INFO: task syz.1.2418:15331 blocked for more than 143 seconds.
Tainted: G L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.2418 state:D stack:25336 pid:15331 tgid:15331 ppid:5843 task_flags:0x440040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5256 [inline]
__schedule+0x14bc/0x5000 kernel/sched/core.c:6863
__schedule_loop kernel/sched/core.c:6945 [inline]
schedule+0x165/0x360 kernel/sched/core.c:6960
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
rwsem_down_read_slowpath+0x5fd/0x8f0 kernel/locking/rwsem.c:1086
__down_read_common kernel/locking/rwsem.c:1261 [inline]
__down_read kernel/locking/rwsem.c:1274 [inline]
down_read+0x99/0x2e0 kernel/locking/rwsem.c:1539
filemap_invalidate_lock_shared include/linux/fs.h:1092 [inline]
page_cache_ra_order+0x37a/0xe50 mm/readahead.c:494
do_sync_mmap_readahead+0x66a/0x870 mm/filemap.c:3400
filemap_fault+0x6ac/0x1290 mm/filemap.c:3549
__do_fault+0x138/0x390 mm/memory.c:5320
do_shared_fault mm/memory.c:5819 [inline]
do_fault mm/memory.c:5893 [inline]
do_pte_missing+0x6ad/0x3330 mm/memory.c:4401
handle_pte_fault mm/memory.c:6273 [inline]
__handle_mm_fault mm/memory.c:6411 [inline]
handle_mm_fault+0x1b26/0x32b0 mm/memory.c:6580
do_user_addr_fault+0xa7c/0x1380 arch/x86/mm/fault.c:1336
handle_page_fault arch/x86/mm/fault.c:1476 [inline]
exc_page_fault+0x82/0x100 arch/x86/mm/fault.c:1532
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618
RIP: 0033:0x7fc624757398
RSP: 002b:00007fc624b0fb88 EFLAGS: 00010202
RAX: 00002000000003c0 RBX: 0000000000000004 RCX: 0064726175676572
RDX: 000000000000000a RSI: 7261756765726977 RDI: 00002000000003c0
RBP: 00007fc6249e7da0 R08: 0000001b2fb20000 R09: 0000000000000001
R10: 0000000000000001 R11: 0000000000000009 R12: 00007fc6249e618c
R13: 00007fc6249e6180 R14: fffffffffffffffe R15: 00007fc624b0fca0
INFO: task syz.1.2418:15332 blocked for more than 144 seconds.
Tainted: G L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.2418 state:D stack:25688 pid:15332 tgid:15331 ppid:5843 task_flags:0x440040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5256 [inline]
__schedule+0x14bc/0x5000 kernel/sched/core.c:6863
__schedule_loop kernel/sched/core.c:6945 [inline]
schedule+0x165/0x360 kernel/sched/core.c:6960
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
rwsem_down_read_slowpath+0x5fd/0x8f0 kernel/locking/rwsem.c:1086
__down_read_common kernel/locking/rwsem.c:1261 [inline]
__down_read kernel/locking/rwsem.c:1274 [inline]
down_read+0x99/0x2e0 kernel/locking/rwsem.c:1539
filemap_invalidate_lock_shared include/linux/fs.h:1092 [inline]
page_cache_ra_order+0x37a/0xe50 mm/readahead.c:494
do_sync_mmap_readahead+0x66a/0x870 mm/filemap.c:3400
filemap_fault+0x6ac/0x1290 mm/filemap.c:3549
__do_fault+0x138/0x390 mm/memory.c:5320
do_read_fault mm/memory.c:5755 [inline]
do_fault mm/memory.c:5889 [inline]
do_pte_missing+0x2206/0x3330 mm/memory.c:4401
handle_pte_fault mm/memory.c:6273 [inline]
__handle_mm_fault mm/memory.c:6411 [inline]
handle_mm_fault+0x1b26/0x32b0 mm/memory.c:6580
faultin_page mm/gup.c:1126 [inline]
__get_user_pages+0x1650/0x29f0 mm/gup.c:1428
populate_vma_page_range+0x29f/0x3a0 mm/gup.c:1860
__mm_populate+0x24c/0x380 mm/gup.c:1963
do_mlock+0x612/0x720 mm/mlock.c:653
__do_sys_mlock mm/mlock.c:661 [inline]
__se_sys_mlock mm/mlock.c:659 [inline]
__x64_sys_mlock+0x60/0x70 mm/mlock.c:659
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc62478f749
RSP: 002b:00007fc6255a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
RAX: ffffffffffffffda RBX: 00007fc6249e5fa0 RCX: 00007fc62478f749
RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000
RBP: 00007fc624813f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fc6249e6038 R14: 00007fc6249e5fa0 R15: 00007fc624b0fa28
INFO: task syz.1.2418:15333 blocked for more than 144 seconds.
