INFO: task syz.0.436:7147 blocked for more than INFO: task syz.0.436:7147 blocked for more than 154 seconds. Tainted: G L syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.436 state:D stack:0 pid:7147 tgid:7143 ppid:4718 task_flags:0x40044c flags:0x00000019 Call trace: __switch_to+0x2b0/0x6e0 arch/arm64/kernel/process.c:810 (T) context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1bec/0x2dcc kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0x140/0x218 kernel/sched/core.c:7283 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7340 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x4e4/0xef8 kernel/locking/mutex.c:820 mutex_lock_nested+0x24/0x30 kernel/locking/mutex.c:873 tty_release_struct+0x44/0x6c drivers/tty/tty_io.c:1691 tty_release+0xa54/0xf74 drivers/tty/tty_io.c:1852 __fput+0x340/0x744 fs/file_table.c:510 ____fput+0x20/0x30 fs/file_table.c:538 task_work_run+0x1c4/0x254 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x580/0x1a6c kernel/exit.c:976 do_group_exit+0x194/0x22c kernel/exit.c:1119 get_signal+0xfb0/0x1094 kernel/signal.c:3037 arch_do_signal_or_restart+0x290/0x43a0 arch/arm64/kernel/signal.c:1665 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline] exit_to_user_mode_loop+0x70/0x17c kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] arm64_syscall_exit_to_user_mode arch/arm64/kernel/entry-common.c:88 [inline] el0_svc+0x18c/0x260 arch/arm64/kernel/entry-common.c:741 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:759 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 Showing all locks held in the system: 3 locks held by kworker/u8:0/12: #0: ffff0000ced14140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #0: ffff0000ced14140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x748/0x1098 kernel/workqueue.c:3397 #1: ffff80008eab7c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #1: ffff80008eab7c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x750/0x1098 kernel/workqueue.c:3397 #2: ffff800089c3bb80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 3 locks held by kworker/u8:1/15: 1 lock held by khungtaskd/31: #0: ffff800088b672a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffff800088b672a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #0: ffff800088b672a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 kernel/locking/lockdep.c:6775 3 locks held by kworker/u8:2/39: 2 locks held by kworker/u8:3/40: 2 locks held by pr/ttyAMA-1/41: 3 locks held by kworker/u8:5/1238: 3 locks held by kworker/u8:8/1474: #0: ffff0000c004b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #0: ffff0000c004b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x748/0x1098 kernel/workqueue.c:3397 #1: ffff800095ab7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #1: ffff800095ab7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x750/0x1098 kernel/workqueue.c:3397 #2: ffff800089c3bb80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 3 locks held by udevd/4339: 4 locks held by kworker/1:3/4467: #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x748/0x1098 kernel/workqueue.c:3397 #1: ffff800094767c40 (reg_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #1: ffff800094767c40 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x750/0x1098 kernel/workqueue.c:3397 #2: ffff800089c3bb80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 #3: ffff0000f0df0780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6645 [inline] #3: ffff0000f0df0780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0x94/0x1c0 net/wireless/reg.c:3192 2 locks held by getty/4489: #0: ffff0000d3fc10a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80009232e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x354/0xf84 drivers/tty/n_tty.c:2211 1 lock held by syz-executor/4701: 1 lock held by syz-executor/4966: 3 locks held by kworker/u8:10/5097: 3 locks held by kworker/u8:13/5103: #0: ffff0000c004b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #0: ffff0000c004b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x748/0x1098 kernel/workqueue.c:3397 #1: ffff800098227c40 ((crda_timeout).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #1: ffff800098227c40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x750/0x1098 kernel/workqueue.c:3397 #2: ffff800089c3bb80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 3 locks held by kworker/u8:14/5104: 4 locks held by kworker/u8:15/5108: 3 locks held by kworker/u8:16/5111: 3 locks held by kworker/u8:17/5113: 4 locks held by kworker/u8:18/5114: 4 locks held by syz-executor/5355: 3 locks held by kworker/u8:21/6796: 3 locks held by kworker/u8:24/6799: 3 locks held by kworker/u8:27/6802: 1 lock held by syz.1.357/6803: 1 lock held by syz.1.357/6804: 3 locks held by kworker/u8:28/6807: 2 locks held by kworker/u8:32/6813: 3 locks held by kworker/u8:34/6815: 1 lock held by syz.0.436/7147: #0: ffff8000890a6aa0 (tty_mutex){+.+.}-{4:4}, at: tty_release_struct+0x44/0x6c drivers/tty/tty_io.c:1691 3 locks held by syz.5.437/7151: =============================================