INFO: task kcompactd0:30 blocked for more than 143 seconds.
Not tainted 5.15.0-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kcompactd0 state:D stack:27816 pid: 30 ppid: 2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:4969 [inline]
__schedule+0xa9a/0x4940 kernel/sched/core.c:6250
schedule+0xd2/0x260 kernel/sched/core.c:6323
io_schedule+0xee/0x170 kernel/sched/core.c:8368
folio_wait_bit_common+0x4f2/0xa60 mm/filemap.c:1371
lock_page include/linux/pagemap.h:747 [inline]
__unmap_and_move mm/migrate.c:980 [inline]
unmap_and_move mm/migrate.c:1204 [inline]
migrate_pages+0xa5a/0x3810 mm/migrate.c:1481
compact_zone+0x1abb/0x3860 mm/compaction.c:2399
kcompactd_do_work+0x2c9/0x730 mm/compaction.c:2839
kcompactd+0x86b/0xf30 mm/compaction.c:2941
kthread+0x405/0x4f0 kernel/kthread.c:327
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
Showing all locks held in the system:
1 lock held by systemd/1:
#0: ffff8881448fd550 (mapping.invalidate_lock){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:838 [inline]
#0: ffff8881448fd550 (mapping.invalidate_lock){++++}-{3:3}, at: page_cache_ra_unbounded+0x1b3/0x940 mm/readahead.c:194
1 lock held by khungtaskd/27:
#0: ffffffff8b983a20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6458
1 lock held by kswapd0/96:
1 lock held by kswapd1/97:
2 locks held by systemd-journal/2956:
#0: ffff888011218590 (mapping.invalidate_lock){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:838 [inline]
#0: ffff888011218590 (mapping.invalidate_lock){++++}-{3:3}, at: filemap_fault+0x15ad/0x26d0 mm/filemap.c:3096
#1: ffffffff8baa8140 (fs_reclaim){+.+.}-{0:0}, at: __perform_reclaim mm/page_alloc.c:4585 [inline]
#1: ffffffff8baa8140 (fs_reclaim){+.+.}-{0:0}, at: __alloc_pages_direct_reclaim mm/page_alloc.c:4609 [inline]
#1: ffffffff8baa8140 (fs_reclaim){+.+.}-{0:0}, at: __alloc_pages_slowpath.constprop.0+0xa1e/0x20d0 mm/page_alloc.c:5007
1 lock held by systemd-udevd/2971:
1 lock held by systemd-timesyn/3055:
1 lock held by in:imklog/6227:
3 locks held by rs:main Q:Reg/6228:
#0: ffff88807a7bd770 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 fs/file.c:990
#1: ffff88814b4c4460 (sb_writers#5){.+.+}-{0:0}, at: ksys_write+0x12d/0x250 fs/read_write.c:643
#2: ffff88806f98a1d8 (&sb->s_type->i_mutex_key#10){++++}-{3:3}, at: inode_lock include/linux/fs.h:783 [inline]
#2: ffff88806f98a1d8 (&sb->s_type->i_mutex_key#10){++++}-{3:3}, at: ext4_buffered_write_iter+0xb6/0x3b0 fs/ext4/file.c:263
2 locks held by cron/6223:
1 lock held by syz-fuzzer/6535:
#0: ffff88806e0c0590 (mapping.invalidate_lock){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:838 [inline]
#0: ffff88806e0c0590 (mapping.invalidate_lock){++++}-{3:3}, at: page_cache_ra_unbounded+0x1b3/0x940 mm/readahead.c:194
1 lock held by syz-fuzzer/6536:
2 locks held by syz-fuzzer/6538:
3 locks held by kworker/0:6/8704:
5 locks held by kworker/1:14/9082:
6 locks held by kworker/u4:8/2619:
#0: ffff888141ff0138 ((wq_completion)writeback){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888141ff0138 ((wq_completion)writeback){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888141ff0138 ((wq_completion)writeback){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1198 [inline]
#0: ffff888141ff0138 ((wq_completion)writeback){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:635 [inline]
#0: ffff888141ff0138 ((wq_completion)writeback){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:662 [inline]
#0: ffff888141ff0138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 kernel/workqueue.c:2269
