INFO: task syz-executor.0:14935 blocked for more than 143 seconds.
      Not tainted 6.9.0-rc7-syzkaller-00023-g6d7ddd805123 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0  state:D stack:14680 pid:14935 tgid:14933 ppid:13932  flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5409 [inline]
 __schedule+0x1796/0x4a00 kernel/sched/core.c:6746
 __schedule_loop kernel/sched/core.c:6823 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6838
 io_schedule+0x8d/0x110 kernel/sched/core.c:9044
 folio_wait_bit_common+0x882/0x12b0 mm/filemap.c:1283
 truncate_inode_pages_range+0xaaf/0xfc0 mm/truncate.c:412
 truncate_inode_pages mm/truncate.c:439 [inline]
 truncate_pagecache mm/truncate.c:732 [inline]
 truncate_setsize+0xcf/0xf0 mm/truncate.c:757
 bchfs_truncate+0x683/0xc80 fs/bcachefs/fs-io.c:450
 notify_change+0xb9d/0xe70 fs/attr.c:497
 do_truncate fs/open.c:65 [inline]
 do_ftruncate+0x46b/0x590 fs/open.c:181
 do_sys_ftruncate fs/open.c:199 [inline]
 __do_sys_ftruncate fs/open.c:207 [inline]
 __se_sys_ftruncate fs/open.c:205 [inline]
 __x64_sys_ftruncate+0x95/0xf0 fs/open.c:205
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff3aa47dd69
RSP: 002b:00007ff3ab2c20c8 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
RAX: ffffffffffffffda RBX: 00007ff3aa5abf80 RCX: 00007ff3aa47dd69
RDX: 0000000000000000 RSI: 0000000000010001 RDI: 000000000000000e
RBP: 00007ff3aa4ca49e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007ff3aa5abf80 R15: 00007ffc30786838
 </TASK>
INFO: task syz-executor.0:15005 blocked for more than 143 seconds.
      Not tainted 6.9.0-rc7-syzkaller-00023-g6d7ddd805123 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0  state:D stack:15152 pid:15005 tgid:14933 ppid:13932  flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5409 [inline]
 __schedule+0x1796/0x4a00 kernel/sched/core.c:6746
 __schedule_loop kernel/sched/core.c:6823 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6838
 __bch2_two_state_lock+0x171/0x200 fs/bcachefs/two_state_shared_lock.c:7
 bch2_two_state_lock fs/bcachefs/two_state_shared_lock.h:56 [inline]
 bch2_readahead+0xcf5/0x1870 fs/bcachefs/fs-io-buffered.c:277
 read_pages+0x17e/0x840 mm/readahead.c:160
 page_cache_ra_order+0x9ec/0xbd0 mm/readahead.c:528
 page_cache_sync_readahead include/linux/pagemap.h:1300 [inline]
 filemap_get_pages+0x49d/0x2090 mm/filemap.c:2505
 filemap_splice_read+0x654/0xeb0 mm/filemap.c:2870
 do_splice_read fs/splice.c:985 [inline]
 splice_direct_to_actor+0x4b7/0xc90 fs/splice.c:1089
 do_splice_direct_actor fs/splice.c:1207 [inline]
 do_splice_direct+0x28c/0x3e0 fs/splice.c:1233
 do_sendfile+0x56d/0xdc0 fs/read_write.c:1295
 __do_sys_sendfile64 fs/read_write.c:1362 [inline]
 __se_sys_sendfile64+0x17c/0x1e0 fs/read_write.c:1348
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff3aa47dd69
RSP: 002b:00007ff3ab2a10c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007ff3aa5ac050 RCX: 00007ff3aa47dd69
RDX: 0000000000000000 RSI: 000000000000000d RDI: 000000000000000c
RBP: 00007ff3aa4ca49e R08: 0000000000000000 R09: 0000000000000000
R10: 0001000200201005 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000006e R14: 00007ff3aa5ac050 R15: 00007ffc30786838
 </TASK>
INFO: task syz-executor.0:15012 blocked for more than 144 seconds.
