INFO: task syz-executor.0:20568 blocked for more than 430 seconds. Not tainted 5.17.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack: 0 pid:20568 ppid: 2238 flags:0x00000001 Backtrace: [<816dc0c8>] (__schedule) from [<816dcb20>] (schedule+0x54/0xdc kernel/sched/core.c:6377) r10:8220c44c r9:5ac3c35a r8:84d6ddac r7:00000002 r6:822f2240 r5:822f232c r4:851b2e00 [<816dcacc>] (schedule) from [<802cca30>] (synchronize_rcu_expedited+0x208/0x350 kernel/rcu/tree_exp.h:856) r5:822f232c r4:00003a6c [<802cc828>] (synchronize_rcu_expedited) from [<802ccbdc>] (synchronize_rcu+0x64/0x90 kernel/rcu/tree.c:3785) r8:85a85b4c r7:849cf180 r6:85a85864 r5:00000000 r4:85a85800 [<802ccb78>] (synchronize_rcu) from [<812800ac>] (synchronize_net+0x24/0x28 net/core/dev.c:10322) [<81280088>] (synchronize_net) from [<815759d4>] (packet_release+0x284/0x42c net/packet/af_packet.c:3138) [<81575750>] (packet_release) from [<8125d5d4>] (__sock_release+0x48/0xc0 net/socket.c:650) r9:5ac3c35a r8:828b1790 r7:84aaf110 r6:00000000 r5:849cf288 r4:849cf180 [<8125d58c>] (__sock_release) from [<8125d664>] (sock_close+0x18/0x20 net/socket.c:1318) r7:84aaf110 r6:849cf200 r5:002e0003 r4:8886b6c0 [<8125d64c>] (sock_close) from [<8048ef54>] (__fput+0x84/0x258 fs/file_table.c:317) [<8048eed0>] (__fput) from [<8048f1a4>] (____fput+0x10/0x14 fs/file_table.c:350) r9:5ac3c35a r8:851b3654 r7:824435e4 r6:851b2e00 r5:851b3624 r4:00000000 [<8048f194>] (____fput) from [<80266bd0>] (task_work_run+0x8c/0xb8 kernel/task_work.c:164) [<80266b44>] (task_work_run) from [<8020bf24>] (tracehook_notify_resume include/linux/tracehook.h:188 [inline]) [<80266b44>] (task_work_run) from [<8020bf24>] (do_work_pending+0x438/0x53c arch/arm/kernel/signal.c:630) r9:5ac3c35a r8:80200244 r7:fffffe30 r6:80200244 r5:84d6dfb0 r4:851b2e00 [<8020baec>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x20) Exception stack(0x84d6dfb0 to 0x84d6dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 0012bfc0 00000006 7e9b9312 76ff66d0 7e9b94a4 76ff620c dfe0: 76ff6020 76ff6010 000163a0 0004bf80 60000010 00000003 r10:00000006 r9:851b2e00 r8:80200244 r7:00000006 r6:0012bfc0 r5:00000000 r4:00000000 INFO: task syz-executor.1:20621 blocked for more than 430 seconds. Not tainted 5.17.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack: 0 pid:20621 ppid: 2237 flags:0x00000001 Backtrace: [<816dc0c8>] (__schedule) from [<816dcb20>] (schedule+0x54/0xdc kernel/sched/core.c:6377) r10:822f58f4 r9:822f58f4 r8:822f58f0 r7:888c9ec4 r6:00000009 r5:00000002 r4:85983980 [<816dcacc>] (schedule) from [<802a0e44>] (percpu_rwsem_wait+0xf0/0x114 kernel/locking/percpu-rwsem.c:160) r5:00000002 r4:85983980 [<802a0d54>] (percpu_rwsem_wait) from [<802a0eb4>] (__percpu_down_read kernel/locking/percpu-rwsem.c:174 [inline]) [<802a0d54>] (percpu_rwsem_wait) from [<802a0eb4>] (__percpu_down_read+0x4c/0x70 kernel/locking/percpu-rwsem.c:165) r10:000000f8 r9:85983980 r8:80200244 r7:85799500 r6:00000000 