INFO: task syz-executor.2:11680 blocked for more than 143 seconds.
Not tainted 6.9.0-rc5-syzkaller-00042-ge88c4cfcb7b8 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.2 state:D stack:24664 pid:11680 tgid:11680 ppid:11303 flags:0x00000006
Call Trace:
context_switch kernel/sched/core.c:5409 [inline]
__schedule+0x1796/0x4a00 kernel/sched/core.c:6746
__schedule_loop kernel/sched/core.c:6823 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6838
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6895
rwsem_down_read_slowpath kernel/locking/rwsem.c:1086 [inline]
__down_read_common kernel/locking/rwsem.c:1250 [inline]
__down_read kernel/locking/rwsem.c:1263 [inline]
down_read+0x705/0xa40 kernel/locking/rwsem.c:1528
filemap_invalidate_lock_shared include/linux/fs.h:850 [inline]
page_cache_ra_unbounded+0xfb/0x7a0 mm/readahead.c:225
do_sync_mmap_readahead+0x444/0x850
filemap_fault+0x7e5/0x16a0 mm/filemap.c:3289
__do_fault+0x135/0x460 mm/memory.c:4531
do_shared_fault mm/memory.c:4954 [inline]
do_fault mm/memory.c:5028 [inline]
do_pte_missing mm/memory.c:3880 [inline]
handle_pte_fault mm/memory.c:5300 [inline]
__handle_mm_fault+0x2361/0x7240 mm/memory.c:5441
handle_mm_fault+0x27f/0x770 mm/memory.c:5606
do_user_addr_fault arch/x86/mm/fault.c:1362 [inline]
handle_page_fault arch/x86/mm/fault.c:1505 [inline]
exc_page_fault+0x446/0x8e0 arch/x86/mm/fault.c:1563
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0033:0x7efd96a5ef2b
RSP: 002b:00007ffff1953728 EFLAGS: 00010202
RAX: 00000000200000c0 RBX: 0000000000000004 RCX: 000000000073666d
RDX: 0000000000000006 RSI: 00000000666d6f72 RDI: 00000000200000c0
RBP: 00007efd96bad980 R08: 00007efd96a00000 R09: 0000000000000001
R10: 0000000000000001 R11: 0000000000000009 R12: 0000000000065cce
R13: 0000000000065c9c R14: 00007ffff19538d0 R15: 00007efd96a34cb0
Showing all locks held in the system:
2 locks held by kworker/u8:0/10:
1 lock held by khungtaskd/29:
#0: ffffffff8e334d20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline]
#0: ffffffff8e334d20 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:781 [inline]
#0: ffffffff8e334d20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6614
1 lock held by klogd/4514:
2 locks held by getty/4828:
#0: ffff88802aad60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2201
1 lock held by syz-executor.3/10876:
1 lock held by syz-executor.2/11680:
#0: ffff88801d5414c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:850 [inline]
#0: ffff88801d5414c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xfb/0x7a0 mm/readahead.c:225
1 lock held by syz-executor.2/12538:
#0: ffff88801d5414c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:850 [inline]
#0: ffff88801d5414c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xfb/0x7a0 mm/readahead.c:225
1 lock held by syz-executor.0/12712:
#0: ffff88801d5414c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:850 [inline]
#0: ffff88801d5414c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xfb/0x7a0 mm/readahead.c:225
1 lock held by syz-executor.3/12762:
#0: ffff88801d5414c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:850 [inline]
#0: ffff88801d5414c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xfb/0x7a0 mm/readahead.c:225
1 lock held by syz-executor.2/12935:
#0: ffff88801d5414c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:850 [inline]
#0: ffff88801d5414c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xfb/0x7a0 mm/readahead.c:225
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.9.0-rc5-syzkaller-00042-ge88c4cfcb7b8 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114
nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
watchdog+0xfde/0x1020 kernel/hung_task.c:380
kthread+0x2f0/0x390 kernel/kthread.c:388
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 4514 Comm: klogd Not tainted 6.9.0-rc5-syzkaller-00042-ge88c4cfcb7b8 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
RIP: 0010:unwind_next_frame+0x1d4c/0x2a00 arch/x86/kernel/unwind_orc.c:644
