INFO: task kcompactd0:30 blocked for more than 142 seconds.
Not tainted 5.15.0-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kcompactd0 state:D stack:28032 pid: 30 ppid: 2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:4969 [inline]
__schedule+0xa9a/0x4940 kernel/sched/core.c:6250
schedule+0xd2/0x260 kernel/sched/core.c:6323
io_schedule+0xee/0x170 kernel/sched/core.c:8368
folio_wait_bit_common+0x4f2/0xa60 mm/filemap.c:1371
lock_page include/linux/pagemap.h:747 [inline]
__unmap_and_move mm/migrate.c:986 [inline]
unmap_and_move mm/migrate.c:1210 [inline]
migrate_pages+0xa5a/0x3810 mm/migrate.c:1487
compact_zone+0x1abb/0x3860 mm/compaction.c:2399
kcompactd_do_work+0x2c9/0x730 mm/compaction.c:2839
kcompactd+0x86b/0xf30 mm/compaction.c:2941
kthread+0x405/0x4f0 kernel/kthread.c:327
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
Showing all locks held in the system:
1 lock held by khungtaskd/27:
#0: ffffffff8b980ea0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6458
1 lock held by khugepaged/33:
1 lock held by kswapd0/98:
1 lock held by kswapd1/99:
1 lock held by systemd-journal/2962:
1 lock held by systemd-timesyn/3056:
1 lock held by in:imklog/6221:
1 lock held by cron/6217:
1 lock held by syz-fuzzer/6531:
#0: ffff88806c22eb10 (mapping.invalidate_lock){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:838 [inline]
#0: ffff88806c22eb10 (mapping.invalidate_lock){++++}-{3:3}, at: page_cache_ra_unbounded+0x1b3/0x940 mm/readahead.c:194
1 lock held by syz-fuzzer/6533:
4 locks held by kworker/u4:6/8560:
3 locks held by kworker/0:5/20720:
2 locks held by syz-executor.3/20746:
#0: ffff888017185b08 (mapping.invalidate_lock#2){.+.+}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:838 [inline]
#0: ffff888017185b08 (mapping.invalidate_lock#2){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x1b3/0x940 mm/readahead.c:194
#1: ffffffff8baa4088 (pcpu_drain_mutex){+.+.}-{3:3}, at: __drain_all_pages+0x4f/0x6c0 mm/page_alloc.c:3181
3 locks held by kworker/1:4/20752:
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:105
nmi_trigger_cpumask_backtrace+0x1ae/0x220 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:210 [inline]
watchdog+0xc1d/0xf50 kernel/hung_task.c:295
kthread+0x405/0x4f0 kernel/kthread.c:327
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 8560 Comm: kworker/u4:6 Not tainted 5.15.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: writeback wb_workfn (flush-8:0)
RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:129 [inline]
RIP: 0010:memory_is_poisoned mm/kasan/generic.c:159 [inline]
RIP: 0010:check_region_inline mm/kasan/generic.c:180 [inline]
RIP: 0010:kasan_check_range+0x55/0x180 mm/kasan/generic.c:189
Code: 86 05 01 00 00 49 83 e9 01 48 89 fd 48 b8 00 00 00 00 00 fc ff df 4d 89 ca 48 c1 ed 03 49 c1 ea 03 48 01 c5 49 01 c2 48 89 e8 <49> 8d 5a 01 48 89 da 48 29 ea 48 83 fa 10 7e 63 41 89 eb 41 83 e3
RSP: 0018:ffffc9001702e0e8 EFLAGS: 00000086
RAX: fffffbfff1fa9953 RBX: 00000000000004f1 RCX: ffffffff815bb2fd
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8fd4ca98
RBP: fffffbfff1fa9953 R08: 0000000000000000 R09: ffffffff8fd4ca9f
R10: fffffbfff1fa9953 R11: 0000000000000000 R12: 0000000000000002
R13: ffff88807f2600c0 R14: ffff88807f260b20 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4e81a1c303 CR3: 000000001ca0e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
