INFO: task syz.4.6247:30462 blocked for more than 143 seconds.
Tainted: G L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.6247 state:D stack:25640 pid:30462 tgid:30462 ppid:5641 task_flags:0x440040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
__schedule_loop kernel/sched/core.c:7311 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7326
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383
rwsem_down_read_slowpath+0x6ba/0x920 kernel/locking/rwsem.c:1114
__down_read_common kernel/locking/rwsem.c:1291 [inline]
__down_read kernel/locking/rwsem.c:1304 [inline]
down_read+0x9c/0x330 kernel/locking/rwsem.c:1576
filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline]
page_cache_ra_order+0x3eb/0xee0 mm/readahead.c:517
do_sync_mmap_readahead+0x75e/0x990 mm/filemap.c:3428
filemap_fault+0x7d9/0x13b0 mm/filemap.c:3582
__do_fault+0x138/0x2a0 mm/memory.c:5425
do_shared_fault mm/memory.c:5924 [inline]
do_fault mm/memory.c:5998 [inline]
do_pte_missing+0x684/0x34b0 mm/memory.c:4566
handle_pte_fault mm/memory.c:6379 [inline]
__handle_mm_fault mm/memory.c:6517 [inline]
handle_mm_fault+0x1b36/0x3080 mm/memory.c:6686
do_user_addr_fault+0xa4d/0x1340 arch/x86/mm/fault.c:1343
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x7fb7a576bd18
RSP: 002b:00007fb7a5b3fba8 EFLAGS: 00010202
RAX: 0000200000000080 RBX: 0000000000000004 RCX: 0030626c6c756e2f
RDX: 000000000000000c RSI: 6c756e2f7665642f RDI: 0000200000000080
RBP: fffffffffffffffe R08: 0000001b33320000 R09: 0000000000000001
R10: 7ffffffffffffff3 R11: 0000000000000009 R12: 00007fb7a5b3fcd0
R13: 00007fb7a5a1618c R14: 0000000000176856 R15: 00007fb7a5a16180
INFO: task syz.4.6247:30463 blocked for more than 144 seconds.
Tainted: G L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.6247 state:D stack:25824 pid:30463 tgid:30462 ppid:5641 task_flags:0x440040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
__schedule_loop kernel/sched/core.c:7311 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7326
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383
rwsem_down_read_slowpath+0x6ba/0x920 kernel/locking/rwsem.c:1114
__down_read_common kernel/locking/rwsem.c:1291 [inline]
__down_read kernel/locking/rwsem.c:1304 [inline]
down_read+0x9c/0x330 kernel/locking/rwsem.c:1576
filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline]
page_cache_ra_order+0x3eb/0xee0 mm/readahead.c:517
do_sync_mmap_readahead+0x75e/0x990 mm/filemap.c:3428
filemap_fault+0x7d9/0x13b0 mm/filemap.c:3582
__do_fault+0x138/0x2a0 mm/memory.c:5425
do_read_fault mm/memory.c:5860 [inline]
do_fault mm/memory.c:5994 [inline]
do_pte_missing+0x2215/0x34b0 mm/memory.c:4566
handle_pte_fault mm/memory.c:6379 [inline]
__handle_mm_fault mm/memory.c:6517 [inline]
handle_mm_fault+0x1b36/0x3080 mm/memory.c:6686
do_user_addr_fault+0x744/0x1340 arch/x86/mm/fault.c:1394
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0010:__get_user_nocheck_1+0x6/0x30 arch/x86/lib/getuser.S:119
Code: e9 bf 5a 04 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb 0f ae e8 <0f> b6 10 31 c0 0f 01 ca e9 8d 5a 04 00 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc9000406fed0 EFLAGS: 00050202
RAX: 0000200000006680 RBX: ffff888032599f00 RCX: ffff888032599f00
RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000406ff38 R08: 000000000001ffff R09: 0000000000400000
R10: 0000000000400008 R11: fffffbfff2065f1f R12: 00000000000000ca
R13: ffffffff81000130 R14: ffffc9000406ff48 R15: 0000000000000020
syscall_user_dispatch+0x4e/0x90 kernel/entry/syscall_user_dispatch.c:51
syscall_trace_enter include/linux/entry-common.h:82 [inline]
syscall_enter_from_user_mode_work include/linux/entry-common.h:147 [inline]
syscall_enter_from_user_mode include/linux/entry-common.h:178 [inline]
do_syscall_64+0xbe/0x580 arch/x86/entry/syscall_64.c:89
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb7a579ce59
RSP: 002b:00007fb7a671c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: ffffffffffffffda RBX: 00007fb7a5a15fa8 RCX: 00007fb7a579ce59
RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb7a5a15fac
RBP: 00007fb7a5a15fa0 R08: 3fffffffffffffff R09: 0000000000000000
R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fb7a5a16038 R14: 00007fb7a5b3f960 R15: 00007fb7a5b3fa48
INFO: task syz.4.6247:30464 blocked for more than 145 seconds.
