INFO: task syz-executor.3:26004 blocked for more than 143 seconds.
Not tainted 5.16.0-rc4-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3 state:D stack:29304 pid:26004 ppid: 8606 flags:0x00000004
Call Trace:
context_switch kernel/sched/core.c:4972 [inline]
__schedule+0xa9a/0x4940 kernel/sched/core.c:6253
schedule+0xd2/0x260 kernel/sched/core.c:6326
rwsem_down_write_slowpath+0x634/0x1110 kernel/locking/rwsem.c:1151
__down_write_common kernel/locking/rwsem.c:1268 [inline]
__down_write_common kernel/locking/rwsem.c:1265 [inline]
__down_write kernel/locking/rwsem.c:1277 [inline]
down_write+0x135/0x150 kernel/locking/rwsem.c:1524
filemap_invalidate_lock include/linux/fs.h:828 [inline]
blkdev_fallocate+0x1e2/0x420 block/fops.c:625
vfs_fallocate+0x48d/0xe10 fs/open.c:307
madvise_remove mm/madvise.c:925 [inline]
madvise_vma mm/madvise.c:987 [inline]
do_madvise.part.0+0xb60/0x2250 mm/madvise.c:1202
do_madvise mm/madvise.c:1228 [inline]
__do_sys_madvise mm/madvise.c:1228 [inline]
__se_sys_madvise mm/madvise.c:1226 [inline]
__x64_sys_madvise+0x113/0x150 mm/madvise.c:1226
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fe9204c9ae9
RSP: 002b:00007fe91f3fd188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
RAX: ffffffffffffffda RBX: 00007fe9205dd0f0 RCX: 00007fe9204c9ae9
RDX: 0000000000000009 RSI: 0000000000600003 RDI: 0000000020000000
RBP: 00007fe920523ff7 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc965a6c9f R14: 00007fe91f3fd300 R15: 0000000000022000
Showing all locks held in the system:
3 locks held by kworker/1:0/20:
1 lock held by khungtaskd/27:
#0: ffffffff8bb811a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6458
1 lock held by kswapd0/98:
1 lock held by kswapd1/99:
2 locks held by systemd-journal/2952:
1 lock held by cron/6434:
1 lock held by in:imklog/6440:
#0: ffff88806e5371b0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 fs/file.c:994
9 locks held by rs:main Q:Reg/6441:
2 locks held by agetty/6446:
#0: ffff888020518098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:252
#1: ffffc900031db2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xcf0/0x1230 drivers/tty/n_tty.c:2113
1 lock held by syz-fuzzer/6532:
1 lock held by syz-fuzzer/6551:
3 locks held by kworker/0:7/8225:
1 lock held by syz-executor.3/25954:
1 lock held by syz-executor.3/26004:
#0: ffff8880172b0988 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock include/linux/fs.h:828 [inline]
#0: ffff8880172b0988 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e2/0x420 block/fops.c:625
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.16.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x1b3/0x230 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:210 [inline]
watchdog+0xc1d/0xf50 kernel/hung_task.c:295
kthread+0x405/0x4f0 kernel/kthread.c:327
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 99 Comm: kswapd1 Not tainted 5.16.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__folio_memcg include/linux/memcontrol.h:397 [inline]
RIP: 0010:folio_memcg+0x107/0x230 include/linux/memcontrol.h:445
Code: 24 31 ff 49 c1 ec 09 41 83 e4 01 4c 89 e6 e8 d0 53 d5 ff 4d 85 e4 0f 85 a5 00 00 00 e8 32 51 d5 ff 48 83 e3 fc e8 29 51 d5 ff <49> 89 dc 5b 4c 89 e0 5d 41 5c c3 e8 19 51 d5 ff 48 89 ef e8 71 fe
RSP: 0018:ffffc90001a676d8 EFLAGS: 00000093
RAX: 0000000000000000 RBX: ffff8880114d4000 RCX: 0000000000000000
RDX: ffff888018144100 RSI: ffffffff81a19347 RDI: 0000000000000003
RBP: ffffea00089f3f40 R08: 0000000000000000 R09: ffffea00089f3f47
R10: ffffffff81a19330 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000001 R14: dffffc0000000000 R15: ffffea00089f3f40
FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000c4e000 CR3: 000000006cfe9000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
folio_matches_lruvec include/linux/memcontrol.h:1570 [inline]
move_pages_to_lru+0x57e/0x16b0 mm/vmscan.c:2315
shrink_inactive_list mm/vmscan.c:2397 [inline]
shrink_list mm/vmscan.c:2621 [inline]
shrink_lruvec+0xcb4/0x2660 mm/vmscan.c:2940
shrink_node_memcgs mm/vmscan.c:3129 [inline]
shrink_node+0x858/0x1eb0 mm/vmscan.c:3252
kswapd_shrink_node mm/vmscan.c:4022 [inline]
balance_pgdat+0x8a0/0x1490 mm/vmscan.c:4213
kswapd+0x5ff/0xe10 mm/vmscan.c:4473
kthread+0x405/0x4f0 kernel/kthread.c:327
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
----------------
Code disassembly (best guess):
0: 24 31 and $0x31,%al
2: ff 49 c1 decl -0x3f(%rcx)
5: ec in (%dx),%al
6: 09 41 83 or %eax,-0x7d(%rcx)
9: e4 01 in $0x1,%al
b: 4c 89 e6 mov %r12,%rsi
e: e8 d0 53 d5 ff callq 0xffd553e3
13: 4d 85 e4 test %r12,%r12
16: 0f 85 a5 00 00 00 jne 0xc1
1c: e8 32 51 d5 ff callq 0xffd55153
21: 48 83 e3 fc and $0xfffffffffffffffc,%rbx
25: e8 29 51 d5 ff callq 0xffd55153
* 2a: 49 89 dc mov %rbx,%r12 <-- trapping instruction
2d: 5b pop %rbx
2e: 4c 89 e0 mov %r12,%rax
31: 5d pop %rbp
32: 41 5c pop %r12
34: c3 retq
35: e8 19 51 d5 ff callq 0xffd55153
3a: 48 89 ef mov %rbp,%rdi
3d: e8 .byte 0xe8
3e: 71 fe jno 0x3e