      Not tainted 6.9.0-rc7-syzkaller-00023-g6d7ddd805123 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0  state:D stack:23184 pid:15012 tgid:14933 ppid:13932  flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5409 [inline]
 __schedule+0x1796/0x4a00 kernel/sched/core.c:6746
 __schedule_loop kernel/sched/core.c:6823 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6838
 __bch2_two_state_lock+0x171/0x200 fs/bcachefs/two_state_shared_lock.c:7
 bch2_two_state_lock fs/bcachefs/two_state_shared_lock.h:56 [inline]
 bch2_page_fault+0x2aa/0x560 fs/bcachefs/fs-io-pagecache.c:571
 __do_fault+0x135/0x460 mm/memory.c:4531
 do_read_fault mm/memory.c:4894 [inline]
 do_fault mm/memory.c:5024 [inline]
 do_pte_missing mm/memory.c:3880 [inline]
 handle_pte_fault mm/memory.c:5300 [inline]
 __handle_mm_fault+0x45fe/0x7250 mm/memory.c:5441
 handle_mm_fault+0x27f/0x770 mm/memory.c:5606
 faultin_page mm/gup.c:958 [inline]
 __get_user_pages+0x727/0x1630 mm/gup.c:1257
 __get_user_pages_locked mm/gup.c:1525 [inline]
 __gup_longterm_locked+0x2095/0x2b30 mm/gup.c:2223
 internal_get_user_pages_fast+0x2707/0x2e60 mm/gup.c:3227
 pin_user_pages_fast+0xcc/0x160 mm/gup.c:3333
 iov_iter_extract_user_pages lib/iov_iter.c:1583 [inline]
 iov_iter_extract_pages+0x3db/0x720 lib/iov_iter.c:1646
 __bio_iov_iter_get_pages block/bio.c:1271 [inline]
 bio_iov_iter_get_pages+0x5d3/0x1780 block/bio.c:1349
 iomap_dio_bio_iter+0xc8e/0x1670 fs/iomap/direct-io.c:388
 __iomap_dio_rw+0x1295/0x2370 fs/iomap/direct-io.c:660
 iomap_dio_rw+0x46/0xa0 fs/iomap/direct-io.c:749
 ext4_dio_write_iter fs/ext4/file.c:577 [inline]
 ext4_file_write_iter+0x15e5/0x1a10 fs/ext4/file.c:696
 do_iter_readv_writev+0x5a4/0x800
 vfs_writev+0x395/0xbb0 fs/read_write.c:971
 do_pwritev fs/read_write.c:1072 [inline]
 __do_sys_pwritev2 fs/read_write.c:1131 [inline]
 __se_sys_pwritev2+0x1ca/0x2d0 fs/read_write.c:1122
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff3aa47dd69
RSP: 002b:00007ff3ab2800c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
RAX: ffffffffffffffda RBX: 00007ff3aa5ac120 RCX: 00007ff3aa47dd69
RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003
RBP: 00007ff3aa4ca49e R08: 0000000000000000 R09: 0000000000000003
R10: 0000000000033000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000006e R14: 00007ff3aa5ac120 R15: 00007ffc30786838
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/29:
 #0: ffffffff8e334da0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline]
 #0: ffffffff8e334da0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:781 [inline]
 #0: ffffffff8e334da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6614
2 locks held by getty/4826:
 #0: ffff88802f2f10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2201
3 locks held by syz-fuzzer/5235:
 #0: ffff88802a9b8420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 fs/namespace.c:409
 #1: ffff88805d4ec000 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:830 [inline]
 #1: ffff88805d4ec000 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: do_unlinkat+0x26a/0x830 fs/namei.c:4386
 #2: ffff888050d9e800 (&sb->s_type->i_mutex_key#7){++++}-{3:3}, at: inode_lock include/linux/fs.h:795 [inline]
 #2: ffff888050d9e800 (&sb->s_type->i_mutex_key#7){++++}-{3:3}, at: vfs_unlink+0xe4/0x600 fs/namei.c:4324
2 locks held by syz-executor.0/14935:
 #0: ffff888066d4c420 (sb_writers#18){.+.+}-{0:0}, at: do_ftruncate+0x294/0x590 fs/open.c:178
 #1: ffff88805f351788 (&sb->s_type->i_mutex_key#24){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:795 [inline]
