bisecting fixing commit since 53bd76690e27f37c9df221a651a52cea04214da9 building syzkaller on 6c236867ce33c0c16b102e02a08226d7eb9b2046 testing commit 53bd76690e27f37c9df221a651a52cea04214da9 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 662a82baf39583d95d31c53c2b774421ddf51162c4e017b24544a164cc8e8b6f all runs: crashed: INFO: task hung in tls_push_record testing current HEAD b172b44fcb1771e083aad806fa96f3f60e2ddfac testing commit b172b44fcb1771e083aad806fa96f3f60e2ddfac compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 9d163d19ae791e602361c661b91c7461e6c17dbbd35ac2c2aab0ef834b7ab8ad all runs: crashed: INFO: task hung in tls_push_record revisions tested: 2, total time: 31m51.856450226s (build: 19m24.948779571s, test: 12m1.393634364s) the crash still happens on HEAD commit msg: Linux 4.19.206 crash: INFO: task hung in tls_push_record Bluetooth: hci5: command 0x0406 tx timeout Bluetooth: hci2: command 0x0406 tx timeout Bluetooth: hci4: command 0x0406 tx timeout ieee802154 phy0 wpan0: encryption failed: -22 ieee802154 phy1 wpan1: encryption failed: -22 INFO: task syz-executor.1:9851 blocked for more than 140 seconds. Not tainted 4.19.206-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.1 D28264 9851 8477 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 schedule_timeout+0x6f6/0xd20 kernel/time/timer.c:1794 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common+0x3fb/0x5d0 kernel/sched/completion.c:115 wait_for_completion+0x18/0x20 kernel/sched/completion.c:136 crypto_wait_req include/linux/crypto.h:517 [inline] tls_do_encryption net/tls/tls_sw.c:193 [inline] tls_push_record+0xe65/0x15f0 net/tls/tls_sw.c:228 tls_sw_sendpage+0x462/0xc00 net/tls/tls_sw.c:585 inet_sendpage+0x122/0x600 net/ipv4/af_inet.c:815 kernel_sendpage+0x60/0xd0 net/socket.c:3585 sock_sendpage+0x6d/0xd0 net/socket.c:912 pipe_to_sendpage+0x212/0x430 fs/splice.c:452 splice_from_pipe_feed fs/splice.c:503 [inline] __splice_from_pipe+0x2cb/0x720 fs/splice.c:627 splice_from_pipe+0xbb/0x120 fs/splice.c:662 generic_splice_sendpage+0x10/0x20 fs/splice.c:833 do_splice_from fs/splice.c:852 [inline] do_splice fs/splice.c:1154 [inline] __do_sys_splice fs/splice.c:1428 [inline] __se_sys_splice+0x71e/0x17e0 fs/splice.c:1408 __x64_sys_splice+0xdc/0x1a0 fs/splice.c:1408 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: Bad RIP value. RSP: 002b:00007fe188360188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 RBP: 00000000004bfcc4 R08: 0000000100000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 R13: 00007ffe51a43f4f R14: 00007fe188360300 R15: 0000000000022000 INFO: task syz-executor.1:9979 blocked for more than 140 seconds. Not tainted 4.19.206-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.1 D28952 9979 8477 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 schedule_timeout+0x6f6/0xd20 kernel/time/timer.c:1794 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common+0x3fb/0x5d0 kernel/sched/completion.c:115 wait_for_completion+0x18/0x20 kernel/sched/completion.c:136 crypto_wait_req include/linux/crypto.h:517 [inline] tls_do_encryption net/tls/tls_sw.c:193 [inline] tls_push_record+0xe65/0x15f0 net/tls/tls_sw.c:228 tls_sw_sendpage+0x462/0xc00 net/tls/tls_sw.c:585 inet_sendpage+0x122/0x600 net/ipv4/af_inet.c:815 kernel_sendpage+0x60/0xd0 net/socket.c:3585 sock_sendpage+0x6d/0xd0 net/socket.c:912 pipe_to_sendpage+0x212/0x430 fs/splice.c:452 splice_from_pipe_feed