Tainted: G L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.6247 state:D stack:27608 pid:30464 tgid:30462 ppid:5641 task_flags:0x440040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
__schedule_loop kernel/sched/core.c:7311 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7326
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383
rwsem_down_read_slowpath+0x6ba/0x920 kernel/locking/rwsem.c:1114
__down_read_common kernel/locking/rwsem.c:1291 [inline]
__down_read kernel/locking/rwsem.c:1304 [inline]
down_read+0x9c/0x330 kernel/locking/rwsem.c:1576
filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline]
page_cache_ra_order+0x3eb/0xee0 mm/readahead.c:517
do_sync_mmap_readahead+0x75e/0x990 mm/filemap.c:3428
filemap_fault+0x7d9/0x13b0 mm/filemap.c:3582
__do_fault+0x138/0x2a0 mm/memory.c:5425
do_shared_fault mm/memory.c:5924 [inline]
do_fault mm/memory.c:5998 [inline]
do_pte_missing+0x684/0x34b0 mm/memory.c:4566
handle_pte_fault mm/memory.c:6379 [inline]
__handle_mm_fault mm/memory.c:6517 [inline]
handle_mm_fault+0x1b36/0x3080 mm/memory.c:6686
faultin_page mm/gup.c:1126 [inline]
__get_user_pages+0x1678/0x2720 mm/gup.c:1428
__get_user_pages_locked mm/gup.c:1692 [inline]
faultin_page_range+0x26a/0x8f0 mm/gup.c:1912
madvise_populate mm/madvise.c:969 [inline]
madvise_do_behavior+0x2e4/0x540 mm/madvise.c:1906
do_madvise+0x327/0x3a0 mm/madvise.c:2006
__do_sys_madvise mm/madvise.c:2015 [inline]
__se_sys_madvise mm/madvise.c:2013 [inline]
__x64_sys_madvise+0xa6/0xc0 mm/madvise.c:2013
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb7a579ce59
RSP: 002b:00007fb7a66fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
RAX: ffffffffffffffda RBX: 00007fb7a5a16090 RCX: 00007fb7a579ce59
RDX: 0000000000000017 RSI: 0000000000c00000 RDI: 0000200000000000
RBP: 00007fb7a5832e6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fb7a5a16128 R14: 00007fb7a5a16090 R15: 00007fb7a5b3fa48
INFO: task syz.6.6266:30514 blocked for more than 145 seconds.
