INFO: task cmp:29877 blocked for more than 143 seconds. Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:cmp state:D stack:23680 pid:29877 tgid:29877 ppid:29848 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 __wait_on_freeing_inode+0x2a4/0x3f0 fs/inode.c:2300 find_inode_fast+0x2a0/0x460 fs/inode.c:957 iget_locked+0xab/0x820 fs/inode.c:1320 __ext4_iget+0x267/0x4090 fs/ext4/inode.c:4761 ext4_lookup+0x3e3/0x750 fs/ext4/namei.c:1811 __lookup_slow+0x28c/0x3f0 fs/namei.c:1718 lookup_slow+0x53/0x70 fs/namei.c:1735 walk_component fs/namei.c:2039 [inline] link_path_walk+0x99b/0xea0 fs/namei.c:2404 path_openat+0x25d/0x3470 fs/namei.c:3882 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2efd7aea46 RSP: 002b:00007ffeb3279108 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007ffeb3279368 RCX: 00007f2efd7aea46 RDX: 0000000000080000 RSI: 00007ffeb3279180 RDI: 00000000ffffff9c RBP: 00007ffeb3279170 R08: 0000000000080000 R09: 00007ffeb3279180 R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffeb3279180 R13: 0000000000000000 R14: 00007ffeb327934f R15: 00000000ffffffff INFO: task modprobe:29899 blocked for more than 143 seconds. Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:modprobe state:D stack:23680 pid:29899 tgid:29899 ppid:12 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 d_wait_lookup fs/dcache.c:2458 [inline] d_alloc_parallel+0xc16/0x1600 fs/dcache.c:2540 __lookup_slow+0x117/0x3f0 fs/namei.c:1703 lookup_slow+0x53/0x70 fs/namei.c:1735 walk_component fs/namei.c:2039 [inline] link_path_walk+0x99b/0xea0 fs/namei.c:2404 path_openat+0x25d/0x3470 fs/namei.c:3882 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f1f15af5a46 RSP: 002b:00007ffc8b9739e8 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007ffc8b973c48 RCX: 00007f1f15af5a46 RDX: 0000000000080000 RSI: 00007ffc8b973a60 RDI: 00000000ffffff9c RBP: 00007ffc8b973a50 R08: 0000000000080000 R09: 00007ffc8b973a60 R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffc8b973a60 R13: 0000000000000000 R14: 00007ffc8b973c2f R15: 00000000ffffffff INFO: task modprobe:29909 blocked for more than 144 seconds. Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:modprobe state:D stack:23680 pid:29909 tgid:29909 ppid:13850 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 d_wait_lookup fs/dcache.c:2458 [inline] d_alloc_parallel+0xc16/0x1600 fs/dcache.c:2540 __lookup_slow+0x117/0x3f0 fs/namei.c:1703 lookup_slow+0x53/0x70 fs/namei.c:1735 walk_component fs/namei.c:2039 [inline] link_path_walk+0x99b/0xea0 fs/namei.c:2404 path_openat+0x25d/0x3470 fs/namei.c:3882 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fcafbe56a46 RSP: 002b:00007ffe3ed17028 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007ffe3ed17288 RCX: 00007fcafbe56a46 RDX: 0000000000080000 RSI: 00007ffe3ed170a0 RDI: 00000000ffffff9c RBP: 00007ffe3ed17090 R08: 0000000000080000 R09: 00007ffe3ed170a0 R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffe3ed170a0 R13: 0000000000000000 R14: 00007ffe3ed1726f R15: 00000000ffffffff INFO: task modprobe:29925 blocked for more than 144 seconds. Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:modprobe state:D stack:23680 pid:29925 tgid:29925 ppid:10390 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 d_wait_lookup fs/dcache.c:2458 [inline] d_alloc_parallel+0xc16/0x1600 fs/dcache.c:2540 __lookup_slow+0x117/0x3f0 fs/namei.c:1703 lookup_slow+0x53/0x70 fs/namei.c:1735 walk_component fs/namei.c:2039 [inline] link_path_walk+0x99b/0xea0 fs/namei.c:2404 path_openat+0x25d/0x3470 fs/namei.c:3882 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f97881e1a46 RSP: 002b:00007ffc25a5b468 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007ffc25a5b6c8 RCX: 00007f97881e1a46 RDX: 0000000000080000 RSI: 00007ffc25a5b4e0 RDI: 00000000ffffff9c RBP: 00007ffc25a5b4d0 R08: 0000000000080000 R09: 00007ffc25a5b4e0 R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffc25a5b4e0 R13: 0000000000000000 R14: 00007ffc25a5b6af R15: 00000000ffffffff INFO: task modprobe:29953 blocked for more than 144 seconds. Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:modprobe state:D stack:23680 pid:29953 tgid:29953 ppid:2427 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 d_wait_lookup fs/dcache.c:2458 [inline] d_alloc_parallel+0xc16/0x1600 fs/dcache.c:2540 __lookup_slow+0x117/0x3f0 fs/namei.c:1703 lookup_slow+0x53/0x70 fs/namei.c:1735 walk_component fs/namei.c:2039 [inline] link_path_walk+0x99b/0xea0 fs/namei.c:2404 path_openat+0x25d/0x3470 fs/namei.c:3882 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f52c9213a46 RSP: 002b:00007ffe2f5a3c28 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007ffe2f5a3e88 RCX: 00007f52c9213a46 RDX: 0000000000080000 RSI: 00007ffe2f5a3ca0 RDI: 00000000ffffff9c RBP: 00007ffe2f5a3c90 R08: 0000000000080000 R09: 00007ffe2f5a3ca0 R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffe2f5a3ca0 R13: 0000000000000000 R14: 00007ffe2f5a3e6f R15: 00000000ffffffff Showing all locks held in the system: 2 locks held by kworker/u8:1/12: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90000117d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90000117d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 1 lock held by khungtaskd/30: #0: ffffffff8e336e60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:327 [inline] #0: ffffffff8e336e60 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:839 [inline] #0: ffffffff8e336e60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6620 