INFO: task syz-executor.0:9512 blocked for more than 143 seconds.
Not tainted 5.16.0-rc1-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0 state:D stack:26888 pid: 9512 ppid: 6515 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:4972 [inline]
__schedule+0xa9a/0x4940 kernel/sched/core.c:6253
schedule+0xd2/0x260 kernel/sched/core.c:6326
blk_mq_freeze_queue_wait+0x112/0x160 block/blk-mq.c:178
loop_set_status+0x17d/0x930 drivers/block/loop.c:1264
loop_set_status_old+0x148/0x1b0 drivers/block/loop.c:1396
lo_ioctl+0x3e9/0x17c0 drivers/block/loop.c:1566
blkdev_ioctl+0x37a/0x800 block/ioctl.c:609
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:874 [inline]
__se_sys_ioctl fs/ioctl.c:860 [inline]
__x64_sys_ioctl+0x193/0x200 fs/ioctl.c:860
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7ff0e0f3cae9
RSP: 002b:00007ff0de4b2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ff0e104ff60 RCX: 00007ff0e0f3cae9
RDX: 0000000020000780 RSI: 0000000000004c02 RDI: 0000000000000004
RBP: 00007ff0e0f96f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff66f9de8f R14: 00007ff0de4b2300 R15: 0000000000022000
INFO: task syz-executor.0:9546 blocked for more than 143 seconds.
Not tainted 5.16.0-rc1-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0 state:D stack:26160 pid: 9546 ppid: 6515 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:4972 [inline]
__schedule+0xa9a/0x4940 kernel/sched/core.c:6253
schedule+0xd2/0x260 kernel/sched/core.c:6326
__bio_queue_enter+0x3c5/0x6a0 block/blk-core.c:441
bio_queue_enter block/blk.h:91 [inline]
blk_mq_get_request block/blk-mq.c:2588 [inline]
blk_mq_submit_bio+0x4ae/0x22c0 block/blk-mq.c:2632
__submit_bio block/blk-core.c:849 [inline]
__submit_bio_noacct_mq block/blk-core.c:924 [inline]
submit_bio_noacct block/blk-core.c:950 [inline]
submit_bio_noacct+0x82c/0xa20 block/blk-core.c:939
submit_bio block/blk-core.c:1011 [inline]
submit_bio+0x1ea/0x430 block/blk-core.c:969
submit_bh_wbc+0x5e8/0x7e0 fs/buffer.c:3054
submit_bh fs/buffer.c:3060 [inline]
block_read_full_page+0xa25/0xda0 fs/buffer.c:2339
filemap_read_page+0x152/0x420 mm/filemap.c:2391
filemap_update_page mm/filemap.c:2470 [inline]
filemap_get_pages+0x14a2/0x1be0 mm/filemap.c:2579
filemap_read+0x315/0xeb0 mm/filemap.c:2642
generic_file_read_iter+0x3b6/0x5a0 mm/filemap.c:2792
blkdev_read_iter+0xf8/0x1d0 block/fops.c:583
call_read_iter include/linux/fs.h:2156 [inline]
generic_file_splice_read+0x453/0x6d0 fs/splice.c:311
do_splice_to+0x1bf/0x250 fs/splice.c:796
splice_direct_to_actor+0x2c2/0x8c0 fs/splice.c:870
do_splice_direct+0x1b3/0x280 fs/splice.c:979
do_sendfile+0xaf2/0x1250 fs/read_write.c:1245
__do_sys_sendfile64 fs/read_write.c:1310 [inline]
__se_sys_sendfile64 fs/read_write.c:1296 [inline]
__x64_sys_sendfile64+0x1cc/0x210 fs/read_write.c:1296
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7ff0e0f3cae9
RSP: 002b:00007ff0de491188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007ff0e1050020 RCX: 00007ff0e0f3cae9
RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
RBP: 00007ff0e0f96f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000024002da8 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff66f9de8f R14: 00007ff0de491300 R15: 0000000000022000
Showing all locks held in the system:
3 locks held by kworker/u4:0/8:
#0: ffff8880b9d39a98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2b/0x120 kernel/sched/core.c:478
#1: ffff8880b9d279c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x3a6/0x490 kernel/sched/psi.c:880
#2: ffff88807c42cd40 (&wdev->mtx){+.+.}-{3:3}, at: sdata_lock net/mac80211/ieee80211_i.h:1013 [inline]
#2: ffff88807c42cd40 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0x90/0xe80 net/mac80211/ibss.c:1681
1 lock held by khungtaskd/27:
#0: ffffffff8bb83ae0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6458
