INFO: task kworker/u4:0:8 blocked for more than 146 seconds.
Not tainted 5.18.0-rc1-next-20220407-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u4:0 state:D stack:26048 pid: 8 ppid: 2 flags:0x00004000
Workqueue: events_unbound fsnotify_mark_destroy_workfn
Call Trace:
context_switch kernel/sched/core.c:5106 [inline]
__schedule+0xa9a/0x4cc0 kernel/sched/core.c:6421
schedule+0xd2/0x1f0 kernel/sched/core.c:6493
schedule_timeout+0x1db/0x2a0 kernel/time/timer.c:1857
do_wait_for_common kernel/sched/completion.c:85 [inline]
__wait_for_common+0x378/0x530 kernel/sched/completion.c:106
__synchronize_srcu+0x1f2/0x290 kernel/rcu/srcutree.c:1170
fsnotify_mark_destroy_workfn+0xfd/0x3c0 fs/notify/mark.c:864
process_one_work+0x996/0x1610 kernel/workqueue.c:2289
worker_thread+0x665/0x1080 kernel/workqueue.c:2436
kthread+0x2e9/0x3a0 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
INFO: task kworker/u4:7:4007 blocked for more than 142 seconds.
Not tainted 5.18.0-rc1-next-20220407-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u4:7 state:D stack:26608 pid: 4007 ppid: 2 flags:0x00004000
Workqueue: events_unbound fsnotify_connector_destroy_workfn
Call Trace:
context_switch kernel/sched/core.c:5106 [inline]
__schedule+0xa9a/0x4cc0 kernel/sched/core.c:6421
schedule+0xd2/0x1f0 kernel/sched/core.c:6493
schedule_timeout+0x1db/0x2a0 kernel/time/timer.c:1857
do_wait_for_common kernel/sched/completion.c:85 [inline]
__wait_for_common+0x378/0x530 kernel/sched/completion.c:106
__synchronize_srcu+0x1f2/0x290 kernel/rcu/srcutree.c:1170
fsnotify_connector_destroy_workfn+0x49/0xa0 fs/notify/mark.c:164
process_one_work+0x996/0x1610 kernel/workqueue.c:2289
worker_thread+0x665/0x1080 kernel/workqueue.c:2436
kthread+0x2e9/0x3a0 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
Showing all locks held in the system:
2 locks held by kworker/u4:0/8:
#0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
#0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
#0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
#0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 kernel/workqueue.c:2260
#1: ffffc900000d7da8 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 kernel/workqueue.c:2264
1 lock held by khungtaskd/28:
#0: ffffffff8bd83a20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6491
1 lock held by khugepaged/34:
#0: ffffffff8be71d88 (lock#5){+.+.}-{3:3}, at: __lru_add_drain_all+0x62/0x770 mm/swap.c:790
3 locks held by kworker/1:2/142:
1 lock held by udevd/2963:
2 locks held by getty/3274:
#0: ffff888015ce2098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:244
#1: ffffc90002e732e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xcea/0x1230 drivers/tty/n_tty.c:2075
1 lock held by syz-executor.1/3622:
3 locks held by syz-executor.2/3623:
3 locks held by kworker/0:4/3669:
2 locks held by kworker/u4:7/4007:
#0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
#0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
#0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
#0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 kernel/workqueue.c:2260
#1: ffffc9000587fda8 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 kernel/workqueue.c:2264
2 locks held by kworker/u4:9/4043:
2 locks held by kworker/u4:10/4111:
4 locks held by kworker/u4:14/4284:
4 locks held by kworker/u4:20/10787:
2 locks held by dhcpcd/11024:
#0: ffff88801624a130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1682 [inline]
#0: ffff88801624a130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2f/0xdc0 net/packet/af_packet.c:3179
#1: ffffffff8bd8e0a0 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:290 [inline]
#1: ffffffff8bd8e0a0 (rcu_state.exp_mutex){+.+.}-{3:3}, at: __synchronize_rcu_expedited+0x4bb/0x620 kernel/rcu/tree_exp.h:828
2 locks held by dhcpcd/11025:
#0: ffff88801624c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1682 [inline]
#0: ffff88801624c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2f/0xdc0 net/packet/af_packet.c:3179
#1: ffffffff8bd8e0a0 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:322 [inline]
#1: ffffffff8bd8e0a0 (rcu_state.exp_mutex){+.+.}-{3:3}, at: __synchronize_rcu_expedited+0x252/0x620 kernel/rcu/tree_exp.h:828