Tainted: G L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.2418 state:D stack:26560 pid:15333 tgid:15331 ppid:5843 task_flags:0x440040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5256 [inline]
__schedule+0x14bc/0x5000 kernel/sched/core.c:6863
__schedule_loop kernel/sched/core.c:6945 [inline]
schedule+0x165/0x360 kernel/sched/core.c:6960
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
rwsem_down_read_slowpath+0x5fd/0x8f0 kernel/locking/rwsem.c:1086
__down_read_common kernel/locking/rwsem.c:1261 [inline]
__down_read kernel/locking/rwsem.c:1274 [inline]
down_read+0x99/0x2e0 kernel/locking/rwsem.c:1539
filemap_invalidate_lock_shared include/linux/fs.h:1092 [inline]
page_cache_ra_order+0x37a/0xe50 mm/readahead.c:494
do_sync_mmap_readahead+0x66a/0x870 mm/filemap.c:3400
filemap_fault+0x6ac/0x1290 mm/filemap.c:3549
__do_fault+0x138/0x390 mm/memory.c:5320
do_read_fault mm/memory.c:5755 [inline]
do_fault mm/memory.c:5889 [inline]
do_pte_missing+0x2206/0x3330 mm/memory.c:4401
handle_pte_fault mm/memory.c:6273 [inline]
__handle_mm_fault mm/memory.c:6411 [inline]
handle_mm_fault+0x1b26/0x32b0 mm/memory.c:6580
faultin_page mm/gup.c:1126 [inline]
__get_user_pages+0x1650/0x29f0 mm/gup.c:1428
populate_vma_page_range+0x29f/0x3a0 mm/gup.c:1860
__mm_populate+0x24c/0x380 mm/gup.c:1963
mm_populate include/linux/mm.h:3701 [inline]
do_mremap mm/mremap.c:1952 [inline]
__do_sys_mremap mm/mremap.c:1997 [inline]
__se_sys_mremap+0xea8/0xfb0 mm/mremap.c:1965
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc62478f749
RSP: 002b:00007fc625584038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
RAX: ffffffffffffffda RBX: 00007fc6249e6090 RCX: 00007fc62478f749
RDX: 0000000000004000 RSI: 0000000000001000 RDI: 0000200000000000
RBP: 00007fc624813f91 R08: 0000200000001000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fc6249e6128 R14: 00007fc6249e6090 R15: 00007fc624b0fa28
Showing all locks held in the system:
1 lock held by kworker/1:0H/25:
#0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 kernel/sched/core.c:647
1 lock held by khungtaskd/31:
#0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
#0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline]
#0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775
2 locks held by getty/5586:
#0: ffff88814d26f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 drivers/tty/n_tty.c:2211
2 locks held by syz.4.2392/15230:
1 lock held by syz.1.2418/15331:
#0: ffff888148edd9c8 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1092 [inline]
#0: ffff888148edd9c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x37a/0xe50 mm/readahead.c:494
1 lock held by syz.1.2418/15332:
#0: ffff888148edd9c8 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1092 [inline]
#0: ffff888148edd9c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x37a/0xe50 mm/readahead.c:494
1 lock held by syz.1.2418/15333:
#0: ffff888148edd9c8 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1092 [inline]
#0: ffff888148edd9c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x37a/0xe50 mm/readahead.c:494
1 lock held by syz.3.2506/15694:
#0: ffff888148edd9c8 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1092 [inline]
#0: ffff888148edd9c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x37a/0xe50 mm/readahead.c:494
1 lock held by syz.3.2506/15698:
#0: ffff888148edd9c8 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1092 [inline]
#0: ffff888148edd9c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x37a/0xe50 mm/readahead.c:494
1 lock held by syz.2.2565/15917:
#0: ffff888148edd9c8 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1092 [inline]
#0: ffff888148edd9c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x37a/0xe50 mm/readahead.c:494
1 lock held by syz.2.2565/15919:
#0: ffff888148edd9c8 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1092 [inline]
#0: ffff888148edd9c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x37a/0xe50 mm/readahead.c:494
1 lock held by syz.5.2640/16210:
#0: ffff888148edd9c8
(mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1092 [inline]
(mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x37a/0xe50 mm/readahead.c:494
2 locks held by syz.0.2700/16440:
#0: ffff88807e3fa800 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock_killable+0x1d/0x70 include/linux/mmap_lock.h:400
#1: ffff888148edd9c8 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1092 [inline]
#1: ffff888148edd9c8 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_fault+0x8ff/0x1290 mm/filemap.c:3556
1 lock held by syz.0.2700/16444:
#0: ffff888148edd9c8 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1092 [inline]
#0: ffff888148edd9c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x37a/0xe50 mm/readahead.c:494
1 lock held by syz.0.2700/16449:
#0: ffff888148edd9c8 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1092 [inline]
#0: ffff888148edd9c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x37a/0xe50 mm/readahead.c:494
2 locks held by syz.8.2835/16934:
=============================================
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
__sys_info lib/sys_info.c:157 [inline]
sys_info+0x135/0x170 lib/sys_info.c:165
check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline]
watchdog+0xf95/0xfe0 kernel/hung_task.c:515
kthread+0x711/0x8a0 kernel/kthread.c:463
ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 14287 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Workqueue: events_unbound nsim_dev_trap_report_work
RIP: 0010:memset_orig+0x46/0xb0 arch/x86/lib/memset_64.S:74
Code: 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84 00 00 00 00 00 48 ff c9 48 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 <48> 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00
RSP: 0018:ffffc9000bd1f7c0 EFLAGS: 00000202
RAX: 0000000000000000 RBX: ffff8880699bc000 RCX: 0000000000000038
RDX: 0000000000001000 RSI: 0000000000000000 RDI: ffff8880699bc1c0
RBP: 00000000004e5600 R08: 00000000ffffffff R09: 0000000000000000
R10: ffff8880699bc000 R11: ffffffff81ad9fb0 R12: 0000000000001000
R13: ffff88813ffa7140 R14: 0000000000082820 R15: 0000000000001000
FS: 0000000000000000(0000) GS:ffff888125f44000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f21093b7198 CR3: 00000000396c8000 CR4: 00000000003526f0
Call Trace:
slab_post_alloc_hook mm/slub.c:4951 [inline]
slab_alloc_node mm/slub.c:5258 [inline]
__do_kmalloc_node mm/slub.c:5651 [inline]
__kmalloc_node_track_caller_noprof+0x54a/0x820 mm/slub.c:5759
kmalloc_reserve+0x136/0x290 net/core/skbuff.c:608
__alloc_skb+0x27e/0x430 net/core/skbuff.c:690
alloc_skb include/linux/skbuff.h:1383 [inline]
nsim_dev_trap_skb_build drivers/net/netdevsim/dev.c:818 [inline]
nsim_dev_trap_report drivers/net/netdevsim/dev.c:875 [inline]
nsim_dev_trap_report_work+0x29a/0xb80 drivers/net/netdevsim/dev.c:921
process_one_work kernel/workqueue.c:3257 [inline]
process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340
worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421
kthread+0x711/0x8a0 kernel/kthread.c:463
ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246