INFO: task syz-executor.0:8664 blocked for more than 143 seconds. Not tainted 6.8.0-rc1-next-20240129-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:27984 pid:8664 tgid:8662 ppid:5098 flags:0x00000006 Call Trace: context_switch kernel/sched/core.c:5400 [inline] __schedule+0xf15/0x5ce0 kernel/sched/core.c:6727 __schedule_loop kernel/sched/core.c:6804 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6819 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6876 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752 blk_trace_ioctl+0xc9/0x290 kernel/trace/blktrace.c:736 blkdev_ioctl+0x111/0x770 block/ioctl.c:623 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:871 [inline] __se_sys_ioctl fs/ioctl.c:857 [inline] __x64_sys_ioctl+0x193/0x220 fs/ioctl.c:857 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xd2/0x260 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x6d/0x75 RIP: 0033:0x7fd8ef67dda9 RSP: 002b:00007fd8f03db0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fd8ef7abf80 RCX: 00007fd8ef67dda9 RDX: 0000000020000d00 RSI: 00000000c0481273 RDI: 0000000000000003 RBP: 00007fd8ef6ca47a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007fd8ef7abf80 R15: 00007ffda84ff938 INFO: task syz-executor.2:8665 blocked for more than 143 seconds. Not tainted 6.8.0-rc1-next-20240129-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:27360 pid:8665 tgid:8663 ppid:5104 flags:0x00000006 Call Trace: context_switch kernel/sched/core.c:5400 [inline] __schedule+0xf15/0x5ce0 kernel/sched/core.c:6727 __schedule_loop kernel/sched/core.c:6804 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6819 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6876 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752 blk_trace_ioctl+0xc9/0x290 kernel/trace/blktrace.c:736 blkdev_ioctl+0x111/0x770 block/ioctl.c:623 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:871 [inline] __se_sys_ioctl fs/ioctl.c:857 [inline] __x64_sys_ioctl+0x193/0x220 fs/ioctl.c:857 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xd2/0x260 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x6d/0x75 RIP: 0033:0x7f329d87dda9 RSP: 002b:00007f329e5960c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f329d9abf80 RCX: 00007f329d87dda9 RDX: 0000000020000d00 RSI: 00000000c0481273 RDI: 0000000000000007 RBP: 00007f329d8ca47a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f329d9abf80 R15: 00007fff3f064d48 INFO: task syz-executor.4:8667 blocked for more than 144 seconds. Not tainted 6.8.0-rc1-next-20240129-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:28448 pid:8667 tgid:8666 ppid:5105 flags:0x00000006 Call Trace: context_switch kernel/sched/core.c:5400 [inline] __schedule+0xf15/0x5ce0 kernel/sched/core.c:6727 __schedule_loop kernel/sched/core.c:6804 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6819 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6876 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752 blk_trace_ioctl+0xc9/0x290 kernel/trace/blktrace.c:736 blkdev_ioctl+0x111/0x770 block/ioctl.c:623 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:871 [inline] __se_sys_ioctl fs/ioctl.c:857 [inline] __x64_sys_ioctl+0x193/0x220 fs/ioctl.c:857 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xd2/0x260 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x6d/0x75 RIP: 0033:0x7ff47f67dda9 RSP: 002b:00007ff48045d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007ff47f7abf80 RCX: 00007ff47f67dda9 RDX: 0000000020000d00 RSI: 00000000c0481273 RDI: 0000000000000003 RBP: 00007ff47f6ca47a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007ff47f7abf80 R15: 00007ffffb968678 INFO: task syz-executor.3:8669 blocked for more than 144 seconds. Not tainted 6.8.0-rc1-next-20240129-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.3 state:D stack:28448 pid:8669 tgid:8668 ppid:5099 flags:0x00000006 Call Trace: context_switch kernel/sched/core.c:5400 [inline] __schedule+0xf15/0x5ce0 kernel/sched/core.c:6727 __schedule_loop kernel/sched/core.c:6804 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6819 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6876 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752 blk_trace_ioctl+0xc9/0x290 kernel/trace/blktrace.c:736 blkdev_common_ioctl+0x15ae/0x1ce0 block/ioctl.c:563 blkdev_ioctl+0x247/0x770 block/ioctl.c:628 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:871 [inline] __se_sys_ioctl fs/ioctl.c:857 [inline] __x64_sys_ioctl+0x193/0x220 fs/ioctl.c:857 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xd2/0x260 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x6d/0x75 RIP: 0033:0x7f0122c7dda9 RSP: 002b:00007f0123a750c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f0122dabf80 