syzbot


INFO: task hung in writeback_iter (2)

Status: auto-obsoleted due to no activity on 2025/08/11 03:24
Subsystems: fs mm
[Documentation on labels]
First crash: 111d, last: 98d
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: task hung in writeback_iter fs mm 1 145 213d 322d 0/29 auto-obsoleted due to no activity on 2025/03/08 08:54

Sample crash report:
INFO: task syz.0.1:5927 blocked for more than 143 seconds.
      Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.1         state:D stack:27016 pid:5927  tgid:5902  ppid:5813   task_flags:0x400040 flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x168f/0x4c70 kernel/sched/core.c:6767
 __schedule_loop kernel/sched/core.c:6845 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6860
 io_schedule+0x81/0xe0 kernel/sched/core.c:7742
 folio_wait_bit_common+0x6b0/0xb90 mm/filemap.c:1317
 folio_wait_writeback+0xb0/0x100 mm/page-writeback.c:3149
 folio_prepare_writeback mm/page-writeback.c:2428 [inline]
 writeback_get_folio mm/page-writeback.c:2470 [inline]
 writeback_iter+0xa35/0x12a0 mm/page-writeback.c:2563
 write_cache_pages+0x4a/0x100 mm/page-writeback.c:2612
 bch2_writepages+0x154/0x360 fs/bcachefs/fs-io-buffered.c:675
 do_writepages+0x3b1/0x7b0 mm/page-writeback.c:2656
 filemap_fdatawrite_wbc mm/filemap.c:386 [inline]
 __filemap_fdatawrite_range mm/filemap.c:419 [inline]
 file_write_and_wait_range+0x22c/0x330 mm/filemap.c:794
 bch2_fsync+0x127/0x330 fs/bcachefs/fs-io.c:243
 generic_write_sync include/linux/fs.h:2976 [inline]
 bch2_write_iter+0x2822/0x2b90 fs/bcachefs/fs-io-buffered.c:1097
 do_iter_readv_writev+0x56b/0x7f0 fs/read_write.c:-1
 vfs_writev+0x306/0x9a0 fs/read_write.c:1055
 do_pwritev fs/read_write.c:1151 [inline]
 __do_sys_pwritev2 fs/read_write.c:1209 [inline]
 __se_sys_pwritev2+0x179/0x290 fs/read_write.c:1200
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xf6/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff77f78e969
RSP: 002b:00007ff7805ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
RAX: ffffffffffffffda RBX: 00007ff77f9b6160 RCX: 00007ff77f78e969
RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000005
RBP: 00007ff77f810ab1 R08: 0000000000000000 R09: 0000000000000004
R10: 000000000000003b R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007ff77f9b6160 R15: 00007fff8cd4e6b8
 </TASK>
INFO: task bch-reclaim/loo:5918 blocked for more than 144 seconds.
      Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:bch-reclaim/loo state:D stack:26584 pid:5918  tgid:5918  ppid:2      task_flags:0x200840 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x168f/0x4c70 kernel/sched/core.c:6767
 __schedule_loop kernel/sched/core.c:6845 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6860
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6917
 __mutex_lock_common kernel/locking/mutex.c:678 [inline]
 __mutex_lock+0x724/0xe80 kernel/locking/mutex.c:746
 btree_write_buffer_flush_seq+0x1829/0x19a0 fs/bcachefs/btree_write_buffer.c:569
 bch2_btree_write_buffer_journal_flush+0x69/0xb0 fs/bcachefs/btree_write_buffer.c:586
 journal_flush_pins+0x8e3/0xe90 fs/bcachefs/journal_reclaim.c:593
 __bch2_journal_reclaim+0x781/0xd10 fs/bcachefs/journal_reclaim.c:724
 bch2_journal_reclaim_thread+0x177/0x4f0 fs/bcachefs/journal_reclaim.c:766
 kthread+0x70e/0x8a0 kernel/kthread.c:464
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/31:
 #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
 #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6764
2 locks held by kworker/u8:2/36:
 #0: ffff8880b88399d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 kernel/sched/core.c:605
 #1: ffff8880b8923b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 kernel/sched/psi.c:987
3 locks held by kworker/u8:3/53:
 #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline]