2 locks held by kworker/u8:2/35: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90000ab7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90000ab7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:3/52: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90000bc7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90000bc7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:7/2427: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90009037d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90009037d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:8/2441: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc900093c7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc900093c7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by getty/4855: #0: ffff88802aad90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211 2 locks held by kworker/u8:4/10390: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90004447d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90004447d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:6/13850: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90004b7fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90004b7fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:11/13851: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90004da7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90004da7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 2 locks held by kworker/u8:12/13852: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90004057d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90004057d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 1 lock held by cmp/29877: #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 1 lock held by modprobe/29899: #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 1 lock held by modprobe/29909: #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 1 lock held by modprobe/29925: #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:0/29927: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90009307d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90009307d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 1 lock held by modprobe/29953: #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 1 lock held by modprobe/30081: #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 1 lock held by modprobe/30092: #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 1 lock held by modprobe/30096: #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 1 lock held by modprobe/30097: #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:5/30098: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc9000944fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc9000944fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 1 lock held by modprobe/30099: #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:9/30102: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90004a6fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90004a6fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 1 lock held by modprobe/30103: #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:10/30104: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90004a1fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90004a1fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 1 lock held by modprobe/30105: #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:14/30116: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90003d77d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90003d77d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 1 lock held by modprobe/30117: #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:15/30118: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90003667d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90003667d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 1 lock held by modprobe/30139: #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:16/30140: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90004d2fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90004d2fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 1 lock held by modprobe/30143: #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:17/30145: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90003fa7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90003fa7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 1 lock held by modprobe/30146: #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:18/30175: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc9000313fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc9000313fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 1 lock held by modprobe/30216: #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:19/30219: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90003f27d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90003f27d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 3 locks held by syz-executor/30224: #0: ffff88805fc80d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close net/bluetooth/hci_core.c:488 [inline] #0: ffff88805fc80d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 net/bluetooth/hci_core.c:2699 #1: ffff88805fc80078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 net/bluetooth/hci_sync.c:5110 #2: ffffffff8f774968 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_disconn_cfm