fs/splice.c:503 [inline] __splice_from_pipe+0x2cb/0x720 fs/splice.c:627 splice_from_pipe+0xbb/0x120 fs/splice.c:662 generic_splice_sendpage+0x10/0x20 fs/splice.c:833 do_splice_from fs/splice.c:852 [inline] do_splice fs/splice.c:1154 [inline] __do_sys_splice fs/splice.c:1428 [inline] __se_sys_splice+0x71e/0x17e0 fs/splice.c:1408 __x64_sys_splice+0xdc/0x1a0 fs/splice.c:1408 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: Bad RIP value. RSP: 002b:00007fe18831e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 RAX: ffffffffffffffda RBX: 000000000056c0f0 RCX: 00000000004665e9 RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 RBP: 00000000004bfcc4 R08: 0000000100000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0f0 R13: 00007ffe51a43f4f R14: 00007fe18831e300 R15: 0000000000022000 INFO: task syz-executor.4:9870 blocked for more than 140 seconds. Not tainted 4.19.206-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.4 D28216 9870 8472 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 schedule_timeout+0x6f6/0xd20 kernel/time/timer.c:1794 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common+0x3fb/0x5d0 kernel/sched/completion.c:115 wait_for_completion+0x18/0x20 kernel/sched/completion.c:136 crypto_wait_req include/linux/crypto.h:517 [inline] tls_do_encryption net/tls/tls_sw.c:193 [inline] tls_push_record+0xe65/0x15f0 net/tls/tls_sw.c:228 tls_sw_sendpage+0x462/0xc00 net/tls/tls_sw.c:585 inet_sendpage+0x122/0x600 net/ipv4/af_inet.c:815 kernel_sendpage+0x60/0xd0 net/socket.c:3585 sock_sendpage+0x6d/0xd0 net/socket.c:912 pipe_to_sendpage+0x212/0x430 fs/splice.c:452 splice_from_pipe_feed fs/splice.c:503 [inline] __splice_from_pipe+0x2cb/0x720 fs/splice.c:627 splice_from_pipe+0xbb/0x120 fs/splice.c:662 generic_splice_sendpage+0x10/0x20 fs/splice.c:833 do_splice_from fs/splice.c:852 [inline] do_splice fs/splice.c:1154 [inline] __do_sys_splice fs/splice.c:1428 [inline] __se_sys_splice+0x71e/0x17e0 fs/splice.c:1408 __x64_sys_splice+0xdc/0x1a0 fs/splice.c:1408 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: Bad RIP value. RSP: 002b:00007fe39aa8a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 RBP: 00000000004bfcc4 R08: 0000000100000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 R13: 00007ffe98b11b2f R14: 00007fe39aa8a300 R15: 0000000000022000 INFO: task syz-executor.4:9981 blocked for more than 140 seconds. Not tainted 4.19.206-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.4 D28872 9981 8472 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 schedule_timeout+0x6f6/0xd20 kernel/time/timer.c:1794 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common+0x3fb/0x5d0 kernel/sched/completion.c:115 wait_for_completion+0x18/0x20 kernel/sched/completion.c:136 crypto_wait_req include/linux/crypto.h:517 [inline] tls_do_encryption net/tls/tls_sw.c:193 [inline] tls_push_record+0xe65/0x15f0 net/tls/tls_sw.c:228 tls_sw_sendpage+0x462/0xc00 net/tls/tls_sw.c:585 inet_sendpage+0x122/0x600 net/ipv4/af_inet.c:815 kernel_sendpage+0x60/0xd0 net/socket.c:3585 sock_sendpage+0x6d/0xd0 net/socket.c:912 pipe_to_sendpage+0x212/0x430 fs/splice.c:452 splice_from_pipe_feed fs/splice.c:503 [inline] __splice_from_pipe+0x2cb/0x720 fs/splice.c:627 splice_from_pipe+0xbb/0x120 fs/splice.c:662 generic_splice_sendpage+0x10/0x20 fs/splice.c:833 do_splice_from fs/splice.c:852 [inline] do_splice fs/splice.c:1154 [inline] __do_sys_splice fs/splice.c:1428 [inline] __se_sys_splice+0x71e/0x17e0 fs/splice.c:1408 __x64_sys_splice+0xdc/0x1a0 fs/splice.c:1408 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: 00 84 c9 0f 85 f1 fd ff ff 83 3d 81 00 3a 01 00 0f 85 c2 00 00 00 48 8d 0d 8c 2e 43 00 48 89 88 a8 00 00 00 0f 57 c0 0f 11 84 <24> 90 00 00 00 48 8b 0d 13 db 36 01 48 89 8c 24 90 00 00 00 48 8d RSP: 002b:00007fe39aa48188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 RAX: ffffffffffffffda RBX: 000000000056c0f0 RCX: 00000000004665e9 RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 RBP: 00000000004bfcc4 R08: 0000000100000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0f0 R13: 00007ffe98b11b2f R14: 00007fe39aa48300 R15: 0000000000022000 INFO: task syz-executor.5:9945 blocked for more than 140 seconds. Not tainted 4.19.206-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.5 D28280 9945 8476 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 schedule_timeout+0x6f6/0xd20 kernel/time/timer.c:1794 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common+0x3fb/0x5d0 kernel/sched/completion.c:115 wait_for_completion+0x18/0x20 kernel/sched/completion.c:136 crypto_wait_req include/linux/crypto.h:517 [inline] tls_do_encryption net/tls/tls_sw.c:193 [inline] tls_push_record+0xe65/0x15f0 net/tls/tls_sw.c:228 tls_sw_sendpage+0x462/0xc00 net/tls/tls_sw.c:585 inet_sendpage+0x122/0x600 net/ipv4/af_inet.c:815 kernel_sendpage+0x60/0xd0 net/socket.c:3585 sock_sendpage+0x6d/0xd0 net/socket.c:912 pipe_to_sendpage+0x212/0x430 fs/splice.c:452 splice_from_pipe_feed fs/splice.c:503 [inline] __splice_from_pipe+0x2cb/0x720 fs/splice.c:627 splice_from_pipe+0xbb/0x120 fs/splice.c:662 generic_splice_sendpage+0x10/0x20 fs/splice.c:833 do_splice_from fs/splice.c:852 [inline] do_splice fs/splice.c:1154 [inline] __do_sys_splice fs/splice.c:1428 [inline] __se_sys_splice+0x71e/0x17e0 fs/splice.c:1408 __x64_sys_splice+0xdc/0x1a0 fs/splice.c:1408 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: 00 84 c9 0f 85 f1 fd ff ff 83 3d 81 00 3a 01 00 0f 85 c2 00 00 00 48 8d 0d 8c 2e 43 00 48 89 88 a8 00 00 00 0f 57 c0 0f 11 84 <24> 90 00 00 00 48 8b 0d 13 db 36 01 48 89 8c 24 90 00 00 00 48 8d RSP: 002b:00007f6b0d5fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 RBP: 00000000004bfcc4 R08: 0000000100000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 R13: 00007fff9399efef R14: 00007f6b0d5fc300 R15: 0000000000022000 INFO: task syz-executor.3:9967 blocked for more than 140 seconds. Not tainted 4.19.206-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.3 D28280 9967 8471 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 schedule_timeout+0x6f6/0xd20 kernel/time/timer.c:1794 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common+0x3fb/0x5d0 kernel/sched/completion.c:115 wait_for_completion+0x18/0x20 kernel/sched/completion.c:136 crypto_wait_req include/linux/crypto.h:517 [inline] tls_do_encryption net/tls/tls_sw.c:193 [inline] tls_push_record+0xe65/0x15f0 net/tls/tls_sw.c:228 tls_sw_sendpage+0x462/0xc00 net/tls/tls_sw.c:585 inet_sendpage+0x122/0x600 net/ipv4/af_inet.c:815 kernel_sendpage+0x60/0xd0 net/socket.c:3585 sock_sendpage+0x6d/0xd0 net/socket.c:912 pipe_to_sendpage+0x212/0x430 fs/splice.c:452 splice_from_pipe_feed fs/splice.c:503 [inline] __splice_from_pipe+0x2cb/0x720 fs/splice.c:627 splice_from_pipe+0xbb/0x120 fs/splice.c:662 generic_splice_sendpage+0x10/0x20 fs/splice.c:833 do_splice_from