INFO: task syz-executor.0:12659 blocked for more than 143 seconds.
Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0 state:D
stack:28320 pid:12659 ppid:2919 flags:0x00000006
Call Trace:
context_switch kernel/sched/core.c:5382 [inline]
__schedule+0xee1/0x5a10 kernel/sched/core.c:6695
schedule+0xe7/0x1b0 kernel/sched/core.c:6771
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6830
rwsem_down_write_slowpath+0x53d/0x12a0 kernel/locking/rwsem.c:1178
__down_write_common kernel/locking/rwsem.c:1306 [inline]
__down_write kernel/locking/rwsem.c:1315 [inline]
down_write+0x1d3/0x200 kernel/locking/rwsem.c:1574
inode_lock include/linux/fs.h:802 [inline]
process_measurement+0x39b/0x1cc0 security/integrity/ima/ima_main.c:247
ima_file_check+0xc2/0x110 security/integrity/ima/ima_main.c:543
do_open fs/namei.c:3641 [inline]
path_openat+0x17a1/0x29c0 fs/namei.c:3796
do_filp_open+0x1de/0x430 fs/namei.c:3823
do_sys_openat2+0x176/0x1e0 fs/open.c:1422
do_sys_open fs/open.c:1437 [inline]
__do_sys_open fs/open.c:1445 [inline]
__se_sys_open fs/open.c:1441 [inline]
__x64_sys_open+0x154/0x1e0 fs/open.c:1441
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fa89667cae9
RSP: 002b:00007fa8974a60c8 EFLAGS: 00000246
ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 00007fa89679c050 RCX: 00007fa89667cae9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040
RBP: 00007fa8966c847a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000006e R14: 00007fa89679c050 R15: 00007ffd4f304ac8
Showing all locks held in the system:
1 lock held by khungtaskd/29:
#0:
ffffffff8cbab2a0
(
rcu_read_lock
){....}-{1:2}
, at: rcu_lock_acquire include/linux/rcupdate.h:303 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:749 [inline]
, at: debug_show_all_locks+0x75/0x340 kernel/locking/lockdep.c:6613
6 locks held by kworker/u4:7/2441:
#0: ffff888012c73d38 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x787/0x15c0 kernel/workqueue.c:2605
#1:
ffffc90009bc7d80
(
net_cleanup_work
){+.+.}-{0:0}
, at: process_one_work+0x7e9/0x15c0 kernel/workqueue.c:2606
#2:
ffffffff8e5ed710
(
pernet_ops_rwsem
){++++}-{3:3}
, at: cleanup_net+0x9f/0xb20 net/core/net_namespace.c:576
#3:
ffffffff8e602a28
(
rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1b/0x220 drivers/net/wireguard/device.c:421
#4: ffff8880379b13e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_netns_pre_exit+0xdd/0x220 drivers/net/wireguard/device.c:426
#5: ffffffff8cbb6b78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:293 [inline]
#5: ffffffff8cbb6b78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x69e/0x7e0 kernel/rcu/tree_exp.h:992
4 locks held by kworker/0:3/4776:
#0: ffff888012c71538 ((wq_completion)events_long){+.+.}-{0:0}, at: process_one_work+0x787/0x15c0 kernel/workqueue.c:2605
#1: ffffc9000373fd80 ((work_completion)(&(&sbi->old_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7e9/0x15c0 kernel/workqueue.c:2606
#2: ffff88808251c0e0 (&type->s_umount_key#26){++++}-{3:3}, at: flush_old_commits+0x79/0x1f0 fs/reiserfs/super.c:97
#3: ffff88807bbe8890 (&jl->j_commit_mutex){+.+.}-{3:3}, at: reiserfs_mutex_lock_safe fs/reiserfs/reiserfs.h:813 [inline]
#3: ffff88807bbe8890 (&jl->j_commit_mutex){+.+.}-{3:3}, at: flush_commit_list.isra.0+0x223/0x2060 fs/reiserfs/journal.c:1007
2 locks held by getty/4789:
#0: ffff8880268f90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
#1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc5/0x1480 drivers/tty/n_tty.c:2206
4 locks held by kworker/1:4/5130:
#0: ffff88806a982d38 ((wq_completion)reiserfs/loop0){+.+.}-{0:0}, at: process_one_work+0x787/0x15c0 kernel/workqueue.c:2605
#1: ffffc900047a7d80 ((work_completion)(&(&journal->j_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7e9/0x15c0 kernel/workqueue.c:2606
