INFO: task syz-executor:15803 blocked for more than 143 seconds. Tainted: G L syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:22968 pid:15803 tgid:15803 ppid:1 task_flags:0x40054c flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5583 [inline] __schedule+0x171d/0x56e0 kernel/sched/core.c:7382 __schedule_loop kernel/sched/core.c:7459 [inline] rt_mutex_schedule+0x76/0xf0 kernel/sched/core.c:7724 rt_mutex_slowlock_block+0x540/0x6a0 kernel/locking/rtmutex.c:1670 __rt_mutex_slowlock kernel/locking/rtmutex.c:1747 [inline] __rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1787 [inline] rt_mutex_slowlock+0x2d4/0x780 kernel/locking/rtmutex.c:1827 __rt_mutex_lock kernel/locking/rtmutex.c:1842 [inline] __mutex_lock_common kernel/locking/rtmutex_api.c:562 [inline] mutex_lock_nested+0x163/0x1d0 kernel/locking/rtmutex_api.c:580 rcu_barrier+0x175/0x610 kernel/rcu/tree.c:4002 netdev_run_todo+0x2fc/0x1090 net/core/dev.c:11950 tun_detach drivers/net/tun.c:660 [inline] tun_chr_close+0x13f/0x1c0 drivers/net/tun.c:3598 __fput+0x41a/0xa70 fs/file_table.c:512 fput_close_sync+0x11f/0x240 fs/file_table.c:618 filp_close_sync+0x6e/0xa0 fs/open.c:1573 close_files fs/file.c:572 [inline] put_files_struct+0x233/0x3c0 fs/file.c:584 do_exit+0x6f0/0x2360 kernel/exit.c:977 do_group_exit+0x22d/0x2f0 kernel/exit.c:1123 get_signal+0x1216/0x12c0 kernel/signal.c:3112 arch_do_signal_or_restart+0xbb/0x860 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop+0x10e/0x770 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:343 [inline] do_syscall_64+0x328/0x520 arch/x86/entry/syscall_64.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fcbea59fd8e RSP: 002b:00007ffc5de23f48 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: 000000000000008c RBX: 0000555588752500 RCX: 00007fcbea59fd8e RDX: 000000000000008c RSI: 00007fcbeb394670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007ffc5de23fc4 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000000 R14: 00007fcbeb394670 R15: 0000000000000000 INFO: task syz-executor:15804 blocked for more than 143 seconds. Tainted: G L syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:22488 pid:15804 tgid:15804 ppid:1 task_flags:0x40054c flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5583 [inline] __schedule+0x171d/0x56e0 kernel/sched/core.c:7382 __schedule_loop kernel/sched/core.c:7459 [inline] rt_mutex_schedule+0x76/0xf0 kernel/sched/core.c:7724 rt_mutex_slowlock_block+0x540/0x6a0 kernel/locking/rtmutex.c:1670 __rt_mutex_slowlock kernel/locking/rtmutex.c:1747 [inline] __rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1787 [inline] rt_mutex_slowlock+0x2d4/0x780 kernel/locking/rtmutex.c:1827 __rt_mutex_lock kernel/locking/rtmutex.c:1842 [inline] __mutex_lock_common kernel/locking/rtmutex_api.c:562 [inline] mutex_lock_nested+0x163/0x1d0 kernel/locking/rtmutex_api.c:580 rcu_barrier+0x175/0x610 kernel/rcu/tree.c:4002 netdev_run_todo+0x2fc/0x1090 net/core/dev.c:11950 tun_detach drivers/net/tun.c:660 [inline] tun_chr_close+0x13f/0x1c0 drivers/net/tun.c:3598 __fput+0x41a/0xa70 fs/file_table.c:512 fput_close_sync+0x11f/0x240 fs/file_table.c:618 filp_close_sync+0x6e/0xa0 fs/open.c:1573 close_files fs/file.c:572 [inline] put_files_struct+0x233/0x3c0 fs/file.c:584 do_exit+0x6f0/0x2360 kernel/exit.c:977 do_group_exit+0x22d/0x2f0 kernel/exit.c:1123 get_signal+0x1216/0x12c0 kernel/signal.c:3112 arch_do_signal_or_restart+0xbb/0x860 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop+0x10e/0x770 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:343 [inline] do_syscall_64+0x328/0x520 arch/x86/entry/syscall_64.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f22b368fd8e RSP: 002b:00007fffb8a2d428 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: 000000000000004c RBX: 000055558ed65500 RCX: 00007f22b368fd8e RDX: 000000000000004c RSI: 00007f22b4484670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007fffb8a2d4a4 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f22b4484670 R15: 0000000000000000 INFO: task syz-executor:15831 blocked for more than 143 seconds. Tainted: G L syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:23224 pid:15831 tgid:15831 ppid:1 task_flags:0x40054c flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5583 [inline] __schedule+0x171d/0x56e0 kernel/sched/core.c:7382 __schedule_loop kernel/sched/core.c:7459 [inline] rt_mutex_schedule+0x76/0xf0 kernel/sched/core.c:7724 rt_mutex_slowlock_block+0x540/0x6a0 kernel/locking/rtmutex.c:1670 __rt_mutex_slowlock kernel/locking/rtmutex.c:1747 [inline] __rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1787 [inline] rt_mutex_slowlock+0x2d4/0x780 kernel/locking/rtmutex.c:1827 __rt_mutex_lock kernel/locking/rtmutex.c:1842 [inline] __mutex_lock_common kernel/locking/rtmutex_api.c:562 [inline] mutex_lock_nested+0x163/0x1d0 kernel/locking/rtmutex_api.c:580 rcu_barrier+0x175/0x610 kernel/rcu/tree.c:4002 netdev_run_todo+0x2fc/0x1090 net/core/dev.c:11950 tun_detach drivers/net/tun.c:660 [inline] tun_chr_close+0x13f/0x1c0 drivers/net/tun.c:3598 __fput+0x41a/0xa70 fs/file_table.c:512 fput_close_sync+0x11f/0x240 fs/file_table.c:618 filp_close_sync+0x6e/0xa0 fs/open.c:1573 close_files fs/file.c:572 [inline] put_files_struct+0x233/0x3c0 fs/file.c:584 do_exit+0x6f0/0x2360 kernel/exit.c:977 do_group_exit+0x22d/0x2f0 kernel/exit.c:1123 get_signal+0x1216/0x12c0 kernel/signal.c:3112 arch_do_signal_or_restart+0xbb/0x860 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop+0x10e/0x770 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:343 [inline] do_syscall_64+0x328/0x520 arch/x86/entry/syscall_64.