Tainted: G L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.6.6266 state:D stack:25640 pid:30514 tgid:30514 ppid:18771 task_flags:0x440040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
__schedule_loop kernel/sched/core.c:7311 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7326
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383
rwsem_down_read_slowpath+0x6ba/0x920 kernel/locking/rwsem.c:1114
__down_read_common kernel/locking/rwsem.c:1291 [inline]
__down_read kernel/locking/rwsem.c:1304 [inline]
down_read+0x9c/0x330 kernel/locking/rwsem.c:1576
filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline]
page_cache_ra_order+0x3eb/0xee0 mm/readahead.c:517
do_sync_mmap_readahead+0x75e/0x990 mm/filemap.c:3428
filemap_fault+0x7d9/0x13b0 mm/filemap.c:3582
__do_fault+0x138/0x2a0 mm/memory.c:5425
do_shared_fault mm/memory.c:5924 [inline]
do_fault mm/memory.c:5998 [inline]
do_pte_missing+0x684/0x34b0 mm/memory.c:4566
handle_pte_fault mm/memory.c:6379 [inline]
__handle_mm_fault mm/memory.c:6517 [inline]
handle_mm_fault+0x1b36/0x3080 mm/memory.c:6686
do_user_addr_fault+0xa4d/0x1340 arch/x86/mm/fault.c:1343
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x7f36cf8665a2
RSP: 002b:00007f36cfd3fb70 EFLAGS: 00010246
RAX: 0000200000000180 RBX: 0000000000000004 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 000000000000004c RDI: 000055555a15a3d8
RBP: 00007f36cfd3fc90 R08: 0000000000000000 R09: 0000000000000000
R10: 000000000000004c R11: 0000000000000001 R12: 00007f36cfd3fcd0
R13: 00007f36cfc15fac R14: 000000000017738a R15: 00007f36cfc15fa0
Showing all locks held in the system:
6 locks held by kworker/u8:1/13:
1 lock held by rcu_exp_gp_kthr/18:
1 lock held by khungtaskd/31:
#0: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
#0: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline]
#0: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775
2 locks held by getty/5379:
#0: ffff8880367180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 drivers/tty/n_tty.c:2211
3 locks held by kworker/u8:9/20178:
#0: ffff88801ae94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
#0: ffff88801ae94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#1: ffffc9000357fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
#1: ffffc9000357fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
#2: ffffffff8fdecec0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:313
3 locks held by syz.5.5041/25634:
#0: ffff88807e974ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close net/bluetooth/hci_core.c:497 [inline]
#0: ffff88807e974ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 net/bluetooth/hci_core.c:2678
#1: ffff88807e9740b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0 net/bluetooth/hci_sync.c:5393
#2: ffffffff8ff737e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_disconn_cfm include/net/bluetooth/hci_core.h:2148 [inline]
#2: ffffffff8ff737e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260 net/bluetooth/hci_conn.c:2733
2 locks held by syz.3.6212/30252:
1 lock held by syz.4.6247/30462:
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline]
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3eb/0xee0 mm/readahead.c:517
1 lock held by syz.4.6247/30463:
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline]
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3eb/0xee0 mm/readahead.c:517
1 lock held by syz.4.6247/30464:
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline]
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3eb/0xee0 mm/readahead.c:517
1 lock held by syz.6.6266/30514:
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline]
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3eb/0xee0 mm/readahead.c:517
1 lock held by syz.1.6344/30814:
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline]
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3eb/0xee0 mm/readahead.c:517
1 lock held by syz.1.6344/30815:
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline]
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3eb/0xee0 mm/readahead.c:517
1 lock held by syz.7.6400/30980:
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline]
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3eb/0xee0 mm/readahead.c:517
1 lock held by syz.9.6451/31211:
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline]
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3eb/0xee0 mm/readahead.c:517
1 lock held by syz.2.6655/32121:
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline]
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3eb/0xee0 mm/readahead.c:517
3 locks held by syz-executor/32271:
#0: ffff888037274ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close net/bluetooth/hci_core.c:497 [inline]
