bisecting fixing commit since 830a059cbba6832c11fefc0894c7ec7a27f75734 building syzkaller on 6a81331a1d4c744da9204d02ec88d558f7eea9c9 testing commit 830a059cbba6832c11fefc0894c7ec7a27f75734 with gcc (GCC) 8.4.1 20210217 kernel signature: b5770ccfa8a82b4b0f3ade81a02b297dfa45516992427b3cb42429896c3fc784 all runs: crashed: INFO: task hung in nbd_ioctl testing current HEAD 3c8c23092588a23bf1856a64f58c37f477a413be testing commit 3c8c23092588a23bf1856a64f58c37f477a413be with gcc (GCC) 8.4.1 20210217 kernel signature: 28714a3c51c31ed41e4fbb1ca86cdb7312f7e060a0543246ac702dc40419c2ac run #0: crashed: INFO: task hung in nbd_ioctl run #1: crashed: INFO: task hung in nbd_ioctl run #2: crashed: INFO: task hung in nbd_ioctl run #3: crashed: INFO: task hung in nbd_ioctl run #4: crashed: INFO: task hung in nbd_ioctl run #5: crashed: INFO: task hung in nbd_ioctl run #6: crashed: INFO: task hung in nbd_ioctl run #7: crashed: INFO: task hung in nbd_ioctl run #8: crashed: INFO: task hung in blk_freeze_queue run #9: crashed: INFO: task hung in nbd_ioctl revisions tested: 2, total time: 33m30.658808408s (build: 21m4.463103182s, test: 11m53.896560782s) the crash still happens on HEAD commit msg: Linux 4.19.190 crash: INFO: task hung in nbd_ioctl Bluetooth: hci0: command 0x0406 tx timeout Bluetooth: hci3: command 0x0406 tx timeout Bluetooth: hci4: command 0x0406 tx timeout ieee802154 phy0 wpan0: encryption failed: -22 ieee802154 phy1 wpan1: encryption failed: -22 INFO: task syz-executor.1:9855 blocked for more than 140 seconds. Not tainted 4.19.190-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.1 D27576 9855 8464 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1005 [inline] __mutex_lock+0x4c3/0x1200 kernel/locking/mutex.c:1075 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1090 nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 __blkdev_driver_ioctl block/ioctl.c:303 [inline] blkdev_ioctl+0x7ea/0x1790 block/ioctl.c:601 block_ioctl+0xd7/0x130 fs/block_dev.c:1906 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0x196/0x10c0 fs/ioctl.c:688 ksys_ioctl+0x62/0x90 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6e/0xb0 fs/ioctl.c:710 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x466459 Code: Bad RIP value. RSP: 002b:00007f04c0ff7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 RDX: 0000000000000f53 RSI: 000000000000ab07 RDI: 0000000000000007 RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 R13: 00007ffcd7e1aedf R14: 00007f04c0ff7300 R15: 0000000000022000 INFO: task syz-executor.1:9859 blocked for more than 140 seconds. Not tainted 4.19.190-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.1 D28728 9859 8464 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1005 [inline] __mutex_lock+0x4c3/0x1200 kernel/locking/mutex.c:1075 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1090 nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 __blkdev_driver_ioctl block/ioctl.c:303 [inline] blkdev_ioctl+0x7ea/0x1790 block/ioctl.c:601 block_ioctl+0xd7/0x130 fs/block_dev.c:1906 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0x196/0x10c0 fs/ioctl.c:688 ksys_ioctl+0x62/0x90 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6e/0xb0 fs/ioctl.c:710 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x466459 Code: Bad RIP value. RSP: 002b:00007f04c0fd6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 RDX: 00000000000000ff RSI: 000000000000ab09 RDI: 0000000000000006 RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 R13: 00007ffcd7e1aedf R14: 00007f04c0fd6300 R15: 0000000000022000 INFO: task syz-executor.1:9981 blocked for more than 140 seconds. Not tainted 4.19.190-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.1 D29416 9981 8464 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 blk_mq_freeze_queue_wait+0x105/0x220 block/blk-mq.c:152 blk_freeze_queue+0x3d/0x60 block/blk-mq.c:181 blk_mq_freeze_queue+0x9/0x10 block/blk-mq.c:190 nbd_add_socket+0x109/0x840 drivers/block/nbd.c:973 __nbd_ioctl drivers/block/nbd.c:1320 [inline] nbd_ioctl+0x4fd/0xb30 drivers/block/nbd.c:1387 __blkdev_driver_ioctl block/ioctl.c:303 [inline] blkdev_ioctl+0x7ea/0x1790 block/ioctl.c:601 block_ioctl+0xd7/0x130 fs/block_dev.c:1906 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0x196/0x10c0 fs/ioctl.c:688 ksys_ioctl+0x62/0x90 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6e/0xb0 fs/ioctl.c:710 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x466459 Code: Bad RIP value. RSP: 002b:00007f04c0fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 RDX: 0000000000000004 RSI: 000000000000ab00 