INFO: task syz-executor.0:31982 blocked for more than 143 seconds.
Not tainted 6.2.0-rc8-syzkaller-00098-gec35307e18ba #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0 state:D stack:23688 pid:31982 ppid:31856 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5293 [inline]
__schedule+0xbdd/0x54f0 kernel/sched/core.c:6606
schedule+0xde/0x1b0 kernel/sched/core.c:6682
wb_wait_for_completion+0x182/0x240 fs/fs-writeback.c:192
__writeback_inodes_sb_nr+0x1d7/0x280 fs/fs-writeback.c:2639
try_to_writeback_inodes_sb+0x98/0xc0 fs/fs-writeback.c:2687
ext4_nonda_switch+0x1aa/0x1f0 fs/ext4/inode.c:3029
ext4_da_write_begin+0x170/0xb50 fs/ext4/inode.c:3056
generic_perform_write+0x256/0x570 mm/filemap.c:3772
ext4_buffered_write_iter+0x15b/0x460 fs/ext4/file.c:285
ext4_file_write_iter+0x8bf/0x1710 fs/ext4/file.c:700
__kernel_write_iter+0x262/0x730 fs/read_write.c:517
dump_emit_page fs/coredump.c:888 [inline]
dump_user_range+0x234/0x700 fs/coredump.c:915
elf_core_dump+0x2718/0x3590 fs/binfmt_elf.c:2137
do_coredump+0x2764/0x3c50 fs/coredump.c:762
get_signal+0x1bfa/0x2440 kernel/signal.c:2845
arch_do_signal_or_restart+0x79/0x5c0 arch/x86/kernel/signal.c:306
exit_to_user_mode_loop kernel/entry/common.c:168 [inline]
exit_to_user_mode_prepare+0x15f/0x250 kernel/entry/common.c:203
irqentry_exit_to_user_mode+0x9/0x40 kernel/entry/common.c:309
exc_page_fault+0xc0/0x170 arch/x86/mm/fault.c:1578
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
RIP: 0033:0x0
RSP: 002b:00000000200001c8 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007f0d97babf80 RCX: 00007f0d97a8c0f9
RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000088000000
RBP: 00007f0d97ae7ae9 R08: 0000000020002340 R09: 0000000020002340
R10: 0000000020000240 R11: 0000000000000206 R12: 0000000000000000
R13: 00007fff6d505eef R14: 00007f0d98834300 R15: 0000000000022000
INFO: task syz-executor.0:32012 blocked for more than 144 seconds.
Not tainted 6.2.0-rc8-syzkaller-00098-gec35307e18ba #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0 state:D stack:22424 pid:32012 ppid:31856 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5293 [inline]
__schedule+0xbdd/0x54f0 kernel/sched/core.c:6606
schedule+0xde/0x1b0 kernel/sched/core.c:6682
wb_wait_for_completion+0x182/0x240 fs/fs-writeback.c:192
__writeback_inodes_sb_nr+0x1d7/0x280 fs/fs-writeback.c:2639
try_to_writeback_inodes_sb+0x98/0xc0 fs/fs-writeback.c:2687
ext4_nonda_switch+0x1aa/0x1f0 fs/ext4/inode.c:3029
ext4_da_write_begin+0x170/0xb50 fs/ext4/inode.c:3056
generic_perform_write+0x256/0x570 mm/filemap.c:3772
ext4_buffered_write_iter+0x15b/0x460 fs/ext4/file.c:285
ext4_file_write_iter+0x8bf/0x1710 fs/ext4/file.c:700
__kernel_write_iter+0x262/0x730 fs/read_write.c:517
dump_emit_page fs/coredump.c:888 [inline]
dump_user_range+0x234/0x700 fs/coredump.c:915
elf_core_dump+0x2718/0x3590 fs/binfmt_elf.c:2137
do_coredump+0x2764/0x3c50 fs/coredump.c:762
get_signal+0x1bfa/0x2440 kernel/signal.c:2845
arch_do_signal_or_restart+0x79/0x5c0 arch/x86/kernel/signal.c:306
exit_to_user_mode_loop kernel/entry/common.c:168 [inline]
exit_to_user_mode_prepare+0x15f/0x250 kernel/entry/common.c:203
irqentry_exit_to_user_mode+0x9/0x40 kernel/entry/common.c:309
exc_page_fault+0xc0/0x170 arch/x86/mm/fault.c:1578
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
RIP: 0033:0x0
RSP: 002b:00000000200001c8 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007f0d97babf80 RCX: 00007f0d97a8c0f9
RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000088000000
RBP: 00007f0d97ae7ae9 R08: 0000000020002340 R09: 0000000020002340
R10: 0000000020000240 R11: 0000000000000206 R12: 0000000000000000
R13: 00007fff6d505eef R14: 00007f0d98834300 R15: 0000000000022000
INFO: task syz-executor.0:32418 blocked for more than 144 seconds.
