INFO: task syz-executor.1:7159 blocked for more than 143 seconds.
Not tainted 6.9.0-rc7-next-20240510-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.1 state:D stack:20344 pid:7159 tgid:7138 ppid:6783 flags:0x00000006
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6837
__bch2_two_state_lock+0x171/0x200 fs/bcachefs/two_state_shared_lock.c:7
bch2_two_state_lock fs/bcachefs/two_state_shared_lock.h:56 [inline]
bch2_buffered_write fs/bcachefs/fs-io-buffered.c:1037 [inline]
bch2_write_iter+0x410/0x2840 fs/bcachefs/fs-io-buffered.c:1136
new_sync_write fs/read_write.c:497 [inline]
vfs_write+0xa72/0xc90 fs/read_write.c:590
ksys_write+0x1a0/0x2c0 fs/read_write.c:643
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f2eff07dd69
RSP: 002b:00007f2effd050c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f2eff1ac050 RCX: 00007f2eff07dd69
RDX: 0000000000000007 RSI: 0000000020000140 RDI: 0000000000000008
RBP: 00007f2eff0ca49e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000006e R14: 00007f2eff1ac050 R15: 00007ffe2f003618
INFO: task syz-executor.1:7162 blocked for more than 143 seconds.
Not tainted 6.9.0-rc7-next-20240510-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.1 state:D stack:15704 pid:7162 tgid:7138 ppid:6783 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6837
__closure_sync+0x259/0x2f0 lib/closure.c:135
closure_sync include/linux/closure.h:194 [inline]
bch2_extent_fallocate+0x1716/0x2070 fs/bcachefs/io_misc.c:129
__bchfs_fallocate fs/bcachefs/fs-io.c:673 [inline]
bchfs_fallocate fs/bcachefs/fs-io.c:736 [inline]
bch2_fallocate_dispatch+0x1f99/0x3810 fs/bcachefs/fs-io.c:783
vfs_fallocate+0x564/0x6c0 fs/open.c:330
ksys_fallocate fs/open.c:353 [inline]
__do_sys_fallocate fs/open.c:361 [inline]
__se_sys_fallocate fs/open.c:359 [inline]
__x64_sys_fallocate+0xbd/0x110 fs/open.c:359
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f2eff07dd69
RSP: 002b:00007f2efebff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
RAX: ffffffffffffffda RBX: 00007f2eff1ac120 RCX: 00007f2eff07dd69
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
RBP: 00007f2eff0ca49e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000006e R14: 00007f2eff1ac120 R15: 00007ffe2f003618
Showing all locks held in the system:
1 lock held by khungtaskd/30:
#0: ffffffff8e333e60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline]
#0: ffffffff8e333e60 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:781 [inline]
#0: ffffffff8e333e60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6614
3 locks held by kworker/u8:12/2923:
#0: ffff88801b68f148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
#0: ffff88801b68f148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
#1: ffffc9000af1fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
#1: ffffc9000af1fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
#2: ffff88805b15c0e0 (&type->s_umount_key#72){++++}-{3:3}, at: super_trylock_shared+0x22/0xf0 fs/super.c:562
2 locks held by getty/4862:
#0: ffff88802f3290a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2201
2 locks held by syz-executor.1/7159:
#0: ffff88802ae225c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x259/0x320 fs/file.c:1191
#1: ffff88805b15c420 (sb_writers#20){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2854 [inline]
#1: ffff88805b15c420 (sb_writers#20){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 fs/read_write.c:586
3 locks held by syz-executor.1/7162:
#0: ffff88805b15c420 (sb_writers#20){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2854 [inline]
#0: ffff88805b15c420 (sb_writers#20){.+.+}-{0:0}, at: vfs_fallocate+0x4d3/0x6c0 fs/open.c:329
#1: ffff88805d3e1020 (&sb->s_type->i_mutex_key#40){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:791 [inline]
#1: ffff88805d3e1020 (&sb->s_type->i_mutex_key#40){+.+.}-{3:3}, at: bch2_fallocate_dispatch+0x295/0x3810 fs/bcachefs/fs-io.c:774
#2: ffff888065f842d0 (&c->btree_trans_barrier){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:116 [inline]
#2: ffff888065f842d0 (&c->btree_trans_barrier){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:215 [inline]
