INFO: task syz-executor5:10498 blocked for more than 140 seconds. Not tainted 4.18.0-rc5+ #149 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor5 D24696 10498 4551 0x00000004 Call Trace: context_switch kernel/sched/core.c:2853 [inline] __schedule+0x87c/0x1ed0 kernel/sched/core.c:3501 schedule+0xfb/0x450 kernel/sched/core.c:3545 schedule_timeout+0x1cc/0x260 kernel/time/timer.c:1777 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common kernel/sched/completion.c:115 [inline] wait_for_completion+0x430/0x8d0 kernel/sched/completion.c:136 flush_work+0x531/0x900 kernel/workqueue.c:2918 smc_close_active+0x618/0x9c0 net/smc/smc_close.c:189 smc_release+0x434/0x670 net/smc/af_smc.c:141 __sock_release+0xd7/0x260 net/socket.c:599 sock_close+0x19/0x20 net/socket.c:1150 __fput+0x355/0x8b0 fs/file_table.c:209 ____fput+0x15/0x20 fs/file_table.c:243 task_work_run+0x1ec/0x2a0 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:192 [inline] exit_to_usermode_loop+0x313/0x370 arch/x86/entry/common.c:166 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x6be/0x820 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x40fb91 Code: 4a 00 48 89 04 24 48 c7 44 24 08 11 00 00 00 e8 55 bd 01 00 0f 0b e8 ce a3 04 00 e9 59 ff ff ff cc cc cc cc cc cc cc cc cc 64 <48> 8b 0c 25 f8 ff ff ff 48 8d 44 24 e0 48 3b 41 10 0f 86 0f 05 00 RSP: 002b:0000000000a3eab0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000014 RCX: 000000000040fb91 RDX: 0000000000000000 RSI: 00000000007305a8 RDI: 0000000000000013 RBP: 0000000000000013 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000a3e930 R11: 0000000000000293 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000a3f160 R15: 00000000007034c0 Showing all locks held in the system: 2 locks held by kworker/1:0/19: #0: 00000000cd7a6230 ((wq_completion)"events"){+.+.}, at: __write_once_size include/linux/compiler.h:215 [inline] #0: 00000000cd7a6230 ((wq_completion)"events"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000cd7a6230 ((wq_completion)"events"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] #0: 00000000cd7a6230 ((wq_completion)"events"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] #0: 00000000cd7a6230 ((wq_completion)"events"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] #0: 00000000cd7a6230 ((wq_completion)"events"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: 00000000cd7a6230 ((wq_completion)"events"){+.+.}, at: process_one_work+0xb44/0x1ba0 kernel/workqueue.c:2124 #1: 0000000049e9c1f1 ((work_completion)(&smc->tcp_listen_work)){+.+.}, at: process_one_work+0xb9b/0x1ba0 kernel/workqueue.c:2128 1 lock held by khungtaskd/901: #0: 000000009a7d98d6 (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x428 kernel/locking/lockdep.c:4461 1 lock held by rsyslogd/4408: #0: 00000000406a9c77 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 fs/file.c:766 2 locks held by getty/4498: #0: 000000004727bd3b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 000000008df33c39 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140 2 locks held by getty/4499: #0: 00000000ec9cfb48 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 00000000ffe3d0dd (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140 2 locks held by getty/4500: #0: 00000000b8903701 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 00000000bdae396a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140 2 locks held by getty/4501: #0: 00000000fdb0358d (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 000000007855d70e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140 2 locks held by getty/4502: #0: 00000000a09d6752 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 000000003ea9c49f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140 2 locks held by getty/4503: #0: 0000000055ea16b4 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 000000000a42829e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140 2 locks held by getty/4504: #0: 0000000031bb9010 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 0000000072fc3012 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140 2 locks held by kworker/1:2/4825: #0: 00000000cd7a6230 ((wq_completion)"events"){+.