INFO: task syz.8.109:4863 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.8.109 state:D stack:0 pid:4863 ppid:4808 flags:0x00000009 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 schedule_timeout+0xc8/0x2f4 kernel/time/timer.c:2144 do_wait_for_common+0x28c/0x3ec kernel/sched/completion.c:85 __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion+0x44/0x5c kernel/sched/completion.c:138 io_wq_exit_workers io_uring/io-wq.c:1287 [inline] io_wq_put_and_exit+0x39c/0x8d4 io_uring/io-wq.c:1322 io_uring_clean_tctx+0x108/0x17c io_uring/tctx.c:204 io_uring_cancel_generic+0x4a8/0x590 io_uring/io_uring.c:3168 __io_uring_cancel+0x28/0x38 io_uring/io_uring.c:3183 io_uring_files_cancel include/linux/io_uring.h:54 [inline] do_exit+0x220/0x19ac kernel/exit.c:833 do_group_exit+0x198/0x238 kernel/exit.c:1030 get_signal+0x11f4/0x133c kernel/signal.c:2880 do_signal arch/arm64/kernel/signal.c:1095 [inline] do_notify_resume+0x364/0x2c84 arch/arm64/kernel/signal.c:1148 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline] el0_svc+0x98/0x128 arch/arm64/kernel/entry-common.c:638 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 INFO: task iou-wrk-4863:4864 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:iou-wrk-4863 state:D stack:0 pid:4864 ppid:4808 flags:0x00000049 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 do_uevent+0x1a0/0x428 fs/dlm/lockspace.c:210 new_lockspace fs/dlm/lockspace.c:659 [inline] __dlm_new_lockspace+0x16bc/0x1bd8 fs/dlm/lockspace.c:719 dlm_new_user_lockspace+0x64/0x80 fs/dlm/lockspace.c:750 device_create_lockspace+0xc4/0x2fc fs/dlm/user.c:426 device_write+0x674/0xc1c fs/dlm/user.c:618 loop_rw_iter+0x2c8/0x4c8 include/linux/uio.h:-1 io_write+0xbec/0x113c io_uring/rw.c:939 io_issue_sqe+0x224/0xa50 io_uring/io_uring.c:1747 io_wq_submit_work+0x3b4/0x814 io_uring/io_uring.c:1828 io_worker_handle_work+0x730/0xce4 io_uring/io-wq.c:600 io_wqe_worker+0x2ec/0xc14 io_uring/io-wq.c:645 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/12: #0: ffff800015557db0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 kernel/rcu/tasks.h:517 1 lock held by rcu_tasks_trace/13: #0: ffff8000155585d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 kernel/rcu/tasks.h:517 3 locks held by kworker/1:0/22: #0: ffff0000d45fdd38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff80001cc17c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff800017a04e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 1 lock held by khungtaskd/28: #0: ffff800015557440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:349 3 locks held by kworker/0:2/112: #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff800020737c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff00010b4c7240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x1d8/0x2708 drivers/net/netdevsim/fib.c:1491 1 lock held by hwrng/1184: #0: ffff8000167ba688 (reading_mutex){+.+.}-{3:3}, at: hwrng_fillfn+0x6c/0x2b4 drivers/char/hw_random/core.c:514 3 locks held by kworker/u4:4/1621: #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff8000259d7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff800017a04e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 4 locks held by udevd/3939: #0: ffff000101fbeb08 ( &p->lock){+.+.}-{3:3} , at: seq_read_iter+0xb4/0xc24 fs/seq_file.c:182 #1: ffff0000c33d6888 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x58/0x3b8 fs/kernfs/file.c:172 #2: ffff0000e7a922c0 (kn->active#4){++++}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff0000e7a922c0 (kn->active#4){++++}-{0:0}, at: kernfs_seq_start+0xa4/0x3b8 fs/kernfs/file.c:173 #3: ffff0000ed0ed0e8 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #3: ffff0000ed0ed0e8 (&dev->mutex){....}-{3:3}, at: uevent_show+0x168/0x328 drivers/base/core.c:2669 1 lock held by dhcpcd/3993: #0: ffff800017a04e48 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x104/0x694 net/netlink/af_netlink.c:2310 2 locks held by getty/4085: #0: ffff0000d6d77098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff800020a4b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2e8/0xfa8 drivers/tty/n_tty.c:2198 4 locks held by kworker/u4:6/4394: #0: ffff0000c0845138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff800021307c40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff8000179f85d0 (pernet_ops_rwsem ){++++}-{3:3}, at: cleanup_net+0x144/0xa90 net/core/net_namespace.c:594 #3: ffff800017a04e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 3 locks held by kworker/0:5/4668: #0: ffff0000d45fdd38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff8000220d7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff800017a04e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 3 locks held by kworker/0:7/4670: #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff8000220f7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff0000e407b240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x1d8/0x2708 drivers/net/netdevsim/fib.c:1491 1 lock held by iou-wrk-4863/4864: #0: ffff80001c6d3428 (&ls_lock){+.+.}-{3:3}, at: __dlm_new_lockspace+0xb0/0x1bd8 fs/dlm/lockspace.c:713 1 lock held by dlm_recoverd/4868: #0: ffff0000ca6acca0 (&ls->ls_in_recovery){+.+.}-{3:3}, at: dlm_recoverd+0x94/0x1a38 fs/dlm/recoverd.c:312 1 lock held by syz.6.189/13096: #0: ffff80001c6d3428 ( &ls_lock ){+.+.}-{3:3}, at: __dlm_new_lockspace+0xb0/0x1bd8 fs/dlm/lockspace.c:713 3 locks held by kworker/u4:8/14236: #0: ffff0000c65a8938 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff80002dd17c40 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff800017a04e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 2 locks held by kworker/1:10/14257: #0: ffff0000c0021938 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff800027227c40 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 3 locks held by kworker/1:12/14260: #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff80002ddc7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff0000ed765240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x1d8/0x2708 drivers/net/netdevsim/fib.c:1491 1 lock held by syz-executor/19107: #0: ffff800017a04e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline] #0: ffff800017a04e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163 7 locks held by syz-executor/23256: #0: ffff0000d9676460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 fs/read_write.c:580 #1: ffff0000c33d4888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1b8/0x4b4 fs/kernfs/file.c:343 #2: ffff0000d0c850f0 (kn->active#51){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff0000d0c850f0 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f8/0x4b4 fs/kernfs/file.c:344 #3: ffff800016db0568 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x138/0x52c drivers/net/netdevsim/bus.c:160 #4: ffff0000ed0ed0e8 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline] #4: ffff0000ed0ed0e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x88/0x3d8 drivers/base/dd.c:1009 #5: ffff0000ed0e92f8 (&devlink->lock_key#25){+.+.}-{3:3}, at: devl_lock+0x24/0x34 net/devlink/leftover.c:275 #6: ffff800017a04e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 1 lock held by syz.4.243/23652: #0: ffff80001555d0f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:291 [inline] #0: ffff80001555d0f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3f8/0x780 kernel/rcu/tree_exp.h:962 3 locks held by md0_resync/23687: =============================================