INFO: task syz-executor.1:14406 blocked for more than 143 seconds.
Not tainted 6.1.86-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.1 state:D stack:27856 pid:14406 ppid:11380 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5245 [inline]
__schedule+0x142d/0x4550 kernel/sched/core.c:6558
schedule+0xbf/0x180 kernel/sched/core.c:6634
rwsem_down_write_slowpath+0xea1/0x14b0 kernel/locking/rwsem.c:1189
inode_lock include/linux/fs.h:758 [inline]
open_last_lookups fs/namei.c:3549 [inline]
path_openat+0x7b6/0x2e60 fs/namei.c:3782
do_filp_open+0x230/0x480 fs/namei.c:3812
do_sys_openat2+0x13b/0x500 fs/open.c:1318
do_sys_open fs/open.c:1334 [inline]
__do_sys_open fs/open.c:1342 [inline]
__se_sys_open fs/open.c:1338 [inline]
__x64_sys_open+0x221/0x270 fs/open.c:1338
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7ffba607de69
RSP: 002b:00007ffba6d6f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 00007ffba61ac050 RCX: 00007ffba607de69
RDX: 0000000000000000 RSI: 00000000001c1042 RDI: 00000000200000c0
RBP: 00007ffba60ca47a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000006e R14: 00007ffba61ac050 R15: 00007ffccbfd4158
INFO: task syz-executor.1:14407 blocked for more than 144 seconds.
Not tainted 6.1.86-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.1 state:D stack:22696 pid:14407 ppid:11380 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5245 [inline]
__schedule+0x142d/0x4550 kernel/sched/core.c:6558
schedule+0xbf/0x180 kernel/sched/core.c:6634
rwsem_down_write_slowpath+0xea1/0x14b0 kernel/locking/rwsem.c:1189
inode_lock include/linux/fs.h:758 [inline]
open_last_lookups fs/namei.c:3549 [inline]
path_openat+0x7b6/0x2e60 fs/namei.c:3782
do_filp_open+0x230/0x480 fs/namei.c:3812
do_sys_openat2+0x13b/0x500 fs/open.c:1318
do_sys_open fs/open.c:1334 [inline]
__do_sys_openat fs/open.c:1350 [inline]
__se_sys_openat fs/open.c:1345 [inline]
__x64_sys_openat+0x243/0x290 fs/open.c:1345
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7ffba607de69
RSP: 002b:00007ffba6d4e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ffba61ac120 RCX: 00007ffba607de69
RDX: 00000000000026e1 RSI: 00000000200000c0 RDI: ffffffffffffff9c
RBP: 00007ffba60ca47a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000006e R14: 00007ffba61ac120 R15: 00007ffccbfd4158
INFO: task syz-executor.1:14451 blocked for more than 144 seconds.
Not tainted 6.1.86-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.1 state:D stack:26152 pid:14451 ppid:11380 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5245 [inline]
__schedule+0x142d/0x4550 kernel/sched/core.c:6558
schedule+0xbf/0x180 kernel/sched/core.c:6634
rwsem_down_write_slowpath+0xea1/0x14b0 kernel/locking/rwsem.c:1189
inode_lock_nested include/linux/fs.h:793 [inline]
filename_create+0x25c/0x530 fs/namei.c:3878
do_mkdirat+0xba/0x360 fs/namei.c:4123
__do_sys_mkdir fs/namei.c:4153 [inline]
__se_sys_mkdir fs/namei.c:4151 [inline]
__x64_sys_mkdir+0x6a/0x80 fs/namei.c:4151
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7ffba607de69
RSP: 002b:00007ffba6d2d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
RAX: ffffffffffffffda RBX: 00007ffba61ac1f0 RCX: 00007ffba607de69
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200008c0
RBP: 00007ffba60ca47a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000006e R14: 00007ffba61ac1f0 R15: 00007ffccbfd4158
INFO: task syz-executor.1:14453 blocked for more than 144 seconds.
