INFO: task syz.1.725:14142 blocked for more than 430 seconds. Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.725 state:D stack:0 pid:14142 tgid:14140 ppid:3183 flags:0x00000006 Call Trace: [] context_switch kernel/sched/core.c:5328 [inline] [] __schedule+0xd58/0x3848 kernel/sched/core.c:6690 [] __schedule_loop kernel/sched/core.c:6767 [inline] [] schedule+0xc4/0x324 kernel/sched/core.c:6782 [] schedule_timeout+0x1e2/0x296 kernel/time/timer.c:2591 [] do_wait_for_common kernel/sched/completion.c:95 [inline] [] __wait_for_common+0x1ca/0x4b6 kernel/sched/completion.c:116 [] wait_for_common kernel/sched/completion.c:127 [inline] [] wait_for_completion+0x1a/0x22 kernel/sched/completion.c:148 [] disable_device+0x1b2/0x2ba drivers/infiniband/core/device.c:1295 [] __ib_unregister_device+0x28e/0x402 drivers/infiniband/core/device.c:1518 [] ib_unregister_device_and_put+0x56/0x82 drivers/infiniband/core/device.c:1583 [] nldev_dellink+0x212/0x314 drivers/infiniband/core/nldev.c:1825 [] rdma_nl_rcv_msg+0x352/0x680 drivers/infiniband/core/netlink.c:195 [] rdma_nl_rcv_skb.constprop.0.isra.0+0x328/0x424 drivers/infiniband/core/netlink.c:239 [] rdma_nl_rcv+0x1a/0x24 drivers/infiniband/core/netlink.c:259 [] netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] [] netlink_unicast+0x4f0/0x82c net/netlink/af_netlink.c:1357 [] netlink_sendmsg+0x864/0xdc6 net/netlink/af_netlink.c:1901 [] sock_sendmsg_nosec net/socket.c:729 [inline] [] __sock_sendmsg+0xcc/0x160 net/socket.c:744 [] ____sys_sendmsg+0x5ce/0x79e net/socket.c:2607 [] ___sys_sendmsg+0x144/0x1e6 net/socket.c:2661 [] __sys_sendmsg+0x130/0x1f0 net/socket.c:2690 [] __do_sys_sendmsg net/socket.c:2699 [inline] [] __se_sys_sendmsg net/socket.c:2697 [inline] [] __riscv_sys_sendmsg+0x70/0xa2 net/socket.c:2697 [] syscall_handler+0x94/0x118 arch/riscv/include/asm/syscall.h:90 [] do_trap_ecall_u+0x1aa/0x216 arch/riscv/kernel/traps.c:331 [] _new_vmalloc_restore_context_a0+0xc2/0xce Showing all locks held in the system: 1 lock held by khungtaskd/37: #0: ffffffff881cc080 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x68/0x2d6 kernel/locking/lockdep.c:6716 1 lock held by klogd/2972: 2 locks held by getty/3135: #0: ff600000185d10a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46 drivers/tty/tty_ldsem.c:340 #1: ff2000000008b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xd7c/0x129a drivers/tty/n_tty.c:2211 3 locks held by sshd/3170: 2 locks held by syz-executor/3172: 2 locks held by kworker/u9:22/12021: #0: ff60000011071148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x848/0x1dae kernel/workqueue.c:3204 #1: ff20000003707c90 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x870/0x1dae kernel/workqueue.c:3204 4 locks held by kworker/u10:1/13096: 3 locks held by kworker/u9:1/13620: 3 locks held by kworker/u9:2/13622: 4 locks held by kworker/u10:17/14096: 2 locks held by syz.1.725/14142: #0: ffffffff90d8ecd8 (&rdma_nl_types[idx].sem){.+.+}-{3:3}, at: rdma_nl_rcv_msg+0x172/0x680 drivers/infiniband/core/netlink.c:164 #1: ff6000002dab06b0 (&device->unregistration_lock){+.+.}-{3:3}, at: __ib_unregister_device+0x200/0x402 drivers/infiniband/core/device.c:1514 4 locks held by kworker/u8:1/14374: #0: ff60000011e81948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x848/0x1dae kernel/workqueue.c:3204 #1: ff20000005e07c90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x870/0x1dae kernel/workqueue.c:3204 #2: ffffffff89597c70 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xda/0x984 net/core/net_namespace.c:580 #3: ff6000002dab06b0 (&device->unregistration_lock){+.