INFO: task kworker/u4:13:18260 blocked for more than 143 seconds.
Not tainted 6.3.0-rc5-syzkaller-00153-gaa318c48808c #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u4:13 state:D stack:18744 pid:18260 ppid:2 flags:0x00004000
Workqueue: btrfs-flush_delalloc btrfs_work_helper
Call Trace:
<TASK>
context_switch kernel/sched/core.c:5307 [inline]
__schedule+0x173b/0x4630 kernel/sched/core.c:6625
schedule+0xc3/0x180 kernel/sched/core.c:6701
btrfs_start_ordered_extent+0x41c/0x5f0 fs/btrfs/ordered-data.c:749
btrfs_run_ordered_extent_work+0x19/0x30 fs/btrfs/ordered-data.c:619
btrfs_work_helper+0x380/0xbe0 fs/btrfs/async-thread.c:280
process_one_work+0x8a0/0x10e0 kernel/workqueue.c:2390
worker_thread+0xa63/0x1210 kernel/workqueue.c:2537
kthread+0x270/0x300 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
</TASK>
INFO: task syz-executor.4:21431 blocked for more than 143 seconds.
Not tainted 6.3.0-rc5-syzkaller-00153-gaa318c48808c #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.4 state:D stack:25440 pid:21431 ppid:5110 flags:0x00004004
Call Trace:
<TASK>
context_switch kernel/sched/core.c:5307 [inline]
__schedule+0x173b/0x4630 kernel/sched/core.c:6625
schedule+0xc3/0x180 kernel/sched/core.c:6701
wait_on_state fs/btrfs/extent-io-tree.c:707 [inline]
wait_extent_bit+0x50c/0x670 fs/btrfs/extent-io-tree.c:751
lock_extent+0x1ce/0x280 fs/btrfs/extent-io-tree.c:1742
find_lock_delalloc_range+0x4c9/0x9a0 fs/btrfs/extent_io.c:487
writepage_delalloc+0x1f1/0x590 fs/btrfs/extent_io.c:1417
__extent_writepage+0x850/0x16d0 fs/btrfs/extent_io.c:1724
extent_write_cache_pages fs/btrfs/extent_io.c:2635 [inline]
extent_writepages+0xc31/0x1930 fs/btrfs/extent_io.c:2755
do_writepages+0x3a6/0x670 mm/page-writeback.c:2551
filemap_fdatawrite_wbc+0x125/0x180 mm/filemap.c:390
__filemap_fdatawrite_range mm/filemap.c:423 [inline]
__filemap_fdatawrite mm/filemap.c:429 [inline]
filemap_flush+0x11e/0x170 mm/filemap.c:456
btrfs_release_file+0x117/0x130 fs/btrfs/file.c:1720
__fput+0x3b7/0x890 fs/file_table.c:321
task_work_run+0x24a/0x300 kernel/task_work.c:179
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
exit_to_user_mode_loop+0xd9/0x100 kernel/entry/common.c:171
exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:204
__syscall_exit_to_user_mode_work kernel/entry/common.c:286 [inline]
syscall_exit_to_user_mode+0x64/0x280 kernel/entry/common.c:297
do_syscall_64+0x4d/0xc0 arch/x86/entry/common.c:86
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fa6f123e01b
RSP: 002b:00007ffd4bd53a10 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00007fa6f123e01b
RDX: 0000001b32120000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: 00007fa6f13ad980 R08: 0000000000000000 R09: 0000000000000010
R10: 00007ffd4bde5080 R11: 0000000000000293 R12: 00000000000aa712
R13: 00007ffd4bd53b10 R14: 00007ffd4bd53b30 R15: 0000000000000032
</TASK>
INFO: task syz-executor.4:21433 blocked for more than 144 seconds.