#0: ffff888037274ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 net/bluetooth/hci_core.c:2678
#1: ffff8880372740b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0 net/bluetooth/hci_sync.c:5393
#2: ffffffff8e95ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:343 [inline]
#2: ffffffff8e95ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 kernel/rcu/tree_exp.h:961
1 lock held by syz-executor/32277:
#0: ffffffff8fdecec0 (rtnl_mutex){+.+.}-{4:4}, at: tun_detach drivers/net/tun.c:641 [inline]
#0: ffffffff8fdecec0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 drivers/net/tun.c:3506
1 lock held by syz.3.6726/32341:
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline]
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3eb/0xee0 mm/readahead.c:517
1 lock held by syz.3.6726/32342:
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline]
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3eb/0xee0 mm/readahead.c:517
1 lock held by syz.3.6726/32363:
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline]
#0: ffff8880230b7c80 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3eb/0xee0 mm/readahead.c:517
5 locks held by syz-executor/32567:
#0: ffff888054660ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close net/bluetooth/hci_core.c:497 [inline]
#0: ffff888054660ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 net/bluetooth/hci_core.c:2678
#1: ffff8880546600b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0 net/bluetooth/hci_sync.c:5393
#2: ffffffff8ff737e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_disconn_cfm include/net/bluetooth/hci_core.h:2148 [inline]
#2: ffffffff8ff737e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260 net/bluetooth/hci_conn.c:2733
#3: ffff888039da5af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 net/bluetooth/l2cap_core.c:1778
#4: ffffffff8e95ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:343 [inline]
#4: ffffffff8e95ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 kernel/rcu/tree_exp.h:961
3 locks held by syz.8.6897/417:
#0: ffff88803cf40ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close net/bluetooth/hci_core.c:497 [inline]
#0: ffff88803cf40ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 net/bluetooth/hci_core.c:2678
#1: ffff88803cf400b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0 net/bluetooth/hci_sync.c:5393
#2: ffffffff8ff737e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_disconn_cfm include/net/bluetooth/hci_core.h:2148 [inline]
#2: ffffffff8ff737e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260 net/bluetooth/hci_conn.c:2733
1 lock held by syz.0.6898/414:
#0: ffff88805d42cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close net/bluetooth/hci_core.c:497 [inline]
#0: ffff88805d42cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 net/bluetooth/hci_core.c:2678
=============================================
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Call Trace:
dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:122
nmi_trigger_cpumask_backtrace+0x17a/0x380 lib/nmi_backtrace.c:65
trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
__sys_info lib/sys_info.c:157 [inline]
sys_info+0x135/0x170 lib/sys_info.c:165
check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]
watchdog+0xfd7/0x1030 kernel/hung_task.c:561
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 21677 Comm: kworker/u8:19 Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Workqueue: bat_events batadv_tt_purge
RIP: 0010:trace_irq_enable+0x34/0x140 include/trace/events/preemptirq.h:40
Code: 8b 05 84 63 71 11 83 f8 08 73 37 89 c3 c1 e8 06 48 8d 3c c5 f0 f8 32 90 be 08 00 00 00 e8 04 4c 65 00 48 0f a3 1d 1c 5c 64 0e <73> 09 e8 55 a0 dc ff 84 c0 74 13 5b 41 5c 41 5e 41 5f c3 cc cc cc
RSP: 0018:ffffc9000342f9a0 EFLAGS: 00000057
RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81ce9ccc
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9032f8f0
RBP: 0000000000000400 R08: ffffffff9032f8f7 R09: 1ffffffff2065f1e
R10: dffffc0000000000 R11: fffffbfff2065f1f R12: ffff8880366a4050
R13: dffffc0000000000 R14: ffffffff8b8355b1 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff888125220000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007feb46054d58 CR3: 000000007f81e000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
trace_hardirqs_on+0x18/0x40 kernel/trace/trace_preemptirq.c:73
__local_bh_enable_ip+0xd0/0x130 kernel/softirq.c:455
spin_unlock_bh include/linux/spinlock.h:396 [inline]
batadv_tt_local_purge+0x2c1/0x340 net/batman-adv/translation-table.c:1366
batadv_tt_purge+0x35/0xa10 net/batman-adv/translation-table.c:3565
process_one_work kernel/workqueue.c:3322 [inline]
process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405
worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245