INFO: task syz.0.391:8227 blocked for more than 144 seconds. Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.391 state:D stack:0 pid:8227 tgid:8191 ppid:6487 task_flags:0x400548 flags:0x00000090 Call trace: __switch_to+0x404/0x778 arch/arm64/kernel/process.c:701 (T) context_switch kernel/sched/core.c:5382 [inline] __schedule+0x13b0/0x28d4 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6860 schedule_timeout+0xac/0x270 kernel/time/sleep_timeout.c:75 do_wait_for_common+0x288/0x3f8 kernel/sched/completion.c:95 __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common kernel/sched/completion.c:127 [inline] wait_for_completion+0x44/0x5c kernel/sched/completion.c:148 io_wq_exit_workers io_uring/io-wq.c:1294 [inline] io_wq_put_and_exit+0x2f4/0x5ec io_uring/io-wq.c:1322 io_uring_clean_tctx+0x104/0x170 io_uring/tctx.c:205 io_uring_cancel_generic+0x57c/0x660 io_uring/io_uring.c:3216 __io_uring_cancel+0x28/0x38 io_uring/io_uring.c:3231 io_uring_files_cancel include/linux/io_uring.h:19 [inline] do_exit+0x21c/0x1998 kernel/exit.c:909 do_group_exit+0x194/0x22c kernel/exit.c:1102 get_signal+0x11dc/0x12f8 kernel/signal.c:3034 do_signal+0x264/0x36cc arch/arm64/kernel/signal.c:1616 do_notify_resume+0xac/0x1ec arch/arm64/kernel/entry-common.c:148 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:169 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:178 [inline] el0_svc+0xb0/0x150 arch/arm64/kernel/entry-common.c:745 el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 INFO: task iou-wrk-8227:8234 blocked for more than 144 seconds. Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:iou-wrk-8227 state:D stack:0 pid:8234 tgid:8191 ppid:6487 task_flags:0x404050 flags:0x00000011 Call trace: __switch_to+0x404/0x778 arch/arm64/kernel/process.c:701 (T) context_switch kernel/sched/core.c:5382 [inline] __schedule+0x13b0/0x28d4 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6860 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6917 __mutex_lock_common+0xbd0/0x2190 kernel/locking/mutex.c:678 __mutex_lock kernel/locking/mutex.c:746 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:798 io_ring_submit_lock io_uring/io_uring.h:289 [inline] io_provide_buffers+0x5e0/0x834 io_uring/kbuf.c:562 __io_issue_sqe+0x174/0x2e8 io_uring/io_uring.c:1740 io_issue_sqe+0x98/0xb5c io_uring/io_uring.c:1759 io_wq_submit_work+0x53c/0x8ac io_uring/io_uring.c:1874 io_worker_handle_work+0x67c/0xc28 io_uring/io-wq.c:615 io_wq_worker+0x320/0xb7c io_uring/io-wq.c:669 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 INFO: task iou-wrk-8227:8235 blocked for more than 144 seconds. Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:iou-wrk-8227 state:D stack:0 pid:8235 tgid:8191 ppid:6487 task_flags:0x404050 flags:0x00000011 Call trace: __switch_to+0x404/0x778 arch/arm64/kernel/process.c:701 (T) context_switch kernel/sched/core.c:5382 [inline] __schedule+0x13b0/0x28d4 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6860 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6917 __mutex_lock_common+0xbd0/0x2190 kernel/locking/mutex.c:678 __mutex_lock kernel/locking/mutex.c:746 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:798 io_ring_submit_lock io_uring/io_uring.h:289 [inline] io_provide_buffers+0x5e0/0x834 io_uring/kbuf.c:562 __io_issue_sqe+0x174/0x2e8 io_uring/io_uring.c:1740 io_issue_sqe+0x98/0xb5c io_uring/io_uring.c:1759 io_wq_submit_work+0x53c/0x8ac io_uring/io_uring.c:1874 io_worker_handle_work+0x67c/0xc28 io_uring/io-wq.c:615 io_wq_worker+0x320/0xb7c io_uring/io-wq.c:669 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 INFO: task iou-wrk-8227:8236 blocked for more than 150 seconds. Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:iou-wrk-8227 state:D stack:0 pid:8236 tgid:8191 ppid:6487 task_flags:0x404050 flags:0x00000011 Call trace: __switch_to+0x404/0x778 arch/arm64/kernel/process.c:701 (T) context_switch kernel/sched/core.c:5382 [inline] __schedule+0x13b0/0x28d4 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6860 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6917 __mutex_lock_common+0xbd0/0x2190 kernel/locking/mutex.c:678 __mutex_lock kernel/locking/mutex.c:746 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:798 io_ring_submit_lock io_uring/io_uring.h:289 [inline] io_provide_buffers+0x5e0/0x834 io_uring/kbuf.c:562 __io_issue_sqe+0x174/0x2e8 io_uring/io_uring.c:1740 io_issue_sqe+0x98/0xb5c io_uring/io_uring.c:1759 io_wq_submit_work+0x53c/0x8ac io_uring/io_uring.c:1874 io_worker_handle_work+0x67c/0xc28 io_uring/io-wq.c:615 io_wq_worker+0x320/0xb7c io_uring/io-wq.c:669 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 INFO: task iou-wrk-8227:8237 blocked for more than 150 seconds. Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:iou-wrk-8227 state:D stack:0 pid:8237 tgid:8191 ppid:6487 task_flags:0x404050 flags:0x00000011 Call trace: __switch_to+0x404/0x778 arch/arm64/kernel/process.c:701 (T) context_switch kernel/sched/core.c:5382 [inline] __schedule+0x13b0/0x28d4 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6860 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6917 __mutex_lock_common+0xbd0/0x2190 kernel/locking/mutex.c:678 __mutex_lock kernel/locking/mutex.c:746 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:798 io_ring_submit_lock io_uring/io_uring.h:289 [inline] io_provide_buffers+0x5e0/0x834 io_uring/kbuf.c:562 __io_issue_sqe+0x174/0x2e8 io_uring/io_uring.c:1740 io_issue_sqe+0x98/0xb5c io_uring/io_uring.c:1759 io_wq_submit_work+0x53c/0x8ac io_uring/io_uring.c:1874 io_worker_handle_work+0x67c/0xc28 io_uring/io-wq.c:615 io_wq_worker+0x320/0xb7c io_uring/io-wq.c:669 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 INFO: task iou-wrk-8227:8238 blocked for more than 150 seconds. Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:iou-wrk-8227 state:D stack:0 pid:8238 tgid:8191 ppid:6487 task_flags:0x404050 flags:0x00000011 Call trace: __switch_to+0x404/0x778 arch/arm64/kernel/process.c:701 (T) context_switch kernel/sched/core.c:5382 [inline] __schedule+0x13b0/0x28d4 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6860 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6917 __mutex_lock_common+0xbd0/0x2190 kernel/locking/mutex.c:678 __mutex_lock kernel/locking/mutex.c:746 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:798 io_ring_submit_lock io_uring/io_uring.h:289 [inline] io_provide_buffers+0x5e0/0x834 io_uring/kbuf.c:562 __io_issue_sqe+0x174/0x2e8 io_uring/io_uring.c:1740 io_issue_sqe+0x98/0xb5c io_uring/io_uring.c:1759 io_wq_submit_work+0x53c/0x8ac io_uring/io_uring.c:1874 io_worker_handle_work+0x67c/0xc28 io_uring/io-wq.c:615 io_wq_worker+0x320/0xb7c io_uring/io-wq.c:669 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 INFO: task iou-wrk-8227:8239 blocked for more than 150 seconds. Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:iou-wrk-8227 state:D stack:0 pid:8239 tgid:8191 ppid:6487 task_flags:0x404050 flags:0x00000011 Call trace: __switch_to+0x404/0x778 arch/arm64/kernel/process.c:701 (T) context_switch kernel/sched/core.c:5382 [inline] __schedule+0x13b0/0x28d4 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6860 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6917 __mutex_lock_common+0xbd0/0x2190 kernel/locking/mutex.c:678 __mutex_lock kernel/locking/mutex.c:746 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:798 io_ring_submit_lock io_uring/io_uring.h:289 [inline] io_provide_buffers+0x5e0/0x834 io_uring/kbuf.c:562 __io_issue_sqe+0x174/0x2e8 io_uring/io_uring.c:1740 io_issue_sqe+0x98/0xb5c io_uring/io_uring.c:1759 io_wq_submit_work+0x53c/0x8ac io_uring/io_uring.c:1874 io_worker_handle_work+0x67c/0xc28 io_uring/io-wq.c:615 io_wq_worker+0x320/0xb7c io_uring/io-wq.c:669 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 Showing all locks held in the system: 1 lock held by kthreadd/2: 2 locks held by kworker/0:1/10: 3 locks held by kworker/u8:0/12: 3 locks held by kworker/u8:1/13: 1 