instrument_atomic_read include/linux/instrumented.h:71 [inline]
test_bit include/asm-generic/bitops/instrumented-non-atomic.h:134 [inline]
hlock_class kernel/locking/lockdep.c:199 [inline]
check_wait_context kernel/locking/lockdep.c:4725 [inline]
__lock_acquire+0x6ed/0x54a0 kernel/locking/lockdep.c:4977
lock_acquire kernel/locking/lockdep.c:5637 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5602
rcu_lock_acquire include/linux/rcupdate.h:268 [inline]
rcu_read_lock include/linux/rcupdate.h:688 [inline]
page_evictable+0x38/0x360 mm/internal.h:123
move_pages_to_lru+0x2ba/0x16b0 mm/vmscan.c:2278
shrink_inactive_list mm/vmscan.c:2397 [inline]
shrink_list mm/vmscan.c:2621 [inline]
shrink_lruvec+0xcb4/0x2660 mm/vmscan.c:2940
shrink_node_memcgs mm/vmscan.c:3129 [inline]
shrink_node+0x858/0x1eb0 mm/vmscan.c:3252
shrink_zones mm/vmscan.c:3485 [inline]
do_try_to_free_pages+0x4e2/0x1640 mm/vmscan.c:3541
try_to_free_pages+0x29f/0x750 mm/vmscan.c:3776
__perform_reclaim mm/page_alloc.c:4588 [inline]
__alloc_pages_direct_reclaim mm/page_alloc.c:4609 [inline]
__alloc_pages_slowpath.constprop.0+0xac7/0x20d0 mm/page_alloc.c:5007
__alloc_pages+0x412/0x500 mm/page_alloc.c:5382
__alloc_pages_node include/linux/gfp.h:570 [inline]
kmem_getpages mm/slab.c:1377 [inline]
cache_grow_begin+0x75/0x470 mm/slab.c:2593
fallback_alloc+0x1e4/0x2e0 mm/slab.c:3140
__do_cache_alloc mm/slab.c:3282 [inline]
slab_alloc mm/slab.c:3316 [inline]
kmem_cache_alloc+0x367/0x560 mm/slab.c:3507
mempool_alloc+0x146/0x350 mm/mempool.c:392
bvec_alloc+0x16b/0x200 block/bio.c:206
bio_alloc_bioset+0x376/0x4a0 block/bio.c:481
bio_alloc include/linux/bio.h:371 [inline]
io_submit_init_bio fs/ext4/page-io.c:401 [inline]
io_submit_add_bh fs/ext4/page-io.c:425 [inline]
ext4_bio_write_page+0xb28/0x1ef0 fs/ext4/page-io.c:549
mpage_submit_page+0x11e/0x2a0 fs/ext4/inode.c:2098
mpage_process_page_bufs+0x681/0x7a0 fs/ext4/inode.c:2212
mpage_prepare_extent_to_map+0x94f/0xe60 fs/ext4/inode.c:2624
ext4_writepages+0x926/0x3b90 fs/ext4/inode.c:2752
do_writepages+0x1ab/0x690 mm/page-writeback.c:2364
__writeback_single_inode+0x126/0xff0 fs/fs-writeback.c:1616
writeback_sb_inodes+0x53d/0xf30 fs/fs-writeback.c:1881
__writeback_inodes_wb+0xc6/0x280 fs/fs-writeback.c:1951
wb_writeback+0x7f8/0xc30 fs/fs-writeback.c:2056
wb_check_old_data_flush fs/fs-writeback.c:2156 [inline]
wb_do_writeback fs/fs-writeback.c:2209 [inline]
wb_workfn+0x8cf/0x12d0 fs/fs-writeback.c:2238
process_one_work+0x9b2/0x1690 kernel/workqueue.c:2298
worker_thread+0x658/0x11f0 kernel/workqueue.c:2445
kthread+0x405/0x4f0 kernel/kthread.c:327
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
----------------
Code disassembly (best guess):
0: 86 05 01 00 00 49 xchg %al,0x49000001(%rip) # 0x49000007
6: 83 e9 01 sub $0x1,%ecx
9: 48 89 fd mov %rdi,%rbp
c: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax
13: fc ff df
16: 4d 89 ca mov %r9,%r10
19: 48 c1 ed 03 shr $0x3,%rbp
1d: 49 c1 ea 03 shr $0x3,%r10
21: 48 01 c5 add %rax,%rbp
24: 49 01 c2 add %rax,%r10
27: 48 89 e8 mov %rbp,%rax
* 2a: 49 8d 5a 01 lea 0x1(%r10),%rbx <-- trapping instruction
2e: 48 89 da mov %rbx,%rdx
31: 48 29 ea sub %rbp,%rdx
34: 48 83 fa 10 cmp $0x10,%rdx
38: 7e 63 jle 0x9d
3a: 41 89 eb mov %ebp,%r11d
3d: 41 rex.B
3e: 83 .byte 0x83
3f: e3 .byte 0xe3