INFO: task syz-executor.0:28556 blocked for more than 430 seconds. Not tainted 5.12.0-rc2-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack: 0 pid:28556 ppid: 2276 flags:0x00000001 Backtrace: [<82134aa0>] (__schedule) from [<821357c4>] (schedule+0x5c/0x108 kernel/sched/core.c:5154) r10:885fc258 r9:885fc200 r8:82136608 r7:88820b14 r6:88820b10 r5:89356000 r4:8875a080 [<82135768>] (schedule) from [<8213b394>] (schedule_timeout+0xe0/0x12c kernel/time/timer.c:1868) r5:89356000 r4:7fffffff [<8213b2b4>] (schedule_timeout) from [<82136638>] (do_wait_for_common kernel/sched/completion.c:85 [inline]) [<8213b2b4>] (schedule_timeout) from [<82136638>] (__wait_for_common kernel/sched/completion.c:106 [inline]) [<8213b2b4>] (schedule_timeout) from [<82136638>] (wait_for_common kernel/sched/completion.c:117 [inline]) [<8213b2b4>] (schedule_timeout) from [<82136638>] (wait_for_completion+0xb4/0x124 kernel/sched/completion.c:138) r6:88820b10 r5:89356000 r4:7fffffff [<82136584>] (wait_for_completion) from [<8055957c>] (io_sq_thread_finish+0x38/0x234 fs/io_uring.c:7127) r8:88820ac4 r7:88f81040 r6:200002c0 r5:88820800 r4:885fc200 [<80559544>] (io_sq_thread_finish) from [<80560b24>] (io_sq_offload_create fs/io_uring.c:7928 [inline]) [<80559544>] (io_sq_thread_finish) from [<80560b24>] (io_uring_create fs/io_uring.c:9401 [inline]) [<80559544>] (io_sq_thread_finish) from [<80560b24>] (io_uring_setup+0xba4/0xf4c fs/io_uring.c:9484) r9:885fc200 r8:88820ac4 r7:88f81040 r6:200002c0 r5:fffffdff r4:88820800 [<8055ff80>] (io_uring_setup) from [<80567ba8>] (__do_sys_io_uring_setup fs/io_uring.c:9490 [inline]) [<8055ff80>] (io_uring_setup) from [<80567ba8>] (sys_io_uring_setup+0x10/0x14 fs/io_uring.c:9487) r10:000001a9 r9:89356000 r8:80200224 r7:000001a9 r6:20ffe000 r5:20ffd000 r4:76f4d070 [<80567b98>] (sys_io_uring_setup) from [<80200060>] (ret_fast_syscall+0x0/0x2c arch/arm/mm/proc-v7.S:64) Exception stack(0x89357fa8 to 0x89357ff0) 7fa0: 76f4d070 20ffd000 00002d24 200002c0 20ffd000 00000003 7fc0: 76f4d070 20ffd000 20ffe000 000001a9 20000340 20ffe000 7ed02914 76f4d20c 7fe0: 76f4d010 76f4d000 000120b8 0004b440 Showing all locks held in the system: 1 lock held by khungtaskd/1525: #0: 8390e91c (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x34/0x1dc kernel/locking/lockdep.c:6329 1 lock held by syslogd/4136: 2 locks held by getty/4302: #0: 86ee8c54 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x38/0x3c drivers/tty/tty_ldsem.c:340 #1: e8672290 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x4a4/0x56c drivers/tty/n_tty.c:2178 3 locks held by kworker/u4:4/2131: 2 locks held by kworker/u4:1/3655: ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 1525 Comm: khungtaskd Not tainted 5.12.0-rc2-syzkaller #0 Hardware name: ARM-Versatile Express Backtrace: [<82107738>] (dump_backtrace) from [<821079ac>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:252) r7:00000000 r6:600d0113 r5:00000000 r4:83966184 [<82107994>] (show_stack) from [<82110980>] (__dump_stack lib/dump_stack.c:79 [inline]) [<82107994>] (show_stack) from [<82110980>] (dump_stack+0xb8/0xe8 lib/dump_stack.c:120) [<821108c8>] (dump_stack) from [<8091cd20>] (nmi_cpu_backtrace+0xfc/0x160 lib/nmi_backtrace.c:105) r7:00000000 r6:80210934 r5:00000000 r4:00000001 [<8091cc24>] (nmi_cpu_backtrace) from [<8091cec0>] (nmi_trigger_cpumask_backtrace+0x13c/0x224 lib/nmi_backtrace.c:62) r5:83823424 r4:00000001 [<8091cd84>] (nmi_trigger_cpumask_backtrace) from [<80211dec>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:857) r9:83822dd8 r8:83806d00 r7:00007f4f r6:83835150 r5:000c4640 r4:83ac7699 [<80211dd4>] (arch_trigger_cpumask_backtrace) from [<80365d1c>] (trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]) [<80211dd4>] (arch_trigger_cpumask_backtrace) from [<80365d1c>] (check_hung_uninterruptible_tasks kernel/hung_task.c:209 [inline]) [<80211dd4>] (arch_trigger_cpumask_backtrace) from [<80365d1c>] (watchdog+0x6d0/0x88c kernel/hung_task.c:294) [<8036564c>] (watchdog) from [<80271f40>] (kthread+0x184/0x1a4 kernel/kthread.c:292) r10:84505e2c r9:00000000 r8:8036564c r7:00000000 r6:84748000 r5:8478c180 r4:8477d100 [<80271dbc>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:158) Exception stack(0x84749fb0 to 0x84749ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80271dbc r4:8478c180 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 4140 Comm: klogd Not tainted 5.12.0-rc2-syzkaller #0 Hardware name: ARM-Versatile Express PC is at lock_is_held_type+0x150/0x1d8 kernel/locking/lockdep.c:5554 LR is at __this_cpu_preempt_check+0x1c/0x20 lib/smp_processor_id.c:70 pc : [<82132068>] lr : [<82133164>] psr: 20070013 sp : 86fb5c40 ip : 86fb5c30 fp : 86fb5c6c r10: 858b1040 r9 : 60070013 r8 : 00000001 r7 : 836bb680 r6 : 8390e91c r5 : 00000001 r4 : 858b16c8 r3 : 60070093 r2 : 836bb680 r1 : 5a905000 r0 : 00000000 Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 86f29140 DAC: fffffffd CPU: 0 PID: 4140 Comm: klogd Not tainted 5.12.0-rc2-syzkaller #0 Hardware name: ARM-Versatile Express Backtrace: [<82107738>] (dump_backtrace) from [<821079ac>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:252) r7:00000080 r6:60070193 r5:00000000 r4:83966184 [<82107994>] (show_stack) from [<82110980>] (__dump_stack lib/dump_stack.c:79 [inline]) [<82107994>] (show_stack) from [<82110980>] (dump_stack+0xb8/0xe8 lib/dump_stack.c:120) [<821108c8>] (dump_stack) from [<802096bc>] (show_regs+0x14/0x18 arch/arm/kernel/process.c:191) r7:8440cd80 r6:00000000 r5:86fb5bf0 r4:00000000 [<802096a8>] (show_regs) from [<8091cd08>] (nmi_cpu_backtrace+0xe4/0x160 lib/nmi_backtrace.c:103) [<8091cc24>] (nmi_cpu_backtrace) from [<80210e34>] (do_handle_IPI+0x4c/0x440 arch/arm/kernel/smp.c:672) r5:00000017 r4:00000007 [<80210de8>] (do_handle_IPI) from [<80211248>] (ipi_handler+0x20/0x28 arch/arm/kernel/smp.c:700) r9:86fb5bf0 r8:86fb5b58 r7:8440cd80 r6:8382343c r5:00000017 r4:844a4600 [<80211228>] (ipi_handler) from [<802dfc04>] (handle_percpu_devid_irq+0xa4/0x19c kernel/irq/chip.c:930) [<802dfb60>] (handle_percpu_devid_irq) from [<802d8a30>] (generic_handle_irq_desc include/linux/irqdesc.h:158 [inline]) [<802dfb60>] (handle_percpu_devid_irq) from [<802d8a30>] (generic_handle_irq kernel/irq/irqdesc.c:652 [inline]) [<802dfb60>] (handle_percpu_devid_irq) from [<802d8a30>] (__handle_domain_irq+0xb0/0x120 kernel/irq/irqdesc.c:689) r10:86fb5b88 r9:86fb5bf0 r8:00000001 r7:00000000 r6:836c6498 r5:00000000 r4:836c6498 r3:00010000 [<802d8980>] (__handle_domain_irq) from [<80931750>] (handle_domain_irq include/linux/irqdesc.h:176 [inline]) [<802d8980>] (__handle_domain_irq) from [<80931750>] (gic_handle_irq+0x84/0xac drivers/irqchip/irq-gic.c:370) r10:858b1040 r9:40070193 r8:e000200c r7:836c64bc r6:e0002000 r5:86fb5bf0 r4:8382343c [<809316cc>] (gic_handle_irq) from [<80200abc>] (__irq_svc+0x5c/0x94 arch/arm/kernel/entry-armv.S:205) Exception stack(0x86fb5bf0 to 0x86fb5c38) 5be0: 00000000 5a905000 836bb680 60070093 5c00: 858b16c8 00000001 