Not tainted 6.1.86-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.1 state:D stack:27936 pid:14453 ppid:11380 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5245 [inline]
__schedule+0x142d/0x4550 kernel/sched/core.c:6558
schedule+0xbf/0x180 kernel/sched/core.c:6634
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6693
rwsem_down_read_slowpath kernel/locking/rwsem.c:1094 [inline]
__down_read_common kernel/locking/rwsem.c:1261 [inline]
__down_read kernel/locking/rwsem.c:1274 [inline]
down_read+0x6ff/0xa30 kernel/locking/rwsem.c:1522
inode_lock_shared include/linux/fs.h:768 [inline]
open_last_lookups fs/namei.c:3551 [inline]
path_openat+0x7a7/0x2e60 fs/namei.c:3782
do_filp_open+0x230/0x480 fs/namei.c:3812
do_sys_openat2+0x13b/0x500 fs/open.c:1318
do_sys_open fs/open.c:1334 [inline]
__do_sys_openat fs/open.c:1350 [inline]
__se_sys_openat fs/open.c:1345 [inline]
__x64_sys_openat+0x243/0x290 fs/open.c:1345
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7ffba607de69
RSP: 002b:00007ffba6d0c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ffba61ac2c0 RCX: 00007ffba607de69
RDX: 0000000000100002 RSI: 0000000020000040 RDI: ffffffffffffff9c
RBP: 00007ffba60ca47a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000006e R14: 00007ffba61ac2c0 R15: 00007ffccbfd4158
INFO: task syz-executor.1:14456 blocked for more than 145 seconds.
Not tainted 6.1.86-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.1 state:D stack:28296 pid:14456 ppid:11380 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5245 [inline]
__schedule+0x142d/0x4550 kernel/sched/core.c:6558
schedule+0xbf/0x180 kernel/sched/core.c:6634
rwsem_down_write_slowpath+0xea1/0x14b0 kernel/locking/rwsem.c:1189
inode_lock include/linux/fs.h:758 [inline]
open_last_lookups fs/namei.c:3549 [inline]
path_openat+0x7b6/0x2e60 fs/namei.c:3782
do_filp_open+0x230/0x480 fs/namei.c:3812
do_sys_openat2+0x13b/0x500 fs/open.c:1318
do_sys_open fs/open.c:1334 [inline]
__do_sys_openat fs/open.c:1350 [inline]
__se_sys_openat fs/open.c:1345 [inline]
__x64_sys_openat+0x243/0x290 fs/open.c:1345
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7ffba607de69
RSP: 002b:00007ffba45f00c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ffba61ac390 RCX: 00007ffba607de69
RDX: 000000000000275a RSI: 0000000020000080 RDI: ffffffffffffff9c
RBP: 00007ffba60ca47a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000006e R14: 00007ffba61ac390 R15: 00007ffccbfd4158
INFO: task syz-executor.1:14457 blocked for more than 146 seconds.
Not tainted 6.1.86-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.1 state:D stack:27688 pid:14457 ppid:11380 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5245 [inline]
__schedule+0x142d/0x4550 kernel/sched/core.c:6558
schedule+0xbf/0x180 kernel/sched/core.c:6634
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6693
rwsem_down_read_slowpath kernel/locking/rwsem.c:1094 [inline]
__down_read_common kernel/locking/rwsem.c:1261 [inline]
__down_read kernel/locking/rwsem.c:1274 [inline]
down_read+0x6ff/0xa30 kernel/locking/rwsem.c:1522
inode_lock_shared include/linux/fs.h:768 [inline]
open_last_lookups fs/namei.c:3551 [inline]
path_openat+0x7a7/0x2e60 fs/namei.c:3782
do_filp_open+0x230/0x480 fs/namei.c:3812
do_sys_openat2+0x13b/0x500 fs/open.c:1318
do_sys_open fs/open.c:1334 [inline]
__do_sys_openat fs/open.c:1350 [inline]
__se_sys_openat fs/open.c:1345 [inline]
__x64_sys_openat+0x243/0x290 fs/open.c:1345
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7ffba607de69
RSP: 002b:00007ffba43cd0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ffba61ac460 RCX: 00007ffba607de69
RDX: 0000000000007a05 RSI: 0000000020000380 RDI: ffffffffffffff9c
RBP: 00007ffba60ca47a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000001700 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000006e R14: 00007ffba61ac460 R15: 00007ffccbfd4158
Showing all locks held in the system:
1 lock held by rcu_tasks_kthre/12:
#0: ffffffff8d12ae10 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 kernel/rcu/tasks.h:516
1 lock held by rcu_tasks_trace/13:
#0: ffffffff8d12b610 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 kernel/rcu/tasks.h:516
2 locks held by kworker/0:1/14:
#0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#1: ffffc90000137d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
1 lock held by khungtaskd/28:
#0: ffffffff8d12ac40 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:350 [inline]
#0: ffffffff8d12ac40 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:791 [inline]