RCX: 00007f0122c7dda9 RDX: 0000000066000000 RSI: 0000000000001276 RDI: 0000000000000005 RBP: 00007f0122cca47a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f0122dabf80 R15: 00007ffda7bb4ae8 Showing all locks held in the system: 3 locks held by kworker/u4:1/11: 1 lock held by khungtaskd/29: #0: ffffffff8d7b0920 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:298 [inline] #0: ffffffff8d7b0920 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:750 [inline] #0: ffffffff8d7b0920 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 kernel/locking/lockdep.c:6614 2 locks held by getty/4817: #0: ffff88802ae670a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 drivers/tty/n_tty.c:2201 3 locks held by syz-executor.1/8661: 1 lock held by syz-executor.0/8664: #0: ffff88801ffb9900 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xc9/0x290 kernel/trace/blktrace.c:736 1 lock held by syz-executor.2/8665: #0: ffff88801ffb9900 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xc9/0x290 kernel/trace/blktrace.c:736 1 lock held by syz-executor.4/8667: #0: ffff88801ffb9900 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xc9/0x290 kernel/trace/blktrace.c:736 1 lock held by syz-executor.3/8669: #0: ffff88801ffb9900 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xc9/0x290 kernel/trace/blktrace.c:736 1 lock held by syz-executor.4/8749: #0: ffff88801ffb9900 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xc9/0x290 kernel/trace/blktrace.c:736 1 lock held by syz-executor.3/8757: #0: ffff88801ffb9900 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xc9/0x290 kernel/trace/blktrace.c:736 1 lock held by syz-executor.0/8759: #0: ffff88801ffb9900 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xc9/0x290 kernel/trace/blktrace.c:736 1 lock held by syz-executor.1/8761: #0: ffff88801ffb9900 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xc9/0x290 kernel/trace/blktrace.c:736 1 lock held by syz-executor.2/8775: #0: ffff88801ffb9900 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xc9/0x290 kernel/trace/blktrace.c:736 1 lock held by syz-executor.4/8845: #0: ffff88801ffb9900 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xc9/0x290 kernel/trace/blktrace.c:736 1 lock held by syz-executor.3/8853: #0: ffff88801ffb9900 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xc9/0x290 kernel/trace/blktrace.c:736 1 lock held by syz-executor.0/8858: #0: ffff88801ffb9900 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xc9/0x290 kernel/trace/blktrace.c:736 1 lock held by syz-executor.1/8861: #0: ffff88801ffb9900 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xc9/0x290 kernel/trace/blktrace.c:736 1 lock held by syz-executor.2/8863: #0: ffff88801ffb9900 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xc9/0x290 kernel/trace/blktrace.c:736 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc1-next-20240129-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd9/0x1b0 lib/dump_stack.c:106 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline] watchdog+0xf86/0x1210 kernel/hung_task.c:379 kthread+0x2c1/0x3a0 kernel/kthread.c:388 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:242 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted 6.8.0-rc1-next-20240129-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 Workqueue: bat_events batadv_nc_worker RIP: 0010:lock_acquire+0xef/0x540 kernel/locking/lockdep.c:5727 Code: ad 03 00 00 48 c7 c0 b8 b8 9a 8f 48 ba 00 00 00 00 00 fc ff df 48 89 c1 83 e0 07 48 c1 e9 03 83 c0 03 0f b6 14 11 38 d0 7c 08 <84> d2 0f 85 d1 03 00 00 8b 0d fb 15 2f 0e 85 c9 0f 84 e3 00 00 00 RSP: 0018:ffffc90000107a30 EFLAGS: 00000206 RAX: 0000000000000003 RBX: 1ffff92000020f48 RCX: 1ffffffff1f35717 RDX: 0000000000000000 RSI: ffffffff8b6edc40 RDI: ffffffff8d1efa60 RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff1f350a2 R10: ffffffff8f9a8517 R11: 0000000000000002 R12: 0000000000000001 R13: 0000000000000000 R14: ffff888080ea8898 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c00e782418 CR3: 000000002b856000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __raw_spin_lock_bh include/linux/spinlock_api_smp.h:126 [inline] _raw_spin_lock_bh+0x33/0x40 kernel/locking/spinlock.c:178 spin_lock_bh include/linux/spinlock.h:356 [inline] batadv_nc_purge_paths+0xd3/0x3c0 net/batman-adv/network-coding.c:442 batadv_nc_worker+0x9b1/0x10f0 net/batman-adv/network-coding.c:722 process_one_work+0x8d5/0x16e0 kernel/workqueue.c:2636 process_scheduled_works kernel/workqueue.c:2710 [inline] worker_thread+0x8b6/0x1290 kernel/workqueue.c:2791 kthread+0x2c1/0x3a0 kernel/kthread.c:388 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:242