INFO: task syz.7.449:11390 blocked for more than 144 seconds. Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.7.449 state:D stack:27120 pid:11390 tgid:11387 ppid:10658 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0xe55/0x5730 kernel/sched/core.c:6690 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6782 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6839 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1084 __down_read_common kernel/locking/rwsem.c:1248 [inline] __down_read kernel/locking/rwsem.c:1261 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1526 filemap_invalidate_lock_shared include/linux/fs.h:870 [inline] page_cache_ra_unbounded+0x173/0x6c0 mm/readahead.c:226 do_page_cache_ra mm/readahead.c:320 [inline] page_cache_ra_order+0x7d9/0xc90 mm/readahead.c:520 page_cache_sync_ra+0x4b4/0x9c0 mm/readahead.c:608 page_cache_sync_readahead include/linux/pagemap.h:1394 [inline] filemap_get_pages+0xd7c/0x1be0 mm/filemap.c:2547 filemap_splice_read+0x5cc/0xd00 mm/filemap.c:2921 do_splice_read fs/splice.c:985 [inline] do_splice_read+0x282/0x370 fs/splice.c:959 splice_direct_to_actor+0x2a4/0xa40 fs/splice.c:1089 do_splice_direct_actor fs/splice.c:1207 [inline] do_splice_direct+0x178/0x250 fs/splice.c:1233 do_sendfile+0xb0c/0xe40 fs/read_write.c:1388 __do_sys_sendfile64 fs/read_write.c:1455 [inline] __se_sys_sendfile64 fs/read_write.c:1441 [inline] __x64_sys_sendfile64+0x1da/0x220 fs/read_write.c:1441 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f473f37e719 RSP: 002b:00007f4740198038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007f473f536130 RCX: 00007f473f37e719 RDX: 0000000000000000 RSI: 0000000000000008 RDI: 000000000000000a RBP: 00007f473f3f12be R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000089ffc R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f473f536130 R15: 00007ffd072cb458 Showing all locks held in the system: 3 locks held by kworker/u8:2/29: #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 kernel/workqueue.c:3204 #1: ffffc90000a57d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205 #2: ffffffff8fee24a8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 net/core/link_watch.c:276 1 lock held by khungtaskd/31: #0: ffffffff8e1b8380 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #0: ffffffff8e1b8380 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8e1b8380 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 kernel/locking/lockdep.c:6720 3 locks held by kworker/u8:6/1147: 3 locks held by kworker/1:2/1209: #0: ffff88801b080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 kernel/workqueue.c:3204 #1: ffffc90004287d80 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205 #2: ffff8880672f1240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x1bb/0x26d0 drivers/net/netdevsim/fib.c:1488 2 locks held by getty/5589: #0: ffff888034e420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 drivers/tty/n_tty.c:2211 1 lock held by syz.7.134/6875: 6 locks held by kworker/u8:16/7468: #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 kernel/workqueue.c:3204 #1: ffffc900040cfd80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205 #2: ffffffff8feccb10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40 net/core/net_namespace.c:580 #3: ffff8880575ff0e8 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1014 [inline] #3: ffff8880575ff0e8 (&dev->mutex){....}-{3:3}, at: devl_dev_lock net/devlink/devl_internal.h:108 [inline] #3: ffff8880575ff0e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x12d/0x2b0 net/devlink/core.c:506 #4: ffff8880575fc250 (&devlink->lock_key#68){+.+.}-{3:3}, at: devl_lock net/devlink/core.c:276 [inline] #4: ffff8880575fc250 (&devlink->lock_key#68){+.+.}-{3:3}, at: devl_dev_lock net/devlink/devl_internal.h:109 [inline] #4: ffff8880575fc250 (&devlink->lock_key#68){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x137/0x2b0 net/devlink/core.c:506 #5: ffffffff8e1c3c78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 kernel/rcu/tree_exp.h:297 1 lock held by syz.7.449/11390: #0: ffff888148c994c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:870 [inline] #0: ffff888148c994c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x173/0x6c0 mm/readahead.c:226 1 lock held by syz-executor/11658: 1 lock held by syz-executor/11672: #0: ffffffff8e1c3c78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 kernel/rcu/tree_exp.h:329 3 locks held by dhcpcd-run-hook/11901: ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline] watchdog+0xf0c/0x1240 kernel/hung_task.c:379 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 9535 Comm: kworker/0:9 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Workqueue: wg-crypt-wg1 wg_packet_encrypt_worker RIP: 0010:stack_access_ok+0x25/0x200 arch/x86/kernel/unwind_orc.c:389 Code: 90 90 90 90 90 48 b8 00 00 00 00 00 fc ff df 41 57 41 56 4c 8d 77 08 41 55 41 54 49 89 d4 4c 89 f2 55 48 c1 ea 03 48 89 f5 53 <48> 89 fb 48 83 ec 08 80 3c 02 00 0f 85 94 01 00 00 4c 8d 6b 10 4c RSP: 0018:ffffc900000079b0 EFLAGS: 00000a02 RAX: dffffc0000000000 RBX: 0000000000000002 RCX: ffffffff90fed884 RDX: 1ffff92000000f4c RSI: ffffc90000007da0 RDI: ffffc90000007a58 RBP: ffffc90000007da0 R08: ffffffff90fed8de R09: ffffffff90fed888 R10: ffffc90000007a58 R11: 000000000000eecc R12: 0000000000000008 R13: ffffc90000007a58 R14: ffffc90000007a60 R15: ffffc90000007da0 FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f17460795e8 CR3: 000000007e73a000 CR4: 00000000003526f0 DR0: 0000000000002800 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: deref_stack_reg arch/x86/kernel/unwind_orc.c:403 [inline] unwind_next_frame+0xac7/0x20c0 arch/x86/kernel/unwind_orc.c:585 arch_stack_walk+0x95/0x100 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:579 poison_slab_object mm/kasan/common.c:247 [inline] __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264 kasan_slab_free include/linux/kasan.h:230 [inline] slab_free_hook mm/slub.c:2342 [inline] slab_free_after_rcu_debug+0x116/0x330 mm/slub.c:4629 rcu_do_batch kernel/rcu/tree.c:2567 [inline] rcu_core+0x79d/0x14d0 kernel/rcu/tree.c:2823 handle_softirqs+0x213/0x8f0 kernel/softirq.c:554 do_softirq kernel/softirq.c:455 [inline] do_softirq+0xb2/0xf0 kernel/softirq.c:442 __local_bh_enable_ip+0x100/0x120 kernel/softirq.c:382 spin_unlock_bh include/linux/spinlock.h:396 [inline] ptr_ring_consume_bh include/linux/ptr_ring.h:367 [inline] wg_packet_encrypt_worker+0x26c/0xd60 drivers/net/wireguard/send.c:293 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229 process_scheduled_works kernel/workqueue.c:3310 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244