#0: ffffffff8d12ac40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 kernel/locking/lockdep.c:6494
2 locks held by getty/3301:
#0: ffff888028f8c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:244
#1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 drivers/tty/n_tty.c:2188
2 locks held by kworker/1:7/3610:
#0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#1: ffffc9000432fd20 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
2 locks held by kworker/1:15/5295:
#0: ffff8880b993aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 kernel/sched/core.c:537
#1: ffff8880b9927788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770 kernel/sched/psi.c:1000
3 locks held by kworker/1:18/5302:
#0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#1: ffffc90009aefd20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#2: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 net/switchdev/switchdev.c:104
4 locks held by kworker/0:17/5751:
#0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#1: ffffc90012c5fd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#2: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 net/core/link_watch.c:263
#3: ffffffff8d130238 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:323 [inline]
#3: ffffffff8d130238 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 kernel/rcu/tree_exp.h:962
2 locks held by kworker/u4:14/13303:
#0: ffff888012479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#1: ffffc9000353fd20 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
2 locks held by syz-executor.1/14401:
2 locks held by syz-executor.1/14406:
#0: ffff888055cba460 (sb_writers#43){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 fs/namespace.c:393
#1: ffff888071638188 (&type->i_mutex_dir_key#27){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
#1: ffff888071638188 (&type->i_mutex_dir_key#27){++++}-{3:3}, at: open_last_lookups fs/namei.c:3549 [inline]
#1: ffff888071638188 (&type->i_mutex_dir_key#27){++++}-{3:3}, at: path_openat+0x7b6/0x2e60 fs/namei.c:3782
2 locks held by syz-executor.1/14407:
#0: ffff888055cba460 (sb_writers#43){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 fs/namespace.c:393
#1: ffff888071638188 (&type->i_mutex_dir_key#27){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
#1: ffff888071638188 (&type->i_mutex_dir_key#27){++++}-{3:3}, at: open_last_lookups fs/namei.c:3549 [inline]
#1: ffff888071638188 (&type->i_mutex_dir_key#27){++++}-{3:3}, at: path_openat+0x7b6/0x2e60 fs/namei.c:3782
2 locks held by syz-executor.1/14451:
#0: ffff888055cba460 (sb_writers#43){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 fs/namespace.c:393
#1: ffff888071638188 (&type->i_mutex_dir_key#27/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:793 [inline]
#1: ffff888071638188 (&type->i_mutex_dir_key#27/1){+.+.}-{3:3}, at: filename_create+0x25c/0x530 fs/namei.c:3878
2 locks held by syz-executor.1/14453:
#0: ffff888055cba460 (sb_writers#43){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 fs/namespace.c:393
#1: ffff888071638188 (&type->i_mutex_dir_key#27){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline]
#1: ffff888071638188 (&type->i_mutex_dir_key#27){++++}-{3:3}, at: open_last_lookups fs/namei.c:3551 [inline]
#1: ffff888071638188 (&type->i_mutex_dir_key#27){++++}-{3:3}, at: path_openat+0x7a7/0x2e60 fs/namei.c:3782
2 locks held by syz-executor.1/14456:
#0: ffff888055cba460 (sb_writers#43){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 fs/namespace.c:393
#1: ffff888071638188 (&type->i_mutex_dir_key#27){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
#1: ffff888071638188 (&type->i_mutex_dir_key#27){++++}-{3:3}, at: open_last_lookups fs/namei.c:3549 [inline]
#1: ffff888071638188 (&type->i_mutex_dir_key#27){++++}-{3:3}, at: path_openat+0x7b6/0x2e60 fs/namei.c:3782
2 locks held by syz-executor.1/14457:
#0: ffff888055cba460 (sb_writers#43){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 fs/namespace.c:393
#1: ffff888071638188 (&type->i_mutex_dir_key#27){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline]
#1: ffff888071638188 (&type->i_mutex_dir_key#27){++++}-{3:3}, at: open_last_lookups fs/namei.c:3551 [inline]
#1: ffff888071638188 (&type->i_mutex_dir_key#27){++++}-{3:3}, at: path_openat+0x7a7/0x2e60 fs/namei.c:3782
5 locks held by kworker/u4:26/15926:
#0: ffff888012616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#1: ffffc90004f5fd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#2: ffffffff8e28dbd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 net/core/net_namespace.c:563