#1: ffffc9000310fdb0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 kernel/workqueue.c:2273
#2: ffff88814b4c40e0 (&type->s_umount_key#41){++++}-{3:3}, at: trylock_super+0x1d/0x100 fs/super.c:418
#3: ffff88814b4c6bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1ab/0x690 mm/page-writeback.c:2364
#4: ffff88806f98a060 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x5e1/0x17d0 fs/ext4/inode.c:630
#5: ffffffff8baa8d48 (pcpu_drain_mutex){+.+.}-{3:3}, at: __drain_all_pages+0x4f/0x6c0 mm/page_alloc.c:3181
2 locks held by syz-executor.5/17943:
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:105
nmi_trigger_cpumask_backtrace+0x1ae/0x220 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:210 [inline]
watchdog+0xc1d/0xf50 kernel/hung_task.c:295
kthread+0x405/0x4f0 kernel/kthread.c:327
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 9082 Comm: kworker/1:14 Not tainted 5.15.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events fill_page_cache_func
RIP: 0010:__sanitizer_cov_trace_const_cmp8+0xc/0x70 kernel/kcov.c:293
Code: 4c 38 f0 48 c7 44 38 e0 05 00 00 00 48 89 74 38 e8 4e 89 54 c8 20 48 89 10 c3 0f 1f 40 00 49 89 f8 bf 03 00 00 00 4c 8b 14 24 <48> 89 f1 65 48 8b 34 25 40 70 02 00 e8 a3 f8 ff ff 84 c0 74 48 48
RSP: 0018:ffffc900029ff168 EFLAGS: 00000046
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 1ffffd4000566ed1 RSI: 0000000000000000 RDI: 0000000000000003
RBP: ffffea0002b37680 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff81a3e9c8 R11: 0000000000000000 R12: ffff888010c7d020
R13: ffffea0002b37688 R14: 0000000000000000 R15: 0000000000000002
FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff2d48d56e0 CR3: 0000000037a9f000 CR4: 0000000000350ee0
Call Trace:
_compound_head include/linux/page-flags.h:200 [inline]
PageLRU include/linux/page-flags.h:425 [inline]
__isolate_lru_page_prepare+0x48/0x7e0 mm/vmscan.c:1986
isolate_lru_pages+0x399/0x17b0 mm/vmscan.c:2117
shrink_inactive_list mm/vmscan.c:2379 [inline]
shrink_list mm/vmscan.c:2621 [inline]
shrink_lruvec+0xb2e/0x2660 mm/vmscan.c:2940
shrink_node_memcgs mm/vmscan.c:3129 [inline]
shrink_node+0x858/0x1eb0 mm/vmscan.c:3252
shrink_zones mm/vmscan.c:3485 [inline]
do_try_to_free_pages+0x4e2/0x1640 mm/vmscan.c:3541
try_to_free_pages+0x29f/0x750 mm/vmscan.c:3776
__perform_reclaim mm/page_alloc.c:4588 [inline]
__alloc_pages_direct_reclaim mm/page_alloc.c:4609 [inline]
__alloc_pages_slowpath.constprop.0+0xac7/0x20d0 mm/page_alloc.c:5007
__alloc_pages+0x412/0x500 mm/page_alloc.c:5382
alloc_pages+0x1a7/0x300 mm/mempolicy.c:2191
__get_free_pages+0x8/0x40 mm/page_alloc.c:5418
fill_page_cache_func+0xad/0x240 kernel/rcu/tree.c:3412
process_one_work+0x9b2/0x1690 kernel/workqueue.c:2298
worker_thread+0x658/0x11f0 kernel/workqueue.c:2445
kthread+0x405/0x4f0 kernel/kthread.c:327
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
----------------
Code disassembly (best guess):
0: 4c 38 f0 rex.WR cmp %r14b,%al
3: 48 c7 44 38 e0 05 00 movq $0x5,-0x20(%rax,%rdi,1)
a: 00 00
c: 48 89 74 38 e8 mov %rsi,-0x18(%rax,%rdi,1)
11: 4e 89 54 c8 20 mov %r10,0x20(%rax,%r9,8)
16: 48 89 10 mov %rdx,(%rax)
19: c3 retq
1a: 0f 1f 40 00 nopl 0x0(%rax)
1e: 49 89 f8 mov %rdi,%r8
21: bf 03 00 00 00 mov $0x3,%edi
26: 4c 8b 14 24 mov (%rsp),%r10
* 2a: 48 89 f1 mov %rsi,%rcx <-- trapping instruction
2d: 65 48 8b 34 25 40 70 mov %gs:0x27040,%rsi
34: 02 00
36: e8 a3 f8 ff ff callq 0xfffff8de
3b: 84 c0 test %al,%al
3d: 74 48 je 0x87
3f: 48 rex.W