INFO: task syz-executor.0:15095 blocked for more than 430 seconds. Not tainted 5.12.0-rc2-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack: 0 pid:15095 ppid: 4381 flags:0x00000001 Backtrace: [<821370d0>] (__schedule) from [<82137df4>] (schedule+0x5c/0x108 kernel/sched/core.c:5154) r10:88efc058 r9:88efc000 r8:82138c38 r7:887f7b14 r6:887f7b10 r5:88fae000 r4:86d54100 [<82137d98>] (schedule) from [<8213d9c4>] (schedule_timeout+0xe0/0x12c kernel/time/timer.c:1868) r5:88fae000 r4:7fffffff [<8213d8e4>] (schedule_timeout) from [<82138c68>] (do_wait_for_common kernel/sched/completion.c:85 [inline]) [<8213d8e4>] (schedule_timeout) from [<82138c68>] (__wait_for_common kernel/sched/completion.c:106 [inline]) [<8213d8e4>] (schedule_timeout) from [<82138c68>] (wait_for_common kernel/sched/completion.c:117 [inline]) [<8213d8e4>] (schedule_timeout) from [<82138c68>] (wait_for_completion+0xb4/0x124 kernel/sched/completion.c:138) r6:887f7b10 r5:88fae000 r4:7fffffff [<82138bb4>] (wait_for_completion) from [<80559e1c>] (io_sq_thread_finish+0x38/0x234 fs/io_uring.c:7127) r8:887f7ac4 r7:86d99040 r6:20000000 r5:887f7800 r4:88efc000 [<80559de4>] (io_sq_thread_finish) from [<805613c4>] (io_sq_offload_create fs/io_uring.c:7928 [inline]) [<80559de4>] (io_sq_thread_finish) from [<805613c4>] (io_uring_create fs/io_uring.c:9401 [inline]) [<80559de4>] (io_sq_thread_finish) from [<805613c4>] (io_uring_setup+0xba4/0xf4c fs/io_uring.c:9484) r9:88efc000 r8:887f7ac4 r7:86d99040 r6:20000000 r5:fffffdff r4:887f7800 [<80560820>] (io_uring_setup) from [<80568448>] (__do_sys_io_uring_setup fs/io_uring.c:9490 [inline]) [<80560820>] (io_uring_setup) from [<80568448>] (sys_io_uring_setup+0x10/0x14 fs/io_uring.c:9487) r10:000001a9 r9:88fae000 r8:80200224 r7:000001a9 r6:ffffffff r5:00000000 r4:00000000 [<80568438>] (sys_io_uring_setup) from [<80200060>] (ret_fast_syscall+0x0/0x2c arch/arm/mm/proc-v7.S:64) Exception stack(0x88faffa8 to 0x88fafff0) ffa0: 00000000 00000000 00006ce2 20000000 00000000 00000000 ffc0: 00000000 00000000 ffffffff 000001a9 7efd279a 76fa36d0 7efd2914 76fa320c ffe0: 76fa3048 76fa3038 00018c00 0004b440 Showing all locks held in the system: 1 lock held by khungtaskd/1525: #0: 8390e91c (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x34/0x1dc kernel/locking/lockdep.c:6329 1 lock held by syslogd/4139: #0: ddfe31d0 (&rq->lock){-.-.}-{2:2}, at: srcu_init_notifier_head kernel/notifier.c:526 [inline] #0: ddfe31d0 (&rq->lock){-.-.}-{2:2}, at: atomic_notifier_call_chain+0x0/0x130 kernel/notifier.c:522 2 locks held by getty/4311: #0: 86efd854 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x38/0x3c drivers/tty/tty_ldsem.c:340 #1: e85fa290 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x4a4/0x56c drivers/tty/n_tty.c:2178 2 locks held by kworker/u4:0/11979: ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 1525 Comm: khungtaskd Not tainted 5.12.0-rc2-syzkaller #0 Hardware name: ARM-Versatile Express Backtrace: [<82109d68>] (dump_backtrace) from [<82109fdc>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:252) r7:00000000 r6:60000113 r5:00000000 r4:83966184 [<82109fc4>] (show_stack) from [<82112fb0>] (__dump_stack lib/dump_stack.c:79 [inline]) [<82109fc4>] (show_stack) from [<82112fb0>] (dump_stack+0xb8/0xe8 lib/dump_stack.c:120) [<82112ef8>] (dump_stack) from [<8091d5c0>] (nmi_cpu_backtrace+0xfc/0x160 lib/nmi_backtrace.c:105) r7:00000000 r6:80210934 r5:00000000 r4:00000000 [<8091d4c4>] (nmi_cpu_backtrace) from [<8091d760>] (nmi_trigger_cpumask_backtrace+0x13c/0x224 lib/nmi_backtrace.c:62) r5:83823424 r4:00000000 [<8091d624>] (nmi_trigger_cpumask_backtrace) from [<80211dec>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:857) r9:83822dd8 r8:83806d00 r7:00007f6e r6:83835150 r5:000596c0 r4:83ac77d9 [<80211dd4>] (arch_trigger_cpumask_backtrace) from [<803665bc>] (trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]) [<80211dd4>] (arch_trigger_cpumask_backtrace) from [<803665bc>] (check_hung_uninterruptible_tasks kernel/hung_task.c:209 [inline]) [<80211dd4>] (arch_trigger_cpumask_backtrace) from [<803665bc>] (watchdog+0x6d0/0x88c kernel/hung_task.c:294) [<80365eec>] (watchdog) from [<80271f40>] (kthread+0x184/0x1a4 kernel/kthread.c:292) r10:84505e2c r9:00000000 r8:80365eec r7:00000000 r6:846f2000 r5:84779c00 r4:84742b80 [<80271dbc>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:158) Exception stack(0x846f3fb0 to 0x846f3ff8) 3fa0: 00000000 00000000 00000000 00000000 3fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 3fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80271dbc r4:84779c00 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 4139 Comm: syslogd Not tainted 5.12.0-rc2-syzkaller #0 Hardware name: ARM-Versatile Express PC is at __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:161 [inline] PC is at _raw_spin_unlock_irqrestore+0x40/0x8c kernel/locking/spinlock.c:191 LR is at __this_cpu_preempt_check+0x1c/0x20 lib/smp_processor_id.c:70 pc : [<8213e818>] lr : [<82135794>] psr: 200d0013 sp : 86f89d78 ip : 86f89d20 fp : 86f89d8c r10: 00000304 r9 : 86f89d98 r8 : 00000001 r7 : 00000010 r6 : 86f70440 r5 : 86f70440 r4 : a00d0013 r3 : 200d0093 r2 : 00000001 r1 : 82aee0b8 r0 : 00000001 Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 86f4eac0 DAC: 00000000 CPU: 1 PID: 4139 Comm: syslogd Not tainted 5.12.0-rc2-syzkaller #0 Hardware name: ARM-Versatile Express Backtrace: [<82109d68>] (dump_backtrace) from [<82109fdc>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:252) r7:00000080 r6:600d0193 r5:00000000 r4:83966184 [<82109fc4>] (show_stack) from [<82112fb0>] (__dump_stack lib/dump_stack.c:79 [inline]) [<82109fc4>] (show_stack) from [<82112fb0>] (dump_stack+0xb8/0xe8 lib/dump_stack.c:120) [<82112ef8>] (dump_stack) from [<802096bc>] (show_regs+0x14/0x18 arch/arm/kernel/process.c:191) r7:8440cd80 r6:00000001 r5:86f89d28 r4:00000001 [<802096a8>] (show_regs) from [<8091d5a8>] (nmi_cpu_backtrace+0xe4/0x160 lib/nmi_backtrace.c:103) [<8091d4c4>] (nmi_cpu_backtrace) from [<80210e34>] (do_handle_IPI+0x4c/0x440 arch/arm/kernel/smp.c:672) r5:00000017 r4:00000007 [<80210de8>] (do_handle_IPI) from [<80211248>] (ipi_handler+0x20/0x28 arch/arm/kernel/smp.c:700) r9:86f89d28 r8:86f89c90 r7:8440cd80 r6:8382343c r5:00000017 r4:844a4600 [<80211228>] (ipi_handler) from [<802dfc04>] (handle_percpu_devid_irq+0xa4/0x19c kernel/irq/chip.c:930) [<802dfb60>] (handle_percpu_devid_irq) from [<802d8a30>] (generic_handle_irq_desc include/linux/irqdesc.h:158 [inline]) [<802dfb60>] (handle_percpu_devid_irq) from [<802d8a30>] (generic_handle_irq kernel/irq/irqdesc.c:652 [inline]) [<802dfb60>] (handle_percpu_devid_irq) from [<802d8a30>] (__handle_domain_irq+0xb0/0x120 kernel/irq/irqdesc.c:689) r10:86f89cc0 r9:86f89d28 r8:00000001 r7:00000000 r6:836c6498 r5:00000000 r4:836c6498 r3:00010001 [<802d8980>] (__handle_domain_irq) from [<80931ff0>] (handle_domain_irq include/linux/irqdesc.h:176 [inline]) [<802d8980>] (__handle_domain_irq) from [<80931ff0>] (gic_handle_irq+0x84/0xac drivers/irqchip/irq-gic.c:370) r10:00000304 r9:400d0193 r8:e000200c r7:836c64bc r6:e0002000 r5:86f89d28 r4:8382343c [<80931f6c>] (gic_handle_irq) from [<80200abc>] (__irq_svc+0x5c/0x94 arch/arm/kernel/entry-armv.S:205) Exception stack(0x86f89d28 to 0x86f89d70) 9d20: 00000001 82aee0b8 00000001 200d0093 a00d0013 86f70440 9d40: 86f70440 00000010 00000001 86f89d98 00000304 86f89d8c 86f89d20 86f89d78 9d60: 82135794 8213e818 200d0013 ffffffff r9:86f88000 r8:00000001 r7:86f89d5c r6:ffffffff r5:200d0013 r4:8213e818 [<8213e7d8>] (_raw_spin_unlock_irqrestore) from [<802a7014>] (spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]) [<8213e7d8>] (_raw_spin_unlock_irqrestore) from [<802a7014>] (__wake_up_common_lock+0x8c/0xc0 kernel/sched/wait.c:140) r5:a00d0013 r4:00000000 [<802a6f88>] (__wake_up_common_lock) from [<802a7098>] (__wake_up_sync_key+0x28/0x30 kernel/sched/wait.c:205) r10:00000000 r9:86f70114 r8:86f89e28 r7:00000000 r6:86f7034c r5:86f70000 r4:885fbcc0 [<802a7070>] (__wake_up_sync_key) from [<81bdf708>] (unix_dgram_recvmsg+0x120/0x3a0 net/unix/af_unix.c:2127) [<81bdf5e8>] (unix_dgram_recvmsg) from [<8186a714>] (sock_recvmsg_nosec net/socket.c:888 [inline]) [<81bdf5e8>] (unix_dgram_recvmsg) from [<8186a714>] (sock_recvmsg net/socket.c:906 [inline]) [<81bdf5e8>] (unix_dgram_recvmsg) from [<8186a714>] (sock_recvmsg net/socket.c:902 [inline]) [<81bdf5e8>] (unix_dgram_recvmsg) from [<8186a714>] (sock_read_iter+0xfc/0x12c net/socket.c:979) r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:8561da00 r5:81bdf5e8 r4:86f89ef0 [<8186a618>] (sock_read_iter) from [<804dab7c>] (call_read_iter include/linux/fs.h:1971 [inline]) [<8186a618>] (sock_read_iter) from [<804dab7c>] (new_sync_read fs/read_write.c:415 [inline]) [<8186a618>] (sock_read_iter) from [<804dab7c>] (vfs_read+0x310/0x33c fs/read_write.c:496) r7:00000000 r6:86cf9140 r5:00000000 r4:000000ff [<804da86c>] (vfs_read) from [<804dafac>] (ksys_read+0xb4/0xec fs/read_write.c:634) r10:00000003 r9:86f88000 r8:80200224 r7:000000ff r6:001621b8 r5:86cf9140 r4:86cf9140 [<804daef8>] (ksys_read) from [<804daff4>] (__do_sys_read fs/read_write.c:644 [inline]) [<804daef8>] (ksys_read) from [<804daff4>] (sys_read+0x10/0x14 fs/read_write.c:642) r7:00000003 r6:76ff0080 r5:00162190 r4:fffffc00 [<804dafe4>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x2c arch/arm/mm/proc-v7.S:64) Exception stack(0x86f89fa8 to 0x86f89ff0) 9fa0: fffffc00 00162190 00000000 001621b8 000000ff 00000000 9fc0: fffffc00 00162190 76ff0080 00000003 00000000 000d6c90 000d6c90 00000000 9fe0: 000d609c 7e943c58 000579b8 76f146f8