fs/splice.c:852 [inline] do_splice fs/splice.c:1154 [inline] __do_sys_splice fs/splice.c:1428 [inline] __se_sys_splice+0x71e/0x17e0 fs/splice.c:1408 __x64_sys_splice+0xdc/0x1a0 fs/splice.c:1408 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: 00 84 c9 0f 85 f1 fd ff ff 83 3d 81 00 3a 01 00 0f 85 c2 00 00 00 48 8d 0d 8c 2e 43 00 48 89 88 a8 00 00 00 0f 57 c0 0f 11 84 <24> 90 00 00 00 48 8b 0d 13 db 36 01 48 89 8c 24 90 00 00 00 48 8d RSP: 002b:00007f291bcdc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 RBP: 00000000004bfcc4 R08: 0000000100000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 R13: 00007ffcfb91409f R14: 00007f291bcdc300 R15: 0000000000022000 INFO: task syz-executor.3:9987 blocked for more than 140 seconds. Not tainted 4.19.206-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.3 D28952 9987 8471 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 schedule_timeout+0x6f6/0xd20 kernel/time/timer.c:1794 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common+0x3fb/0x5d0 kernel/sched/completion.c:115 wait_for_completion+0x18/0x20 kernel/sched/completion.c:136 crypto_wait_req include/linux/crypto.h:517 [inline] tls_do_encryption net/tls/tls_sw.c:193 [inline] tls_push_record+0xe65/0x15f0 net/tls/tls_sw.c:228 tls_sw_sendpage+0x462/0xc00 net/tls/tls_sw.c:585 inet_sendpage+0x122/0x600 net/ipv4/af_inet.c:815 kernel_sendpage+0x60/0xd0 net/socket.c:3585 sock_sendpage+0x6d/0xd0 net/socket.c:912 pipe_to_sendpage+0x212/0x430 fs/splice.c:452 splice_from_pipe_feed fs/splice.c:503 [inline] __splice_from_pipe+0x2cb/0x720 fs/splice.c:627 splice_from_pipe+0xbb/0x120 fs/splice.c:662 generic_splice_sendpage+0x10/0x20 fs/splice.c:833 do_splice_from fs/splice.c:852 [inline] do_splice fs/splice.c:1154 [inline] __do_sys_splice fs/splice.c:1428 [inline] __se_sys_splice+0x71e/0x17e0 fs/splice.c:1408 __x64_sys_splice+0xdc/0x1a0 fs/splice.c:1408 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: 00 84 c9 0f 85 f1 fd ff ff 83 3d 81 00 3a 01 00 0f 85 c2 00 00 00 48 8d 0d 8c 2e 43 00 48 89 88 a8 00 00 00 0f 57 c0 0f 11 84 <24> 90 00 00 00 48 8b 0d 13 db 36 01 48 89 8c 24 90 00 00 00 48 8d RSP: 002b:00007f291bc9a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 RAX: ffffffffffffffda RBX: 000000000056c0f0 RCX: 00000000004665e9 RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 RBP: 00000000004bfcc4 R08: 0000000100000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0f0 R13: 00007ffcfb91409f R14: 00007f291bc9a300 R15: 0000000000022000 INFO: task syz-executor.0:9975 blocked for more than 140 seconds. Not tainted 4.19.206-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.0 D27992 9975 8475 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 schedule_timeout+0x6f6/0xd20 kernel/time/timer.c:1794 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common+0x3fb/0x5d0 kernel/sched/completion.c:115 wait_for_completion+0x18/0x20 kernel/sched/completion.c:136 crypto_wait_req include/linux/crypto.h:517 [inline] tls_do_encryption net/tls/tls_sw.c:193 [inline] tls_push_record+0xe65/0x15f0 net/tls/tls_sw.c:228 tls_sw_sendpage+0x462/0xc00 net/tls/tls_sw.c:585 inet_sendpage+0x122/0x600 net/ipv4/af_inet.c:815 kernel_sendpage+0x60/0xd0 net/socket.c:3585 sock_sendpage+0x6d/0xd0 net/socket.c:912 pipe_to_sendpage+0x212/0x430 fs/splice.c:452 splice_from_pipe_feed fs/splice.c:503 [inline] __splice_from_pipe+0x2cb/0x720 fs/splice.c:627 splice_from_pipe+0xbb/0x120 