syzbot

INFO: task khugepaged:37 blocked for more than 143 seconds.
      Not tainted 6.10.0-rc7-next-20240712-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:khugepaged      state:D stack:27088 pid:37    tgid:37    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5239 [inline]
 __schedule+0x1800/0x4a60 kernel/sched/core.c:6603
 __schedule_loop kernel/sched/core.c:6680 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6695
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6752
 rwsem_down_write_slowpath+0xeeb/0x13b0 kernel/locking/rwsem.c:1178
 __down_write_common kernel/locking/rwsem.c:1306 [inline]
 __down_write kernel/locking/rwsem.c:1315 [inline]
 down_write+0x1d7/0x220 kernel/locking/rwsem.c:1580
 mmap_write_lock include/linux/mmap_lock.h:106 [inline]
 collapse_huge_page mm/khugepaged.c:1152 [inline]
 hpage_collapse_scan_pmd+0x24ea/0x4dc0 mm/khugepaged.c:1419
 khugepaged_scan_mm_slot mm/khugepaged.c:2427 [inline]
 khugepaged_do_scan mm/khugepaged.c:2514 [inline]
 khugepaged+0xbe6/0x1dc0 mm/khugepaged.c:2570
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task syz.4.1665:10821 blocked for more than 144 seconds.
      Not tainted 6.10.0-rc7-next-20240712-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.1665      state:D stack:22544 pid:10821 tgid:10821 ppid:9172   flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5239 [inline]
 __schedule+0x1800/0x4a60 kernel/sched/core.c:6603
 __schedule_loop kernel/sched/core.c:6680 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6695
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6752
 rwsem_down_read_slowpath kernel/locking/rwsem.c:1086 [inline]
 __down_read_common kernel/locking/rwsem.c:1250 [inline]
 __down_read kernel/locking/rwsem.c:1263 [inline]
 down_read+0x705/0xa40 kernel/locking/rwsem.c:1528
 mmap_read_lock+0x1c/0x60 include/linux/mmap_lock.h:144
 unmap_single_vma+0x2a0/0x330 mm/memory.c:1832
 unmap_vmas+0x3cc/0x5f0 mm/memory.c:1904
 exit_mmap+0x264/0xc80 mm/mmap.c:3412
 __mmput+0x115/0x390 kernel/fork.c:1347
 exit_mm+0x220/0x310 kernel/exit.c:571
 do_exit+0x9b2/0x27f0 kernel/exit.c:869
 do_group_exit+0x207/0x2c0 kernel/exit.c:1031
 __do_sys_exit_group kernel/exit.c:1042 [inline]
 __se_sys_exit_group kernel/exit.c:1040 [inline]
 __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1040
 x64_sys_call+0x26c3/0x26d0 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f30b2b75bd9
RSP: 002b:00007ffd7d58baf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f30b2b75bd9
RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000001 R08: 0000000600000000 R09: 0000000000000000
R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd7d58bbe0
R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd7d58bbe0
 </TASK>
INFO: lockdep is turned off.
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc7-next-20240712-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
 watchdog+0xfee/0x1030 kernel/hung_task.c:379
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
Workqueue: events nsim_dev_trap_report_work
RIP: 0010:__sanitizer_cov_trace_switch+0x3f/0x120 kernel/kcov.c:324
Code: f8 48 c1 c0 3d 48 83 f8 02 7f 1f 48 85 c0 74 3a 48 83 f8 01 0f 85 da 00 00 00 41 b8 03 00 00 00 4d 85 d2 75 44 e9 ca 00 00 00 <48> 83 f8 03 74 2a 48 83 f8 07 0f 85 ba 00 00 00 41 b8 07 00 00 00
RSP: 0000:ffffc900000e7520 EFLAGS: 00000002
RAX: 0000000000000003 RBX: ffffc900000e79c0 RCX: ffff8880172c8000
RDX: 0000000000000000 RSI: ffffffff8ea4c340 RDI: 0000000000000014
RBP: ffffc900000e77b0 R08: 6f01e7236de3b447 R09: 065099ce2a419577
R10: 0000000000000002 R11: 3320646e61707865 R12: ffffc900000e7700
R13: ffffc900000e7820 R14: 0000000000000014 R15: 0000000000000014
FS:  0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000562fa9e40680 CR3: 0000000056be6000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <TASK>
 chacha_permute+0x2d/0x1050 lib/crypto/chacha.c:21
 chacha_block_generic+0x9f/0x1340 lib/crypto/chacha.c:83
 chacha20_block include/crypto/chacha.h:36 [inline]
 crng_fast_key_erasure drivers/char/random.c:318 [inline]
 crng_make_state+0x38d/0xa80 drivers/char/random.c:384
 _get_random_bytes+0xd7/0x2c0 drivers/char/random.c:398
 nsim_dev_trap_skb_build drivers/net/netdevsim/dev.c:776 [inline]
 nsim_dev_trap_report drivers/net/netdevsim/dev.c:805 [inline]
 nsim_dev_trap_report_work+0x630/0xaa0 drivers/net/netdevsim/dev.c:850
 process_one_work kernel/workqueue.c:3231 [inline]
 process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312
 worker_thread+0x86d/0xd40 kernel/workqueue.c:3390
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>