RDI: 0000000000000003 RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 R13: 00007ffcd7e1aedf R14: 00007f04c0fb5300 R15: 0000000000022000 INFO: task syz-executor.4:9901 blocked for more than 140 seconds. Not tainted 4.19.190-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.4 D28248 9901 8463 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1005 [inline] __mutex_lock+0x4c3/0x1200 kernel/locking/mutex.c:1075 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1090 nbd_start_device_ioctl drivers/block/nbd.c:1278 [inline] __nbd_ioctl drivers/block/nbd.c:1347 [inline] nbd_ioctl+0x2d6/0xb30 drivers/block/nbd.c:1387 __blkdev_driver_ioctl block/ioctl.c:303 [inline] blkdev_ioctl+0x7ea/0x1790 block/ioctl.c:601 block_ioctl+0xd7/0x130 fs/block_dev.c:1906 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0x196/0x10c0 fs/ioctl.c:688 ksys_ioctl+0x62/0x90 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6e/0xb0 fs/ioctl.c:710 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x466459 Code: Bad RIP value. RSP: 002b:00007f6c5d986188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000006 RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 R13: 00007ffc11b6f23f R14: 00007f6c5d986300 R15: 0000000000022000 INFO: task syz-executor.4:9928 blocked for more than 140 seconds. Not tainted 4.19.190-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.4 D28344 9928 8463 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1005 [inline] __mutex_lock+0x4c3/0x1200 kernel/locking/mutex.c:1075 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1090 nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 __blkdev_driver_ioctl block/ioctl.c:303 [inline] blkdev_ioctl+0x7ea/0x1790 block/ioctl.c:601 block_ioctl+0xd7/0x130 fs/block_dev.c:1906 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0x196/0x10c0 fs/ioctl.c:688 ksys_ioctl+0x62/0x90 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6e/0xb0 fs/ioctl.c:710 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x466459 Code: 40 48 89 44 24 78 48 8b 6c 24 58 48 83 c4 60 c3 48 8d 0d 7a d0 1d 00 48 89 0c 24 48 8d 15 57 cf 27 01 48 89 54 24 08 0f 57 c0 <0f> 11 44 24 10 48 89 44 24 20 e8 d8 6c fe ff 48 8b 4c 24 28 48 8b RSP: 002b:00007f6c5d965188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 RDX: 00000000000000ff RSI: 000000000000ab09 RDI: 0000000000000006 RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 R13: 00007ffc11b6f23f R14: 00007f6c5d965300 R15: 0000000000022000 INFO: task syz-executor.4:9988 blocked for more than 140 seconds. Not tainted 4.19.190-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.4 D29216 9988 8463 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 blk_mq_freeze_queue_wait+0x105/0x220 block/blk-mq.c:152 blk_freeze_queue+0x3d/0x60 block/blk-mq.c:181 blk_mq_freeze_queue+0x9/0x10 block/blk-mq.c:190 nbd_add_socket+0x109/0x840 drivers/block/nbd.c:973 __nbd_ioctl drivers/block/nbd.c:1320 [inline] nbd_ioctl+0x4fd/0xb30 drivers/block/nbd.c:1387 __blkdev_driver_ioctl block/ioctl.c:303 [inline] blkdev_ioctl+0x7ea/0x1790 block/ioctl.c:601 block_ioctl+0xd7/0x130 fs/block_dev.c:1906 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0x196/0x10c0 fs/ioctl.c:688 ksys_ioctl+0x62/0x90 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6e/0xb0 fs/ioctl.c:710 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x466459 Code: 40 48 89 44 24 78 48 8b 6c 24 58 48 83 c4 60 c3 48 8d 0d 7a d0 1d 00 48 89 0c 24 48 8d 15 57 cf 27 01 48 89 54 24 08 0f 57 c0 <0f> 11 44 24 10 48 89 44 24 20 e8 d8 6c fe ff 48 8b 4c 24 28 48 8b RSP: 002b:00007f6c5d944188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 RDX: 0000000000000004 RSI: 000000000000ab00 RDI: 0000000000000003 RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 R13: 00007ffc11b6f23f R14: 00007f6c5d944300 R15: 0000000000022000 INFO: task syz-executor.4:9991 blocked for more than 140 seconds. Not tainted 4.19.190-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.4 D29304 9991 8463 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1005 [inline] __mutex_lock+0x4c3/0x1200 kernel/locking/mutex.c:1075 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1090 nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 __blkdev_driver_ioctl block/ioctl.c:303 [inline] blkdev_ioctl+0x7ea/0x1790 block/ioctl.c:601 block_ioctl+0xd7/0x130 fs/block_dev.c:1906 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0x196/0x10c0 fs/ioctl.c:688 ksys_ioctl+0x62/0x90 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6e/0xb0 fs/ioctl.c:710 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x466459 