Code: 0f 84 8a 02 00 00 e8 d3 a3 54 00 49 83 c6 20 4c 89 f7 e8 57 1a 00 00 49 89 c6 48 8d 5d 40 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 fa b5 b5 00 4c 89 33 43 0f b6 04 2f 84 c0 0f 85
RSP: 0018:ffffc900000072a8 EFLAGS: 00000246
RAX: 1ffff92000000e78 RBX: ffffc900000073c0 RCX: ffff888042301e00
RDX: 0000000080000102 RSI: 0000000000000001 RDI: ffffc90004d97f78
RBP: ffffc90000007380 R08: ffffffff8141593d R09: ffffffff814158df
R10: 0000000000000003 R11: ffff888042301e00 R12: 1ffff92000000e72
R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000e70
FS: 00007fec45890380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8279624866 CR3: 000000002d35e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
arch_stack_walk+0x151/0x1b0 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122
kasan_save_stack mm/kasan/common.c:47 [inline]
kasan_save_track+0x3f/0x80 mm/kasan/common.c:68
unpoison_slab_object mm/kasan/common.c:312 [inline]
__kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:338
kasan_slab_alloc include/linux/kasan.h:201 [inline]
slab_post_alloc_hook mm/slub.c:3798 [inline]
slab_alloc_node mm/slub.c:3845 [inline]
kmem_cache_alloc_node+0x194/0x380 mm/slub.c:3888
__alloc_skb+0x1c3/0x440 net/core/skbuff.c:658
skb_copy+0xef/0x770 net/core/skbuff.c:2128
mac80211_hwsim_tx_frame_no_nl+0x1068/0x18d0 drivers/net/wireless/virtual/mac80211_hwsim.c:1854
mac80211_hwsim_tx_frame+0x1cc/0x220 drivers/net/wireless/virtual/mac80211_hwsim.c:2200
mac80211_hwsim_beacon_tx+0x3be/0x7e0 drivers/net/wireless/virtual/mac80211_hwsim.c:2300
__iterate_interfaces+0x223/0x4c0 net/mac80211/util.c:772
ieee80211_iterate_active_interfaces_atomic+0xd8/0x170 net/mac80211/util.c:808
mac80211_hwsim_beacon+0xd4/0x1f0 drivers/net/wireless/virtual/mac80211_hwsim.c:2326
__run_hrtimer kernel/time/hrtimer.c:1692 [inline]
__hrtimer_run_queues+0x5a5/0xd50 kernel/time/hrtimer.c:1756
hrtimer_run_softirq+0x19a/0x2c0 kernel/time/hrtimer.c:1773
__do_softirq+0x2c6/0x980 kernel/softirq.c:554
invoke_softirq kernel/softirq.c:428 [inline]
__irq_exit_rcu+0xf2/0x1c0 kernel/softirq.c:633
irq_exit_rcu+0x9/0x30 kernel/softirq.c:645
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:_compound_head include/linux/page-flags.h:249 [inline]
RIP: 0010:virt_to_folio include/linux/mm.h:1306 [inline]
RIP: 0010:virt_to_slab+0x1c/0xb0 mm/slab.h:204
Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 8b fd 56 ff 48 c1 e8 06 48 83 e0 c0 48 ba 00 00 00 00 00 ea ff ff 48 8b 4c 10 08 c1 01 75 43 48 01 d0 66 90 48 8b 48 08 f6 c1 01 75 64 66 90 48
RSP: 0018:ffffc90004d97998 EFLAGS: 00000202
RAX: 00000000019d0b80 RBX: ffff88806742ee00 RCX: ffff88801e7033c0
RDX: ffffea0000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff888051d7fc80 R08: ffffffff81429eac R09: ffffffff81f72083
R10: dffffc0000000000 R11: fffffbfff25e00a6 R12: ffff88801e7033c0
R13: ffff8880643db300 R14: ffffffff81f72083 R15: ffff88801e7033c0
___cache_free+0x1a/0x80 mm/slub.c:4300
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x5e/0xc0 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286
__kasan_kmalloc+0x23/0xb0 mm/kasan/common.c:378
kasan_kmalloc include/linux/kasan.h:211 [inline]
kmalloc_trace+0x1db/0x360 mm/slub.c:3997
kmalloc include/linux/slab.h:628 [inline]
syslog_print+0x121/0x9c0 kernel/printk/printk.c:1556
do_syslog+0x3bb/0x810 kernel/printk/printk.c:1734
__do_sys_syslog kernel/printk/printk.c:1826 [inline]
__se_sys_syslog kernel/printk/printk.c:1824 [inline]
__x64_sys_syslog+0x7c/0x90 kernel/printk/printk.c:1824
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fec459f1fa7
Code: 73 01 c3 48 8b 0d 81 ce 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 51 ce 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007ffc1ddc05d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000067
RAX: ffffffffffffffda RBX: 00007fec45b904a0 RCX: 00007fec459f1fa7
RDX: 00000000000003ff RSI: 00007fec45b904a0 RDI: 0000000000000002
RBP: 0000000000000000 R08: 0000000000000007 R09: 383e0eaf5e8e18b7
R10: 0000000000004000 R11: 0000000000000206 R12: 00007fec45b904a0
R13: 00007fec45b80212 R14: 00007fec45b90896 R15: 00007fec45b90896