lock held by khungtaskd/32: #0: ffff80008f4e7d20 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 include/linux/rcupdate.h:330 3 locks held by kworker/u8:2/43: 3 locks held by kworker/u8:3/45: 1 lock held by pr/ttyAMA0/46: 3 locks held by kworker/u8:4/212: 3 locks held by kworker/u8:5/494: 3 locks held by kworker/u8:6/514: 3 locks held by kworker/u8:7/2162: 3 locks held by kworker/u8:8/2216: 3 locks held by kworker/R-ipv6_/4139: #0: ffff0000d2e45148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212 #1: ffff8000a0997ba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212 #2: ffff8000924681e8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 2 locks held by kworker/R-bat_e/4220: 2 locks held by syslogd/6089: 1 lock held by klogd/6093: 3 locks held by udevd/6104: 2 locks held by dhcpcd/6157: 2 locks held by getty/6242: #0: ffff0000d2ed40a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80009b5ce2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x34c/0xfa0 drivers/tty/n_tty.c:2222 2 locks held by kworker/0:3/6478: 2 locks held by syz-executor/6488: 2 locks held by syz-executor/6492: 2 locks held by syz-executor/6493: 2 locks held by kworker/u8:9/6594: 3 locks held by kworker/u8:10/6619: 3 locks held by kworker/u8:11/7300: 2 locks held by iou-wrk-8227/8232: 1 lock held by iou-wrk-8227/8233: #0: ffff0000d88380a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_ring_submit_lock io_uring/io_uring.h:289 [inline] #0: ffff0000d88380a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_provide_buffers+0x5e0/0x834 io_uring/kbuf.c:562 1 lock held by iou-wrk-8227/8234: #0: ffff0000d88380a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_ring_submit_lock io_uring/io_uring.h:289 [inline] #0: ffff0000d88380a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_provide_buffers+0x5e0/0x834 io_uring/kbuf.c:562 1 lock held by iou-wrk-8227/8235: #0: ffff0000d88380a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_ring_submit_lock io_uring/io_uring.h:289 [inline] #0: ffff0000d88380a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_provide_buffers+0x5e0/0x834 io_uring/kbuf.c:562 1 lock held by iou-wrk-8227/8236: #0: ffff0000d88380a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_ring_submit_lock io_uring/io_uring.h:289 [inline] #0: ffff0000d88380a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_provide_buffers+0x5e0/0x834 io_uring/kbuf.c:562 1 lock held by iou-wrk-8227/8237: #0: ffff0000d88380a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_ring_submit_lock io_uring/io_uring.h:289 [inline] #0: ffff0000d88380a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_provide_buffers+0x5e0/0x834 io_uring/kbuf.c:562 1 lock held by iou-wrk-8227/8238: #0: ffff0000d88380a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_ring_submit_lock io_uring/io_uring.h:289 [inline] #0: ffff0000d88380a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_provide_buffers+0x5e0/0x834 io_uring/kbuf.c:562 1 lock held by iou-wrk-8227/8239: #0: ffff0000d88380a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_ring_submit_lock io_uring/io_uring.h:289 [inline] #0: ffff0000d88380a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_provide_buffers+0x5e0/0x834 io_uring/kbuf.c:562 1 lock held by syz.2.397/8221: 4 locks held by kworker/u8:12/8242: #0: ffff0000c0031948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212 #1: ffff80009dfa7bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212 #2: ffff8000924681e8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 #3: ffff0000dbd48768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6092 [inline] #3: ffff0000dbd48768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_leave_invalid_chans net/wireless/reg.c:2471 [inline] #3: ffff0000dbd48768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x11c/0xd88 net/wireless/reg.c:2486 6 locks held by kworker/u8:13/8243: 2 locks held by syz-executor/8244: =============================================