+.}, at: __write_once_size include/linux/compiler.h:215 [inline] #0: 00000000cd7a6230 ((wq_completion)"events"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000cd7a6230 ((wq_completion)"events"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] #0: 00000000cd7a6230 ((wq_completion)"events"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] #0: 00000000cd7a6230 ((wq_completion)"events"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] #0: 00000000cd7a6230 ((wq_completion)"events"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: 00000000cd7a6230 ((wq_completion)"events"){+.+.}, at: process_one_work+0xb44/0x1ba0 kernel/workqueue.c:2124 #1: 00000000f06217c6 ((work_completion)(&smc->tcp_listen_work)){+.+.}, at: process_one_work+0xb9b/0x1ba0 kernel/workqueue.c:2128 1 lock held by syz-executor5/10498: #0: 00000000b72c1db1 (&sb->s_type->i_mutex_key#11){+.+.}, at: inode_lock include/linux/fs.h:715 [inline] #0: 00000000b72c1db1 (&sb->s_type->i_mutex_key#11){+.+.}, at: __sock_release+0x8b/0x260 net/socket.c:598 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 901 Comm: khungtaskd Not tainted 4.18.0-rc5+ #149 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c9/0x2b4 lib/dump_stack.c:113 nmi_cpu_backtrace.cold.4+0x19/0xce lib/nmi_backtrace.c:103 nmi_trigger_cpumask_backtrace+0x151/0x192 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:138 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:196 [inline] watchdog+0x9c4/0xf80 kernel/hung_task.c:252 kthread+0x345/0x410 kernel/kthread.c:246 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:412 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.18.0-rc5+ #149 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:tick_check_oneshot_broadcast_this_cpu+0x0/0xd0 kernel/time/tick-broadcast.c:544 Code: d1 0d 00 65 8b 05 e0 47 93 7e 89 c0 48 0f a3 05 06 d0 36 09 0f 92 c0 5d 0f b6 c0 c3 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 <55> 48 89 e5 41 54 53 e8 c4 d1 0d 00 65 8b 05 ad 47 93 7e 89 c0 48 RSP: 0018:ffff8801dae07c98 EFLAGS: 00000093 RAX: ffffffff88e75dc0 RBX: 0000000000026560 RCX: 0000000000000001 RDX: 0000000000000000 RSI: ffffffff816e8429 RDI: 0000000000000086 RBP: ffff8801dae07cc8 R08: 0000000000000000 R09: 0000000000000001 R10: ffffed003b5c46d6 R11: ffff8801dae236b3 R12: ffffffff88e75dc0 R13: 1ffff1003b5c0fa1 R14: ffff8801dae07e68 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f1c81c4b140 CR3: 00000001cc230000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: irq_enter+0xb6/0xd0 kernel/softirq.c:349 scheduler_ipi+0x3a9/0xa50 kernel/sched/core.c:1790 smp_reschedule_interrupt+0xf5/0x670 arch/x86/kernel/smp.c:277 reschedule_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:887 RIP: 0010:native_safe_halt+0x6/0x10 arch/x86/include/asm/irqflags.h:54 Code: c7 48 89 45 d8 e8 da f3 25 fa 48 8b 45 d8 e9 d2 fe ff ff 48 89 df e8 c9 f3 25 fa eb 8a 90 90 90 90 90 90 90 55 48 89 e5 fb f4 <5d> c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 f4 5d c3 90 90 90 90 90 RSP: 0018:ffffffff88e07bc0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff02 RAX: dffffc0000000000 RBX: 1ffffffff11c0f7b RCX: 0000000000000000 RDX: 1ffffffff11e3610 RSI: 0000000000000001 RDI: ffffffff88f1b080 RBP: ffffffff88e07bc0 R08: ffffed003b5c46d7 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffffffff88e07c78 R14: ffffffff899ed160 R15: 0000000000000000 arch_safe_halt arch/x86/include/asm/paravirt.h:94 [inline] default_idle+0xc7/0x450 arch/x86/kernel/process.c:500 arch_cpu_idle+0x10/0x20 arch/x86/kernel/process.c:491 default_idle_call+0x6d/0x90 kernel/sched/idle.c:93 cpuidle_idle_call kernel/sched/idle.c:153 [inline] do_idle+0x3aa/0x570 kernel/sched/idle.c:262 cpu_startup_entry+0x10c/0x120 kernel/sched/idle.c:368 rest_init+0xe1/0xe4 init/main.c:442 start_kernel+0x90e/0x949 init/main.c:738 x86_64_start_reservations+0x29/0x2b arch/x86/kernel/head64.c:452 x86_64_start_kernel+0x76/0x79 arch/x86/kernel/head64.c:433 secondary_startup_64+0xa5/0xb0 arch/x86/kernel/head_64.S:242