INFO: task syz-executor.3:7694 blocked for more than 143 seconds. Tainted: G W 5.17.0-syzkaller-01442-gb47d5a4f6b8d #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.3 state:D stack:26952 pid: 7694 ppid: 3637 flags:0x20004004 Call Trace: context_switch kernel/sched/core.c:4995 [inline] __schedule+0xa94/0x4910 kernel/sched/core.c:6304 schedule+0xd2/0x1f0 kernel/sched/core.c:6376 schedule_timeout+0x1db/0x2a0 kernel/time/timer.c:1857 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x2af/0x360 kernel/sched/completion.c:106 io_wq_exit_workers fs/io-wq.c:1264 [inline] io_wq_put_and_exit+0x4d6/0xe40 fs/io-wq.c:1299 io_uring_clean_tctx fs/io_uring.c:10512 [inline] io_uring_cancel_generic+0x60b/0x695 fs/io_uring.c:10582 io_uring_files_cancel include/linux/io_uring.h:18 [inline] do_exit+0x4f9/0x29d0 kernel/exit.c:761 do_group_exit+0xd2/0x2f0 kernel/exit.c:936 get_signal+0x45a/0x2490 kernel/signal.c:2903 arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:868 handle_signal_work kernel/entry/common.c:148 [inline] exit_to_user_mode_loop kernel/entry/common.c:186 [inline] exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:221 __syscall_exit_to_user_mode_work kernel/entry/common.c:303 [inline] syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:314 __do_fast_syscall_32+0x72/0xf0 arch/x86/entry/common.c:181 do_fast_syscall_32+0x2f/0x70 arch/x86/entry/common.c:203 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c RIP: 0023:0xf6ec7549 RSP: 002b:00000000f58c167c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 RAX: fffffffffffffe00 RBX: 00000000f7023fa8 RCX: 0000000000000080 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7023fac RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 INFO: lockdep is turned off. NMI backtrace for cpu 0 CPU: 0 PID: 27 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-01442-gb47d5a4f6b8d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x1e6/0x230 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:212 [inline] watchdog+0xc1d/0xf50 kernel/hung_task.c:369 kthread+0x2e9/0x3a0 kernel/kthread.c:377 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 7698 Comm: iou-wrk-7694 Tainted: G W 5.17.0-syzkaller-01442-gb47d5a4f6b8d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:trace_lock_release include/trace/events/lock.h:58 [inline] RIP: 0010:lock_release+0xa9/0x720 kernel/locking/lockdep.c:5650 Code: 07 0f 87 f6 04 00 00 89 db be 08 00 00 00 48 89 d8 48 c1 f8 06 48 8d 3c c5 10 1b 94 8d e8 8f b8 62 00 48 0f a3 1d 57 66 36 0c <0f> 82 60 04 00 00 48 c7 c3 ec 4e 94 8d 48 b8 00 00 00 00 00 fc ff RSP: 0018:ffffc9000e2e7758 EFLAGS: 00000247 RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff815db4b1 RDX: fffffbfff1b28363 RSI: 0000000000000008 RDI: ffffffff8d941b10 RBP: 1ffff92001c5ceed R08: 0000000000000000 R09: ffffffff8d941b17 R10: fffffbfff1b28362 R11: 0000000000000000 R12: ffff8880733d5098 R13: fffffffffffffff5 R14: ffffc9000e2e79f8 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b9d00000(0063) knlGS:00000000f58c1b40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: 000055617194c600 CR3: 0000000048451000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ldsem_up_read+0x18/0x80 drivers/tty/tty_ldsem.c:393 tty_read+0x4d6/0x5d0 drivers/tty/tty_io.c:934 call_read_iter include/linux/fs.h:2068 [inline] io_iter_do_read fs/io_uring.c:3789 [inline] io_read+0x330/0x12a0 fs/io_uring.c:3859 io_issue_sqe+0x813/0x8390 fs/io_uring.c:7172 io_wq_submit_work+0x1ed/0x590 fs/io_uring.c:7340 io_worker_handle_work+0xad6/0x1b30 fs/io-wq.c:595 io_wqe_worker+0x606/0xd40 fs/io-wq.c:642 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: 0f 87 f6 04 00 00 ja 0x4fc 6: 89 db mov %ebx,%ebx 8: be 08 00 00 00 mov $0x8,%esi d: 48 89 d8 mov %rbx,%rax 10: 48 c1 f8 06 sar $0x6,%rax 14: 48 8d 3c c5 10 1b 94 lea -0x726be4f0(,%rax,8),%rdi 1b: 8d 1c: e8 8f b8 62 00 callq 0x62b8b0 21: 48 0f a3 1d 57 66 36 bt %rbx,0xc366657(%rip) # 0xc366680 28: 0c * 29: 0f 82 60 04 00 00 jb 0x48f <-- trapping instruction 2f: 48 c7 c3 ec 4e 94 8d mov $0xffffffff8d944eec,%rbx 36: 48 rex.W 37: b8 00 00 00 00 mov $0x0,%eax 3c: 00 fc add %bh,%ah 3e: ff .byte 0xff