Code: 40 48 89 44 24 78 48 8b 6c 24 58 48 83 c4 60 c3 48 8d 0d 7a d0 1d 00 48 89 0c 24 48 8d 15 57 cf 27 01 48 89 54 24 08 0f 57 c0 <0f> 11 44 24 10 48 89 44 24 20 e8 d8 6c fe ff 48 8b 4c 24 28 48 8b RSP: 002b:00007f6c5d923188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 000000000056c158 RCX: 0000000000466459 RDX: 0000000000000f53 RSI: 000000000000ab07 RDI: 0000000000000007 RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c158 R13: 00007ffc11b6f23f R14: 00007f6c5d923300 R15: 0000000000022000 INFO: task syz-executor.3:9918 blocked for more than 140 seconds. Not tainted 4.19.190-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.3 D28248 9918 8459 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1005 [inline] __mutex_lock+0x4c3/0x1200 kernel/locking/mutex.c:1075 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1090 nbd_start_device_ioctl drivers/block/nbd.c:1278 [inline] __nbd_ioctl drivers/block/nbd.c:1347 [inline] nbd_ioctl+0x2d6/0xb30 drivers/block/nbd.c:1387 __blkdev_driver_ioctl block/ioctl.c:303 [inline] blkdev_ioctl+0x7ea/0x1790 block/ioctl.c:601 block_ioctl+0xd7/0x130 fs/block_dev.c:1906 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0x196/0x10c0 fs/ioctl.c:688 ksys_ioctl+0x62/0x90 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6e/0xb0 fs/ioctl.c:710 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x466459 Code: 40 48 89 44 24 78 48 8b 6c 24 58 48 83 c4 60 c3 48 8d 0d 7a d0 1d 00 48 89 0c 24 48 8d 15 57 cf 27 01 48 89 54 24 08 0f 57 c0 <0f> 11 44 24 10 48 89 44 24 20 e8 d8 6c fe ff 48 8b 4c 24 28 48 8b RSP: 002b:00007fcdb112e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000006 RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 R13: 00007ffd20e4b5bf R14: 00007fcdb112e300 R15: 0000000000022000 INFO: task syz-executor.3:9938 blocked for more than 140 seconds. Not tainted 4.19.190-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.3 D28728 9938 8459 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1005 [inline] __mutex_lock+0x4c3/0x1200 kernel/locking/mutex.c:1075 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1090 nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 __blkdev_driver_ioctl block/ioctl.c:303 [inline] blkdev_ioctl+0x7ea/0x1790 block/ioctl.c:601 block_ioctl+0xd7/0x130 fs/block_dev.c:1906 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0x196/0x10c0 fs/ioctl.c:688 ksys_ioctl+0x62/0x90 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6e/0xb0 fs/ioctl.c:710 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x466459 Code: 40 48 89 44 24 78 48 8b 6c 24 58 48 83 c4 60 c3 48 8d 0d 7a d0 1d 00 48 89 0c 24 48 8d 15 57 cf 27 01 48 89 54 24 08 0f 57 c0 <0f> 11 44 24 10 48 89 44 24 20 e8 d8 6c fe ff 48 8b 4c 24 28 48 8b RSP: 002b:00007fcdb110d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 RDX: 00000000000000ff RSI: 000000000000ab09 RDI: 0000000000000006 RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 R13: 00007ffd20e4b5bf R14: 00007fcdb110d300 R15: 0000000000022000 INFO: task syz-executor.3:9990 blocked for more than 140 seconds. Not tainted 4.19.190-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.3 D29216 9990 8459 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 blk_mq_freeze_queue_wait+0x105/0x220 block/blk-mq.c:152 blk_freeze_queue+0x3d/0x60 block/blk-mq.c:181 blk_mq_freeze_queue+0x9/0x10 block/blk-mq.c:190 nbd_add_socket+0x109/0x840 drivers/block/nbd.c:973 __nbd_ioctl drivers/block/nbd.c:1320 [inline] nbd_ioctl+0x4fd/0xb30 drivers/block/nbd.c:1387 __blkdev_driver_ioctl block/ioctl.c:303 [inline] blkdev_ioctl+0x7ea/0x1790 block/ioctl.c:601 block_ioctl+0xd7/0x130 fs/block_dev.c:1906 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0x196/0x10c0 fs/ioctl.c:688 ksys_ioctl+0x62/0x90 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6e/0xb0 fs/ioctl.c:710 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x466459 Code: 40 48 89 44 24 78 48 8b 6c 24 58 48 83 c4 60 c3 48 8d 0d 7a d0 1d 00 48 89 0c 24 48 8d 15 57 cf 27 01 48 89 54 24 08 0f 57 c0 <0f> 11 44 24 10 48 89 44 24 20 e8 d8 6c fe ff 48 8b 4c 24 28 48 8b RSP: 002b:00007fcdb10ec188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 RDX: 0000000000000004 RSI: 000000000000ab00 RDI: 0000000000000003 RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 R13: 00007ffd20e4b5bf R14: 00007fcdb10ec300 R15: 0000000000022000 Showing all locks held in the system: no locks held by ksoftirqd/1/18. 2 locks held by kworker/u4:2/55: #0: 0000000003c790fc (&rq->lock){-.-.}, at: idle_balance kernel/sched/fair.c:9701 [inline] #0: 0000000003c790fc (&rq->lock){-.