#3: ffff8880217762f8 (&devlink->lock_key#18){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x130/0x2c0 net/devlink/leftover.c:12520
#4: ffffffff8d130100 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5f0 kernel/rcu/tree.c:4018
1 lock held by syz-executor.1/16428:
#0: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
#0: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 net/core/rtnetlink.c:6118
1 lock held by syz-executor.4/16450:
#0: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
#0: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 net/core/rtnetlink.c:6118
1 lock held by syz-executor.0/16467:
#0: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: dev_ethtool+0x1f4/0x1540 net/ethtool/ioctl.c:3041
2 locks held by dhcpcd/16471:
#0: ffff88803c62c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1745 [inline]
#0: ffff88803c62c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xd00 net/packet/af_packet.c:3198
#1: ffffffff8d130238 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:323 [inline]
#1: ffffffff8d130238 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 kernel/rcu/tree_exp.h:962
1 lock held by syz-executor.3/16472:
#0: ffff8880b993aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 kernel/sched/core.c:537
3 locks held by kvm-nx-lpage-re/16474:
#0: ffffffff8d153468 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_lock include/linux/cgroup.h:442 [inline]
#0: ffffffff8d153468 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_attach_task_all+0x23/0xe0 kernel/cgroup/cgroup-v1.c:61
#1: ffffffff8cfc8030 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_attach_lock+0xd/0x30 kernel/cgroup/cgroup.c:2444
#2: ffffffff8d153650 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_attach_task_all+0x2d/0xe0 kernel/cgroup/cgroup-v1.c:62
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.86-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x1e3/0x2cb lib/dump_stack.c:106
nmi_cpu_backtrace+0x4e1/0x560 lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline]
watchdog+0xf88/0xfd0 kernel/hung_task.c:377
kthread+0x28d/0x320 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 16428 Comm: syz-executor.1 Not tainted 6.1.86-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:35 [inline]
RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:70 [inline]
RIP: 0010:arch_local_irq_save arch/x86/include/asm/irqflags.h:106 [inline]
RIP: 0010:lock_release+0x17a/0xa20 kernel/locking/lockdep.c:5678
Code: eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 7f 7a 77 00 4c 89 6c 24 48 48 c7 84 24 b0 00 00 00 00 00 00 00 9c 8f 84 24 b0 00 00 00 <42> 80 3c 3b 00 74 08 4c 89 f7 e8 d7 79 77 00 4c 8b ac 24 b0 00 00
RSP: 0018:ffffc900046c70a0 EFLAGS: 00000046
RAX: 0000000000000000 RBX: 1ffff920008d8e2a RCX: ffffffff816a8a37
RDX: 0000000000000000 RSI: ffffffff8b3d42c0 RDI: ffffffff8b3d4280
RBP: ffffc900046c71d0 R08: dffffc0000000000 R09: fffffbfff1ce6ede
R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920008d8e20
R13: ffffffff81e8df85 R14: ffffc900046c7150 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa1162d66e4 CR3: 0000000063105000 CR4: 00000000003526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
folio_memcg_lock+0x1b0/0x380 mm/memcontrol.c:2109
page_remove_rmap+0x2e/0xed0 mm/rmap.c:1426
zap_pte_range mm/memory.c:1453 [inline]
zap_pmd_range mm/memory.c:1574 [inline]
zap_pud_range mm/memory.c:1603 [inline]
zap_p4d_range mm/memory.c:1624 [inline]
unmap_page_range+0x1217/0x2740 mm/memory.c:1645
unmap_vmas+0x48b/0x640 mm/memory.c:1730
exit_mmap+0x252/0x9f0 mm/mmap.c:3227
__mmput+0x115/0x3c0 kernel/fork.c:1199
exit_mm+0x226/0x300 kernel/exit.c:563
do_exit+0x9f6/0x26a0 kernel/exit.c:856
do_group_exit+0x202/0x2b0 kernel/exit.c:1019
get_signal+0x16f7/0x17d0 kernel/signal.c:2862
arch_do_signal_or_restart+0xb0/0x1a10 arch/x86/kernel/signal.c:871
exit_to_user_mode_loop+0x6a/0x100 kernel/entry/common.c:174
exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:210
__syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline]
syscall_exit_to_user_mode+0x60/0x270 kernel/entry/common.c:303
do_syscall_64+0x47/0xb0 arch/x86/entry/common.c:87
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fb2d8e7de69
Code: Unable to access opcode bytes at 0x7fb2d8e7de3f.
RSP: 002b:00007fb2d9c740c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: 0000000000000068 RBX: 00007fb2d8fabf80 RCX: 00007fb2d8e7de69
RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004
RBP: 00007fb2d8eca47a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007fb2d8fabf80 R15: 00007ffdd0225608