Not tainted 6.3.0-rc5-syzkaller-00153-gaa318c48808c #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.4 state:D stack:21080 pid:21433 ppid:5110 flags:0x00004004
Call Trace:
<TASK>
context_switch kernel/sched/core.c:5307 [inline]
__schedule+0x173b/0x4630 kernel/sched/core.c:6625
schedule+0xc3/0x180 kernel/sched/core.c:6701
schedule_timeout+0xb0/0x310 kernel/time/timer.c:2143
do_wait_for_common+0x449/0x5f0 kernel/sched/completion.c:85
__wait_for_common kernel/sched/completion.c:106 [inline]
wait_for_common kernel/sched/completion.c:117 [inline]
wait_for_completion+0x4a/0x60 kernel/sched/completion.c:138
btrfs_wait_ordered_extents+0xd69/0xe20 fs/btrfs/ordered-data.c:674
btrfs_wait_ordered_roots+0x65c/0x950 fs/btrfs/ordered-data.c:704
btrfs_relocate_block_group+0x695/0xd70 fs/btrfs/relocation.c:4076
btrfs_relocate_chunk+0x12c/0x3b0 fs/btrfs/volumes.c:3276
__btrfs_balance+0x1b06/0x2690 fs/btrfs/volumes.c:4011
btrfs_balance+0xbdf/0x1120 fs/btrfs/volumes.c:4395
btrfs_ioctl_balance+0x493/0x7c0 fs/btrfs/ioctl.c:3592
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:870 [inline]
__se_sys_ioctl+0xf1/0x160 fs/ioctl.c:856
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fa6f128c169
RSP: 002b:00007fa6f1f89168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fa6f13abf80 RCX: 00007fa6f128c169
RDX: 00000000200003c0 RSI: 00000000c4009420 RDI: 0000000000000008
RBP: 00007fa6f12e7ca1 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd4bd539af R14: 00007fa6f1f89300 R15: 0000000000022000
</TASK>
INFO: task syz-executor.4:21494 blocked for more than 145 seconds.
Not tainted 6.3.0-rc5-syzkaller-00153-gaa318c48808c #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.4 state:D stack:23256 pid:21494 ppid:5110 flags:0x00004004
Call Trace:
<TASK>
context_switch kernel/sched/core.c:5307 [inline]
__schedule+0x173b/0x4630 kernel/sched/core.c:6625
schedule+0xc3/0x180 kernel/sched/core.c:6701
io_schedule+0x8c/0x100 kernel/sched/core.c:8887
folio_wait_bit_common+0x86c/0x12b0 mm/filemap.c:1301
folio_wait_writeback+0xec/0x1f0 mm/page-writeback.c:3127
btrfs_page_mkwrite+0x53a/0xc90 fs/btrfs/inode.c:8161
do_page_mkwrite+0x1a1/0x600 mm/memory.c:2925
wp_page_shared mm/memory.c:3274 [inline]
do_wp_page+0x501/0x3620 mm/memory.c:3356
handle_pte_fault mm/memory.c:4927 [inline]
__handle_mm_fault mm/memory.c:5051 [inline]
handle_mm_fault+0x23a0/0x51c0 mm/memory.c:5197
do_user_addr_fault arch/x86/mm/fault.c:1407 [inline]
handle_page_fault arch/x86/mm/fault.c:1498 [inline]
exc_page_fault+0x5b1/0x7c0 arch/x86/mm/fault.c:1554
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
RIP: 0010:copy_user_short_string+0xd/0x40 arch/x86/lib/copy_user_64.S:233
Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 0f 1f 80 00 00 00 00 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a
RSP: 0018:ffffc90017387a90 EFLAGS: 00050202
RAX: ffffffff84301101 RBX: 00007fffffffefe0 RCX: 0000000000000004
RDX: 0000000000000000 RSI: ffffc90017387df0 RDI: 0000000020000000
RBP: ffffc90017387ee8 R08: 0000000000000000 R09: fffff52002e70fc2
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000020
R13: fffff52002e70f60 R14: 0000000020000000 R15: ffffc90017387df0
copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline]
raw_copy_to_user arch/x86/include/asm/uaccess_64.h:58 [inline]
_copy_to_user+0xed/0x130 lib/usercopy.c:41
copy_to_user include/linux/uaccess.h:169 [inline]
ioctl_fiemap fs/ioctl.c:224 [inline]
do_vfs_ioctl+0x1a51/0x2b10 fs/ioctl.c:810
__do_sys_ioctl fs/ioctl.c:868 [inline]
__se_sys_ioctl+0x81/0x160 fs/ioctl.c:856
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fa6f128c169
RSP: 002b:00007fa6f1f68168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fa6f13ac050 RCX: 00007fa6f128c169
RDX: 0000000020000000 RSI: 00000000c020660b RDI: 000000000000000b
RBP: 00007fa6f12e7ca1 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd4bd539af R14: 00007fa6f1f68300 R15: 0000000000022000
</TASK>
INFO: task syz-executor.4:21503 blocked for more than 146 seconds.