 #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 kernel/workqueue.c:3319
 #1: ffffc90000be7c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline]
 #1: ffffc90000be7c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 kernel/workqueue.c:3319
 #2: ffffffff8f2e5008 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:303
5 locks held by kworker/u8:4/64:
 #0: ffff88801aef3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline]
 #0: ffff88801aef3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 kernel/workqueue.c:3319
 #1: ffffc90001567c60 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline]
 #1: ffffc90001567c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 kernel/workqueue.c:3319
 #2: ffffffff8f2d84d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 net/core/net_namespace.c:608
 #3: ffffffff8f2e5008 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 net/core/dev.c:12514
 #4: ffffffff8df437b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:304 [inline]
 #4: ffffffff8df437b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 kernel/rcu/tree_exp.h:998
1 lock held by syslogd/5169:
 #0: ffff8880b89399d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 kernel/sched/core.c:605
1 lock held by dhcpcd/5482:
 #0: ffffffff8f2e5008 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f2e5008 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:979
2 locks held by getty/5577:
 #0: ffff888030c760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 drivers/tty/n_tty.c:2222
3 locks held by kworker/u9:8/5831:
 #0: ffff88804cf83148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline]
 #0: ffff88804cf83148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 kernel/workqueue.c:3319
 #1: ffffc90004547c60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline]
 #1: ffffc90004547c60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 kernel/workqueue.c:3319
 #2: ffff888028688d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 net/bluetooth/hci_sync.c:331
3 locks held by kworker/u8:7/5882:
 #0: ffff88814cc59148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline]
 #0: ffff88814cc59148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 kernel/workqueue.c:3319
 #1: ffffc9000a77fc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline]
 #1: ffffc9000a77fc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 kernel/workqueue.c:3319
 #2: ffffffff8f2e5008 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #2: ffffffff8f2e5008 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 net/ipv6/addrconf.c:4198
1 lock held by syz.0.1/5903:
 #0: ffff8880276f2420 (sb_writers#13){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:3041 [inline]
 #0: ffff8880276f2420 (sb_writers#13){.+.+}-{0:0}, at: vfs_writev+0x274/0x9a0 fs/read_write.c:1053
2 locks held by syz.0.1/5926:
 #0: 
ffff88807a1cb7b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 fs/file.c:1213
 #1: 
ffff8880276f2420 (sb_writers#13){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:3041 [inline]
ffff8880276f2420 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 fs/read_write.c:680
1 lock held by syz.0.1/5927:
 #0: ffff8880276f2420 (sb_writers#13){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:3041 [inline]
 #0: ffff8880276f2420 (sb_writers#13){.+.+}-{0:0}, at: vfs_writev+0x274/0x9a0 fs/read_write.c:1053
3 locks held by bch-reclaim/loo/5918:
 #0: 
ffff88805c54ad28
 (&j->reclaim_lock){+.+.}-{4:4}, at: bch2_journal_reclaim_thread+0x16b/0x4f0 fs/bcachefs/journal_reclaim.c:765
 #1: 
ffff88805c504228
 (
&c->btree_trans_barrier){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:161 [inline]
&c->btree_trans_barrier){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:253 [inline]
&c->btree_trans_barrier){.+.+}-{0:0}, at: __bch2_trans_get+0x806/0xda0 fs/bcachefs/btree_iter.c:3385
