kworker/1:1:53 blocked for more than 143 seconds.
      Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:1     state:D stack:21512 pid:53    tgid:53    ppid:2      task_flags:0x4208160 flags:0x00004000
Workqueue: events console_callback
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5396 [inline]
 __schedule+0x116a/0x5de0 kernel/sched/core.c:6785
 __schedule_loop kernel/sched/core.c:6863 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6878
 schedule_timeout+0x257/0x290 kernel/time/sleep_timeout.c:75
 ___down_common+0x2d8/0x460 kernel/locking/semaphore.c:268
 __down_common kernel/locking/semaphore.c:293 [inline]
 __down+0x20/0x30 kernel/locking/semaphore.c:303
 down+0x74/0xa0 kernel/locking/semaphore.c:100
 console_lock+0x5b/0xa0 kernel/printk/printk.c:2849
 console_callback+0x62/0x4c0 drivers/tty/vt/vt.c:3202
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3321 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3402
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x5d4/0x6f0 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
INFO: task kworker/1:3:5893 blocked for more than 143 seconds.
      Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:3     state:D stack:22680 pid:5893  tgid:5893  ppid:2      task_flags:0x4208060 flags:0x00004000
Workqueue: events vc_SAK
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5396 [inline]
 __schedule+0x116a/0x5de0 kernel/sched/core.c:6785
 __schedule_loop kernel/sched/core.c:6863 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6878
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6935
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x6c7/0xb90 kernel/locking/mutex.c:747
 tty_buffer_flush+0x72/0x310 drivers/tty/tty_buffer.c:229
 tty_ldisc_flush+0x64/0xe0 drivers/tty/tty_ldisc.c:388
 __do_SAK+0x6de/0x880 drivers/tty/tty_io.c:3025
 vc_SAK+0x7f/0x310 drivers/tty/vt/vt_ioctl.c:1009
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3321 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3402
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x5d4/0x6f0 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
INFO: task kworker/u8:5:10685 blocked for more than 143 seconds.
      Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:5    state:D stack:22584 pid:10685 tgid:10685 ppid:2      task_flags:0x4208060 flags:0x00004000
Workqueue: events_unbound flush_to_ldisc
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5396 [inline]
 __schedule+0x116a/0x5de0 kernel/sched/core.c:6785
 __schedule_loop kernel/sched/core.c:6863 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6878
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6935
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x6c7/0xb90 kernel/locking/mutex.c:747
 commit_echoes+0x4c/0x210 drivers/tty/n_tty.c:740
 n_tty_receive_char+0x3d7/0x600 drivers/tty/n_tty.c:1421
 n_tty_receive_buf_standard+0x6aa/0x3140 drivers/tty/n_tty.c:1590
 __receive_buf drivers/tty/n_tty.c:1624 [inline]
 n_tty_receive_buf_common+0x8eb/0x1980 drivers/tty/n_tty.c:1723
 tty_ldisc_receive_buf+0xaa/0x1a0 drivers/tty/tty_buffer.c:387
 tty_port_default_receive_buf+0x70/0xb0 drivers/tty/tty_port.c:37
 receive_buf drivers/tty/tty_buffer.c:445 [inline]
 flush_to_ldisc+0x26b/0x780 drivers/tty/tty_buffer.c:495
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3321 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3402
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x5d4/0x6f0 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
INFO: task syz.6.1971:12983 blocked for more than 143 seconds.
      Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.6.1971      state:D stack:27336 pid:12983 tgid:12982 ppid:11017  task_flags:0x400140 flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5396 [inline]
 __schedule+0x116a/0x5de0 kernel/sched/core.c:6785
 __schedule_loop kernel/sched/core.c:6863 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6878
 schedule_timeout+0x257/0x290 kernel/time/sleep_timeout.c:75
 ___down_common+0x2d8/0x460 kernel/locking/semaphore.c:268
 __down_common kernel/locking/semaphore.c:293 [inline]
 __down+0x20/0x30 kernel/locking/semaphore.c:303
 down+0x74/0xa0 kernel/locking/semaphore.c:100
 console_lock+0x5b/0xa0 kernel/printk/printk.c:2849
 do_con_write+0x152/0x8280 drivers/tty/vt/vt.c:3138
 con_write+0x23/0xb0 drivers/tty/vt/vt.c:3516
 do_output_char+0x5d9/0x840 drivers/tty/n_tty.c:422
 process_output drivers/tty/n_tty.c:486 [inline]
 n_tty_write+0x4cd/0x1160 drivers/tty/n_tty.c:2388
 iterate_tty_write drivers/tty/tty_io.c:1006 [inline]
 file_tty_write.constprop.0+0x504/0x9b0 drivers/tty/tty_io.c:1081
 new_sync_write fs/read_write.c:593 [inline]
 vfs_write+0x6c4/0x1150 fs/read_write.c:686
 ksys_write+0x12a/0x250 fs/read_write.c:738
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa39ed8e929
RSP: 002b:00007fa39fbaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007fa39efb5fa0 RCX: 00007fa39ed8e929
RDX: 0000000000001006 RSI: 0000200000002100 RDI: 0000000000000007
RBP: 00007fa39ee10b39 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fa39efb5fa0 R15: 00007fffaeff9c08
 </TASK>
INFO: task syz.1.1999:13095 blocked for more than 143 seconds.
      Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.1999      state:D stack:27920 pid:13095 tgid:13078 ppid:5810   task_flags:0x400140 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5396 [inline]
 __schedule+0x116a/0x5de0 kernel/sched/core.c:6785
 __schedule_loop kernel/sched/core.c:6863 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6878
 schedule_timeout+0x257/0x290 kernel/time/sleep_timeout.c:75
 ___down_common+0x2d8/0x460 kernel/locking/semaphore.c:268
 __down_common kernel/locking/semaphore.c:293 [inline]
 __down+0x20/0x30 kernel/locking/semaphore.c:303
 down+0x74/0xa0 kernel/locking/semaphore.c:100
 console_lock+0x5b/0xa0 kernel/printk/printk.c:2849
 set_selection_kernel+0x39/0x14a0 drivers/tty/vt/selection.c:381
 set_selection_user+0xe8/0x140 drivers/tty/vt/selection.c:208
 tioclinux+0x2b1/0x640 drivers/tty/vt/vt.c:3430
 vt_ioctl+0x1fdf/0x30a0 drivers/tty/vt/vt_ioctl.c:761
 tty_ioctl+0x661/0x1640 drivers/tty/tty_io.c:2792
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:907 [inline]
 __se_sys_ioctl fs/ioctl.c:893 [inline]
 __x64_sys_ioctl+0x18b/0x210 fs/ioctl.c:893
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f5336f8e929
RSP: 002b:00007f5337db1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f53371b6240 RCX: 00007f5336f8e929
RDX: 0000200000001900 RSI: 000000000000541c RDI: 000000000000000b
RBP: 00007f5337010b39 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f53371b6240 R15: 00007ffd4aec4898
 </TASK>
INFO: lockdep is turned off.
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:307 [inline]
 watchdog+0xf70/0x12c0 kernel/hung_task.c:470
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x5d4/0x6f0 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 14479 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:debug_smp_processor_id+0x0/0x20 lib/smp_processor_id.c:59
Code: e8 f5 4a 1a f6 e8 c0 4c f4 ff 90 65 ff 0d 78 3b 4c 08 e9 40 ff ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 c7 c6 20 7b 15 8c 48 c7 c7 60 7b 15 8c e9 f9 fe ff
RSP: 0018:ffffc90017627300 EFLAGS: 00000083
RAX: 0000000000000001 RBX: ffffffff8e5c4940 RCX: 0000000000000002
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e5c4940
RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
R10: ffffc90017627408 R11: 00000000000122fc R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  00005555740ce500(0000) GS:ffff888124852000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4bf5f7fd38 CR3: 000000009624e000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 00000000000032e7 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 rcu_is_watching_curr_cpu include/linux/context_tracking.h:128 [inline]
 rcu_is_watching+0x12/0xc0 kernel/rcu/tree.c:745
 trace_lock_acquire include/trace/events/lock.h:24 [inline]
 lock_acquire+0x2cd/0x350 kernel/locking/lockdep.c:5834
 rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 rcu_read_lock include/linux/rcupdate.h:841 [inline]
 class_rcu_constructor include/linux/rcupdate.h:1155 [inline]
 unwind_next_frame+0xd1/0x20a0 arch/x86/kernel/unwind_orc.c:479
 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_record_aux_stack+0xa7/0xc0 mm/kasan/generic.c:548
 __call_rcu_common.constprop.0+0xa5/0xa10 kernel/rcu/tree.c:3094
 avc_node_delete security/selinux/avc.c:440 [inline]
 avc_reclaim_node security/selinux/avc.c:478 [inline]
 avc_alloc_node+0x368/0x6a0 security/selinux/avc.c:507
 avc_insert security/selinux/avc.c:618 [inline]
 avc_compute_av+0x100/0x7f0 security/selinux/avc.c:993
 avc_perm_nonode+0xab/0x180 security/selinux/avc.c:1117
 avc_has_perm_noaudit+0x2de/0x3b0 security/selinux/avc.c:1160
 cred_has_capability.isra.0+0x17b/0x2f0 security/selinux/hooks.c:1655
 security_capable+0xd3/0x260 security/security.c:1142
 ns_capable_common kernel/capability.c:342 [inline]
 ns_capable+0x70/0x110 kernel/capability.c:363
 do_ip6t_get_ctl+0xf1/0xae0 net/ipv6/netfilter/ip6_tables.c:1663
 nf_getsockopt+0x79/0xe0 net/netfilter/nf_sockopt.c:116
 ipv6_getsockopt+0x1f7/0x280 net/ipv6/ipv6_sockglue.c:1493
 tcp_getsockopt+0xa1/0x100 net/ipv4/tcp.c:4760
 do_sock_getsockopt+0x3fc/0x800 net/socket.c:2357
 __sys_getsockopt+0x12f/0x260 net/socket.c:2386
 __do_sys_getsockopt net/socket.c:2393 [inline]
 __se_sys_getsockopt net/socket.c:2390 [inline]
 __x64_sys_getsockopt+0xbd/0x160 net/socket.c:2390
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4bf5d9066a
Code: ff c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b8 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7
RSP: 002b:00007ffc161e0d18 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
RAX: ffffffffffffffda RBX: 00007ffc161e0d40 RCX: 00007f4bf5d9066a
RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
RBP: 0000000000000003 R08: 00007ffc161e0d3c R09: 0079746972756365
R10: 00007ffc161e0d40 R11: 0000000000000246 R12: 00007f4bf5f80340
R13: 00007ffc161e0d3c R14: 0000000000000000 R15: 00007f4bf5f81e40
 </TASK>