 #1: ffff88805f351788 (&sb->s_type->i_mutex_key#24){+.+.}-{3:3}, at: do_truncate fs/open.c:63 [inline]
 #1: ffff88805f351788 (&sb->s_type->i_mutex_key#24){+.+.}-{3:3}, at: do_ftruncate+0x457/0x590 fs/open.c:181
2 locks held by syz-executor.0/15005:
 #0: ffff88805f351928 (mapping.invalidate_lock#8){.+.+}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:850 [inline]
 #0: ffff88805f351928 (mapping.invalidate_lock#8){.+.+}-{3:3}, at: page_cache_ra_order+0x38f/0xbd0 mm/readahead.c:507
 #1: ffff88803c704250 (&c->btree_trans_barrier){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:116 [inline]
 #1: ffff88803c704250 (&c->btree_trans_barrier){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:215 [inline]
 #1: ffff88803c704250 (&c->btree_trans_barrier){.+.+}-{0:0}, at: __bch2_trans_get+0x8c8/0xc90 fs/bcachefs/btree_iter.c:3069
3 locks held by syz-executor.0/15012:
 #0: ffff88802a9b8420 (sb_writers#4){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2855 [inline]
 #0: ffff88802a9b8420 (sb_writers#4){.+.+}-{0:0}, at: vfs_writev+0x2d9/0xbb0 fs/read_write.c:969
 #1: ffff888050d9e800 (&sb->s_type->i_mutex_key#7){++++}-{3:3}, at: inode_lock include/linux/fs.h:795 [inline]
 #1: ffff888050d9e800 (&sb->s_type->i_mutex_key#7){++++}-{3:3}, at: ext4_dio_write_iter fs/ext4/file.c:530 [inline]
 #1: ffff888050d9e800 (&sb->s_type->i_mutex_key#7){++++}-{3:3}, at: ext4_file_write_iter+0x388/0x1a10 fs/ext4/file.c:696
 #2: ffff88807a8a4da0 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable include/linux/mmap_lock.h:155 [inline]
 #2: ffff88807a8a4da0 (&mm->mmap_lock){++++}-{3:3}, at: __get_user_pages_locked mm/gup.c:1500 [inline]
 #2: ffff88807a8a4da0 (&mm->mmap_lock){++++}-{3:3}, at: __gup_longterm_locked+0x1f21/0x2b30 mm/gup.c:2223

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.9.0-rc7-syzkaller-00023-g6d7ddd805123 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114
 nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
 watchdog+0xfde/0x1020 kernel/hung_task.c:380
 kthread+0x2f0/0x390 kernel/kthread.c:388
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted 6.9.0-rc7-syzkaller-00023-g6d7ddd805123 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
Workqueue: events_power_efficient gc_worker
RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x7d/0x90 kernel/kcov.c:313
Code: c1 e1 05 48 8d 41 28 4c 39 c8 77 1e 49 ff c2 4c 89 12 48 c7 44 11 08 07 00 00 00 48 89 7c 11 10 48 89 74 11 18 4c 89 44 11 20 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90
RSP: 0018:ffffc900000c7998 EFLAGS: 00000093
RAX: 0000000000000000 RBX: 0000000000000246 RCX: ffff888017693c00
RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000
RBP: ffffc900000c7a50 R08: ffffffff8992073e R09: 1ffffffff25dfca0
R10: dffffc0000000000 R11: fffffbfff25dfca1 R12: dffffc0000000000
R13: 0000000000000200 R14: ffffc900000c79c0 R15: 1ffff92000018f34
FS:  0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055b16342f600 CR3: 000000007d4de000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <TASK>
 seqcount_lockdep_reader_access+0xce/0x220 include/linux/seqlock.h:71
 nf_conntrack_get_ht include/net/netfilter/nf_conntrack.h:345 [inline]
 gc_worker+0x316/0x15a0 net/netfilter/nf_conntrack_core.c:1490
 process_one_work kernel/workqueue.c:3267 [inline]
 process_scheduled_works+0xa10/0x17c0 kernel/workqueue.c:3348
 worker_thread+0x86d/0xd70 kernel/workqueue.c:3429
 kthread+0x2f0/0x390 kernel/kthread.c:388
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>