INFO: task syz-executor:5837 blocked for more than 143 seconds.
Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor state:D stack:23040 pid:5837 tgid:5837 ppid:5835 flags:0x00000002
Call Trace:
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0xe58/0x5ad0 kernel/sched/core.c:6756
__schedule_loop kernel/sched/core.c:6833 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6848
io_schedule+0xbf/0x130 kernel/sched/core.c:7681
bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247
__wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49
out_of_line_wait_on_bit+0xda/0x110 kernel/sched/wait_bit.c:64
wait_on_bit_io include/linux/wait_bit.h:105 [inline]
do_get_write_access+0x933/0x1270 fs/jbd2/transaction.c:1096
jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1245
__ext4_journal_get_write_access+0x6a/0x390 fs/ext4/ext4_jbd2.c:239
ext4_reserve_inode_write+0x13b/0x270 fs/ext4/inode.c:5830
__ext4_mark_inode_dirty+0x1a4/0x860 fs/ext4/inode.c:6004
ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6041
__mark_inode_dirty+0x1f7/0xe60 fs/fs-writeback.c:2515
generic_update_time+0xcf/0xf0 fs/inode.c:2112
inode_update_time fs/inode.c:2125 [inline]
__file_update_time fs/inode.c:2353 [inline]
file_update_time+0x17d/0x1c0 fs/inode.c:2383
ext4_page_mkwrite+0x368/0x1760 fs/ext4/inode.c:6159
do_page_mkwrite+0x177/0x380 mm/memory.c:3176
wp_page_shared mm/memory.c:3577 [inline]
do_wp_page+0xc4b/0x4670 mm/memory.c:3727
handle_pte_fault mm/memory.c:5817 [inline]
__handle_mm_fault+0x1ade/0x2a40 mm/memory.c:5944
handle_mm_fault+0x3fa/0xaa0 mm/memory.c:6112
do_user_addr_fault+0x60d/0x13f0 arch/x86/mm/fault.c:1338
handle_page_fault arch/x86/mm/fault.c:1481 [inline]
exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1539
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0033:0x7ff0d0256465
RSP: 002b:00007ffd9e573cd0 EFLAGS: 00010216
RAX: 00007ff0cc394b04 RBX: 00007ffd9e573de0 RCX: 0000000000000000
RDX: 00007ff0cc394b00 RSI: 0000000000000008 RDI: 00007ffd9e573de0
RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000
R10: 00007ffd9e573dc0 R11: 0000000000000000 R12: 0000000000000000
R13: 000000000006b4fc R14: fffffffffff94b04 R15: 000000000006b4fc
INFO: task syz.9.7184:31051 blocked for more than 143 seconds.
Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.9.7184 state:D stack:24272 pid:31051 tgid:31050 ppid:25492 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0xe58/0x5ad0 kernel/sched/core.c:6756
__schedule_loop kernel/sched/core.c:6833 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6848
io_schedule+0xbf/0x130 kernel/sched/core.c:7681
folio_wait_bit_common+0x3d8/0x9b0 mm/filemap.c:1308
folio_wait_writeback+0x3c/0x90 mm/page-writeback.c:3194
__filemap_fdatawait_range+0x123/0x210 mm/filemap.c:532
filemap_write_and_wait_range mm/filemap.c:693 [inline]
filemap_write_and_wait_range+0xeb/0x130 mm/filemap.c:675
ext4_punch_hole+0x194/0x10d0 fs/ext4/inode.c:3964
ext4_fallocate+0x9b7/0x3950 fs/ext4/extents.c:4772
vfs_fallocate+0x459/0xf90 fs/open.c:327
madvise_remove mm/madvise.c:1020 [inline]
madvise_vma_behavior+0x1b6d/0x1da0 mm/madvise.c:1255
madvise_walk_vmas+0x1cf/0x2c0 mm/madvise.c:1497
do_madvise+0x30e/0x770 mm/madvise.c:1684
__do_sys_madvise mm/madvise.c:1700 [inline]
__se_sys_madvise mm/madvise.c:1698 [inline]
__x64_sys_madvise+0xa9/0x110 mm/madvise.c:1698
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff096f7e819
RSP: 002b:00007ff097ce7038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
RAX: ffffffffffffffda RBX: 00007ff097135fa0 RCX: 00007ff096f7e819
RDX: 0000000000000009 RSI: ffffffffffff0001 RDI: 0000000000000000
RBP: 00007ff096ff175e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007ff097135fa0 R15: 00007fffaabb9638
INFO: task syz.3.7186:31060 blocked for more than 144 seconds.
Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.7186 state:D stack:26016 pid:31060 tgid:31060 ppid:24931 flags:0x00000004
Call Trace:
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0xe58/0x5ad0 kernel/sched/core.c:6756
__schedule_loop kernel/sched/core.c:6833 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6848
io_schedule+0xbf/0x130 kernel/sched/core.c:7681
bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247
__wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49
out_of_line_wait_on_bit+0xda/0x110 kernel/sched/wait_bit.c:64
wait_on_bit_io include/linux/wait_bit.h:105 [inline]
do_get_write_access+0x933/0x1270 fs/jbd2/transaction.c:1096
jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1245
__ext4_journal_get_write_access+0x6a/0x390 fs/ext4/ext4_jbd2.c:239
ext4_reserve_inode_write+0x13b/0x270 fs/ext4/inode.c:5830
__ext4_mark_inode_dirty+0x1a4/0x860 fs/ext4/inode.c:6004
ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6041
__mark_inode_dirty+0x1f7/0xe60 fs/fs-writeback.c:2515
generic_update_time+0xcf/0xf0 fs/inode.c:2112
inode_update_time fs/inode.c:2125 [inline]
__file_update_time fs/inode.c:2353 [inline]
file_update_time+0x17d/0x1c0 fs/inode.c:2383
ext4_page_mkwrite+0x368/0x1760 fs/ext4/inode.c:6159
do_page_mkwrite+0x177/0x380 mm/memory.c:3176
do_shared_fault mm/memory.c:5398 [inline]
do_fault mm/memory.c:5460 [inline]
do_pte_missing+0x29e/0x3e00 mm/memory.c:3979
handle_pte_fault mm/memory.c:5801 [inline]
__handle_mm_fault+0x103c/0x2a40 mm/memory.c:5944
handle_mm_fault+0x3fa/0xaa0 mm/memory.c:6112
do_user_addr_fault+0x60d/0x13f0 arch/x86/mm/fault.c:1338
handle_page_fault arch/x86/mm/fault.c:1481 [inline]
exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1539
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0033:0x7f22a2e5d536
RSP: 002b:00007fff1ef5f300 EFLAGS: 00010202
RAX: 0000000000010008 RBX: 00007f22a3c65720 RCX: 0000000000000000
RDX: 0000001b31e10000 RSI: 0000000000000008 RDI: 00007f22a3c65720
RBP: ffffffff81c87a56 R08: 00007f22a25ff048 R09: 00007f22a3122000
R10: 00007f22a25ff008 R11: 0000000000000004 R12: 000000000000079e
R13: 00007f22a3136038 R14: 00000000000000cb R15: ffffffffffff0000
INFO: task syz.6.7187:31063 blocked for more than 144 seconds.
Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.6.7187 state:D stack:26016 pid:31063 tgid:31063 ppid:25496 flags:0x00000004
Call Trace:
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0xe58/0x5ad0 kernel/sched/core.c:6756
__schedule_loop kernel/sched/core.c:6833 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6848
io_schedule+0xbf/0x130 kernel/sched/core.c:7681
bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247
__wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49
out_of_line_wait_on_bit+0xda/0x110 kernel/sched/wait_bit.c:64
wait_on_bit_io include/linux/wait_bit.h:105 [inline]
do_get_write_access+0x933/0x1270 fs/jbd2/transaction.c:1096
jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1245
__ext4_journal_get_write_access+0x6a/0x390 fs/ext4/ext4_jbd2.c:239
ext4_reserve_inode_write+0x13b/0x270 fs/ext4/inode.c:5830
__ext4_mark_inode_dirty+0x1a4/0x860 fs/ext4/inode.c:6004
ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6041
__mark_inode_dirty+0x1f7/0xe60 fs/fs-writeback.c:2515
generic_update_time+0xcf/0xf0 fs/inode.c:2112
inode_update_time fs/inode.c:2125 [inline]
__file_update_time fs/inode.c:2353 [inline]
file_update_time+0x17d/0x1c0 fs/inode.c:2383
ext4_page_mkwrite+0x368/0x1760 fs/ext4/inode.c:6159
do_page_mkwrite+0x177/0x380 mm/memory.c:3176
do_shared_fault mm/memory.c:5398 [inline]
do_fault mm/memory.c:5460 [inline]
do_pte_missing+0x29e/0x3e00 mm/memory.c:3979
handle_pte_fault mm/memory.c:5801 [inline]
__handle_mm_fault+0x103c/0x2a40 mm/memory.c:5944
handle_mm_fault+0x3fa/0xaa0 mm/memory.c:6112
do_user_addr_fault+0x60d/0x13f0 arch/x86/mm/fault.c:1338
handle_page_fault arch/x86/mm/fault.c:1481 [inline]
exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1539
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0033:0x7f49d8c5cd8a
RSP: 002b:00007ffe6e553ef0 EFLAGS: 00010202
RAX: 0000001b2ce08000 RBX: 00007f49d9a65720 RCX: 0000001b2ce07ff8
RDX: 0000001b2c820214 RSI: 0000000000000008 RDI: 00007f49d9a65720
RBP: ffffffff88ee394c R08: 00007f49d8f36118 R09: 00007f49d8f22000
R10: 00007f49d7ffd008 R11: 0000000000000008 R12: 0000000000000008
R13: 000000000000008c R14: ffffffff88ee37d7 R15: 00000000000000a1
Showing all locks held in the system:
1 lock held by khungtaskd/30:
#0: ffffffff8dfbaf40 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
