INFO: task syz-executor.4:28340 blocked for more than 143 seconds.
Not tainted 6.7.0-rc6-syzkaller-00078-ga4aebe936554 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.4 state:D stack:27376 pid:28340 tgid:28339 ppid:5104 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5376 [inline]
__schedule+0x1961/0x4ab0 kernel/sched/core.c:6688
__schedule_loop kernel/sched/core.c:6763 [inline]
schedule+0x149/0x260 kernel/sched/core.c:6778
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6835
rwsem_down_write_slowpath+0xeea/0x13b0 kernel/locking/rwsem.c:1178
__down_write_common+0x1aa/0x200 kernel/locking/rwsem.c:1306
filemap_invalidate_lock include/linux/fs.h:847 [inline]
blk_ioctl_zeroout block/ioctl.c:184 [inline]
blkdev_common_ioctl+0x170b/0x2860 block/ioctl.c:513
blkdev_ioctl+0x520/0x730 block/ioctl.c:627
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:871 [inline]
__se_sys_ioctl+0xf8/0x170 fs/ioctl.c:857
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0x45/0x110 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7f1aff87cce9
RSP: 002b:00007f1b005be0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f1aff99bf80 RCX: 00007f1aff87cce9
RDX: 0000000020000080 RSI: 000000000000127f RDI: 0000000000000003
RBP: 00007f1aff8c947a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f1aff99bf80 R15: 00007ffccdb2a788
Showing all locks held in the system:
1 lock held by khungtaskd/29:
#0: ffffffff8d92dae0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:301 [inline]
#0: ffffffff8d92dae0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:747 [inline]
#0: ffffffff8d92dae0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6614
4 locks held by kworker/u4:6/1039:
#0: ffff8880b993c358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 kernel/sched/core.c:558
#1: ffff8880b9928808 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 kernel/sched/psi.c:988
#2: ffff8880a1118768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: wiphy_lock include/net/cfg80211.h:5870 [inline]
#2: ffff8880a1118768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x35/0x250 net/wireless/core.c:424
#3: ffffffff928691e0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x163/0x530 lib/debugobjects.c:717
2 locks held by getty/4815:
#0: ffff88802a51a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc900015a72f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b4/0x1e10 drivers/tty/n_tty.c:2201
1 lock held by syz-executor.5/26474:
1 lock held by syz-executor.4/28340:
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock include/linux/fs.h:847 [inline]
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blk_ioctl_zeroout block/ioctl.c:184 [inline]
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_common_ioctl+0x170b/0x2860 block/ioctl.c:513
1 lock held by syz-executor.2/28423:
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock include/linux/fs.h:847 [inline]
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blk_ioctl_zeroout block/ioctl.c:184 [inline]
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_common_ioctl+0x170b/0x2860 block/ioctl.c:513
1 lock held by syz-executor.1/28422:
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock include/linux/fs.h:847 [inline]
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blk_ioctl_zeroout block/ioctl.c:184 [inline]
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_common_ioctl+0x170b/0x2860 block/ioctl.c:513
1 lock held by syz-executor.5/28469:
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock include/linux/fs.h:847 [inline]
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blk_ioctl_zeroout block/ioctl.c:184 [inline]
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_common_ioctl+0x170b/0x2860 block/ioctl.c:513
1 lock held by syz-executor.4/28496:
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock include/linux/fs.h:847 [inline]
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blk_ioctl_zeroout block/ioctl.c:184 [inline]
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_common_ioctl+0x170b/0x2860 block/ioctl.c:513
1 lock held by syz-executor.1/28610:
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock include/linux/fs.h:847 [inline]
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blk_ioctl_zeroout block/ioctl.c:184 [inline]
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_common_ioctl+0x170b/0x2860 block/ioctl.c:513
1 lock held by syz-executor.5/28634:
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock include/linux/fs.h:847 [inline]
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blk_ioctl_zeroout block/ioctl.c:184 [inline]
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_common_ioctl+0x170b/0x2860 block/ioctl.c:513
1 lock held by syz-executor.2/28641:
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock include/linux/fs.h:847 [inline]
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blk_ioctl_zeroout block/ioctl.c:184 [inline]
#0: ffff888148d470c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_common_ioctl+0x170b/0x2860 block/ioctl.c:513
