INFO: task syz.5.1077:10229 blocked for more than 143 seconds.
Tainted: G L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.5.1077 state:D stack:29032 pid:10229 tgid:10224 ppid:6685 task_flags:0x400040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5388 [inline]
__schedule+0x1295/0x67a0 kernel/sched/core.c:7189
__schedule_loop kernel/sched/core.c:7268 [inline]
schedule+0xdd/0x390 kernel/sched/core.c:7283
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7340
__mutex_lock_common kernel/locking/mutex.c:726 [inline]
__mutex_lock+0xced/0x1b10 kernel/locking/mutex.c:820
blk_debugfs_lock_nomemsave block/blk.h:758 [inline]
blk_trace_remove kernel/trace/blktrace.c:561 [inline]
blk_trace_ioctl+0x263/0x320 kernel/trace/blktrace.c:952
blkdev_common_ioctl+0x170c/0x2b80 block/ioctl.c:717
blkdev_ioctl+0x43b/0x6f0 block/ioctl.c:791
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:597 [inline]
__se_sys_ioctl fs/ioctl.c:583 [inline]
__x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x10b/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f524cb9ce59
RSP: 002b:00007f524d9ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f524ce16090 RCX: 00007f524cb9ce59
RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000003
RBP: 00007f524cc32d6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f524ce16128 R14: 00007f524ce16090 R15: 00007ffda83913f8
Showing all locks held in the system:
1 lock held by khungtaskd/31:
#0: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
#0: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline]
#0: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775
2 locks held by syslogd/4962:
3 locks held by klogd/4969:
3 locks held by udevd/4980:
3 locks held by dhcpcd/5274:
3 locks held by dhcpcd/5275:
2 locks held by getty/5368:
#0: ffff8880342c60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
#1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 drivers/tty/n_tty.c:2211
4 locks held by syz-executor/5597:
3 locks held by syz-executor/5619:
3 locks held by syz-executor/7004:
3 locks held by syz.5.1077/10226:
1 lock held by syz.5.1077/10229:
#0: ffff8880277b9b48 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:758 [inline]
#0: ffff8880277b9b48 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove kernel/trace/blktrace.c:561 [inline]
#0: ffff8880277b9b48 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x263/0x320 kernel/trace/blktrace.c:952
3 locks held by syz-executor/10384:
3 locks held by udevd/11140:
3 locks held by udevd/11169:
3 locks held by udevd/11172:
4 locks held by udevd/11180:
3 locks held by udevd/11478:
3 locks held by syz.6.1400/11485:
3 locks held by syz.6.1400/11486:
2 locks held by syz.7.1401/11487:
2 locks held by dhcpcd/11489:
#0: ffff8880371462d0 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1094 [inline]
#0: ffff8880371462d0 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x83f/0x2e90 mm/filemap.c:3562
#1: ffffffff8e9b1a00 (fs_reclaim){+.+.}-{0:0}, at: __perform_reclaim mm/page_alloc.c:4398 [inline]
#1: ffffffff8e9b1a00 (fs_reclaim){+.+.}-{0:0}, at: __alloc_pages_direct_reclaim mm/page_alloc.c:4423 [inline]
#1: ffffffff8e9b1a00 (fs_reclaim){+.+.}-{0:0}, at: __alloc_pages_slowpath mm/page_alloc.c:4823 [inline]
#1: ffffffff8e9b1a00 (fs_reclaim){+.+.}-{0:0}, at: __alloc_frozen_pages_noprof+0x1239/0x2bc0 mm/page_alloc.c:5239
=============================================
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x1d7/0x230 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
__sys_info lib/sys_info.c:157 [inline]
sys_info+0x141/0x190 lib/sys_info.c:165
check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]
watchdog+0xcb1/0x1030 kernel/hung_task.c:561
kthread+0x370/0x450 kernel/kthread.c:436
ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 4962 Comm: syslogd Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
RIP: 0010:arch_static_branch arch/x86/include/asm/jump_label.h:37 [inline]
RIP: 0010:native_write_msr arch/x86/include/asm/msr.h:139 [inline]
RIP: 0010:wrmsrq arch/x86/include/asm/msr.h:199 [inline]
RIP: 0010:native_apic_msr_write arch/x86/include/asm/apic.h:208 [inline]