r5:822f58cc r4:00000000 [<802a0e68>] (__percpu_down_read) from [<802560b4>] (percpu_down_read include/linux/percpu-rwsem.h:65 [inline]) [<802a0e68>] (__percpu_down_read) from [<802560b4>] (cgroup_threadgroup_change_begin include/linux/cgroup-defs.h:722 [inline]) [<802a0e68>] (__percpu_down_read) from [<802560b4>] (exit_signals+0x1a4/0x2c0 kernel/signal.c:2954) r5:822f58cc r4:85983980 [<80255f10>] (exit_signals) from [<80248a50>] (do_exit+0x134/0xa6c kernel/exit.c:762) r6:00000000 r5:00000000 r4:85983980 [<8024891c>] (do_exit) from [<802494e0>] (do_group_exit+0x40/0xa0 kernel/exit.c:935) r7:85799500 [<802494a0>] (do_group_exit) from [<80249558>] (__do_sys_exit_group kernel/exit.c:946 [inline]) [<802494a0>] (do_group_exit) from [<80249558>] (__wake_up_parent+0x0/0x28 kernel/exit.c:944) r7:000000f8 r6:0002102c r5:00120000 r4:00000000 [<80249540>] (sys_exit_group) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:64) Exception stack(0x888c9fa8 to 0x888c9ff0) 9fa0: 00000000 00120000 00000000 025e7084 00000002 0000001e 9fc0: 00000000 00120000 0002102c 000000f8 00120000 7ea09604 00000001 00000000 9fe0: 7ea09528 7ea09518 00012b2c 0004bf80 INFO: task syz-executor.1:20622 blocked for more than 430 seconds. Not tainted 5.17.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack: 0 pid:20622 ppid: 2237 flags:0x00000001 Backtrace: [<816dc0c8>] (__schedule) from [<816dcb20>] (schedule+0x54/0xdc kernel/sched/core.c:6377) r10:84470408 r9:00000003 r8:00000002 r7:851b0b80 r6:84703e84 r5:84703e88 r4:851b0b80 [<816dcacc>] (schedule) from [<816e1fa8>] (schedule_timeout+0xcc/0x104 kernel/time/timer.c:1857) r5:84703e88 r4:7fffffff [<816e1edc>] (schedule_timeout) from [<816ddff4>] (do_wait_for_common kernel/sched/completion.c:85 [inline]) [<816e1edc>] (schedule_timeout) from [<816ddff4>] (__wait_for_common kernel/sched/completion.c:106 [inline]) [<816e1edc>] (schedule_timeout) from [<816ddff4>] (wait_for_common kernel/sched/completion.c:117 [inline]) [<816e1edc>] (schedule_timeout) from [<816ddff4>] (wait_for_completion+0x84/0xf0 kernel/sched/completion.c:138) r6:84703e84 r5:84703e88 r4:7fffffff [<816ddf70>] (wait_for_completion) from [<8110a2c8>] (vhost_work_dev_flush drivers/vhost/vhost.c:243 [inline]) [<816ddf70>] (wait_for_completion) from [<8110a2c8>] (vhost_work_dev_flush drivers/vhost/vhost.c:234 [inline]) [<816ddf70>] (wait_for_completion) from [<8110a2c8>] (vhost_attach_cgroups drivers/vhost/vhost.c:541 [inline]) [<816ddf70>] (wait_for_completion) from [<8110a2c8>] (vhost_dev_set_owner+0x174/0x314 drivers/vhost/vhost.c:608) r8:856ddc00 r7:00000000 r6:88920000 r5:851b0b80 r4:851b2280 [<8110a154>] (vhost_dev_set_owner) from [<81100dbc>] (vhost_net_set_owner drivers/vhost/net.c:1682 [inline]) [<8110a154>] (vhost_dev_set_owner) from [<81100dbc>] (vhost_net_ioctl+0x288/0x994 drivers/vhost/net.c:1732) r7:00000000 r6:88920004 r5:88920000 r4:8220e3f0 [<81100b34>] (vhost_net_ioctl) from [<804a44dc>] (vfs_ioctl fs/ioctl.c:51 [inline]) [<81100b34>] (vhost_net_ioctl) from [<804a44dc>] (do_vfs_ioctl fs/ioctl.c:834 [inline]) [<81100b34>] (vhost_net_ioctl) from [<804a44dc>] (__do_sys_ioctl fs/ioctl.c:872 [inline]) [<81100b34>] (vhost_net_ioctl) from [<804a44dc>] (sys_ioctl+0x110/0xaa0 fs/ioctl.c:860) r10:84470408 r9:00000003 r8:856ddc00 r7:00000000 r6:856ddc01 r5:00000000 r4:0000af01 [<804a43cc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:64) Exception stack(0x84703fa8 to 0x84703ff0) 3fa0: 00000000 00000000 00000003 0000af01 00000000 00000000 3fc0: 00000000 00000000 0012bfc8 00000036 7ea09312 76f206d0 7ea094a4 76f2020c 3fe0: 76f20020 76f20010 000163a0 0004bf80 r10:00000036 r9:851b0b80 r8:80200244 r7:00000036 r6:0012bfc8 r5:00000000 r4:00000000 INFO: task vhost-20622:20624 blocked for more than 430 seconds. Not tainted 5.17.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:vhost-20622 state:D stack: 0 pid:20624 ppid: 2 flags:0x00000000 Backtrace: [<816dc0c8>] (__schedule) from [<816dcb20>] (schedule+0x54/0xdc kernel/sched/core.c:6377) r10:00000000 r9:858fdca4 r8:822f2418 r7:858fdca4 r6:00000002 r5:851b2280 r4:851b2280 [<816dcacc>] (schedule) from [<816dd13c>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6436) r5:851b2280 r4:822f2414 [<816dd124>] (schedule_preempt_disabled) from [<816de474>] (__mutex_lock_common kernel/locking/mutex.c:673 [inline]) [<816dd124>] (schedule_preempt_disabled) from [<816de474>] (__mutex_lock.constprop.0+0x170/0x54c kernel/locking/mutex.c:733) [<816de304>] (__mutex_lock.constprop.0) from [<816de924>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1021) r9:858fdeb4 r8:822f2300 r7:00000002 r6:822f2240 r5:00000000 r4:00003a70 [<816de910>] (__mutex_lock_slowpath) from [<816de964>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:283) [<816de928>] (mutex_lock) from [<802cc92c>] (exp_funnel_lock kernel/rcu/tree_exp.h:322 [inline]) [<816de928>] (mutex_lock) from [<802cc92c>] (synchronize_rcu_expedited+0x104/0x350 kernel/rcu/tree_exp.h:840) [<802cc828>] (synchronize_rcu_expedited) from [<802ccbdc>] (synchronize_rcu+0x64/0x90 kernel/rcu/tree.c:3785) r8:855d3700 r7:00000000 r6:858fdeb4 r5:822f8430 r4:822f8428 [<802ccb78>] (synchronize_rcu) from [<802c3a00>] (rcu_sync_enter+0x64/0x12c kernel/rcu/sync.c:149) [<802c399c>] (rcu_sync_enter) from [<802a0eec>] (percpu_down_write+0x14/0xdc kernel/locking/percpu-rwsem.c:220) r5:822f8428 r4:00000000 [<802a0ed8>] (percpu_down_write) from [<8031528c>] (cpuset_can_attach+0x54/0x130 kernel/cgroup/cpuset.c:2233) r10:00000000 r9:858fdeb4 r8:855d3700 r7:00000000 r6:858fdeb4 r5:822f4d98 r4:00000000 r3:824892ac [<80315238>] (cpuset_can_attach) from [<803094ac>] (cgroup_migrate_execute+0x88/0x3fc kernel/cgroup/cgroup.c:2469) r8:858fdea4 r7:00000000 r6:858fde38 r5:822f4d98 r4:00000000 [<80309424>] (cgroup_migrate_execute) from [<80309894>] (cgroup_migrate+0x74/0x7c kernel/cgroup/cgroup.c:2772) r10:00000000 r9:851b2280 r8:851b0b80 r7:00000000 