#2:
ffff88807bbe8890
(
&jl->j_commit_mutex){+.+.}-{3:3}, at: reiserfs_mutex_lock_safe fs/reiserfs/reiserfs.h:813 [inline]
&jl->j_commit_mutex){+.+.}-{3:3}, at: flush_commit_list.isra.0+0x223/0x2060 fs/reiserfs/journal.c:1007
#3:
ffff88803cbef090
(
&sbi->lock
){+.+.}-{3:3}
, at: reiserfs_write_lock_nested+0x69/0xe0 fs/reiserfs/lock.c:78
2 locks held by kworker/1:5/5131:
#0:
ffff888012c72938
((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x787/0x15c0 kernel/workqueue.c:2605
#1: ffffc900047b7d80 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7e9/0x15c0 kernel/workqueue.c:2606
5 locks held by kworker/u4:16/15693:
8 locks held by syz-executor.0/12646:
1 lock held by syz-executor.0/12659:
#0: ffff8880886bbe80 (&sb->s_type->i_mutex_key#24){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:802 [inline]
#0: ffff8880886bbe80 (&sb->s_type->i_mutex_key#24){+.+.}-{3:3}, at: process_measurement+0x39b/0x1cc0 security/integrity/ima/ima_main.c:247
4 locks held by syz-executor.2/12709:
#0: ffff8880387330a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
#1:
ffff888038733130
(
&tty->atomic_write_lock
){+.+.}-{3:3}
, at: tty_write_lock drivers/tty/tty_io.c:950 [inline]
, at: iterate_tty_write drivers/tty/tty_io.c:969 [inline]
, at: file_tty_write.constprop.0+0x293/0x9b0 drivers/tty/tty_io.c:1088
#2:
ffff8880387332e8 (&tty->termios_rwsem
){++++}-{3:3}
, at: n_tty_write+0x1c8/0x1130 drivers/tty/n_tty.c:2367
#3:
ffffc90003a88380 (&ldata->output_lock){+.+.}-{3:3}, at: process_output drivers/tty/n_tty.c:496 [inline]
ffffc90003a88380 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0x4b5/0x1130 drivers/tty/n_tty.c:2395
1 lock held by syz-executor.0/12736:
#0:
ffffffff8e602a28
(
rtnl_mutex
){+.+.}-{3:3}
, at: rtnl_lock net/core/rtnetlink.c:78 [inline]
, at: rtnetlink_rcv_msg+0x36f/0xdf0 net/core/rtnetlink.c:6441
2 locks held by dhcpcd/12746:
#0:
ffff8880251e2130
(
sk_lock-AF_PACKET
){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1722 [inline]
){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf40 net/packet/af_packet.c:3208
#1: ffffffff8cbb6b78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:325 [inline]
#1: ffffffff8cbb6b78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x404/0x7e0 kernel/rcu/tree_exp.h:992
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xd9/0x1b0 lib/dump_stack.c:106
nmi_cpu_backtrace+0x277/0x380 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x299/0x300 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline]
watchdog+0xf87/0x1210 kernel/hung_task.c:379
kthread+0x33c/0x440 kernel/kthread.c:388
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 12646 Comm: syz-executor.0 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
RIP: 0010:write_comp_data+0x7/0x90 kernel/kcov.c:230
Code: 81 e2 00 01 ff 00 75 10 65 48 8b 04 25 c0 bc 03 00 48 8b 80 f8 15 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 65 8b 05 e1 fb 7b 7e <49> 89 f1 89 c6 49 89 d2 81 e6 00 01 00 00 49 89 f8 65 48 8b 14 25
RSP: 0018:ffffc900001f0670 EFLAGS: 00000213
RAX: 0000000080000102 RBX: ffffc900001f06f8 RCX: ffffffff813a4861
RDX: 0000000000098000 RSI: 0000000000093e94 RDI: 0000000000000004
RBP: 0000000000000002 R08: 0000000000000006 R09: ffffffff8a3e94c2
R10: ffffffff8a800000 R11: 000001d1d3916a5c R12: ffffffff8a3e94c2
R13: 0000000000093e94 R14: 0000000000098000 R15: ffffc900001f072d
FS: 00007fa8974c76c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4971119866 CR3: 000000007b5a2000 CR4: 0000000000350ee0
Call Trace:
orc_find arch/x86/kernel/unwind_orc.c:211 [inline]
unwind_next_frame+0x231/0x2390 arch/x86/kernel/unwind_orc.c:494
arch_stack_walk+0xfa/0x170 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x96/0xd0 kernel/stacktrace.c:122
