INFO: task syz.0.2986:18137 blocked for more than 144 seconds. Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.2986 state:D stack:24368 pid:18137 tgid:18129 ppid:17711 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0xe58/0x5ad0 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6848 schedule_timeout+0x244/0x280 kernel/time/sleep_timeout.c:75 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common+0x3e1/0x600 kernel/sched/completion.c:116 wait_for_common kernel/sched/completion.c:127 [inline] wait_for_completion_state+0x1c/0x40 kernel/sched/completion.c:264 coredump_wait fs/coredump.c:418 [inline] do_coredump+0x86f/0x49e0 fs/coredump.c:575 get_signal+0x230b/0x26c0 kernel/signal.c:3002 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0003:0x7fff9693cad0 RSP: 0003:00007f92b8f7608c EFLAGS: 000502c2 RAX: 0000000000000000 RBX: 000000000b2beb11 RCX: 00007f92b8f76080 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000485 R08: 00007f92b8f76080 R09: 00000000b9b150c0 R10: ffffffff000010fe R11: 00007f92b8efcc20 R12: 0000000000000485 R13: 000000000b3b3fb4 R14: 0000000000000000 R15: 0000000000000000 Showing all locks held in the system: 5 locks held by kworker/u8:0/11: 1 lock held by khungtaskd/30: #0: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #0: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 kernel/locking/lockdep.c:6744 2 locks held by getty/5576: #0: ffff88814e9f80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 drivers/tty/n_tty.c:2211 1 lock held by syz-executor/5804: 3 locks held by kworker/0:1/14223: #0: ffff88801b079948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3204 #1: ffffc9001b9dfd80 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205 #2: ffffffff8fedc7c8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x84/0x1130 net/wireless/reg.c:2480 2 locks held by syz.2.3425/19832: #0: ffffffff8fec6bd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x292/0x6c0 net/core/net_namespace.c:512 #1: ffffffff8fedc7c8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x218/0x790 net/ipv4/ip_tunnel.c:1159 2 locks held by syz.2.3425/19835: 1 lock held by syz.6.3428/19846: #0: ffff88807d8c4fe0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_write_lock_killable include/linux/mmap_lock.h:122 [inline] #0: ffff88807d8c4fe0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x160/0x360 mm/util.c:578 1 lock held by syz.6.3428/19851: ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:234 [inline] watchdog+0xf14/0x1240 kernel/hung_task.c:397 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 19390 Comm: kworker/u8:6 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:__unwind_start+0x4c3/0x7f0 arch/x86/kernel/unwind_orc.c:759 Code: 00 00 48 39 c3 49 8b 56 10 72 b3 48 39 d3 73 ae 48 8d 4b 08 48 39 ca 72 a5 48 39 c8 73 a0 48 8b 04 24 48 c1 e8 03 80 3c 28 00 <0f> 85 f4 01 00 00 49 3b 5e 38 73 88 e9 03 fe ff ff 48 b8 00 00 00 RSP: 0018:ffffc9001b23eed8 EFLAGS: 00000246 RAX: 1ffff92003647dec RBX: ffffc9001b23efb8 RCX: ffffc9001b23efc0 RDX: ffffc9001b240000 RSI: ffffc9001b23efb8 RDI: 0000000000000001 RBP: dffffc0000000000 R08: ffffc9001b23ef5c R09: ffffffff90f092a0 R10: ffffc9001b23ef28 R11: 000000000000406c R12: fffff52003647de7 R13: fffff52003647de6 R14: ffffc9001b23ef28 R15: ffffc9001b23ef30 FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c3f91dd CR3: 0000000029c2e000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0x74/0x100 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394 kasan_kmalloc include/linux/kasan.h:260 [inline] __do_kmalloc_node mm/slub.c:4298 [inline] __kmalloc_noprof+0x21c/0x510 mm/slub.c:4310 kmalloc_noprof include/linux/slab.h:905 [inline] kzalloc_noprof include/linux/slab.h:1037 [inline] cfg80211_inform_single_bss_data+0x543/0x1df0 net/wireless/scan.c:2306 cfg80211_inform_bss_data+0x205/0x3ba0 net/wireless/scan.c:3189 cfg80211_inform_bss_frame_data+0x272/0x7a0 net/wireless/scan.c:3284 ieee80211_bss_info_update+0x311/0xab0 net/mac80211/scan.c:226 ieee80211_rx_bss_info net/mac80211/ibss.c:1101 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1580 [inline] ieee80211_ibss_rx_queued_mgmt+0x189c/0x2f50 net/mac80211/ibss.c:1607 ieee80211_iface_process_skb net/mac80211/iface.c:1613 [inline] ieee80211_iface_work+0xc0b/0xf00 net/mac80211/iface.c:1667 cfg80211_wiphy_work+0x3de/0x560 net/wireless/core.c:440 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229 process_scheduled_works kernel/workqueue.c:3310 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244