include/net/bluetooth/hci_core.h:1977 [inline] #2: ffffffff8f774968 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 net/bluetooth/hci_conn.c:2592 1 lock held by modprobe/30227: #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 4 locks held by syz-executor/30232: #0: ffff8880687bcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close net/bluetooth/hci_core.c:488 [inline] #0: ffff8880687bcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 net/bluetooth/hci_core.c:2699 #1: ffff8880687bc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 net/bluetooth/hci_sync.c:5110 #2: ffffffff8f774968 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_disconn_cfm include/net/bluetooth/hci_core.h:1977 [inline] #2: ffffffff8f774968 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 net/bluetooth/hci_conn.c:2592 #3: ffffffff8e33c238 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:328 [inline] #3: ffffffff8e33c238 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 kernel/rcu/tree_exp.h:958 2 locks held by kworker/u8:20/30234: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc900097f7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc900097f7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 1 lock held by modprobe/30236: #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 3 locks held by syz-executor/30240: #0: ffff8880677ecd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close net/bluetooth/hci_core.c:488 [inline] #0: ffff8880677ecd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 net/bluetooth/hci_core.c:2699 #1: ffff8880677ec078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 net/bluetooth/hci_sync.c:5110 #2: ffffffff8f774968 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_disconn_cfm include/net/bluetooth/hci_core.h:1977 [inline] #2: ffffffff8f774968 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 net/bluetooth/hci_conn.c:2592 1 lock held by modprobe/30243: #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 3 locks held by syz-executor/30249: #0: ffff88802ab4cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close net/bluetooth/hci_core.c:488 [inline] #0: ffff88802ab4cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 net/bluetooth/hci_core.c:2699 #1: ffff88802ab4c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 net/bluetooth/hci_sync.c:5110 #2: ffffffff8f774968 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_disconn_cfm include/net/bluetooth/hci_core.h:1977 [inline] #2: ffffffff8f774968 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 net/bluetooth/hci_conn.c:2592 1 lock held by modprobe/30252: #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 2 locks held by kworker/u8:23/30254: #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90009777d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90009777d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 3 locks held by syz-executor/30259: #0: ffff88806539cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close net/bluetooth/hci_core.c:488 [inline] #0: ffff88806539cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 net/bluetooth/hci_core.c:2699 #1: ffff88806539c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 net/bluetooth/hci_sync.c:5110 #2: ffffffff8f774968 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_disconn_cfm include/net/bluetooth/hci_core.h:1977 [inline] #2: ffffffff8f774968 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 net/bluetooth/hci_conn.c:2592 1 lock held by modprobe/30262: #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:809 [inline] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1734 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114 nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline] watchdog+0xfde/0x1020 kernel/hung_task.c:379 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 30244 Comm: kworker/u8:21 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 Workqueue: events_unbound toggle_allocation_gate RIP: 0010:call_function_single_prep_ipi+0xa5/0x240 kernel/sched/core.c:3709 Code: fa de 8d 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 7c 20 96 00 48 c7 c3 a0 f2 03 00 49 03 1f 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 5c 20 96 00 44 89 74 24 14 4c 8d RSP: 0018:ffffc9000968f640 EFLAGS: 00000a02 RAX: 1ffff110172a7e54 RBX: ffff8880b953f2a0 RCX: ffff88801776da00 RDX: ffff88801776da00 RSI: 0000000000000001 RDI: 0000000000000001 RBP: ffffc9000968f6f0 R08: ffffffff81872d13 R09: 1ffff11017287f3a R10: dffffc0000000000 R11: ffffed1017287f3b R12: dffffc0000000000 R13: 1ffff920012d1ecc R14: 0000000000000001 R15: ffffffff8ddefa48 FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb2b0423442 CR3: 000000000e134000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: send_call_function_single_ipi kernel/smp.c:115 [inline] smp_call_function_many_cond+0x11f5/0x29d0 kernel/smp.c:838 on_each_cpu_cond_mask+0x3f/0x80 kernel/smp.c:1023 text_poke_bp_batch+0x9ef/0xb30 text_poke_flush arch/x86/kernel/alternative.c:2486 [inline] text_poke_finish+0x30/0x50 arch/x86/kernel/alternative.c:2493 arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146 static_key_enable_cpuslocked+0x136/0x260 kernel/jump_label.c:210 static_key_enable+0x1a/0x20 kernel/jump_label.c:223 toggle_allocation_gate+0xb5/0x250 mm/kfence/core.c:826 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd40 kernel/workqueue.c:3390 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244