 #2: ffff88805c5045d0 (&wb->flushing.lock){+.+.}-{4:4}, at: btree_write_buffer_flush_seq+0x1829/0x19a0 fs/bcachefs/btree_write_buffer.c:569
3 locks held by bch-copygc/loop/5919:
 #0: 
ffff88805c504228
 (
&c->btree_trans_barrier){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:161 [inline]
&c->btree_trans_barrier){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:253 [inline]
&c->btree_trans_barrier){.+.+}-{0:0}, at: bch2_trans_srcu_lock+0xaf/0x220 fs/bcachefs/btree_iter.c:3202
 #1: ffff88805c5045d0 (&wb->flushing.lock){+.+.}-{4:4}, at: btree_write_buffer_flush_seq+0x1829/0x19a0 fs/bcachefs/btree_write_buffer.c:569
 #2: ffff88805c526590 (&c->gc_lock){.+.+}-{4:4}, at: bch2_btree_update_start+0x68f/0x14c0 fs/bcachefs/btree_update_interior.c:1179
3 locks held by kworker/u8:8/5945:
 #0: 
ffff8880206ca948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline]
ffff8880206ca948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 kernel/workqueue.c:3319
 #1: ffffc9000ab47c60 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline]
 #1: ffffc9000ab47c60 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 kernel/workqueue.c:3319
 #2: ffff8880276f20e0 (&type->s_umount_key#85){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 fs/super.c:562
1 lock held by syz-executor/7598:
 #0: ffffffff8f2e5008 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f2e5008 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:979
2 locks held by syz-executor/7778:
 #0: ffffffff8ea7e8e0 (&ops->srcu#2){.+.+}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8ea7e8e0 (&ops->srcu#2){.+.+}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
 #0: ffffffff8ea7e8e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 net/core/rtnetlink.c:570
 #1: ffffffff8f2e5008 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
 #1: ffffffff8f2e5008 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
 #1: ffffffff8f2e5008 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 net/core/rtnetlink.c:4064
3 locks held by syz.6.265/7888:

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:274 [inline]
 watchdog+0xfee/0x1030 kernel/hung_task.c:437
 kthread+0x70e/0x8a0 kernel/kthread.c:464
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 7888 Comm: syz.6.265 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:rcu_read_lock_sched_held+0xb8/0x100 kernel/rcu/update.c:127
Code: 01 00 00 00 48 c7 04 24 0e 36 e0 45 4b c7 04 3e 00 00 00 00 65 48 8b 05 36 68 cc 10 48 3b 44 24 50 75 3f 89 d8 48 8d 65 e8 5b <41> 5e 41 5f 5d c3 cc cc cc cc cc 65 8b 05 26 68 cc 10 bb 01 00 00
RSP: 0018:ffffc90000a08c38 EFLAGS: 00000046
RAX: 0000000000000001 RBX: ffff8880b89399c0 RCX: 382659f7b05d1600
RDX: 0000000000000003 RSI: ffffffff8d9226df RDI: ffffffff8bc104e0
RBP: ffffc90000a08c48 R08: 0000000000000000 R09: 0000000000080000
R10: 0000000000000000 R11: ffffffff81ee394a R12: 1ffff110171274a9
R13: dffffc0000000000 R14: 1ffff92000141178 R15: dffffc0000000000
FS:  00007fde71bcf6c0(0000) GS:ffff8881261fb000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000020000000b000 CR3: 000000005716c000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 on_null_domain kernel/sched/fair.c:12270 [inline]
 sched_balance_trigger+0x4e/0x8a0 kernel/sched/fair.c:12939
 update_process_times+0x270/0x2f0 kernel/time/timer.c:2520
 tick_sched_handle kernel/time/tick-sched.c:276 [inline]
 tick_nohz_handler+0x39a/0x520 kernel/time/tick-sched.c:297
 __run_hrtimer kernel/time/hrtimer.c:1761 [inline]
 __hrtimer_run_queues+0x4dd/0xc60 kernel/time/hrtimer.c:1825
 hrtimer_interrupt+0x45b/0xaa0 kernel/time/hrtimer.c:1887
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline]
 __sysvec_apic_timer_interrupt+0x108/0x410 arch/x86/kernel/apic/apic.c:1055
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
 sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1049