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7b249afd8e RSP: 002b:00007ffef9b03fc8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: 000000000000004c RBX: 000055557ce65500 RCX: 00007f7b249afd8e RDX: 000000000000004c RSI: 00007f7b257a4670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007ffef9b04044 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f7b257a4670 R15: 0000000000000000 Showing all locks held in the system: locks held by kworker/u8:1/13: 3, on CPU#0: #0: ffff88813fe34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88813fe34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88813fe34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88813fe34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc90000127c40 ((linkwatch_work).work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90000127c40 ((linkwatch_work).work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90000127c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc90000127c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffffffff907fee18 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:313 locks held by ksoftirqd/0/15: 4, last CPU#0: #0: ffffffff8f255b80 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 kernel/softirq.c:186 #1: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 kernel/softirq.c:186 #2: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3} , at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] , at: rcu_read_lock include/linux/rcupdate.h:849 [inline] , at: process_backlog+0x261/0xc50 net/core/dev.c:6868 #3: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #3: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #3: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: nf_hook include/linux/netfilter.h:249 [inline] #3: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 include/linux/netfilter.h:323 locks held by rcuc/0/19: 4, last CPU#0: #0: ffffffff8f255b80 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 kernel/softirq.c:186 #1: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 kernel/softirq.c:186 #2: ffffffff8f3c17a0 (rcu_callback){....}-{0:0}, at: local_bh_disable include/linux/bottom_half.h:20 [inline] #2: ffffffff8f3c17a0 (rcu_callback){....}-{0:0}, at: rcu_cpu_kthread+0x217/0x1700 kernel/rcu/tree.c:3000 #3: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #3: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #3: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline] #3: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 arch/x86/kernel/unwind_orc.c:495 locks held by khungtaskd/39: 1, last CPU#0: #0: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6871 locks held by kworker/u8:3/59: 2, last CPU#0: #0: ffff88801e76b140 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801e76b140 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801e76b140 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88801e76b140 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc9000125fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000125fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000125fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc9000125fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 locks held by kworker/u8:8/163: 2, on CPU#0: #0: ffff88801fb47140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801fb47140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801fb47140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88801fb47140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc900042afc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc900042afc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc900042afc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc900042afc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 locks held by kworker/0:3/1245: 3, on CPU#0: #0: ffff88813ff37540 ((wq_completion)events){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88813ff37540 ((wq_completion)events){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88813ff37540 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88813ff37540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc90005b47c40 (deferred_process_work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90005b47c40 (deferred_process_work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90005b47c40 (deferred_process_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc90005b47c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffffffff907fee18 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:104