1 lock held by dhcpcd/11026:
#0: ffff88801efbc130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1682 [inline]
#0: ffff88801efbc130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2f/0xdc0 net/packet/af_packet.c:3179
1 lock held by dhcpcd/11027:
#0: ffff88802a8e0130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1682 [inline]
#0: ffff88802a8e0130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2f/0xdc0 net/packet/af_packet.c:3179
1 lock held by dhcpcd/11030:
#0: ffff88807c4d4130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1682 [inline]
#0: ffff88807c4d4130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2f/0xdc0 net/packet/af_packet.c:3179
1 lock held by dhcpcd/11031:
#0: ffff88801efbe130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1682 [inline]
#0: ffff88801efbe130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2f/0xdc0 net/packet/af_packet.c:3179
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 28 Comm: khungtaskd Not tainted 5.18.0-rc1-next-20220407-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x1e6/0x230 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:256 [inline]
watchdog+0xcb7/0xed0 kernel/hung_task.c:413
kthread+0x2e9/0x3a0 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 3622 Comm: syz-executor.1 Not tainted 5.18.0-rc1-next-20220407-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:inotify_handle_inode_event+0x2/0x5c0 fs/notify/inotify/inotify_fsnotify.c:62
Code: 89 c6 05 f0 c3 78 0e 01 e8 b0 fb 36 07 0f 0b 4d 85 ed 0f 85 de 80 39 07 e8 0b 42 92 ff 31 c0 5b 5d 41 5c 41 5d c3 66 90 41 57 <41> 56 41 55 41 54 41 89 f4 55 48 89 fd 53 4c 89 c3 48 83 ec 20 44
RSP: 0018:ffffc900041cfbb8 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000000
RDX: ffff88801b655f70 RSI: 0000000000000008 RDI: ffff88807ebe0a28
RBP: ffff88807ebe0a28 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff81e72046 R11: 0000000000000001 R12: ffff88801b655f70
R13: 0000000000000008 R14: 0000000000000000 R15: ffffffff81e7c4f0
FS: 000055555587a400(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555555883848 CR3: 0000000043f9c000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
fsnotify_handle_inode_event.isra.0+0x209/0x350 fs/notify/fsnotify.c:264
fsnotify_handle_event fs/notify/fsnotify.c:323 [inline]
send_to_group fs/notify/fsnotify.c:377 [inline]
fsnotify+0xeaf/0x13d0 fs/notify/fsnotify.c:564
__fsnotify_parent+0x62f/0xa60 fs/notify/fsnotify.c:230
fsnotify_parent include/linux/fsnotify.h:77 [inline]
fsnotify_file include/linux/fsnotify.h:99 [inline]
fsnotify_close include/linux/fsnotify.h:341 [inline]
__fput+0x5b7/0x9d0 fs/file_table.c:303
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
exit_to_user_mode_loop kernel/entry/common.c:169 [inline]
exit_to_user_mode_prepare+0x23c/0x250 kernel/entry/common.c:201
__syscall_exit_to_user_mode_work kernel/entry/common.c:283 [inline]
syscall_exit_to_user_mode+0x19/0x50 kernel/entry/common.c:294
do_syscall_64+0x42/0xb0 arch/x86/entry/common.c:86
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f4a3a23bc8b
Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44
RSP: 002b:00007ffc9e916a50 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 00007ffc9e916af0 RCX: 00007f4a3a23bc8b
RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003
RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffc9e916900
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000064
R13: 00000000000adb3e R14: 0000000000000006 R15: 00007ffc9e916b30
----------------
Code disassembly (best guess):
0: 89 c6 mov %eax,%esi
2: 05 f0 c3 78 0e add $0xe78c3f0,%eax
7: 01 e8 add %ebp,%eax
9: b0 fb mov $0xfb,%al
b: 36 07 ss (bad)
d: 0f 0b ud2
f: 4d 85 ed test %r13,%r13
12: 0f 85 de 80 39 07 jne 0x73980f6
18: e8 0b 42 92 ff callq 0xff924228
1d: 31 c0 xor %eax,%eax
1f: 5b pop %rbx
20: 5d pop %rbp
21: 41 5c pop %r12
23: 41 5d pop %r13
25: c3 retq
26: 66 90 xchg %ax,%ax
28: 41 57 push %r15
* 2a: 41 56 push %r14 <-- trapping instruction
2c: 41 55 push %r13
2e: 41 54 push %r12
30: 41 89 f4 mov %esi,%r12d
33: 55 push %rbp
34: 48 89 fd mov %rdi,%rbp
37: 53 push %rbx
38: 4c 89 c3 mov %r8,%rbx
3b: 48 83 ec 20 sub $0x20,%rsp
3f: 44 rex.R