8390e91c 836bb680 00000001 60070013 858b1040 86fb5c6c 5c20: 86fb5c30 86fb5c40 82133164 82132068 20070013 ffffffff r9:86fb4000 r8:00000001 r7:86fb5c24 r6:ffffffff r5:20070013 r4:82132068 [<82131f18>] (lock_is_held_type) from [<802e805c>] (lock_is_held include/linux/lockdep.h:278 [inline]) [<82131f18>] (lock_is_held_type) from [<802e805c>] (rcu_read_lock_held kernel/rcu/update.c:311 [inline]) [<82131f18>] (lock_is_held_type) from [<802e805c>] (rcu_read_lock_held+0x44/0x54 kernel/rcu/update.c:305) r10:86fb5e34 r9:83823180 r8:00000000 r7:00000180 r6:839123c8 r5:83ac77e2 r4:858b1040 r3:00000000 [<802e8018>] (rcu_read_lock_held) from [<804bd2c4>] (task_css include/linux/cgroup.h:494 [inline]) [<802e8018>] (rcu_read_lock_held) from [<804bd2c4>] (mem_cgroup_from_task+0x78/0xb4 mm/memcontrol.c:1011) [<804bd24c>] (mem_cgroup_from_task) from [<804c6874>] (get_obj_cgroup_from_current+0x160/0x468 mm/memcontrol.c:3003) r7:00000180 r6:86fb4000 r5:00000000 r4:00000000 [<804c6714>] (get_obj_cgroup_from_current) from [<804b4140>] (memcg_slab_pre_alloc_hook mm/slab.h:273 [inline]) [<804c6714>] (get_obj_cgroup_from_current) from [<804b4140>] (slab_pre_alloc_hook mm/slab.h:502 [inline]) [<804c6714>] (get_obj_cgroup_from_current) from [<804b4140>] (slab_alloc_node mm/slub.c:2826 [inline]) [<804c6714>] (get_obj_cgroup_from_current) from [<804b4140>] (slab_alloc mm/slub.c:2915 [inline]) [<804c6714>] (get_obj_cgroup_from_current) from [<804b4140>] (__kmalloc_track_caller+0x9c/0x35c mm/slub.c:4561) r10:86fb5e34 r9:83823180 r8:00000000 r7:00000180 r6:00482cc0 r5:00482cc0 r4:84401480 [<804b40a4>] (__kmalloc_track_caller) from [<818753e0>] (kmalloc_reserve net/core/skbuff.c:353 [inline]) [<804b40a4>] (__kmalloc_track_caller) from [<818753e0>] (__alloc_skb+0x7c/0x17c net/core/skbuff.c:424) r10:86fb5e34 r9:84593240 r8:00000000 r7:8187c338 r6:00400cc0 r5:00000180 r4:888cc540 [<81875364>] (__alloc_skb) from [<8187c338>] (alloc_skb include/linux/skbuff.h:1102 [inline]) [<81875364>] (__alloc_skb) from [<8187c338>] (alloc_skb_with_frags+0x44/0x1a0 net/core/skbuff.c:5948) r10:86fb5e34 r9:86f0873c r8:00000000 r7:00000000 r6:00000003 r5:00000000 r4:00000fff [<8187c2f4>] (alloc_skb_with_frags) from [<8186d948>] (sock_alloc_send_pskb+0x230/0x254 net/core/sock.c:2362) r10:86fb5e34 r9:86f0873c r8:00000000 r7:802a6b40 r6:86fb4000 r5:7fffffff r4:86f084c0 [<8186d718>] (sock_alloc_send_pskb) from [<81bdf210>] (unix_dgram_sendmsg+0x14c/0x89c net/unix/af_unix.c:1671) r10:86f088b4 r9:00000000 r8:86f084c0 r7:86f08000 r6:00000000 r5:848930c0 r4:86fb5eb8 [<81bdf0c4>] (unix_dgram_sendmsg) from [<81867400>] (sock_sendmsg_nosec net/socket.c:654 [inline]) [<81bdf0c4>] (unix_dgram_sendmsg) from [<81867400>] (sock_sendmsg+0x3c/0x4c net/socket.c:674) r10:00000121 r9:86fb4000 r8:80200224 r7:00004000 r6:00000000 r5:848930c0 r4:86fb5eb8 [<818673c4>] (sock_sendmsg) from [<81869cb4>] (__sys_sendto+0xcc/0x118 net/socket.c:1977) r5:848930c0 r4:00000000 [<81869be8>] (__sys_sendto) from [<81869d44>] (__do_sys_send net/socket.c:1999 [inline]) [<81869be8>] (__sys_sendto) from [<81869d44>] (sys_send+0x20/0x28 net/socket.c:1996) r7:00000121 r6:00000001 r5:76faa080 r4:01a478b0 [<81869d24>] (sys_send) from [<80200060>] (ret_fast_syscall+0x0/0x2c arch/arm/mm/proc-v7.S:64) Exception stack(0x86fb5fa8 to 0x86fb5ff0) 5fa0: 01a478b0 76faa080 00000003 01a48678 00000080 00004000 5fc0: 01a478b0 76faa080 00000001 00000121 7ebe0c90 00000000 76faa080 00000000 5fe0: 00000000 7ebe0bc8 76edbb88 76ee0e78