fs/splice.c:662 generic_splice_sendpage+0x10/0x20 fs/splice.c:833 do_splice_from fs/splice.c:852 [inline] do_splice fs/splice.c:1154 [inline] __do_sys_splice fs/splice.c:1428 [inline] __se_sys_splice+0x71e/0x17e0 fs/splice.c:1408 __x64_sys_splice+0xdc/0x1a0 fs/splice.c:1408 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: 00 84 c9 0f 85 f1 fd ff ff 83 3d 81 00 3a 01 00 0f 85 c2 00 00 00 48 8d 0d 8c 2e 43 00 48 89 88 a8 00 00 00 0f 57 c0 0f 11 84 <24> 90 00 00 00 48 8b 0d 13 db 36 01 48 89 8c 24 90 00 00 00 48 8d RSP: 002b:00007f64dc755188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 RBP: 00000000004bfcc4 R08: 0000000100000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 R13: 00007ffdfd4f93af R14: 00007f64dc755300 R15: 0000000000022000 INFO: task syz-executor.2:9974 blocked for more than 140 seconds. Not tainted 4.19.206-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.2 D27224 9974 8468 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 schedule_timeout+0x6f6/0xd20 kernel/time/timer.c:1794 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common+0x3fb/0x5d0 kernel/sched/completion.c:115 wait_for_completion+0x18/0x20 kernel/sched/completion.c:136 crypto_wait_req include/linux/crypto.h:517 [inline] tls_do_encryption net/tls/tls_sw.c:193 [inline] tls_push_record+0xe65/0x15f0 net/tls/tls_sw.c:228 tls_sw_sendpage+0x462/0xc00 net/tls/tls_sw.c:585 inet_sendpage+0x122/0x600 net/ipv4/af_inet.c:815 kernel_sendpage+0x60/0xd0 net/socket.c:3585 sock_sendpage+0x6d/0xd0 net/socket.c:912 pipe_to_sendpage+0x212/0x430 fs/splice.c:452 splice_from_pipe_feed fs/splice.c:503 [inline] __splice_from_pipe+0x2cb/0x720 fs/splice.c:627 splice_from_pipe+0xbb/0x120 fs/splice.c:662 generic_splice_sendpage+0x10/0x20 fs/splice.c:833 do_splice_from fs/splice.c:852 [inline] do_splice fs/splice.c:1154 [inline] __do_sys_splice fs/splice.c:1428 [inline] __se_sys_splice+0x71e/0x17e0 fs/splice.c:1408 __x64_sys_splice+0xdc/0x1a0 fs/splice.c:1408 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: 00 84 c9 0f 85 f1 fd ff ff 83 3d 81 00 3a 01 00 0f 85 c2 00 00 00 48 8d 0d 8c 2e 43 00 48 89 88 a8 00 00 00 0f 57 c0 0f 11 84 <24> 90 00 00 00 48 8b 0d 13 db 36 01 48 89 8c 24 90 00 00 00 48 8d RSP: 002b:00007f74b5c7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 RBP: 00000000004bfcc4 R08: 0000000100000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 R13: 00007ffdc09da97f R14: 00007f74b5c7f300 R15: 0000000000022000 Showing all locks held in the system: 1 lock held by khungtaskd/1571: #0: 000000003fd7cab6 (rcu_read_lock){....}, at: debug_show_all_locks+0x5b/0x27a kernel/locking/lockdep.c:4443 1 lock held by in:imklog/7779: #0: 0000000006e5c2bd (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xa7/0xd0 fs/file.c:767 2 locks held by syz-executor.1/9851: #0: 00000000261847e7 (&pipe->mutex/1){+.+.}, at: pipe_lock_nested fs/pipe.c:77 [inline] #0: 00000000261847e7 (&pipe->mutex/1){+.+.}, at: pipe_lock+0x4f/0x60 fs/pipe.c:85 #1: 00000000536cbaa6 (sk_lock-AF_INET6){+.+.}, at: lock_sock include/net/sock.h:1510 [inline] #1: 00000000536cbaa6 (sk_lock-AF_INET6){+.+.}, at: tls_sw_sendpage+0x120/0xc00 net/tls/tls_sw.c:525 2 locks held by syz-executor.1/9979: #0: 0000000006963418 (&pipe->mutex/1){+.+.}, at: pipe_lock_nested fs/pipe.c:77 [inline] #0: 0000000006963418 (&pipe->mutex/1){+.+.}, at: pipe_lock+0x4f/0x60 fs/pipe.c:85 #1: 00000000b68cae5c (sk_lock-AF_INET6){+.+.