#2: ffff888065f842d0 (&c->btree_trans_barrier){.+.+}-{0:0}, at: bch2_trans_srcu_lock+0xb1/0x220 fs/bcachefs/btree_iter.c:3024
3 locks held by syz-executor.3/7764:
#0: ffff88802c692420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 fs/namespace.c:409
#1: ffff88804e9c3600 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:826 [inline]
#1: ffff88804e9c3600 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: do_rmdir+0x263/0x580 fs/namei.c:4261
#2: ffff88802c692610 (sb_internal){.+.+}-{0:0}, at: __sb_start_write include/linux/fs.h:1655 [inline]
#2: ffff88802c692610 (sb_internal){.+.+}-{0:0}, at: sb_start_intwrite include/linux/fs.h:1838 [inline]
#2: ffff88802c692610 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2f4/0xf50 fs/ext4/inode.c:212
2 locks held by syz-executor.2/8507:
#0: ffff88802c692420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 fs/namespace.c:409
#1: ffff88805030b600 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:826 [inline]
#1: ffff88805030b600 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x260/0x540 fs/namei.c:3900
1 lock held by syz-executor.0/8929:
#0: ffffffff8e339100 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x550 kernel/rcu/tree.c:4448
3 locks held by syz-executor.1/8950:
#0: ffff88802c692420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 fs/namespace.c:409
#1: ffff888058b4b600 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:826 [inline]
#1: ffff888058b4b600 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x260/0x540 fs/namei.c:3900
#2: ffff8880b943e7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 kernel/sched/core.c:559
2 locks held by syz-executor.3/8951:
#0: ffff88802c692420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 fs/namespace.c:409
#1: ffff88805aaa4a00 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:826 [inline]
#1: ffff88805aaa4a00 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x260/0x540 fs/namei.c:3900
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.9.0-rc7-next-20240510-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114
nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
watchdog+0xfde/0x1020 kernel/hung_task.c:379
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 7836 Comm: syz-executor.4 Not tainted 6.9.0-rc7-next-20240510-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
RIP: 0010:__lock_acquire+0x6f6/0x1fd0 kernel/locking/lockdep.c:5087
Code: 47 01 80 0f 85 21 04 00 00 84 db 40 0f b6 c5 0f b6 cb 0f 44 c8 89 4c 24 5c 48 8b 44 24 40 0f b6 04 10 84 c0 0f 85 1f 13 00 00 <48> 8b 04 24 8b 28 41 89 ec ff cd 0f 88 a5 00 00 00 89 eb 83 fd 31
RSP: 0000:ffffc90004cbfb90 EFLAGS: 00000046
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000001
RDX: dffffc0000000000 RSI: ffff88805ef8c6e0 RDI: ffffffff92fb2580
RBP: 0000000000000002 R08: ffffffff92fb2587 R09: 1ffffffff25f64b0
R10: dffffc0000000000 R11: fffffbfff25f64b1 R12: 0000000000000000
R13: ffff88805ef8bc00 R14: 1ffff1100bdf18e0 R15: ffff88805ef8c700
FS: 0000555571f46480(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f503b17abf8 CR3: 0000000058ea6000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5754
rcu_lock_acquire include/linux/rcupdate.h:329 [inline]
rcu_read_lock include/linux/rcupdate.h:781 [inline]
lock_vma_under_rcu+0x1ab/0x6e0 mm/memory.c:5838
do_user_addr_fault arch/x86/mm/fault.c:1329 [inline]
handle_page_fault arch/x86/mm/fault.c:1481 [inline]
exc_page_fault+0x17b/0x8c0 arch/x86/mm/fault.c:1539
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0033:0x7f503b02aed7
Code: 00 e8 6d a2 ff ff 85 c0 74 54 49 8b 34 24 8b 54 24 0c 31 c0 48 8d 3d 48 e8 09 00 e8 63 c2 ff ff 8b 44 24 6c 8b 74 24 08 89 ef <49> 89 9c 24 b8 00 00 00 49 8d 4c 24 60 ba 40 00 00 00 41 89 84 24
RSP: 002b:00007fff9e7a7f70 EFLAGS: 00010206
RAX: 0000000000000004 RBX: 00007fff9e7a7ff0 RCX: 0000000000000003
RDX: 000000000000000a RSI: 0000000000000029 RDI: 0000000000000003
RBP: 0000000000000003 R08: 00007fff9e7a7f8c R09: 0079746972756365
R10: 00007fff9e7a7ff0 R11: 0000000000000212 R12: 00007f503b17ab40
R13: 00007fff9e7a7f8c R14: 0000000000000000 R15: 00007f503b17cd00