INFO: task kcompactd0:30 blocked for more than 143 seconds.
Not tainted 5.16.0-rc3-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kcompactd0 state:D stack:28456 pid: 30 ppid: 2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:4972 [inline]
__schedule+0xa9a/0x4940 kernel/sched/core.c:6253
schedule+0xd2/0x260 kernel/sched/core.c:6326
io_schedule+0xee/0x170 kernel/sched/core.c:8371
folio_wait_bit_common+0x4f2/0xa60 mm/filemap.c:1371
lock_page include/linux/pagemap.h:796 [inline]
__unmap_and_move mm/migrate.c:980 [inline]
unmap_and_move mm/migrate.c:1204 [inline]
migrate_pages+0xa5a/0x3810 mm/migrate.c:1481
compact_zone+0x1abb/0x3860 mm/compaction.c:2399
kcompactd_do_work+0x2c9/0x730 mm/compaction.c:2839
kcompactd+0x86b/0xf30 mm/compaction.c:2941
kthread+0x405/0x4f0 kernel/kthread.c:327
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
Showing all locks held in the system:
2 locks held by systemd/1:
#0: ffff8880200df8d0 (mapping.invalidate_lock){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:838 [inline]
#0: ffff8880200df8d0 (mapping.invalidate_lock){++++}-{3:3}, at: page_cache_ra_unbounded+0x1b3/0x940 mm/readahead.c:194
#1: ffffffff8bca4168 (pcpu_drain_mutex){+.+.}-{3:3}
, at: __drain_all_pages+0x4f/0x6c0 mm/page_alloc.c:3181
1 lock held by kthreadd/2:
4 locks held by kworker/0:0/5:
3 locks held by kworker/0:1/7:
4 locks held by kworker/1:0/20:
1 lock held by khungtaskd/27:
#0: ffffffff8bb80fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6458
4 locks held by kworker/1:1H/50:
1 lock held by kswapd0/98:
1 lock held by kswapd1/99:
3 locks held by kworker/1:3/1898:
1 lock held by systemd-journal/2967:
2 locks held by systemd-udevd/2972:
1 lock held by systemd-timesyn/3056:
2 locks held by in:imklog/6436:
4 locks held by rs:main Q:Reg/6437:
1 lock held by cron/6434:
1 lock held by syz-fuzzer/6532:
1 lock held by syz-fuzzer/6534:
4 locks held by kworker/0:2/28061:
4 locks held by kworker/1:1/29379:
#0: ffff8880135ce538 ((wq_completion)wg-kex-wg1#14){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff8880135ce538 ((wq_completion)wg-kex-wg1#14){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff8880135ce538 ((wq_completion)wg-kex-wg1#14){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1198 [inline]
#0: ffff8880135ce538 ((wq_completion)wg-kex-wg1#14){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:635 [inline]
#0: ffff8880135ce538 ((wq_completion)wg-kex-wg1#14){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:662 [inline]
#0: ffff8880135ce538 ((wq_completion)wg-kex-wg1#14){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 kernel/workqueue.c:2269
#1: ffffc9000513fdb0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((typeof(*((worker))) *)((worker)))); (typeof((typeof(*((worker))) *)((worker)))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 kernel/workqueue.c:2273
#2: ffff8880ad63d088 (&wg->static_identity.lock){++++}-{3:3}, at: wg_noise_handshake_consume_initiation+0xb8/0x850 drivers/net/wireguard/noise.c:565
#3: ffff8880a42cf978 (&handshake->lock){++++}-{3:3}, at: wg_noise_handshake_consume_initiation+0x564/0x850 drivers/net/wireguard/noise.c:599
4 locks held by kworker/0:4/29474:
2 locks held by kworker/u4:7/32159:
4 locks held by kworker/u4:8/32160:
#0: ffff888025aad138 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888025aad138 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888025aad138 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1198 [inline]
#0: ffff888025aad138 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:635 [inline]
#0: ffff888025aad138 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:662 [inline]