Not tainted 6.3.0-rc5-syzkaller-00153-gaa318c48808c #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.4 state:D stack:24984 pid:21503 ppid:5110 flags:0x00004004
Call Trace:
<TASK>
context_switch kernel/sched/core.c:5307 [inline]
__schedule+0x173b/0x4630 kernel/sched/core.c:6625
schedule+0xc3/0x180 kernel/sched/core.c:6701
io_schedule+0x8c/0x100 kernel/sched/core.c:8887
folio_wait_bit_common+0x86c/0x12b0 mm/filemap.c:1301
btrfs_page_mkwrite+0x42d/0xc90 fs/btrfs/inode.c:8153
do_page_mkwrite+0x1a1/0x600 mm/memory.c:2925
wp_page_shared mm/memory.c:3274 [inline]
do_wp_page+0x501/0x3620 mm/memory.c:3356
handle_pte_fault mm/memory.c:4927 [inline]
__handle_mm_fault mm/memory.c:5051 [inline]
handle_mm_fault+0x23a0/0x51c0 mm/memory.c:5197
do_user_addr_fault arch/x86/mm/fault.c:1407 [inline]
handle_page_fault arch/x86/mm/fault.c:1498 [inline]
exc_page_fault+0x5b1/0x7c0 arch/x86/mm/fault.c:1554
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
RIP: 0010:copy_user_short_string+0xd/0x40 arch/x86/lib/copy_user_64.S:233
Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 0f 1f 80 00 00 00 00 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a
RSP: 0018:ffffc900171773b0 EFLAGS: 00050202
RAX: ffffffff84301101 RBX: 00007fffffffefc8 RCX: 0000000000000007
RDX: 0000000000000000 RSI: ffffc90017177460 RDI: 0000000020000020
RBP: ffffc90017177510 R08: 0000000000000000 R09: fffff52002e2ee93
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000038
R13: ffffc90017177460 R14: 0000000020000020 R15: ffffc90017177460
copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline]
raw_copy_to_user arch/x86/include/asm/uaccess_64.h:58 [inline]
_copy_to_user+0xed/0x130 lib/usercopy.c:41
copy_to_user include/linux/uaccess.h:169 [inline]
fiemap_fill_next_extent+0x235/0x410 fs/ioctl.c:144
emit_fiemap_extent fs/btrfs/extent_io.c:3002 [inline]
fiemap_process_hole+0x5d2/0xaf0 fs/btrfs/extent_io.c:3221
extent_fiemap+0xe5b/0x2150 fs/btrfs/extent_io.c:3467
btrfs_fiemap+0x178/0x1e0 fs/btrfs/inode.c:7835
ioctl_fiemap fs/ioctl.c:219 [inline]
do_vfs_ioctl+0x19ba/0x2b10 fs/ioctl.c:810
__do_sys_ioctl fs/ioctl.c:868 [inline]
__se_sys_ioctl+0x81/0x160 fs/ioctl.c:856
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fa6f128c169
RSP: 002b:00007fa6f1f47168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fa6f13ac120 RCX: 00007fa6f128c169
RDX: 0000000020000000 RSI: 00000000c020660b RDI: 000000000000000b
RBP: 00007fa6f12e7ca1 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd4bd539af R14: 00007fa6f1f47300 R15: 0000000000022000
</TASK>
Showing all locks held in the system:
1 lock held by rcu_tasks_kthre/12:
#0: ffffffff8cf25530 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xd20 kernel/rcu/tasks.h:510
1 lock held by rcu_tasks_trace/13:
#0: ffffffff8cf25d30 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xd20 kernel/rcu/tasks.h:510
1 lock held by khungtaskd/28:
#0: ffffffff8cf25360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
2 locks held by kworker/u4:2/29:
#0: ffff8880b993be98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 kernel/sched/core.c:539