#0: ffffffff8dfbaf40 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#0: ffffffff8dfbaf40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 kernel/locking/lockdep.c:6744
4 locks held by kworker/u8:6/1104:
#0: ffff88814d6aa948 ((wq_completion)ext4-rsv-conversion){+.+.}-{0:0}, at: process_one_work+0x126b/0x1b30 kernel/workqueue.c:3204
#1: ffffc90004257d80 ((work_completion)(&ei->i_rsv_conversion_work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 kernel/workqueue.c:3205
#2: ffff88814e6ae958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 fs/jbd2/transaction.c:448
#3: ffff88807e2aef80 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x352/0x1370 fs/ext4/inode.c:701
6 locks held by kworker/u8:9/3581:
#0: ffff888143a8d148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x126b/0x1b30 kernel/workqueue.c:3204
#1: ffffc9000d00fd80 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 kernel/workqueue.c:3205
#2: ffff88814e6aa0e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 fs/super.c:562
#3: ffff88814e6acb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b3/0x820 mm/page-writeback.c:2702
#4: ffff88814e6ae958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 fs/jbd2/transaction.c:448
#5: ffff88807e2d2040 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x352/0x1370 fs/ext4/inode.c:701
2 locks held by getty/5602:
#0: ffff88814d2cb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
#1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 drivers/tty/n_tty.c:2211
3 locks held by syz-executor/5837:
#0: ffff888033abb808 (&vma->vm_lock->lock){++++}-{4:4}, at: vma_start_read include/linux/mm.h:716 [inline]
#0: ffff888033abb808 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 mm/memory.c:6278
#1: ffff88814e6aa518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 mm/memory.c:3176
#2: ffff88814e6ae958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 fs/jbd2/transaction.c:448
6 locks held by kworker/u8:5/28309:
1 lock held by syz.9.7184/31051:
#0: ffff88814e6aa420 (sb_writers#4){.+.+}-{0:0}, at: madvise_remove mm/madvise.c:1020 [inline]
#0: ffff88814e6aa420 (sb_writers#4){.+.+}-{0:0}, at: madvise_vma_behavior+0x1b6d/0x1da0 mm/madvise.c:1255
3 locks held by syz.3.7186/31060:
#0: ffff88802b4b7658 (&vma->vm_lock->lock){++++}-{4:4}, at: vma_start_read include/linux/mm.h:716 [inline]
#0: ffff88802b4b7658 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 mm/memory.c:6278
#1: ffff88814e6aa518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 mm/memory.c:3176
#2: ffff88814e6ae958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 fs/jbd2/transaction.c:448
3 locks held by syz.6.7187/31063:
#0: ffff88805f44ab68 (&vma->vm_lock->lock){++++}-{4:4}, at: vma_start_read include/linux/mm.h:716 [inline]
#0: ffff88805f44ab68 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 mm/memory.c:6278
#1: ffff88814e6aa518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 mm/memory.c:3176
#2: ffff88814e6ae958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 fs/jbd2/transaction.c:448
=============================================
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
watchdog+0xf0c/0x1240 kernel/hung_task.c:379
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 28309 Comm: kworker/u8:5 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: bat_events batadv_nc_worker
RIP: 0010:preempt_count_sub+0xe/0x160 kernel/sched/core.c:5875
Code: 48 c7 c7 a0 9e 55 93 e9 d0 e0 65 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 c7 c0 a0 68 5e 9a 53 89 fb <48> ba 00 00 00 00 00 fc ff df 48 89 c1 83 e0 07 48 c1 e9 03 83 c0
RSP: 0018:ffffc9000dfa7af8 EFLAGS: 00000046
RAX: ffffffff9a5e68a0 RBX: 0000000000000001 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff8b6b6fe0 RDI: 0000000000000001
RBP: ffffffff8ae36536 R08: 0000000000000000 R09: fffffbfff207c61a
R10: ffffffff903e30d7 R11: 0000000000000002 R12: ffffffff8ae36710
R13: ffff8880626e4940 R14: 0000000000000000 R15: ffff888034c04180
FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005641a6112520 CR3: 000000000dd7e000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
__local_bh_enable_ip+0x9f/0x120 kernel/softirq.c:385
spin_unlock_bh include/linux/spinlock.h:396 [inline]
batadv_nc_purge_paths+0x1c6/0x390 net/batman-adv/network-coding.c:471
batadv_nc_worker+0x913/0x1060 net/batman-adv/network-coding.c:720
process_one_work+0x958/0x1b30 kernel/workqueue.c:3229
process_scheduled_works kernel/workqueue.c:3310 [inline]
worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244