}, at: lock_sock include/net/sock.h:1510 [inline] #1: 00000000b68cae5c (sk_lock-AF_INET6){+.+.}, at: tls_sw_sendpage+0x120/0xc00 net/tls/tls_sw.c:525 2 locks held by syz-executor.4/9870: #0: 00000000d9caa256 (&pipe->mutex/1){+.+.}, at: pipe_lock_nested fs/pipe.c:77 [inline] #0: 00000000d9caa256 (&pipe->mutex/1){+.+.}, at: pipe_lock+0x4f/0x60 fs/pipe.c:85 #1: 000000002a4c3158 (sk_lock-AF_INET6){+.+.}, at: lock_sock include/net/sock.h:1510 [inline] #1: 000000002a4c3158 (sk_lock-AF_INET6){+.+.}, at: tls_sw_sendpage+0x120/0xc00 net/tls/tls_sw.c:525 2 locks held by syz-executor.4/9981: #0: 000000005bae9819 (&pipe->mutex/1){+.+.}, at: pipe_lock_nested fs/pipe.c:77 [inline] #0: 000000005bae9819 (&pipe->mutex/1){+.+.}, at: pipe_lock+0x4f/0x60 fs/pipe.c:85 #1: 0000000033c32909 (sk_lock-AF_INET6){+.+.}, at: lock_sock include/net/sock.h:1510 [inline] #1: 0000000033c32909 (sk_lock-AF_INET6){+.+.}, at: tls_sw_sendpage+0x120/0xc00 net/tls/tls_sw.c:525 2 locks held by syz-executor.5/9945: #0: 000000003f126a25 (&pipe->mutex/1){+.+.}, at: pipe_lock_nested fs/pipe.c:77 [inline] #0: 000000003f126a25 (&pipe->mutex/1){+.+.}, at: pipe_lock+0x4f/0x60 fs/pipe.c:85 #1: 00000000aa291824 (sk_lock-AF_INET6){+.+.}, at: lock_sock include/net/sock.h:1510 [inline] #1: 00000000aa291824 (sk_lock-AF_INET6){+.+.}, at: tls_sw_sendpage+0x120/0xc00 net/tls/tls_sw.c:525 2 locks held by syz-executor.3/9967: #0: 000000002149c9f4 (&pipe->mutex/1){+.+.}, at: pipe_lock_nested fs/pipe.c:77 [inline] #0: 000000002149c9f4 (&pipe->mutex/1){+.+.}, at: pipe_lock+0x4f/0x60 fs/pipe.c:85 #1: 00000000058765d1 (sk_lock-AF_INET6){+.+.}, at: lock_sock include/net/sock.h:1510 [inline] #1: 00000000058765d1 (sk_lock-AF_INET6){+.+.}, at: tls_sw_sendpage+0x120/0xc00 net/tls/tls_sw.c:525 2 locks held by syz-executor.3/9987: #0: 000000003e6644f5 (&pipe->mutex/1){+.+.}, at: pipe_lock_nested fs/pipe.c:77 [inline] #0: 000000003e6644f5 (&pipe->mutex/1){+.+.}, at: pipe_lock+0x4f/0x60 fs/pipe.c:85 #1: 00000000d5016b0d (sk_lock-AF_INET6){+.+.}, at: lock_sock include/net/sock.h:1510 [inline] #1: 00000000d5016b0d (sk_lock-AF_INET6){+.+.}, at: tls_sw_sendpage+0x120/0xc00 net/tls/tls_sw.c:525 2 locks held by syz-executor.0/9975: #0: 0000000069b054de (&pipe->mutex/1){+.+.}, at: pipe_lock_nested fs/pipe.c:77 [inline] #0: 0000000069b054de (&pipe->mutex/1){+.+.}, at: pipe_lock+0x4f/0x60 fs/pipe.c:85 #1: 00000000c3afc6d1 (sk_lock-AF_INET6){+.+.}, at: lock_sock include/net/sock.h:1510 [inline] #1: 00000000c3afc6d1 (sk_lock-AF_INET6){+.+.}, at: tls_sw_sendpage+0x120/0xc00 net/tls/tls_sw.c:525 2 locks held by syz-executor.2/9974: #0: 0000000099032f3d (&pipe->mutex/1){+.+.}, at: pipe_lock_nested fs/pipe.c:77 [inline] #0: 0000000099032f3d (&pipe->mutex/1){+.+.}, at: pipe_lock+0x4f/0x60 fs/pipe.c:85 #1: 000000009a45858d (sk_lock-AF_INET6){+.+.}, at: lock_sock include/net/sock.h:1510 [inline] #1: 000000009a45858d (sk_lock-AF_INET6){+.+.}, at: tls_sw_sendpage+0x120/0xc00 net/tls/tls_sw.c:525 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 1571 Comm: khungtaskd Not tainted 4.19.206-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 nmi_cpu_backtrace.cold.0+0x3c/0x78 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0xf6/0x120 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline] watchdog+0x5c3/0xb40 kernel/hung_task.c:287 kthread+0x347/0x410 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x12/0x20 arch/x86/include/asm/irqflags.h:60