INFO: task syz-executor.5:11080 blocked for more than 143 seconds. Not tainted 5.12.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.5 state:D stack:28256 pid:11080 ppid: 8408 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4324 [inline] __schedule+0x999/0xe70 kernel/sched/core.c:5075 schedule+0x14b/0x200 kernel/sched/core.c:5154 schedule_timeout+0x43/0x250 kernel/time/timer.c:1868 do_wait_for_common+0x266/0x3a0 kernel/sched/completion.c:85 __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion+0x48/0x60 kernel/sched/completion.c:138 io_sq_thread_park fs/io_uring.c:7115 [inline] io_uring_cancel_task_requests+0x229/0x1a90 fs/io_uring.c:8745 __io_uring_files_cancel+0x102/0x320 fs/io_uring.c:8840 io_uring_files_cancel include/linux/io_uring.h:47 [inline] do_exit+0x258/0x2340 kernel/exit.c:780 do_group_exit+0x168/0x2d0 kernel/exit.c:922 get_signal+0x1734/0x1ef0 kernel/signal.c:2773 arch_do_signal_or_restart+0x3c/0x610 arch/x86/kernel/signal.c:811 handle_signal_work kernel/entry/common.c:147 [inline] exit_to_user_mode_loop kernel/entry/common.c:171 [inline] exit_to_user_mode_prepare+0xac/0x1e0 kernel/entry/common.c:208 __syscall_exit_to_user_mode_work kernel/entry/common.c:290 [inline] syscall_exit_to_user_mode+0x48/0x180 kernel/entry/common.c:301 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x465ef9 RSP: 002b:00007f5fd3250218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 000000000056bf68 RCX: 0000000000465ef9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000056bf68 RBP: 000000000056bf60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf6c R13: 00007ffeaa7804bf R14: 00007f5fd3250300 R15: 0000000000022000 INFO: task iou-sqp-11080:11082 blocked for more than 143 seconds. Not tainted 5.12.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:iou-sqp-11080 state:D stack:30160 pid:11082 ppid: 8408 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4324 [inline] __schedule+0x999/0xe70 kernel/sched/core.c:5075 schedule+0x14b/0x200 kernel/sched/core.c:5154 schedule_timeout+0x43/0x250 kernel/time/timer.c:1868 do_wait_for_common+0x266/0x3a0 kernel/sched/completion.c:85 __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion+0x48/0x60 kernel/sched/completion.c:138 io_sq_thread+0x25c/0x1460 fs/io_uring.c:6717 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 INFO: task iou-sqp-11080:11086 blocked for more than 143 seconds. Not tainted 5.12.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:iou-sqp-11080 state:D stack:30160 pid:11086 ppid: 8408 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4324 [inline] __schedule+0x999/0xe70 kernel/sched/core.c:5075 schedule+0x14b/0x200 kernel/sched/core.c:5154 schedule_timeout+0x43/0x250 kernel/time/timer.c:1868 do_wait_for_common+0x266/0x3a0 kernel/sched/completion.c:85 __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion+0x48/0x60 kernel/sched/completion.c:138 io_sq_thread+0x25c/0x1460 fs/io_uring.c:6717 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 Showing all locks held in the system: 1 lock held by khungtaskd/1645: #0: ffffffff8c70fcc0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 arch/x86/pci/mmconfig_64.c:151 4 locks held by kworker/1:3/3171: #0: ffff8880b9d34c58 (&rq->lock){-.-.}-{2:2}, at: newidle_balance+0x82e/0xb00 kernel/sched/fair.c:10633 #1: ffffffff8c70fcc0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 arch/x86/pci/mmconfig_64.c:151 #2: ffff8880b9d23e38 (krc.lock){..-.}-{2:2}, at: kfree_rcu_work+0x341/0x620 kernel/rcu/tree.c:3315 #3: ffffffff902cd438 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_check_no_obj_freed lib/debugobjects.c:975 [inline] #3: ffffffff902cd438 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0xa9/0x650 lib/debugobjects.c:1018 3 locks held by in:imklog/8088: #0: ffff88801c0fcd70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x2f0 fs/file.c:961 #1: ffff8880b9c34c58 (&rq->lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1321 [inline] #1: ffff8880b9c34c58 (&rq->lock){-.-.}-{2:2}, at: __schedule+0xd8/0xe70 kernel/sched/core.c:4992 #2: ffffffff8c7d9f00 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: rcu_lock_acquire+0x0/0x30 arch/x86/pci/mmconfig_64.c:151 1 lock held by syz-executor.5/11080: #0: ffff88801da5a070 (&sqd->lock){+.+.}-{3:3}, at: io_sq_thread_park fs/io_uring.c:7108 [inline] #0: ffff88801da5a070 (&sqd->lock){+.+.}-{3:3}, at: io_uring_cancel_task_requests+0x1b4/0x1a90 fs/io_uring.c:8745 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 1645 Comm: khungtaskd Not tainted 5.12.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:79 [inline] dump_stack+0x125/0x19e lib/dump_stack.c:120 nmi_cpu_backtrace+0x16c/0x190 lib/nmi_backtrace.c:105 nmi_trigger_cpumask_backtrace+0x191/0x2f0 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:209 [inline] watchdog+0xce9/0xd30 kernel/hung_task.c:294 kthread+0x39a/0x3c0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 8396 Comm: syz-fuzzer Not tainted 5.12.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0033:0x432356 Code: 89 c3 8b 05 28 41 73 00 89 04 24 48 8d 44 24 48 48 89 44 24 08 c7 44 24 10 80 00 00 00 89 5c 24 14 e8 0e c0 03 00 8b 44 24 18 <89> 44 24 24 85 c0 7d 2f 66 90 83 f8 fc 0f 85 42 02 00 00 8b 44 24 RSP: 002b:000000c00036d7f8 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 0000000000000006 RCX: 000000000046e380 RDX: 0000000000000080 RSI: 000000c00036d840 RDI: 0000000000000003 RBP: 000000c00036de40 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000003 R13: 000000c000083080 R14: 000080c020800000 R15: 000000000000e59e FS: 000000c004601490 GS: 0000000000000000