program syz-executor.5 not setting count and/or reply_len properly sg_write: data in/out 196608/2 bytes for SCSI command 0x28-- guessing data in; program syz-executor.5 not setting count and/or reply_len properly INFO: task syz-executor.5:17777 blocked for more than 143 seconds. Not tainted 5.10.56 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.5 state:D stack:27704 pid:17777 ppid: 402 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:3776 [inline] __schedule+0x848/0x1e80 kernel/sched/core.c:4525 schedule+0xcb/0x270 kernel/sched/core.c:4603 __io_uring_task_cancel+0x1ae/0x250 fs/io_uring.c:8896 io_uring_task_cancel include/linux/io_uring.h:46 [inline] bprm_execve+0x114/0x1b00 fs/exec.c:1789 do_execveat_common+0x621/0x7c0 fs/exec.c:1919 do_execveat fs/exec.c:1998 [inline] __do_sys_execveat fs/exec.c:2074 [inline] __se_sys_execveat fs/exec.c:2066 [inline] __x64_sys_execveat+0xed/0x130 fs/exec.c:2066 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x466609 RSP: 002b:00007fb43e209188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 RDX: 0000000000000000 RSI: 0000000020000500 RDI: ffffffffffffffff RBP: 00000000004bfcb9 R08: 0000000000000400 R09: 0000000000000000 R10: 0000000020000040 R11: 0000000000000246 R12: 000000000056bf80 R13: 00007ffd797cbb6f R14: 00007fb43e209300 R15: 0000000000022000 Showing all locks held in the system: 1 lock held by khungtaskd/22: #0: ffffffff84df6660 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x269 kernel/locking/lockdep.c:6377 1 lock held by in:imklog/354: #0: ffff88800df9d270 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 fs/file.c:930 2 locks held by rs:main Q:Reg/355: =============================================