RIP: 0010:native_apic_msr_write+0x28/0x40 arch/x86/include/asm/apic.h:202
Code: 90 90 f3 0f 1e fa 8d 87 30 ff ff ff 83 e0 ef 74 20 89 f8 83 e0 ef 83 f8 20 74 16 c1 ef 04 31 d2 89 f0 8d 8f 00 08 00 00 0f 30 <66> 90 e9 81 12 d8 09 e9 7c 12 d8 09 89 f6 31 d2 89 cf e9 a1 88 79
RSP: 0000:ffffc900051de758 EFLAGS: 00000046
RAX: 000000000003559c RBX: ffff8880b8423f80 RCX: 0000000000000838
RDX: 0000000000000000 RSI: 000000000003559c RDI: 0000000000000038
RBP: 000000000003559c R08: 0000000000000005 R09: 000000000000003f
R10: 0000000000000020 R11: 0000000000000000 R12: 1ffff92000a3bcf7
R13: 0000000000000020 R14: 0000000000000001 R15: ffff8880b8423fc0
FS: 00007f5b14684c80(0000) GS:ffff88812436a000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000557982afcb66 CR3: 000000002af81000 CR4: 00000000003526f0
Call Trace:
apic_write arch/x86/include/asm/apic.h:405 [inline]
lapic_next_event+0x10/0x20 arch/x86/kernel/apic/apic.c:417
clockevents_program_event+0x375/0x820 kernel/time/clockevents.c:372
tick_program_event+0xa9/0x140 kernel/time/tick-oneshot.c:48
hrtimer_rearm_event kernel/time/hrtimer.c:707 [inline]
hrtimer_rearm kernel/time/hrtimer.c:2039 [inline]
__hrtimer_rearm_deferred+0x237/0x740 kernel/time/hrtimer.c:2059
hrtimer_rearm_deferred_tif include/linux/hrtimer_rearm.h:53 [inline]
hrtimer_rearm_deferred include/linux/hrtimer_rearm.h:62 [inline]
irqentry_exit_to_kernel_mode_after_preempt include/linux/irq-entry-common.h:505 [inline]
irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:542 [inline]
irqentry_exit+0x514/0x7e0 kernel/entry/common.c:164
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:188 [inline]
RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 kernel/locking/spinlock.c:206
Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 aa 72 56 f6 48 89 df e8 82 c2 56 f6 e8 2d d5 82 f6 fb bf 01 00 00 00 12 8c 46 f6 65 8b 05 8b 3f 7d 08 85 c0 74 06 5b c3 cc cc cc cc
RSP: 0000:ffffc900051de9a8 EFLAGS: 00000206
RAX: 0000000000083365 RBX: ffff888037653a58 RCX: 0000000000000040
RDX: 0000000000000000 RSI: ffffffff8df24341 RDI: 0000000000000001
RBP: ffff888037653a08 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffea0002fff880
spin_unlock_irq include/linux/spinlock.h:402 [inline]
lruvec_unlock_irq include/linux/memcontrol.h:1486 [inline]
move_folios_to_lru+0xb30/0x1f50 mm/vmscan.c:1927
evict_folios+0xfce/0x20c0 mm/vmscan.c:4882
try_to_shrink_lruvec+0x57c/0xa20 mm/vmscan.c:5009
shrink_one+0x307/0x7f0 mm/vmscan.c:5069
shrink_many mm/vmscan.c:5132 [inline]
lru_gen_shrink_node mm/vmscan.c:5210 [inline]
shrink_node+0x2673/0x3dc0 mm/vmscan.c:6198
shrink_zones mm/vmscan.c:6454 [inline]
do_try_to_free_pages+0x33e/0x16d0 mm/vmscan.c:6516
try_to_free_pages+0x294/0x750 mm/vmscan.c:6755
__perform_reclaim mm/page_alloc.c:4401 [inline]
__alloc_pages_direct_reclaim mm/page_alloc.c:4423 [inline]
__alloc_pages_slowpath mm/page_alloc.c:4823 [inline]
__alloc_frozen_pages_noprof+0x128f/0x2bc0 mm/page_alloc.c:5239
alloc_pages_mpol+0x1fb/0x540 mm/mempolicy.c:2490
folio_alloc_mpol_noprof+0x36/0x260 mm/mempolicy.c:2509
swap_cache_alloc_folio+0x1a8/0x300 mm/swap_state.c:548
swap_cluster_readahead+0x53b/0x770 mm/swap_state.c:745
swapin_readahead+0x160/0x12c0 mm/swap_state.c:901
do_swap_page+0x931/0x6180 mm/memory.c:4891
handle_pte_fault mm/memory.c:6430 [inline]
__handle_mm_fault+0x192f/0x2a00 mm/memory.c:6565
handle_mm_fault+0x36d/0xa20 mm/memory.c:6734
do_user_addr_fault+0x5a3/0x12f0 arch/x86/mm/fault.c:1334
handle_page_fault arch/x86/mm/fault.c:1474 [inline]
exc_page_fault+0x6f/0xd0 arch/x86/mm/fault.c:1527
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618
RIP: 0033:0x7f5b1493e550
Code: Unable to access opcode bytes at 0x7f5b1493e526.
RSP: 002b:00007ffd3ed7cb68 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 000055838abb32c0 RCX: 000055838abb3890
RDX: 000055838abb3400 RSI: 00007f5b149ce0f0 RDI: 000055838abb3600
RBP: 00007ffd3ed7cc80 R08: 00007ffd3ed7cc34 R09: 000055838abb3410
R10: 0000000000000000 R11: 00007f5b148c58e0 R12: 000055838abb3400
R13: 0000000000000006 R14: 000055838abb3410 R15: 0000558365c63d98