INFO: task syz-executor.3:10565 blocked for more than 143 seconds.
Not tainted 6.1.0-rc3-syzkaller-00152-gf2f32f8af2b0 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3 state:D stack:25680 pid:10565 ppid:3644 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5191 [inline]
__schedule+0x8fc/0xda0 kernel/sched/core.c:6503
schedule+0xcb/0x190 kernel/sched/core.c:6579
schedule_timeout+0xac/0x300 kernel/time/timer.c:1911
do_wait_for_common+0x3ea/0x560 kernel/sched/completion.c:85
__wait_for_common kernel/sched/completion.c:106 [inline]
wait_for_common kernel/sched/completion.c:117 [inline]
wait_for_completion+0x46/0x60 kernel/sched/completion.c:138
f2fs_issue_checkpoint+0x30a/0x4f0
iterate_supers+0x137/0x1f0 fs/super.c:724
ksys_sync+0xd5/0x1c0 fs/sync.c:104
__do_sys_sync+0xa/0x10 fs/sync.c:113
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f3a2bc8b5a9
RSP: 002b:00007f3a2c935168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
RAX: ffffffffffffffda RBX: 00007f3a2bdac050 RCX: 00007f3a2bc8b5a9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007f3a2bce67b0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe0ffef25f R14: 00007f3a2c935300 R15: 0000000000022000
INFO: task syz-executor.3:10572 blocked for more than 144 seconds.
Not tainted 6.1.0-rc3-syzkaller-00152-gf2f32f8af2b0 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3 state:D stack:28616 pid:10572 ppid:3644 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5191 [inline]
__schedule+0x8fc/0xda0 kernel/sched/core.c:6503
schedule+0xcb/0x190 kernel/sched/core.c:6579
schedule_timeout+0xac/0x300 kernel/time/timer.c:1911
do_wait_for_common+0x3ea/0x560 kernel/sched/completion.c:85
__wait_for_common kernel/sched/completion.c:106 [inline]
wait_for_common kernel/sched/completion.c:117 [inline]
wait_for_completion+0x46/0x60 kernel/sched/completion.c:138
f2fs_issue_checkpoint+0x30a/0x4f0
iterate_supers+0x137/0x1f0 fs/super.c:724
ksys_sync+0xd5/0x1c0 fs/sync.c:104
__do_sys_sync+0xa/0x10 fs/sync.c:113
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f3a2bc8b5a9
RSP: 002b:00007f3a2c914168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
RAX: ffffffffffffffda RBX: 00007f3a2bdac120 RCX: 00007f3a2bc8b5a9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007f3a2bce67b0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe0ffef25f R14: 00007f3a2c914300 R15: 0000000000022000
Showing all locks held in the system:
1 lock held by rcu_tasks_kthre/12:
#0: ffffffff8cd1f5b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 kernel/rcu/tasks.h:507
1 lock held by rcu_tasks_trace/13:
#0: ffffffff8cd1fdb0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 kernel/rcu/tasks.h:507
1 lock held by khungtaskd/28:
#0: ffffffff8cd1f3e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
2 locks held by getty/3284:
#0:
ffff88814b0e2098
(
&tty->ldisc_sem
){++++}-{0:0}
, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:244
#1:
ffffc900031262f0
(
&ldata->atomic_read_lock
){+.+.}-{3:3}
, at: n_tty_read+0x6e8/0x1e50 drivers/tty/n_tty.c:2177
3 locks held by kworker/0:4/3699:
#0:
ffff888012064d38
(
(wq_completion)events
){+.+.}-{0:0}
, at: process_one_work+0x796/0xd10 kernel/workqueue.c:2262
#1:
ffffc90004777d00
(
(linkwatch_work).work
){+.+.}-{0:0}
, at: process_one_work+0x7d0/0xd10 kernel/workqueue.c:2264
#2:
ffffffff8ddda748
(
rtnl_mutex
){+.+.}-{3:3}
, at: linkwatch_event+0xa/0x50 net/core/link_watch.c:263
2 locks held by kworker/u4:7/3762:
2 locks held by kworker/1:10/5939:
#0:
ffff888012066538
(
(wq_completion)rcu_gp
){+.+.}-{0:0}
, at: process_one_work+0x796/0xd10 kernel/workqueue.c:2262
#1: ffffc90014d47d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0xd10 kernel/workqueue.c:2264
3 locks held by kworker/1:11/6015:
#0: ffff88814a9bb538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x796/0xd10 kernel/workqueue.c:2262
#1: ffffc900150d7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0xd10 kernel/workqueue.c:2264
#2: ffffffff8ddda748 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd8/0x16e0 net/ipv6/addrconf.c:4083
1 lock held by syz-executor.3/10565:
#0: ffff888079c8a0e0 (&type->s_umount_key#72){++++}-{3:3}, at: iterate_supers+0xb0/0x1f0 fs/super.c:722
1 lock held by syz-executor.3/10572:
#0: ffff888079c8a0e0 (&type->s_umount_key#72){++++}-{3:3}, at: iterate_supers+0xb0/0x1f0 fs/super.c:722
2 locks held by f2fs_ckpt-7:3/10568:
1 lock held by syz-executor.5/10719:
#0: ffff888079c8a0e0 (&type->s_umount_key#72){++++}-{3:3}, at: iterate_supers+0xb0/0x1f0 fs/super.c:722
1 lock held by syz-executor.5/10729:
#0: ffff888079c8a0e0 (&type->s_umount_key#72){++++}-{3:3}, at: iterate_supers+0xb0/0x1f0 fs/super.c:722
1 lock held by syz-executor.5/10736:
#0: ffff888079c8a0e0 (&type->s_umount_key#72){++++}-{3:3}, at: iterate_supers+0xb0/0x1f0 fs/super.c:722
1 lock held by syz-executor.5/10737:
#0: ffff888079c8a0e0 (&type->s_umount_key#72){++++}-{3:3}, at: iterate_supers+0xb0/0x1f0 fs/super.c:722
1 lock held by syz-executor.5/10739:
#0: ffff888079c8a0e0 (&type->s_umount_key#72){++++}-{3:3}, at: iterate_supers+0xb0/0x1f0 fs/super.c:722
1 lock held by syz-executor.5/10745:
#0: ffff888079c8a0e0 (&type->s_umount_key#72){++++}-{3:3}, at: iterate_supers+0xb0/0x1f0 fs/super.c:722
1 lock held by syz-executor.5/10757:
#0: ffff888079c8a0e0 (&type->s_umount_key#72){++++}-{3:3}, at: iterate_supers+0xb0/0x1f0 fs/super.c:722
1 lock held by syz-executor.3/10712:
#0: ffff888079c8a0e0 (&type->s_umount_key#72){++++}-{3:3}, at: iterate_supers+0xb0/0x1f0 fs/super.c:722
2 locks held by syz-executor.0/10778:
#0: ffffffff8ddda748 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
#0: ffffffff8ddda748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x75d/0xe90 net/core/rtnetlink.c:6088
#1: ffffffff8cd24978 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:292 [inline]
#1: ffffffff8cd24978 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a6/0x890 kernel/rcu/tree_exp.h:946
1 lock held by syz-executor.2/10797:
#0: ffffffff8cd24978 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:324 [inline]
#0: ffffffff8cd24978 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x46f/0x890 kernel/rcu/tree_exp.h:946
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.0-rc3-syzkaller-00152-gf2f32f8af2b0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x1e3/0x2cb lib/dump_stack.c:106
nmi_cpu_backtrace+0x4e3/0x560 lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x19b/0x3e0 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline]
watchdog+0xcf5/0xd40 kernel/hung_task.c:377
kthread+0x266/0x300 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 4437 Comm: kworker/u4:14 Not tainted 6.1.0-rc3-syzkaller-00152-gf2f32f8af2b0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
Workqueue: phy8 ieee80211_iface_work
RIP: 0010:__orc_find arch/x86/kernel/unwind_orc.c:59 [inline]
RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:178 [inline]
RIP: 0010:unwind_next_frame+0x29e/0x24c0 arch/x86/kernel/unwind_orc.c:448
Code: 39 c1 0f 87 a8 19 00 00 45 29 f8 0f 84 ac 01 00 00 4e 8d 34 bd 84 14 32 8e 4f 8d 6c 86 fc 4c 89 f5 4d 39 f5 0f 83 a4 02 00 00 <4c> 29 f5 48 c1 fd 02 48 8d 44 6d 00 4c 8d 34 42 e9 99 00 00 00 49
RSP: 0000:ffffc90014a57360 EFLAGS: 00000202
RAX: ffffffff8e9887bc RBX: ffffffff8e9887c0 RCX: ffffffff8e9887c4
RDX: ffffffff8f3c24b2 RSI: ffffffff89c5ab33 RDI: ffffffff813bfdc3
RBP: ffffffff8e9887c0 R08: 0000000000000001 R09: dffffc0000000000
R10: fffff5200294ae94 R11: 1ffff9200294ae92 R12: ffffffff89c5ab32
R13: ffffffff8e9887c0 R14: ffffffff8e9887c0 R15: ffffffff8e9887c4
FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c015c00f28 CR3: 0000000077b7b000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
arch_stack_walk+0x112/0x140 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x12d/0x1f0 kernel/stacktrace.c:122
kasan_save_stack mm/kasan/common.c:45 [inline]
kasan_set_track+0x4c/0x70 mm/kasan/common.c:52
kasan_save_free_info+0x27/0x40 mm/kasan/generic.c:511
____kasan_slab_free+0xd6/0x120 mm/kasan/common.c:236
kasan_slab_free include/linux/kasan.h:177 [inline]
slab_free_hook mm/slub.c:1724 [inline]
slab_free_freelist_hook+0x12e/0x1a0 mm/slub.c:1750
slab_free mm/slub.c:3661 [inline]
__kmem_cache_free+0x71/0x110 mm/slub.c:3674
ieee80211_ibss_rx_queued_mgmt+0x1b8a/0x2cd0
ieee80211_iface_process_skb net/mac80211/iface.c:1630 [inline]
ieee80211_iface_work+0x773/0xcf0 net/mac80211/iface.c:1684
process_one_work+0x81c/0xd10 kernel/workqueue.c:2289
worker_thread+0xb14/0x1330 kernel/workqueue.c:2436
kthread+0x266/0x300 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306