INFO: task syz.4.971:11046 blocked for more than 163 seconds.
Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.971 state:D stack:27344 pid:11046 tgid:11045 ppid:6187 task_flags:0x400140 flags:0x00020004
Call Trace:
context_switch kernel/sched/core.c:5377 [inline]
__schedule+0xf43/0x5890 kernel/sched/core.c:6764
__schedule_loop kernel/sched/core.c:6841 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6856
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6913
__mutex_lock_common kernel/locking/mutex.c:662 [inline]
__mutex_lock+0x6bd/0xb10 kernel/locking/mutex.c:730
nfsd_nl_threads_set_doit+0x694/0xbe0 fs/nfsd/nfsctl.c:1629
genl_family_rcv_msg_doit+0x202/0x2f0 net/netlink/genetlink.c:1115
genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline]
genl_rcv_msg+0x565/0x800 net/netlink/genetlink.c:1210
netlink_rcv_skb+0x165/0x410 net/netlink/af_netlink.c:2543
genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219
netlink_unicast_kernel net/netlink/af_netlink.c:1322 [inline]
netlink_unicast+0x53c/0x7f0 net/netlink/af_netlink.c:1348
netlink_sendmsg+0x8b8/0xd70 net/netlink/af_netlink.c:1892
sock_sendmsg_nosec net/socket.c:718 [inline]
__sock_sendmsg net/socket.c:733 [inline]
____sys_sendmsg+0x9ae/0xb40 net/socket.c:2573
___sys_sendmsg+0x135/0x1e0 net/socket.c:2627
__sys_sendmsg+0x16e/0x220 net/socket.c:2659
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f982578cde9
RSP: 002b:00007f982655f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f98259a5fa0 RCX: 00007f982578cde9
RDX: 0000000000000810 RSI: 0000400000002640 RDI: 0000000000000005
RBP: 00007f982580e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f98259a5fa0 R15: 00007ffcc5f2bc88
INFO: task syz-executor:11259 blocked for more than 144 seconds.
Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor state:D stack:24240 pid:11259 tgid:11259 ppid:1 task_flags:0x400140 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5377 [inline]
__schedule+0xf43/0x5890 kernel/sched/core.c:6764
__schedule_loop kernel/sched/core.c:6841 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6856
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6913
__mutex_lock_common kernel/locking/mutex.c:662 [inline]
__mutex_lock+0x6bd/0xb10 kernel/locking/mutex.c:730
nfsd_shutdown_threads+0x5b/0xf0 fs/nfsd/nfssvc.c:596
nfsd_umount+0x48/0xe0 fs/nfsd/nfsctl.c:1386
deactivate_locked_super+0xbe/0x1a0 fs/super.c:473
deactivate_super+0xde/0x100 fs/super.c:506
cleanup_mnt+0x222/0x450 fs/namespace.c:1413
task_work_run+0x14e/0x250 kernel/task_work.c:227
resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
__syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
syscall_exit_to_user_mode+0x27b/0x2a0 kernel/entry/common.c:218
do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f253478e117
RSP: 002b:00007ffc08c3c368 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 00007f253480e08c RCX: 00007f253478e117
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc08c3c420
RBP: 00007ffc08c3c420 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc08c3d4b0
R13: 00007f253480e08c R14: 000000000005c108 R15: 00007ffc08c3d4f0
Showing all locks held in the system:
3 locks held by kworker/u8:0/11:
1 lock held by khungtaskd/30:
#0: ffffffff8e1bc140 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
#0: ffffffff8e1bc140 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#0: ffffffff8e1bc140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 kernel/locking/lockdep.c:6746
4 locks held by kworker/u8:9/7751:
#0: ffff88801bef5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30 kernel/workqueue.c:3211
#1: ffffc90003507d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 kernel/workqueue.c:3212
#2: ffffffff8fec2e90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xbf0 net/core/net_namespace.c:606
#3: ffffffff8e1c7480 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x700 kernel/rcu/tree.c:3741
2 locks held by kworker/u8:14/7757:
#0: ffff88801d74c148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30 kernel/workqueue.c:3211
#1: ffffc9000c737d18 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 kernel/workqueue.c:3212
2 locks held by syz-executor/10894:
#0: ffff88807b9e40e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: __super_lock fs/super.c:56 [inline]
#0: ffff88807b9e40e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: __super_lock_excl fs/super.c:71 [inline]
#0: ffff88807b9e40e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 fs/super.c:505
#1: ffffffff8e5bda88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 fs/nfsd/nfssvc.c:596
2 locks held by syz.2.957/10981:
#0: ffffffff8ff79370 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218
#1: ffffffff8e5bda88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x694/0xbe0 fs/nfsd/nfsctl.c:1629
2 locks held by syz.4.971/11046:
#0: ffffffff8ff79370 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218
#1: ffffffff8e5bda88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x694/0xbe0 fs/nfsd/nfsctl.c:1629
2 locks held by syz-executor/11259:
#0: ffff8880315460e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: __super_lock fs/super.c:56 [inline]
#0: ffff8880315460e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: __super_lock_excl fs/super.c:71 [inline]
#0: ffff8880315460e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 fs/super.c:505
#1: ffffffff8e5bda88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 fs/nfsd/nfssvc.c:596
2 locks held by getty/11986:
#0: ffff88814dae30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
#1: ffffc90004fa32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 drivers/tty/n_tty.c:2211
2 locks held by syz-executor/12902:
#0: ffff888087e6a0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: __super_lock fs/super.c:56 [inline]
#0: ffff888087e6a0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: __super_lock_excl fs/super.c:71 [inline]
#0: ffff888087e6a0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 fs/super.c:505
#1: ffffffff8e5bda88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 fs/nfsd/nfssvc.c:596
2 locks held by syz.3.1417/14424:
5 locks held by syz.3.1422/14445:
2 locks held by syz.6.1426/14473:
4 locks held by syz.0.1428/14486:
1 lock held by syz.0.1432/14494:
2 locks held by syz.9.1435/14498:
#0: ffffffff8fec2e90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x292/0x6c0 net/core/net_namespace.c:512
#1: ffffffff8e1c75b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 kernel/rcu/tree_exp.h:302
=============================================
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:236 [inline]
watchdog+0xf62/0x12b0 kernel/hung_task.c:399
kthread+0x3af/0x750 kernel/kthread.c:464
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 14486 Comm: syz.0.1428 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
RIP: 0010:check_region_inline mm/kasan/generic.c:174 [inline]
RIP: 0010:kasan_check_range+0x1b/0x1a0 mm/kasan/generic.c:189
Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 85 f6 0f 84 50 01 00 00 48 89 f8 41 54 44 0f b6 c2 48 01 f0 55 53 <0f> 82 c6 00 00 00 48 b8 ff ff ff ff ff 7f ff ff 48 39 f8 0f 83 b3
RSP: 0018:ffffc900033f6d40 EFLAGS: 00000086
RAX: ffffea0000e6be88 RBX: 0000000000000000 RCX: ffffffff81f2eb88
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0000e6be80
RBP: ffffea0000e6be80 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000004 R12: 0000000000000004
R13: 0000000000000000 R14: 00fff0000002001c R15: ffffea0000e6be80
FS: 00007fe5af3f66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b310deff8 CR3: 00000000434ba000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
instrument_atomic_read include/linux/instrumented.h:68 [inline]
_test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
folio_test_swapcache include/linux/page-flags.h:585 [inline]
lru_gen_folio_seq include/linux/mm_inline.h:243 [inline]
lru_gen_add_folio+0xa48/0xf10 include/linux/mm_inline.h:267
lruvec_add_folio include/linux/mm_inline.h:344 [inline]
lru_add+0x3f3/0xd70 mm/swap.c:154
folio_batch_move_lru+0x113/0x3b0 mm/swap.c:168
__folio_batch_add_and_move+0x35b/0xc60 mm/swap.c:196
shmem_alloc_and_add_folio+0x83e/0xc10 mm/shmem.c:1961
shmem_get_folio_gfp+0x689/0x1530 mm/shmem.c:2522
shmem_get_folio mm/shmem.c:2628 [inline]
shmem_write_begin+0x161/0x300 mm/shmem.c:3278
generic_perform_write+0x2ba/0x920 mm/filemap.c:4189
shmem_file_write_iter+0x10e/0x140 mm/shmem.c:3454
__kernel_write_iter+0x318/0xa90 fs/read_write.c:612
dump_emit_page fs/coredump.c:884 [inline]
dump_user_range+0x389/0x8c0 fs/coredump.c:945
elf_core_dump+0x2787/0x3880 fs/binfmt_elf.c:2129
do_coredump+0x304f/0x45d0 fs/coredump.c:758
get_signal+0x23f3/0x2610 kernel/signal.c:3021
arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
irqentry_exit_to_user_mode+0x13f/0x280 kernel/entry/common.c:231
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0033:0x7fe5b158cdf1
Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
RSP: 002b:000002000400000d EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007fe5b17a5fa0 RCX: 00007fe5b158cde9
RDX: ffffffffff600000 RSI: 000002000400000d RDI: 0000000000000007
RBP: 00007fe5b160e2a0 R08: 0000000000000003 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fe5b17a5fa0 R15: 00007ffcbd5d1f38