+.}-{3:3}, at: rdma_dev_change_netns+0x3c/0x348 drivers/infiniband/core/device.c:1666 2 locks held by kworker/1:3/15035: 1 lock held by syz.3.773/15037: 2 locks held by modprobe/15038: ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 Hardware name: riscv-virtio,qemu (DT) Call Trace: [] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:130 [] show_stack+0x34/0x40 arch/riscv/kernel/stacktrace.c:136 [] __dump_stack lib/dump_stack.c:94 [inline] [] dump_stack_lvl+0x122/0x196 lib/dump_stack.c:120 [] dump_stack+0x1c/0x24 lib/dump_stack.c:129 [] nmi_cpu_backtrace+0x39c/0x39e lib/nmi_backtrace.c:113 [] nmi_trigger_cpumask_backtrace+0x2b6/0x456 lib/nmi_backtrace.c:62 [] arch_trigger_cpumask_backtrace+0x2c/0x3c arch/riscv/kernel/smp.c:347 [] trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline] [] watchdog+0xcfa/0x1178 kernel/hung_task.c:379 [] kthread+0x28c/0x3a6 kernel/kthread.c:389 [] ret_from_fork+0xe/0x18 arch/riscv/kernel/entry.S:326 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 15037 Comm: syz.3.773 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 Hardware name: riscv-virtio,qemu (DT) epc : lock_acquire.part.0+0x36c/0x81c kernel/locking/lockdep.c:5790 ra : lockdep_recursion_finish kernel/locking/lockdep.c:467 [inline] ra : lock_acquire.part.0+0x2d6/0x81c kernel/locking/lockdep.c:5827 epc : ffffffff802497ac ra : ffffffff80249716 sp : ff20000001cd7570 gp : ffffffff899c0180 tp : ff60000011b74ec0 t0 : ff60000011b759e0 t1 : ff60000011b75aa8 t2 : 0000000000000006 s0 : ff20000001cd76d0 s1 : ff6000005cde0708 a0 : ffffffff90d62aa8 a1 : ffffffff8663e8a0 a2 : 0000000000000012 a3 : ffffffff89abdd80 a4 : 0000000000000000 a5 : 0000000000000000 a6 : ffffffff8d1b74e0 a7 : 000000005a830690 s2 : ffffffff90d62aa8 s3 : 0000000000000000 s4 : ffffffff881cc080 s5 : 1fe400000039aeb8 s6 : 0000000000000000 s7 : ffffffff809e0f7a s8 : 0000000000000000 s9 : ffffffff86458708 s10: ffffffff90d62aa0 s11: 0000000000000002 t3 : 1fec00000236eb3b t4 : 0000000000000001 t5 : 2f4402e19411a353 t6 : 1fec00000236eb59 status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001 [] arch_local_irq_restore arch/riscv/include/asm/irqflags.h:51 [inline] [] lock_acquire.part.0+0x36c/0x81c kernel/locking/lockdep.c:5828 [] lock_acquire+0x74/0x98 kernel/locking/lockdep.c:5798 [] rcu_lock_acquire include/linux/rcupdate.h:337 [inline] [] rcu_read_lock include/linux/rcupdate.h:849 [inline] [] page_ext_get+0x4e/0x468 mm/page_ext.c:525 [] page_table_check_set.part.0+0x132/0x5d6 mm/page_table_check.c:114 [] page_table_check_set arch/riscv/include/asm/pgtable.h:369 [inline] [] __page_table_check_ptes_set+0x6c0/0xdd6 mm/page_table_check.c:225 [] page_table_check_ptes_set include/linux/page_table_check.h:74 [inline] [] set_ptes arch/riscv/include/asm/pgtable.h:565 [inline] [] set_pte_range+0x3f4/0x4a0 mm/memory.c:5042 [] filemap_map_order0_folio mm/filemap.c:3623 [inline] [] filemap_map_pages+0x44e/0x137a mm/filemap.c:3677 [] do_fault_around mm/memory.c:5255 [inline] [] do_read_fault mm/memory.c:5288 [inline] [] do_fault mm/memory.c:5431 [inline] [] do_pte_missing mm/memory.c:3965 [inline] [] handle_pte_fault mm/memory.c:5766 [inline] [] __handle_mm_fault+0x1b0c/0x43ea mm/memory.c:5909 [] handle_mm_fault+0x48c/0x886 mm/memory.c:6077 [] handle_page_fault+0x2ba/0x1588 arch/riscv/mm/fault.c:302 [] do_page_fault+0x20/0x56 arch/riscv/kernel/traps.c:362 [] _new_vmalloc_restore_context_a0+0xc2/0xce