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:console_trylock_spinning kernel/printk/printk.c:2061 [inline]
RIP: 0010:vprintk_emit+0x58f/0x7a0 kernel/printk/printk.c:2449
Code: 85 32 01 00 00 e8 71 f2 1e 00 41 89 df 4d 85 f6 48 8b 1c 24 75 07 e8 60 f2 1e 00 eb 06 e8 59 f2 1e 00 fb 48 c7 c7 00 1f f3 8d <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 f9 3f
RSP: 0018:ffffc90003f0e420 EFLAGS: 00000246
RAX: ffffffff81a0fe47 RBX: ffffffff81a0fd04 RCX: 0000000000080000
RDX: ffffc9001de0a000 RSI: 000000000007ffff RDI: ffffffff8df31f00
RBP: ffffc90003f0e530 R08: ffffffff8f7dd277 R09: 1ffffffff1efba4e
R10: dffffc0000000000 R11: fffffbfff1efba4f R12: dffffc0000000000
R13: 1ffff920007e1c88 R14: 0000000000000200 R15: 000000000000004b
 _printk+0xcf/0x120 kernel/printk/printk.c:2475
 print_hex_dump+0x1a8/0x260 lib/hexdump.c:285
 xfs_hex_dump+0x3d/0x50 fs/xfs/xfs_message.c:110
 xfs_buf_verifier_error+0x1cc/0x2a0 fs/xfs/xfs_error.c:466
 xfs_agf_read_verify+0x16e/0x1f0 fs/xfs/libxfs/xfs_alloc.c:-1
 __xfs_buf_ioend+0x33f/0x6f0 fs/xfs/xfs_buf.c:1177
 xfs_buf_iowait+0x167/0x480 fs/xfs/xfs_buf.c:1411
 _xfs_buf_read fs/xfs/xfs_buf.c:646 [inline]
 xfs_buf_read_map+0x335/0xa50 fs/xfs/xfs_buf.c:712
 xfs_trans_read_buf_map+0x1d7/0x8e0 fs/xfs/xfs_trans_buf.c:304
 xfs_trans_read_buf fs/xfs/xfs_trans.h:212 [inline]
 xfs_read_agf+0x281/0x5c0 fs/xfs/libxfs/xfs_alloc.c:3376
 xfs_alloc_read_agf+0x17c/0xb70 fs/xfs/libxfs/xfs_alloc.c:3411
 xfs_bmap_longest_free_extent fs/xfs/libxfs/xfs_bmap.c:3166 [inline]
 xfs_bmap_btalloc_select_lengths fs/xfs/libxfs/xfs_bmap.c:3229 [inline]
 xfs_bmap_btalloc_best_length fs/xfs/libxfs/xfs_bmap.c:3605 [inline]
 xfs_bmap_btalloc fs/xfs/libxfs/xfs_bmap.c:3667 [inline]
 xfs_bmapi_allocate+0x12aa/0x2c50 fs/xfs/libxfs/xfs_bmap.c:3942
 xfs_bmapi_convert_one_delalloc fs/xfs/libxfs/xfs_bmap.c:4451 [inline]
 xfs_bmapi_convert_delalloc+0x7e2/0x1430 fs/xfs/libxfs/xfs_bmap.c:4507
 xfs_map_blocks+0x667/0xe80 fs/xfs/xfs_aops.c:405
 iomap_writepage_map_blocks fs/iomap/buffered-io.c:1755 [inline]
 iomap_writepage_map fs/iomap/buffered-io.c:1905 [inline]
 iomap_writepages+0x10b2/0x2f80 fs/iomap/buffered-io.c:1959
 xfs_vm_writepages+0x235/0x2b0 fs/xfs/xfs_aops.c:632
 do_writepages+0x3b1/0x7b0 mm/page-writeback.c:2656
 filemap_fdatawrite_wbc mm/filemap.c:386 [inline]
 __filemap_fdatawrite_range mm/filemap.c:419 [inline]
 file_write_and_wait_range+0x22c/0x330 mm/filemap.c:794
 xfs_file_fsync+0x1a3/0xa30 fs/xfs/xfs_file.c:140
 generic_write_sync include/linux/fs.h:2976 [inline]
 xfs_file_buffered_write+0x713/0x890 fs/xfs/xfs_file.c:947
 new_sync_write fs/read_write.c:591 [inline]
 vfs_write+0x54b/0xa90 fs/read_write.c:684
 ksys_pwrite64 fs/read_write.c:791 [inline]
 __do_sys_pwrite64 fs/read_write.c:799 [inline]
 __se_sys_pwrite64 fs/read_write.c:796 [inline]
 __x64_sys_pwrite64+0x193/0x220 fs/read_write.c:796
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xf6/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fde70d8e969
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fde71bcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007fde70fb5fa0 RCX: 00007fde70d8e969
RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000005
RBP: 00007fde70e10ab1 R08: 0000000000000000 R09: 0000000000000000
R10: 000000000000fecc R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fde70fb5fa0 R15: 00007ffd6c3e2368
 </TASK>

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/05/13 03:16 upstream 627277ba7c23 f6671af7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs INFO: task hung in writeback_iter
2025/05/05 19:16 upstream 92a09c47464d 6ca47dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs INFO: task hung in writeback_iter
2025/04/29 07:08 upstream f15d97df5afa aeb6ec69 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs INFO: task hung in writeback_iter
* Struck through repros no longer work on HEAD.