INFO: task syz-executor.0:29735 blocked for more than 143 seconds. Not tainted 6.5.0-syzkaller-11329-g708283abf896 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:28928 pid:29735 ppid:5070 flags:0x00020006 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0xee1/0x59f0 kernel/sched/core.c:6695 schedule+0xe7/0x1b0 kernel/sched/core.c:6771 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6830 rwsem_down_read_slowpath+0x625/0xb20 kernel/locking/rwsem.c:1086 __down_read_common kernel/locking/rwsem.c:1250 [inline] __down_read kernel/locking/rwsem.c:1263 [inline] down_read+0xf0/0x470 kernel/locking/rwsem.c:1522 inode_lock_shared include/linux/fs.h:812 [inline] lookup_slow fs/namei.c:1709 [inline] walk_component+0x33b/0x5a0 fs/namei.c:2001 lookup_last fs/namei.c:2458 [inline] path_lookupat+0x17f/0x770 fs/namei.c:2482 filename_lookup+0x1e7/0x5b0 fs/namei.c:2511 user_path_at_empty+0x42/0x60 fs/namei.c:2910 user_path_at include/linux/namei.h:57 [inline] do_fchownat+0xfe/0x1f0 fs/open.c:808 __do_sys_lchown fs/open.c:839 [inline] __se_sys_lchown fs/open.c:837 [inline] __x64_sys_lchown+0x7e/0xc0 fs/open.c:837 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f5feba7cae9 RSP: 002b:00007f5fe21e50c8 EFLAGS: 00000246 ORIG_RAX: 000000000000005e RAX: ffffffffffffffda RBX: 00007f5febb9c050 RCX: 00007f5feba7cae9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 RBP: 00007f5febac847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f5febb9c050 R15: 00007ffe43fbdac8 INFO: lockdep is turned off. NMI backtrace for cpu 0 CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.5.0-syzkaller-11329-g708283abf896 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd9/0x1b0 lib/dump_stack.c:106 nmi_cpu_backtrace+0x277/0x380 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x299/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline] watchdog+0xfac/0x1230 kernel/hung_task.c:379 kthread+0x33a/0x430 kernel/kthread.c:388 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 29728 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-11329-g708283abf896 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 RIP: 0010:__sanitizer_cov_trace_pc+0x50/0x70 kernel/kcov.c:212 Code: 0e 85 c9 74 35 8b 82 04 16 00 00 85 c0 74 2b 8b 82 e0 15 00 00 83 f8 02 75 20 48 8b 8a e8 15 00 00 8b 92 e4 15 00 00 48 8b 01 <48> 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 c3 66 66 2e 0f 1f RSP: 0018:ffffc900155b61c8 EFLAGS: 00000246 RAX: 000000000003ffff RBX: 0000000000000001 RCX: ffffc90004819000 RDX: 0000000000040000 RSI: ffffffff813a1a11 RDI: 0000000000000005 RBP: ffffc900155b65c8 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000080000000 R11: 0000000000000000 R12: ffffc900155b0000 R13: ffffc900155b8000 R14: ffffc900155b65d0 R15: ffffc900155b6548 FS: 00007f5fea5fe6c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c02caa7000 CR3: 000000001efa2000 CR4: 0000000000350ee0 Call Trace: unwind_next_frame+0x51/0x2390 arch/x86/kernel/unwind_orc.c:476 arch_stack_walk+0xfa/0x170 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x96/0xd0 kernel/stacktrace.c:122 save_stack+0x160/0x1f0 mm/page_owner.c:128 __reset_page_owner+0x5a/0x190 mm/page_owner.c:149 reset_page_owner include/linux/page_owner.h:24 [inline] free_pages_prepare mm/page_alloc.c:1136 [inline] free_unref_page_prepare+0x476/0xa40 mm/page_alloc.c:2312 free_unref_page_list+0xe6/0xb30 mm/page_alloc.c:2451 shrink_folio_list+0x279e/0x3e30 mm/vmscan.c:2187 evict_folios+0x6bc/0x1910 mm/vmscan.c:5195 try_to_shrink_lruvec+0x769/0xb00 mm/vmscan.c:5371 lru_gen_shrink_lruvec mm/vmscan.c:5510 [inline] shrink_lruvec+0x314/0x2980 mm/vmscan.c:6285 shrink_node_memcgs mm/vmscan.c:6505 [inline] shrink_node+0x807/0x3740 mm/vmscan.c:6540 shrink_zones mm/vmscan.c:6779 [inline] do_try_to_free_pages+0x3cf/0x1990 mm/vmscan.c:6841 try_to_free_mem_cgroup_pages+0x36f/0x850 mm/vmscan.c:7156 try_charge_memcg+0x460/0x1400 mm/memcontrol.c:2691 obj_cgroup_charge_pages mm/memcontrol.c:3105 [inline] obj_cgroup_charge+0x2a9/0x620 mm/memcontrol.c:3396 memcg_slab_pre_alloc_hook mm/slab.h:503 [inline] slab_pre_alloc_hook mm/slab.h:714 [inline] slab_alloc_node mm/slub.c:3460 [inline] slab_alloc mm/slub.c:3486 [inline] __kmem_cache_alloc_lru mm/slub.c:3493 [inline] kmem_cache_alloc+0xb4/0x3b0 mm/slub.c:3502 kmem_cache_zalloc include/linux/slab.h:710 [inline] alloc_buffer_head+0x21/0x140 fs/buffer.c:3011 folio_alloc_buffers+0x2e7/0x7f0 fs/buffer.c:935 folio_create_empty_buffers+0x36/0x470 fs/buffer.c:1648 folio_create_buffers+0x109/0x160 fs/buffer.c:1774 block_read_full_folio+0x20a/0xae0 fs/buffer.c:2368 filemap_read_folio+0xe9/0x2c0 mm/filemap.c:2385 do_read_cache_folio+0x205/0x540 mm/filemap.c:3718 do_read_cache_page mm/filemap.c:3784 [inline] read_cache_page+0x5b/0x230 mm/filemap.c:3793 read_mapping_page include/linux/pagemap.h:860 [inline] dir_get_page fs/minix/dir.c:76 [inline] minix_find_entry+0x1f6/0x610 fs/minix/dir.c:176 minix_inode_by_name+0x75/0x260 fs/minix/dir.c:460 minix_lookup fs/minix/namei.c:30 [inline] minix_lookup+0x107/0x190 fs/minix/namei.c:22 lookup_open.isra.0+0x8dc/0x1360 fs/namei.c:3473 open_last_lookups fs/namei.c:3563 [inline] path_openat+0x931/0x29c0 fs/namei.c:3793 do_filp_open+0x1de/0x430 fs/namei.c:3823 do_sys_openat2+0x176/0x1e0 fs/open.c:1422 do_sys_open fs/open.c:1437 [inline] __do_sys_openat fs/open.c:1453 [inline] __se_sys_openat fs/open.c:1448 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1448 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f5feba7cae9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f5fea5fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f5febb9bf80 RCX: 00007f5feba7cae9 RDX: 000000000006b142 RSI: 0000000020004400 RDI: ffffffffffffff9c RBP: 00007f5febac847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f5febb9bf80 R15: 00007ffe43fbdac8