kasan_save_stack+0x33/0x50 mm/kasan/common.c:45
kasan_set_track+0x25/0x30 mm/kasan/common.c:52
__kasan_slab_alloc+0x81/0x90 mm/kasan/common.c:328
kasan_slab_alloc include/linux/kasan.h:188 [inline]
slab_post_alloc_hook mm/slab.h:762 [inline]
slab_alloc_node mm/slub.c:3478 [inline]
kmem_cache_alloc_node+0x180/0x3f0 mm/slub.c:3523
__alloc_skb+0x287/0x330 net/core/skbuff.c:640
__netdev_alloc_skb+0x72/0x3f0 net/core/skbuff.c:714
netdev_alloc_skb include/linux/skbuff.h:3225 [inline]
dev_alloc_skb include/linux/skbuff.h:3238 [inline]
__ieee80211_beacon_get+0xc28/0x16d0 net/mac80211/tx.c:5425
ieee80211_beacon_get_tim+0xa5/0x560 net/mac80211/tx.c:5547
ieee80211_beacon_get include/net/mac80211.h:5421 [inline]
mac80211_hwsim_beacon_tx+0x3f6/0x730 drivers/net/wireless/virtual/mac80211_hwsim.c:2260
__iterate_interfaces+0x2d2/0x580 net/mac80211/util.c:766
ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 net/mac80211/util.c:802
mac80211_hwsim_beacon+0x101/0x200 drivers/net/wireless/virtual/mac80211_hwsim.c:2290
__run_hrtimer kernel/time/hrtimer.c:1688 [inline]
__hrtimer_run_queues+0x203/0xc10 kernel/time/hrtimer.c:1752
hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1769
__do_softirq+0x218/0x965 kernel/softirq.c:553
invoke_softirq kernel/softirq.c:427 [inline]
__irq_exit_rcu kernel/softirq.c:632 [inline]
irq_exit_rcu+0xb7/0x120 kernel/softirq.c:644
sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1074
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:console_trylock_spinning kernel/printk/printk.c:1979 [inline]
RIP: 0010:vprintk_emit+0x3aa/0x5f0 kernel/printk/printk.c:2306
Code: 00 4d 85 e4 0f 85 e4 01 00 00 e8 11 5e 1c 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 8f 59 1c 00 48 85 ed 0f 85 f0 01 00 00 f1 5d 1c 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00
RSP: 0018:ffffc9000cad6a70 EFLAGS: 00000246
RAX: 0000000000040000 RBX: 0000000000000086 RCX: ffffc90016203000
RDX: 0000000000040000 RSI: ffffffff816b6ab4 RDI: 0000000000000007
RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 000000006f6c625f R12: 0000000000000200
R13: ffff88801a260000 R14: ffffffff8aa2b2e0 R15: ffffc9000cad6af0
vprintk+0x7b/0x90 kernel/printk/printk_safe.c:45
_printk+0xc8/0x100 kernel/printk/printk.c:2332
__reiserfs_warning+0x102/0x1a0 fs/reiserfs/prints.c:290
reiserfs_read_bitmap_block+0x3a9/0x520 fs/reiserfs/bitmap.c:1434
scan_bitmap_block.constprop.0+0x1c9/0x1080 fs/reiserfs/bitmap.c:164
scan_bitmap fs/reiserfs/bitmap.c:402 [inline]
allocate_without_wrapping_disk fs/reiserfs/bitmap.c:1161 [inline]
blocknrs_and_prealloc_arrays_from_search_start fs/reiserfs/bitmap.c:1274 [inline]
reiserfs_allocate_blocknrs+0x2b9f/0x5770 fs/reiserfs/bitmap.c:1375
reiserfs_new_form_blocknrs fs/reiserfs/reiserfs.h:3342 [inline]
get_empty_nodes+0x3ef/0x810 fs/reiserfs/fix_node.c:879
fix_nodes+0x1cde/0x8ae0 fs/reiserfs/fix_node.c:2663
reiserfs_paste_into_item+0x443/0x7c0 fs/reiserfs/stree.c:2128
reiserfs_get_block+0x1180/0x47a0 fs/reiserfs/inode.c:1069
__block_write_begin_int+0x3c0/0x1560 fs/buffer.c:2120
reiserfs_write_begin+0x351/0xa40 fs/reiserfs/inode.c:2771
generic_cont_expand_simple+0x11f/0x200 fs/buffer.c:2476
reiserfs_setattr+0x36d/0x12a0 fs/reiserfs/inode.c:3302
notify_change+0x742/0x11c0 fs/attr.c:499
do_truncate+0x15c/0x220 fs/open.c:66
do_sys_ftruncate+0x6a2/0x790 fs/open.c:194
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fa89667cae9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fa8974c70c8 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
RAX: ffffffffffffffda RBX: 00007fa89679bf80 RCX: 00007fa89667cae9
RDX: 0000000000000000 RSI: 0000000002007fff RDI: 0000000000000004
RBP: 00007fa8966c847a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007fa89679bf80 R15: 00007ffd4f304ac8