#1: ffff88801677c3f0 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xb2/0x1230 kernel/sched/core.c:4162
1 lock held by udevd/4429:
2 locks held by getty/4738:
#0: ffff88802c2d2098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:244
#1: ffffc900015902f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ab/0x1db0 drivers/tty/n_tty.c:2177
3 locks held by kworker/u4:8/6285:
#0: ffff888017764138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x77e/0x10e0 kernel/workqueue.c:2363
#1: ffffc900161c7d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7c8/0x10e0 kernel/workqueue.c:2365
#2: ffff888022f440e0 (&type->s_umount_key#57){++++}-{3:3}, at: trylock_super+0x1f/0xf0 fs/super.c:414
2 locks held by kworker/u4:13/18260:
#0: ffff88807adb0138 ((wq_completion)btrfs-flush_delalloc){+.+.}-{0:0}, at: process_one_work+0x77e/0x10e0 kernel/workqueue.c:2363
#1: ffffc9000376fd20 ((work_completion)(&work->normal_work)){+.+.}-{0:0}, at: process_one_work+0x7c8/0x10e0 kernel/workqueue.c:2365
4 locks held by syz-executor.4/21433:
#0: ffff888022f44460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write_file+0x5e/0x1f0 fs/namespace.c:438
#1: ffff88807dbaa038 (&fs_info->reclaim_bgs_lock){+.+.}-{3:3}, at: __btrfs_balance+0x4bf/0x2690 fs/btrfs/volumes.c:3916
#2: ffff88807dba8a20 (&fs_info->ordered_operations_mutex){+.+.}-{3:3}, at: btrfs_wait_ordered_roots+0x104/0x950 fs/btrfs/ordered-data.c:692
#3: ffff888035b7e850 (&root->ordered_extent_mutex){+.+.}-{3:3}, at: btrfs_wait_ordered_extents+0x1f3/0xe20 fs/btrfs/ordered-data.c:638
3 locks held by syz-executor.4/21494:
#0: ffff88807a333798 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_trylock include/linux/mmap_lock.h:136 [inline]
#0: ffff88807a333798 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault arch/x86/mm/fault.c:1348 [inline]
#0: ffff88807a333798 (&mm->mmap_lock){++++}-{3:3}, at: handle_page_fault arch/x86/mm/fault.c:1498 [inline]
#0: ffff88807a333798 (&mm->mmap_lock){++++}-{3:3}, at: exc_page_fault+0x18e/0x7c0 arch/x86/mm/fault.c:1554
#1: ffff888022f44558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x1a1/0x600 mm/memory.c:2925
#2: ffff88803a83d838 (&ei->i_mmap_lock){++++}-{3:3}, at: btrfs_page_mkwrite+0x425/0xc90 fs/btrfs/inode.c:8152
4 locks held by syz-executor.4/21503:
#0: ffff88803a83d9b0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline]
#0: ffff88803a83d9b0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: btrfs_inode_lock+0x60/0xd0 fs/btrfs/inode.c:169
#1: ffff88807a333798 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_trylock include/linux/mmap_lock.h:136 [inline]
#1: ffff88807a333798 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault arch/x86/mm/fault.c:1348 [inline]
#1: ffff88807a333798 (&mm->mmap_lock){++++}-{3:3}, at: handle_page_fault arch/x86/mm/fault.c:1498 [inline]
#1: ffff88807a333798 (&mm->mmap_lock){++++}-{3:3}, at: exc_page_fault+0x18e/0x7c0 arch/x86/mm/fault.c:1554
#2: ffff888022f44558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x1a1/0x600 mm/memory.c:2925
#3: ffff88803a83d838 (&ei->i_mmap_lock){++++}-{3:3}, at: btrfs_page_mkwrite+0x425/0xc90 fs/btrfs/inode.c:8152
1 lock held by udevd/21736:
#0: ffff888144d3d5c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:813 [inline]
#0: ffff888144d3d5c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf1/0x7c0 mm/readahead.c:226
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.3.0-rc5-syzkaller-00153-gaa318c48808c #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023
Call Trace:
<TASK>
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x1e7/0x2d0 lib/dump_stack.c:106
nmi_cpu_backtrace+0x498/0x4d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x187/0x300 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline]
watchdog+0xec2/0xf00 kernel/hung_task.c:379
kthread+0x270/0x300 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
</TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 4418 Comm: klogd Not tainted 6.3.0-rc5-syzkaller-00153-gaa318c48808c #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023
RIP: 0010:cmpxchg_double_slab+0x125/0x310 mm/slub.c:568
Code: 02 00 00 0f 84 8c 00 00 00 fb e9 86 00 00 00 41 8d 46 20 a8 0f 0f 85 64 01 00 00 4c 89 f9 4c 89 e2 4c 89 e8 f0 49 0f c7 4e 20 <b0> 01 74 67 eb 61 49 8b 46 08 a8 01 0f 85 7b 01 00 00 0f 1f 44 00
RSP: 0018:ffffc9000316f5e0 EFLAGS: 00000246
RAX: ffff888033bfe600 RBX: ffff888033bfd500 RCX: 0000000080070001
RDX: 0000000080070002 RSI: ffffea0000cefe00 RDI: ffff88801666d780
RBP: 0000000080070001 R08: ffff888033bfd500 R09: 0000000080070001
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000080070002
R13: ffff888033bfe600 R14: ffffea0000cefe00 R15: 0000000080070001
FS: 00007fe9cb069800(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005561cf783848 CR3: 000000001d213000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
__slab_free+0x9c/0x290 mm/slub.c:3635
qlist_free_all+0x22/0x60 mm/kasan/quarantine.c:187
kasan_quarantine_reduce+0x14b/0x160 mm/kasan/quarantine.c:294
__kasan_slab_alloc+0x23/0x70 mm/kasan/common.c:305
kasan_slab_alloc include/linux/kasan.h:186 [inline]
slab_post_alloc_hook+0x68/0x3a0 mm/slab.h:769
slab_alloc_node mm/slub.c:3452 [inline]
kmem_cache_alloc_node+0x157/0x350 mm/slub.c:3497
__alloc_skb+0x181/0x420 net/core/skbuff.c:596
alloc_skb include/linux/skbuff.h:1277 [inline]
alloc_skb_with_frags+0xa8/0x750 net/core/skbuff.c:6318
sock_alloc_send_pskb+0x919/0xa50 net/core/sock.c:2734
unix_dgram_sendmsg+0x5b5/0x2050 net/unix/af_unix.c:1944
sock_sendmsg_nosec net/socket.c:724 [inline]
sock_sendmsg net/socket.c:747 [inline]
__sys_sendto+0x475/0x630 net/socket.c:2142
__do_sys_sendto net/socket.c:2154 [inline]
__se_sys_sendto net/socket.c:2150 [inline]
__x64_sys_sendto+0xde/0xf0 net/socket.c:2150
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fe9cb2050ac
Code: 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 19 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 64 c3 0f 1f 00 55 48 83 ec 20 48 89 54 24 10
RSP: 002b:00007fff36b6e558 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe9cb2050ac
RDX: 000000000000004a RSI: 0000562083d755f0 RDI: 0000000000000003
RBP: 0000562083d6a910 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000014
R13: 0000000000000001 R14: 00007fe9cb38077d R15: 00007fff36b6e668
</TASK>