INFO: task syz-executor.3:11304 blocked for more than 143 seconds. Not tainted 5.15.127-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.3 state:D stack:28736 pid:11304 ppid: 3544 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5026 [inline] __schedule+0x12c4/0x4590 kernel/sched/core.c:6372 schedule+0x11b/0x1f0 kernel/sched/core.c:6455 rwsem_down_write_slowpath+0xebb/0x15c0 kernel/locking/rwsem.c:1157 __down_write_common kernel/locking/rwsem.c:1284 [inline] __down_write kernel/locking/rwsem.c:1293 [inline] down_write+0x164/0x170 kernel/locking/rwsem.c:1542 filemap_invalidate_lock include/linux/fs.h:832 [inline] blkdev_fallocate+0x257/0x3d0 block/fops.c:600 vfs_fallocate+0x54a/0x6b0 fs/open.c:308 ksys_fallocate fs/open.c:331 [inline] __do_sys_fallocate fs/open.c:339 [inline] __se_sys_fallocate fs/open.c:337 [inline] __x64_sys_fallocate+0xb9/0x100 fs/open.c:337 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x61/0xcb RIP: 0033:0x7f623dcb5ae9 RSP: 002b:00007f623c2160c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d RAX: ffffffffffffffda RBX: 00007f623ddd5050 RCX: 00007f623dcb5ae9 RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 RBP: 00007f623dd0147a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000001002000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f623ddd5050 R15: 00007fff67a654c8 Showing all locks held in the system: 1 lock held by khungtaskd/27: #0: ffffffff8c91f0a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 2 locks held by getty/3244: #0: ffff888024d41098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:252 #1: ffffc90001fe62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 drivers/tty/n_tty.c:2158 3 locks held by kworker/u4:8/3980: 2 locks held by syz-executor.3/11301: 1 lock held by syz-executor.3/11304: #0: ffff8880120e7338 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock include/linux/fs.h:832 [inline] #0: ffff8880120e7338 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x257/0x3d0 block/fops.c:600 8 locks held by syz-executor.3/11382: ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.127-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1e3/0x2cb lib/dump_stack.c:106 nmi_cpu_backtrace+0x46a/0x4a0 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x181/0x2a0 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:210 [inline] watchdog+0xe72/0xeb0 kernel/hung_task.c:295 kthread+0x3f6/0x4f0 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 11382 Comm: syz-executor.3 Not tainted 5.15.127-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 RIP: 0010:constant_test_bit arch/x86/include/asm/bitops.h:207 [inline] RIP: 0010:test_bit include/asm-generic/bitops/instrumented-non-atomic.h:135 [inline] RIP: 0010:PageLRU include/linux/page-flags.h:350 [inline] RIP: 0010:isolate_lru_pages+0x4c3/0x1630 mm/vmscan.c:1947 Code: 29 05 00 00 e8 1e 8b d0 ff 4d 89 e6 4c 8b 6c 24 10 4c 89 f7 be 08 00 00 00 e8 89 2c 1a 00 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 e3 2a 1a 00 48 8b 44 24 20 48 01 84 24 88 00 00 RSP: 0018:ffffc90002e5e4c0 EFLAGS: 00000046 RAX: 1ffffd40004f0700 RBX: 0000000000000000 RCX: ffffffff81af88d7 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0002783800 RBP: ffffc90002e5e6d0 R08: dffffc0000000000 R09: fffff940004f0701 R10: 0000000000000000 R11: dffffc0000000001 R12: ffffea0002783800 R13: ffffea0002783808 R14: ffffea0002783800 R15: dffffc0000000000 FS: 0000555556698480(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f078df1c978 CR3: 0000000082585000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: shrink_inactive_list mm/vmscan.c:2201 [inline] shrink_list mm/vmscan.c:2443 [inline] shrink_lruvec+0x131c/0x2b90 mm/vmscan.c:2762 shrink_node_memcgs mm/vmscan.c:2949 [inline] shrink_node+0x10a7/0x25d0 mm/vmscan.c:3072 shrink_zones mm/vmscan.c:3275 [inline] do_try_to_free_pages+0x650/0x1670 mm/vmscan.c:3330 try_to_free_mem_cgroup_pages+0x44c/0xa60 mm/vmscan.c:3644 try_charge_memcg+0x4f4/0x1530 mm/memcontrol.c:2651 obj_cgroup_charge_pages+0xab/0x1d0 mm/memcontrol.c:3014 __memcg_kmem_charge_page+0x325/0x3a0 mm/memcontrol.c:3054 __alloc_pages+0x2b3/0x700 mm/page_alloc.c:5438 __pte_alloc_one include/asm-generic/pgalloc.h:63 [inline] pte_alloc_one+0x86/0x360 arch/x86/mm/pgtable.c:33 __pte_alloc+0x75/0x210 mm/memory.c:439 copy_pte_range mm/memory.c:1021 [inline] copy_pmd_range mm/memory.c:1156 [inline] copy_pud_range mm/memory.c:1193 [inline] copy_p4d_range mm/memory.c:1217 [inline] copy_page_range+0x37cc/0x43b0 mm/memory.c:1290 dup_mmap kernel/fork.c:614 [inline] dup_mm kernel/fork.c:1457 [inline] copy_mm+0xc64/0x1370 kernel/fork.c:1509 copy_process+0x1816/0x3ef0 kernel/fork.c:2198 kernel_clone+0x210/0x960 kernel/fork.c:2596 __do_sys_clone kernel/fork.c:2713 [inline] __se_sys_clone kernel/fork.c:2697 [inline] __x64_sys_clone+0x23f/0x290 kernel/fork.c:2697 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x61/0xcb RIP: 0033:0x7f10a16b6b13 Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 RSP: 002b:00007ffd58688a48 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a16b6b13 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 R10: 0000555556698750 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001