r6:851b2280 r5:858fdea4 r4:851b2280 [<80309820>] (cgroup_migrate) from [<803099b8>] (cgroup_attach_task+0x11c/0x264 kernel/cgroup/cgroup.c:2805) r7:00000000 r6:84ebf800 r5:00000000 r4:851b2280 [<8030989c>] (cgroup_attach_task) from [<8030fe18>] (cgroup_attach_task_all+0x98/0xc8 kernel/cgroup/cgroup-v1.c:70) r10:00000000 r9:851b2280 r8:851b0b80 r7:822f5914 r6:82488c8c r5:84ebf800 r4:84e68000 [<8030fd80>] (cgroup_attach_task_all) from [<81106464>] (vhost_attach_cgroups_work+0x1c/0x24 drivers/vhost/vhost.c:531) r9:88920000 r8:00000001 r7:88920024 r6:851b2280 r5:84703e64 r4:84703e64 [<81106448>] (vhost_attach_cgroups_work) from [<81106f08>] (vhost_worker+0xa8/0xe8 drivers/vhost/vhost.c:372) r5:84703e64 r4:00000000 [<81106e60>] (vhost_worker) from [<8026a5d8>] (kthread+0xf0/0x120 kernel/kthread.c:377) r10:00000000 r9:84703de4 r8:84fa1b80 r7:88920000 r6:81106e60 r5:851b2280 r4:84fa1c00 [<8026a4e8>] (kthread) from [<80200100>] (ret_from_fork+0x14/0x34 arch/arm/kernel/entry-common.S:146) Exception stack(0x858fdfb0 to 0x858fdff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026a4e8 r4:84fa1c00 NMI backtrace for cpu 0 CPU: 0 PID: 26 Comm: khungtaskd Not tainted 5.17.0-rc6-syzkaller #0 Hardware name: ARM-Versatile Express Backtrace: [<816bf564>] (dump_backtrace) from [<816bf750>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:239) r7:00000000 r6:00000000 r5:60000193 r4:81d6a098 [<816bf738>] (show_stack) from [<816c7fa8>] (__dump_stack lib/dump_stack.c:88 [inline]) [<816bf738>] (show_stack) from [<816c7fa8>] (dump_stack_lvl+0x48/0x54 lib/dump_stack.c:106) [<816c7f60>] (dump_stack_lvl) from [<816c7fcc>] (dump_stack+0x18/0x1c lib/dump_stack.c:113) r5:00000113 r4:00000000 [<816c7fb4>] (dump_stack) from [<8080a53c>] (nmi_cpu_backtrace+0x114/0x180 lib/nmi_backtrace.c:111) [<8080a428>] (nmi_cpu_backtrace) from [<8080a6c0>] (nmi_trigger_cpumask_backtrace+0x118/0x1d4 lib/nmi_backtrace.c:62) r7:00000000 r6:8220c494 r5:8220ccc8 r4:00000000 [<8080a5a8>] (nmi_trigger_cpumask_backtrace) from [<80210b20>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:862) r9:000b9280 r8:82204d00 r7:00007f2c r6:8248996c r5:8220c5dc r4:8571a940 [<80210b08>] (arch_trigger_cpumask_backtrace) from [<8032b5c4>] (trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]) [<80210b08>] (arch_trigger_cpumask_backtrace) from [<8032b5c4>] (check_hung_uninterruptible_tasks kernel/hung_task.c:212 [inline]) [<80210b08>] (arch_trigger_cpumask_backtrace) from [<8032b5c4>] (watchdog+0x4a0/0x58c kernel/hung_task.c:369) [<8032b124>] (watchdog) from [<8026a5d8>] (kthread+0xf0/0x120 kernel/kthread.c:377) r10:00000000 r9:8294fe4c r8:82a84340 r7:00000000 r6:8032b124 r5:828f2e00 r4:82a84300 [<8026a4e8>] (kthread) from [<80200100>] (ret_from_fork+0x14/0x34 arch/arm/kernel/entry-common.S:146) Exception stack(0x82a27fb0 to 0x82a27ff8) 7fa0: 00000000 00000000 00000000 00000000 7fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 7fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026a4e8 r4:82a84300 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 2011 Comm: syslogd Not tainted 5.17.0-rc6-syzkaller #0 Hardware name: ARM-Versatile Express PC is at 0x76e01424 LR is at 0x76dfb0a4 pc : [<76e01424>] lr : [<76dfb0a4>] psr: 200f0010 sp : 7e95dac8 ip : 00000000 fp : 7e95dc9c r10: 7e95dbf4 r9 : 7e95db78 r8 : 000bcb92 r7 : 00000000 r6 : 7e95dc10 r5 : 7e95dad0 r4 : 00000013 r3 : 00000000 r2 : ffffffff r1 : 00008000 r0 : 7e95dad0 Flags: nzCv IRQs on FIQs on Mode USER_32 ISA ARM Segment none Control: 30c5387d Table: 84453680 DAC: 00000000 CPU: 1 PID: 2011 Comm: syslogd Not tainted 5.17.0-rc6-syzkaller #0 Hardware name: ARM-Versatile Express Backtrace: [<816bf564>] (dump_backtrace) from [<816bf750>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:239) r7:00000017 r6:846fdfb0 r5:600f0193 r4:81d6a098 [<816bf738>] (show_stack) from [<816c7fa8>] (__dump_stack lib/dump_stack.c:88 [inline]) [<816bf738>] (show_stack) from [<816c7fa8>] (dump_stack_lvl+0x48/0x54 lib/dump_stack.c:106) [<816c7f60>] (dump_stack_lvl) from [<816c7fcc>] (dump_stack+0x18/0x1c lib/dump_stack.c:113) r5:000f0193 r4:00000001 [<816c7fb4>] (dump_stack) from [<80209000>] (show_regs+0x14/0x18 arch/arm/kernel/process.c:199) [<80208fec>] (show_regs) from [<8080a524>] (nmi_cpu_backtrace+0xfc/0x180 lib/nmi_backtrace.c:109) [<8080a428>] (nmi_cpu_backtrace) from [<8020fc28>] (do_handle_IPI+0x4c/0x3b4 arch/arm/kernel/smp.c:677) r7:00000017 r6:00000001 r5:8280cb80 r4:00000007 [<8020fbdc>] (do_handle_IPI) from [<8020ffb0>] (ipi_handler+0x20/0x28 arch/arm/kernel/smp.c:705) r9:7e95db78 r8:846fdf18 r7:00000017 r6:8220cce4 r5:8280cb80 r4:82887d00 [<8020ff90>] (ipi_handler) from [<802b97dc>] (handle_percpu_devid_irq+0x9c/0x2d4 kernel/irq/chip.c:931) [<802b9740>] (handle_percpu_devid_irq) from [<802b2f14>] (generic_handle_irq_desc include/linux/irqdesc.h:158 [inline]) [<802b9740>] (handle_percpu_devid_irq) from [<802b2f14>] (handle_irq_desc kernel/irq/irqdesc.c:646 [inline]) [<802b9740>] (handle_percpu_devid_irq) from [<802b2f14>] (generic_handle_domain_irq+0x48/0x8c kernel/irq/irqdesc.c:680) r10:7e95dbf4 r9:7e95db78 r8:00000000 r7:df80200c r6:84674500 r5:00000007 r4:8288c000 r3:802b9740 [<802b2ecc>] (generic_handle_domain_irq) from [<8081c198>] (gic_handle_irq+0x68/0x7c drivers/irqchip/irq-gic.c:372) r7:df80200c r6:820a6084 r5:df802000 r4:8220cce4 [<8081c130>] (gic_handle_irq) from [<816d9e1c>] (generic_handle_arch_irq+0x60/0x80 kernel/irq/handle.c:238) r7:846fdfb0 r6:81f148e8 r5:81f14900 r4:820a6078 [<816d9dbc>] (generic_handle_arch_irq) from [<80200dbc>] (__irq_usr+0x5c/0x80 arch/arm/kernel/entry-armv.S:429) Exception stack(0x846fdfb0 to 0x846fdff8) dfa0: 7e95dad0 00008000 ffffffff 00000000 dfc0: 00000013 7e95dad0 7e95dc10 00000000 000bcb92 7e95db78 7e95dbf4 7e95dc9c dfe0: 00000000 7e95dac8 76dfb0a4 76e01424 200f0010 ffffffff r9:7e95db78 r8:5bd3e000 r7:84674500 r6:ffffffff r5:200f0010 r4:76e01424