#0: ffff888025aad138 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 kernel/workqueue.c:2269
#1: ffffc9001423fdb0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 kernel/workqueue.c:2273
#2: ffff888080031088 (&wg->static_identity.lock){++++}-{3:3}, at: wg_noise_handshake_create_initiation+0xa9/0x620 drivers/net/wireguard/noise.c:496
#3: ffff888081fa8538 (&handshake->lock){++++}-{3:3}, at: wg_noise_handshake_create_initiation+0xbd/0x620 drivers/net/wireguard/noise.c:497
1 lock held by syz-executor.2/32281:
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.16.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x1b3/0x230 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:210 [inline]
watchdog+0xc1d/0xf50 kernel/hung_task.c:295
kthread+0x405/0x4f0 kernel/kthread.c:327
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 50 Comm: kworker/1:1H Not tainted 5.16.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_highpri fill_page_cache_func
RIP: 0010:kasan_check_range+0x17/0x180 mm/kasan/generic.c:188
Code: 48 0f 45 c1 48 89 c7 e8 17 c9 ec ff 0f 0b 0f 1f 44 00 00 48 85 f6 0f 84 3c 01 00 00 49 89 f9 41 54 44 0f b6 c2 49 01 f1 55 53 <0f> 82 18 01 00 00 48 b8 ff ff ff ff ff 7f ff ff 48 39 c7 0f 86 05
RSP: 0018:ffffc900012b7250 EFLAGS: 00000082
RAX: 0000000000000000 RBX: ffffea0006b0e4c8 RCX: ffffffff81a1e41a
RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffea0006b0e4f4
RBP: ffffea0006b0e4f4 R08: 0000000000000001 R09: ffffea0006b0e4f8
R10: ffffffff81a1e3ff R11: 0000000000000000 R12: ffffea0006b0e4d0
R13: 0000000000000003 R14: dffffc0000000000 R15: ffffea0006b0e4c0
FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3878824020 CR3: 0000000071c0b000 CR4: 00000000003506e0
Call Trace:
instrument_atomic_read_write include/linux/instrumented.h:101 [inline]
atomic_dec_and_test include/linux/atomic/atomic-instrumented.h:542 [inline]
page_ref_dec_and_test include/linux/page_ref.h:210 [inline]
put_page_testzero include/linux/mm.h:738 [inline]
move_pages_to_lru+0x3da/0x16b0 mm/vmscan.c:2298
shrink_inactive_list mm/vmscan.c:2397 [inline]
shrink_list mm/vmscan.c:2621 [inline]
shrink_lruvec+0xcb4/0x2660 mm/vmscan.c:2940
shrink_node_memcgs mm/vmscan.c:3129 [inline]
shrink_node+0x858/0x1eb0 mm/vmscan.c:3252
shrink_zones mm/vmscan.c:3485 [inline]
do_try_to_free_pages+0x4e2/0x1640 mm/vmscan.c:3541
try_to_free_pages+0x29f/0x750 mm/vmscan.c:3776
__perform_reclaim mm/page_alloc.c:4588 [inline]
__alloc_pages_direct_reclaim mm/page_alloc.c:4609 [inline]
__alloc_pages_slowpath.constprop.0+0xac7/0x20d0 mm/page_alloc.c:5007
__alloc_pages+0x412/0x500 mm/page_alloc.c:5382
alloc_pages+0x1a7/0x300 mm/mempolicy.c:2191
__get_free_pages+0x8/0x40 mm/page_alloc.c:5418
fill_page_cache_func+0xad/0x240 kernel/rcu/tree.c:3412
process_one_work+0x9b2/0x1690 kernel/workqueue.c:2298
worker_thread+0x658/0x11f0 kernel/workqueue.c:2445
kthread+0x405/0x4f0 kernel/kthread.c:327
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
----------------
Code disassembly (best guess):
0: 48 0f 45 c1 cmovne %rcx,%rax
4: 48 89 c7 mov %rax,%rdi
7: e8 17 c9 ec ff callq 0xffecc923
c: 0f 0b ud2
e: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1)
13: 48 85 f6 test %rsi,%rsi
16: 0f 84 3c 01 00 00 je 0x158
1c: 49 89 f9 mov %rdi,%r9
1f: 41 54 push %r12
21: 44 0f b6 c2 movzbl %dl,%r8d
25: 49 01 f1 add %rsi,%r9
28: 55 push %rbp
29: 53 push %rbx
* 2a: 0f 82 18 01 00 00 jb 0x148 <-- trapping instruction
30: 48 b8 ff ff ff ff ff movabs $0xffff7fffffffffff,%rax
37: 7f ff ff
3a: 48 39 c7 cmp %rax,%rdi
3d: 0f .byte 0xf
3e: 86 .byte 0x86
3f: 05 .byte 0x5