INFO: task syz.0.1036:11440 blocked for more than 143 seconds.
Not tainted 6.10.0-rc6-next-20240703-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.1036 state:D stack:24672 pid:11440 tgid:11440 ppid:9431 flags:0x00000004
Call Trace:
context_switch kernel/sched/core.c:5248 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6600
__schedule_loop kernel/sched/core.c:6677 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6692
io_schedule+0x8d/0x110 kernel/sched/core.c:7477
folio_wait_bit_common+0x882/0x12b0 mm/filemap.c:1307
folio_lock include/linux/pagemap.h:1050 [inline]
remove_inode_single_folio fs/hugetlbfs/inode.c:603 [inline]
remove_inode_hugepages+0x508/0x1520 fs/hugetlbfs/inode.c:669
hugetlbfs_evict_inode+0x23/0x70 fs/hugetlbfs/inode.c:689
evict+0x2a8/0x630 fs/inode.c:669
__dentry_kill+0x20d/0x630 fs/dcache.c:603
dput+0x19f/0x2b0 fs/dcache.c:845
__fput+0x5f8/0x8a0 fs/file_table.c:430
task_work_run+0x24f/0x310 kernel/task_work.c:204
resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
__syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
syscall_exit_to_user_mode+0x168/0x370 kernel/entry/common.c:218
do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f2ad2575bd9
RSP: 002b:00007ffe161a5048 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00007f2ad2705a60 RCX: 00007f2ad2575bd9
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 00007f2ad2705a60 R08: 0000000000000000 R09: 00000004161a537f
R10: 000000000003fdc8 R11: 0000000000000246 R12: 0000000000098e97
R13: 0000000000000032 R14: 00007f2ad2705a60 R15: 00007ffe161a5130
Showing all locks held in the system:
1 lock held by khungtaskd/30:
#0: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:333 [inline]
#0: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:845 [inline]
#0: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6704
2 locks held by getty/4862:
#0: ffff88802f7a00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211
3 locks held by kworker/1:5/5145:
#0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline]
#0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305
#1: ffffc900040d7d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline]
#1: ffffc900040d7d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305
#2: ffff88804e4a0240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 drivers/net/netdevsim/fib.c:1489
3 locks held by kworker/0:1/9865:
#0: ffff88801668a148 ((wq_completion)pm){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3199 [inline]
#0: ffff88801668a148 ((wq_completion)pm){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3305
#1: ffffc90003517d00 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3200 [inline]
#1: ffffc90003517d00 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3305
#2: ffff8880239a3190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
#2: ffff8880239a3190 (&dev->mutex){....}-{3:3}, at: usb_remote_wakeup+0x23/0x100 drivers/usb/core/hub.c:3840
1 lock held by syz.0.1036/11440:
#0: ffff88801b690218 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: remove_inode_hugepages+0x38e/0x1520 fs/hugetlbfs/inode.c:664
1 lock held by syz.2.1335/13177:
#0: ffff8880b953ea18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 kernel/sched/core.c:568
1 lock held by syz.2.1335/13178:
=============================================
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-next-20240703-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
watchdog+0xfee/0x1030 kernel/hung_task.c:379
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 13178 Comm: syz.2.1335 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
RIP: 0010:entity_key kernel/sched/fair.c:556 [inline]
RIP: 0010:avg_vruntime_add kernel/sched/fair.c:624 [inline]
RIP: 0010:__enqueue_entity+0xa6/0x500 kernel/sched/fair.c:825
Code: 48 8b 44 24 10 48 8d 78 38 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 05 e8 af d7 92 00 48 8b 44 24 10 <48> 2b 68 38 48 0f af eb 48 8d 78 20 48 89 f8 48 c1 e8 03 48 b9 00
RSP: 0018:ffffc900045071e0 EFLAGS: 00000046
RAX: ffff88805fd53000 RBX: 0000000000000400 RCX: dffffc0000000000
RDX: ffffc900098f6000 RSI: ffff8880205c3c80 RDI: ffff88805fd53038
RBP: 000000078bf78b07 R08: ffffffff818c0e28 R09: 1ffffffff1f5ef4d
R10: dffffc0000000000 R11: fffffbfff1f5ef4e R12: 1ffff110040b879d
R13: dffffc0000000000 R14: ffff8880205c3ce8 R15: ffff8880205c3c80
FS: 00007f140038b6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c2fa874 CR3: 000000006b6c8000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
put_prev_entity+0x62/0x210 kernel/sched/fair.c:5502
put_prev_task_fair+0x4d/0x80 kernel/sched/fair.c:8620
__pick_next_task+0xd2/0x300 kernel/sched/core.c:5899
__schedule+0x728/0x4a60 kernel/sched/core.c:6555
preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6779
preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6803
preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
_raw_spin_unlock_irqrestore+0x130/0x140 kernel/locking/spinlock.c:194
spin_unlock_irqrestore include/linux/spinlock.h:406 [inline]
__wake_up_common_lock+0x18c/0x1e0 kernel/sched/wait.c:108
__unix_dgram_recvmsg+0x5f4/0x12f0 net/unix/af_unix.c:2469
sock_recvmsg_nosec+0x18e/0x1d0 net/socket.c:1046
____sys_recvmsg+0x3c0/0x470 net/socket.c:2814
___sys_recvmsg net/socket.c:2858 [inline]
do_recvmmsg+0x474/0xae0 net/socket.c:2952
__sys_recvmmsg net/socket.c:3031 [inline]
__do_sys_recvmmsg net/socket.c:3054 [inline]
__se_sys_recvmmsg net/socket.c:3047 [inline]
__x64_sys_recvmmsg+0x199/0x250 net/socket.c:3047
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f13ff575bd9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f140038b048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
RAX: ffffffffffffffda RBX: 00007f13ff704038 RCX: 00007f13ff575bd9
RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000006
RBP: 00007f13ff5e4aa1 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000006e R14: 00007f13ff704038 R15: 00007fff19886c98