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.7.0-rc6-syzkaller-00078-ga4aebe936554 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x1e7/0x2d0 lib/dump_stack.c:106
nmi_cpu_backtrace+0x498/0x4d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x198/0x310 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline]
watchdog+0xfaf/0xff0 kernel/hung_task.c:379
kthread+0x2d3/0x370 kernel/kthread.c:388
ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 26474 Comm: syz-executor.5 Not tainted 6.7.0-rc6-syzkaller-00078-ga4aebe936554 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
RIP: 0010:kasan_check_range+0x5/0x290 mm/kasan/generic.c:186
Code: 01 0f 84 47 ff ff ff 48 ff c8 48 39 d8 0f 84 3b ff ff ff 48 89 df 48 c7 c6 d8 82 12 8d e8 83 0a e7 ff 90 0f 0b 66 0f 1f 00 55 <41> 57 41 56 41 54 53 b0 01 48 85 f6 0f 84 a0 01 00 00 4c 8d 04 37
RSP: 0018:ffffc90004e75da0 EFLAGS: 00000046
RAX: ffffffff81d132e1 RBX: 0000000000000000 RCX: ffffffff81d132ee
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0002526740
RBP: ffffea0002526740 R08: ffffffff81d132cd R09: 1ffff110026c8a14
R10: dffffc0000000000 R11: ffffed10026c8a15 R12: ffff88813fffa000
R13: ffff8880136450c0 R14: dffffc0000000000 R15: ffff88813fffa000
FS: 00007f378a4b36c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c01e3ac230 CR3: 00000000710ad000 CR4: 00000000003506f0
Call Trace:
instrument_atomic_read include/linux/instrumented.h:68 [inline]
_test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
folio_test_workingset include/linux/page-flags.h:479 [inline]
workingset_eviction+0x59e/0xb70 mm/workingset.c:403
__remove_mapping+0x8df/0x13c0 mm/vmscan.c:755
shrink_folio_list+0x2c12/0x89f0 mm/vmscan.c:1402
shrink_inactive_list mm/vmscan.c:1913 [inline]
shrink_list mm/vmscan.c:2154 [inline]
shrink_lruvec+0x16e6/0x2d40 mm/vmscan.c:5656
shrink_node_memcgs mm/vmscan.c:5842 [inline]
shrink_node+0x1176/0x28c0 mm/vmscan.c:5877
shrink_zones mm/vmscan.c:6116 [inline]
do_try_to_free_pages+0x717/0x19e0 mm/vmscan.c:6178
try_to_free_mem_cgroup_pages+0x455/0xa70 mm/vmscan.c:6493
try_charge_memcg+0x6d8/0x18a0 mm/memcontrol.c:2742
try_charge mm/memcontrol.c:2884 [inline]
charge_memcg+0xa2/0x160 mm/memcontrol.c:7210
__mem_cgroup_charge+0x27/0x80 mm/memcontrol.c:7225
mem_cgroup_charge include/linux/memcontrol.h:684 [inline]
__filemap_add_folio+0x401/0x1ad0 mm/filemap.c:854
filemap_add_folio+0x11e/0x570 mm/filemap.c:937
page_cache_ra_unbounded+0x210/0x7c0 mm/readahead.c:250
do_sync_mmap_readahead+0x444/0x850
filemap_fault+0x7c6/0x1670 mm/filemap.c:3233
__do_fault+0x133/0x4e0 mm/memory.c:4266
do_shared_fault mm/memory.c:4693 [inline]
do_fault mm/memory.c:4767 [inline]
do_pte_missing mm/memory.c:3731 [inline]
handle_pte_fault mm/memory.c:5039 [inline]
__handle_mm_fault mm/memory.c:5180 [inline]
handle_mm_fault+0x21e9/0x6680 mm/memory.c:5345
do_user_addr_fault arch/x86/mm/fault.c:1413 [inline]
handle_page_fault arch/x86/mm/fault.c:1505 [inline]
exc_page_fault+0x2ad/0x870 arch/x86/mm/fault.c:1561
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
RIP: 0010:rep_movs_alternative+0x4a/0x70 arch/x86/lib/copy_user_64.S:71
Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 85 c9 75 b3
RSP: 0018:ffffc90004e77978 EFLAGS: 00050206
RAX: ffff888010793001 RBX: 0000000020035e80 RCX: 0000000000000e80
RDX: 0000000000000000 RSI: ffff888010793180 RDI: 0000000020036000
RBP: ffffc90004e77af8 R08: ffff888010793fff R09: 1ffff110020f27ff
R10: dffffc0000000000 R11: ffffed10020f2800 R12: 0000000000001000
R13: 0000000000001000 R14: ffffc90004e77e30 R15: ffff888010793000
copy_user_generic arch/x86/include/asm/uaccess_64.h:112 [inline]
raw_copy_to_user arch/x86/include/asm/uaccess_64.h:133 [inline]
copy_to_user_iter lib/iov_iter.c:25 [inline]
iterate_iovec include/linux/iov_iter.h:51 [inline]
iterate_and_advance2 include/linux/iov_iter.h:247 [inline]
iterate_and_advance include/linux/iov_iter.h:271 [inline]
_copy_to_iter+0x4a0/0x1cf0 lib/iov_iter.c:186
copy_page_to_iter+0xb1/0x160 lib/iov_iter.c:381
process_vm_rw_pages mm/process_vm_access.c:45 [inline]
process_vm_rw_single_vec mm/process_vm_access.c:117 [inline]
process_vm_rw_core mm/process_vm_access.c:215 [inline]
process_vm_rw+0x86e/0xcf0 mm/process_vm_access.c:283
__do_sys_process_vm_readv mm/process_vm_access.c:295 [inline]
__se_sys_process_vm_readv mm/process_vm_access.c:291 [inline]
__x64_sys_process_vm_readv+0xe0/0xf0 mm/process_vm_access.c:291
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0x45/0x110 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7f378967cce9
Code: Unable to access opcode bytes at 0x7f378967ccbf.
RSP: 002b:00007f378a4b30c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000136
RAX: ffffffffffffffda RBX: 00007f378979bf80 RCX: 00007f378967cce9
RDX: 0000000000000002 RSI: 0000000020008400 RDI: 0000000000001a85
RBP: 00007f37896c947a R08: 0000000000000286 R09: 0000000000000000
R10: 0000000020008640 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f378979bf80 R15: 00007ffed4d28508