-.}, at: pick_next_task_fair+0x1006/0x1540 kernel/sched/fair.c:6840 #1: 0000000043adb111 (rcu_read_lock){....}, at: cpu_of kernel/sched/sched.h:921 [inline] #1: 0000000043adb111 (rcu_read_lock){....}, at: __update_idle_core+0x3c/0x3f0 kernel/sched/fair.c:6057 1 lock held by khungtaskd/1569: #0: 0000000043adb111 (rcu_read_lock){....}, at: debug_show_all_locks+0x5b/0x27a kernel/locking/lockdep.c:4443 1 lock held by in:imklog/7794: #0: 000000001d0f6978 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xa7/0xd0 fs/file.c:767 1 lock held by syz-executor.1/9855: #0: 00000000068ad65e (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.1/9859: #0: 00000000068ad65e (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.1/9981: #0: 00000000068ad65e (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.4/9901: #0: 000000001b913972 (&nbd->config_lock){+.+.}, at: nbd_start_device_ioctl drivers/block/nbd.c:1278 [inline] #0: 000000001b913972 (&nbd->config_lock){+.+.}, at: __nbd_ioctl drivers/block/nbd.c:1347 [inline] #0: 000000001b913972 (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x2d6/0xb30 drivers/block/nbd.c:1387 1 lock held by syz-executor.4/9928: #0: 000000001b913972 (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.4/9988: #0: 000000001b913972 (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.4/9991: #0: 000000001b913972 (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.3/9918: #0: 00000000fff313ab (&nbd->config_lock){+.+.}, at: nbd_start_device_ioctl drivers/block/nbd.c:1278 [inline] #0: 00000000fff313ab (&nbd->config_lock){+.+.}, at: __nbd_ioctl drivers/block/nbd.c:1347 [inline] #0: 00000000fff313ab (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x2d6/0xb30 drivers/block/nbd.c:1387 1 lock held by syz-executor.3/9938: #0: 00000000fff313ab (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.3/9990: #0: 00000000fff313ab (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.3/9993: #0: 00000000fff313ab (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.0/9977: #0: 000000003f0e551b (&nbd->config_lock){+.+.}, at: nbd_start_device_ioctl drivers/block/nbd.c:1278 [inline] #0: 000000003f0e551b (&nbd->config_lock){+.+.}, at: __nbd_ioctl drivers/block/nbd.c:1347 [inline] #0: 000000003f0e551b (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x2d6/0xb30 drivers/block/nbd.c:1387 1 lock held by syz-executor.0/9980: #0: 000000003f0e551b (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.0/10002: #0: 000000003f0e551b (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.0/10004: #0: 000000003f0e551b (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.0/10005: #0: 000000003f0e551b (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.2/9985: #0: 00000000f091901a (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.2/9989: #0: 00000000f091901a (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.2/9992: #0: 00000000f091901a (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.2/9994: #0: 00000000f091901a (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.2/10006: #0: 00000000f091901a (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.2/10007: #0: 00000000f091901a (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.2/10008: #0: 00000000f091901a (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.2/10009: #0: 00000000f091901a (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.5/9999: #0: 00000000586a9579 (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.5/10000: #0: 00000000586a9579 (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.5/10001: #0: 00000000586a9579 (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.5/10003: #0: 00000000586a9579 (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.5/10010: #0: 00000000586a9579 (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.5/10011: #0: 00000000586a9579 (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.5/10012: #0: 00000000586a9579 (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 1 lock held by syz-executor.5/10013: #0: 00000000586a9579 (&nbd->config_lock){+.+.}, at: nbd_ioctl+0x12a/0xb30 drivers/block/nbd.c:1380 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 1569 Comm: khungtaskd Not tainted 4.19.190-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 nmi_cpu_backtrace.cold.0+0x3c/0x78 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0xf6/0x120 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline] watchdog+0x5c3/0xb40 kernel/hung_task.c:287 kthread+0x347/0x410 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0x12/0x20 arch/x86/include/asm/irqflags.h:60