2 locks held by systemd-udevd/2969:
#0: ffff88801a765118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev.part.0+0x9b/0xb50 block/bdev.c:819
#1: ffff88801a760b60 (&lo->lo_mutex){+.+.}-{3:3}, at: lo_open+0x75/0x120 drivers/block/loop.c:1733
1 lock held by in:imklog/6213:
#0: ffff8880779dad70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 fs/file.c:990
1 lock held by syz-executor.0/9512:
#0: ffff88801a760b60 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_set_status+0x2a/0x930 drivers/block/loop.c:1248
1 lock held by syz-executor.0/9546:
#0: ffff888011118988 (mapping.invalidate_lock#2){.+.+}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:838 [inline]
#0: ffff888011118988 (mapping.invalidate_lock#2){.+.+}-{3:3}, at: filemap_update_page mm/filemap.c:2441 [inline]
#0: ffff888011118988 (mapping.invalidate_lock#2){.+.+}-{3:3}, at: filemap_get_pages+0x10f7/0x1be0 mm/filemap.c:2579
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.16.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:105
nmi_trigger_cpumask_backtrace+0x1ae/0x220 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:210 [inline]
watchdog+0xc1d/0xf50 kernel/hung_task.c:295
kthread+0x405/0x4f0 kernel/kthread.c:327
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 2979 Comm: kworker/1:4 Not tainted 5.16.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events kfree_rcu_work
RIP: 0010:unwind_next_frame+0x830/0x1ce0 arch/x86/kernel/unwind_orc.c:466
Code: 07 38 d0 7f 08 84 c0 0f 85 12 12 00 00 41 80 7e 34 00 0f 85 00 fc ff ff 80 3d 43 ac 48 0c 00 0f 85 f3 fb ff ff e9 a7 70 d9 07 <48> b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 48 c1 ea 03 80 3c 02
RSP: 0018:ffffc90001a8f690 EFLAGS: 00000297
RAX: 0000000000000005 RBX: 1ffff92000351eda RCX: ffffffff8e0c3ec3
RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000001
RBP: 0000000000000001 R08: ffffffff8e0c3ebe R09: ffffc90001a8f7b8
R10: fffff52000351f02 R11: 000000000008808a R12: ffffc90001a8f800
R13: ffffc90001a8f7ed R14: ffffc90001a8f7b8 R15: ffffffff8e0c3ec2
FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f382ed46000 CR3: 000000000b88e000 CR4: 0000000000350ee0
Call Trace:
__unwind_start+0x51b/0x800 arch/x86/kernel/unwind_orc.c:712
unwind_start arch/x86/include/asm/unwind.h:64 [inline]
arch_stack_walk+0x5c/0xe0 arch/x86/kernel/stacktrace.c:24
stack_trace_save+0x8c/0xc0 kernel/stacktrace.c:122
kasan_save_stack+0x1e/0x50 mm/kasan/common.c:38
kasan_set_track+0x21/0x30 mm/kasan/common.c:46
kasan_set_free_info+0x20/0x30 mm/kasan/generic.c:370
____kasan_slab_free mm/kasan/common.c:366 [inline]
____kasan_slab_free mm/kasan/common.c:328 [inline]
__kasan_slab_free+0xff/0x130 mm/kasan/common.c:374
kasan_slab_free include/linux/kasan.h:235 [inline]
slab_free_hook mm/slub.c:1723 [inline]
slab_free_freelist_hook+0x8b/0x1c0 mm/slub.c:1749
slab_free mm/slub.c:3513 [inline]
kmem_cache_free_bulk mm/slub.c:3656 [inline]
kmem_cache_free_bulk+0x40b/0xa70 mm/slub.c:3643
kfree_bulk include/linux/slab.h:446 [inline]
kfree_rcu_work+0x51c/0xa10 kernel/rcu/tree.c:3273
process_one_work+0x9b2/0x1690 kernel/workqueue.c:2298
worker_thread+0x658/0x11f0 kernel/workqueue.c:2445
kthread+0x405/0x4f0 kernel/kthread.c:327
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
----------------
Code disassembly (best guess), 1 bytes skipped:
0: 38 d0 cmp %dl,%al
2: 7f 08 jg 0xc
4: 84 c0 test %al,%al
6: 0f 85 12 12 00 00 jne 0x121e
c: 41 80 7e 34 00 cmpb $0x0,0x34(%r14)
11: 0f 85 00 fc ff ff jne 0xfffffc17
17: 80 3d 43 ac 48 0c 00 cmpb $0x0,0xc48ac43(%rip) # 0xc48ac61
1e: 0f 85 f3 fb ff ff jne 0xfffffc17
24: e9 a7 70 d9 07 jmpq 0x7d970d0
* 29: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax <-- trapping instruction
30: fc ff df
33: 48 8b 54 24 08 mov 0x8(%rsp),%rdx
38: 48 c1 ea 03 shr $0x3,%rdx
3c: 80 .byte 0x80
3d: 3c 02 cmp $0x2,%al