Not tainted 6.2.0-rc8-syzkaller-00098-gec35307e18ba #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0 state:D stack:23504 pid:32418 ppid:31856 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5293 [inline]
__schedule+0xbdd/0x54f0 kernel/sched/core.c:6606
schedule+0xde/0x1b0 kernel/sched/core.c:6682
wb_wait_for_completion+0x182/0x240 fs/fs-writeback.c:192
__writeback_inodes_sb_nr+0x1d7/0x280 fs/fs-writeback.c:2639
try_to_writeback_inodes_sb+0x98/0xc0 fs/fs-writeback.c:2687
ext4_nonda_switch+0x1aa/0x1f0 fs/ext4/inode.c:3029
ext4_da_write_begin+0x170/0xb50 fs/ext4/inode.c:3056
generic_perform_write+0x256/0x570 mm/filemap.c:3772
ext4_buffered_write_iter+0x15b/0x460 fs/ext4/file.c:285
ext4_file_write_iter+0x8bf/0x1710 fs/ext4/file.c:700
__kernel_write_iter+0x262/0x730 fs/read_write.c:517
dump_emit_page fs/coredump.c:888 [inline]
dump_user_range+0x234/0x700 fs/coredump.c:915
elf_core_dump+0x2718/0x3590 fs/binfmt_elf.c:2137
do_coredump+0x2764/0x3c50 fs/coredump.c:762
get_signal+0x1bfa/0x2440 kernel/signal.c:2845
arch_do_signal_or_restart+0x79/0x5c0 arch/x86/kernel/signal.c:306
exit_to_user_mode_loop kernel/entry/common.c:168 [inline]
exit_to_user_mode_prepare+0x15f/0x250 kernel/entry/common.c:203
irqentry_exit_to_user_mode+0x9/0x40 kernel/entry/common.c:309
exc_page_fault+0xc0/0x170 arch/x86/mm/fault.c:1578
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
RIP: 0033:0x0
RSP: 002b:00000000200001c8 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007f0d97babf80 RCX: 00007f0d97a8c0f9
RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000088000000
RBP: 00007f0d97ae7ae9 R08: 0000000020002340 R09: 0000000020002340
R10: 0000000020000240 R11: 0000000000000206 R12: 0000000000000000
R13: 00007fff6d505eef R14: 00007f0d98834300 R15: 0000000000022000
INFO: task syz-executor.0:32462 blocked for more than 145 seconds.
Not tainted 6.2.0-rc8-syzkaller-00098-gec35307e18ba #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0 state:D stack:23328 pid:32462 ppid:31856 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5293 [inline]
__schedule+0xbdd/0x54f0 kernel/sched/core.c:6606
schedule+0xde/0x1b0 kernel/sched/core.c:6682
wb_wait_for_completion+0x182/0x240 fs/fs-writeback.c:192
__writeback_inodes_sb_nr+0x1d7/0x280 fs/fs-writeback.c:2639
try_to_writeback_inodes_sb+0x98/0xc0 fs/fs-writeback.c:2687
ext4_nonda_switch+0x1aa/0x1f0 fs/ext4/inode.c:3029
ext4_da_write_begin+0x170/0xb50 fs/ext4/inode.c:3056
generic_perform_write+0x256/0x570 mm/filemap.c:3772
ext4_buffered_write_iter+0x15b/0x460 fs/ext4/file.c:285
ext4_file_write_iter+0x8bf/0x1710 fs/ext4/file.c:700
__kernel_write_iter+0x262/0x730 fs/read_write.c:517
dump_emit_page fs/coredump.c:888 [inline]
dump_user_range+0x234/0x700 fs/coredump.c:915
elf_core_dump+0x2718/0x3590 fs/binfmt_elf.c:2137
do_coredump+0x2764/0x3c50 fs/coredump.c:762
get_signal+0x1bfa/0x2440 kernel/signal.c:2845
arch_do_signal_or_restart+0x79/0x5c0 arch/x86/kernel/signal.c:306
exit_to_user_mode_loop kernel/entry/common.c:168 [inline]
exit_to_user_mode_prepare+0x15f/0x250 kernel/entry/common.c:203
irqentry_exit_to_user_mode+0x9/0x40 kernel/entry/common.c:309
exc_page_fault+0xc0/0x170 arch/x86/mm/fault.c:1578
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
RIP: 0033:0x0
RSP: 002b:00000000200001c8 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007f0d97babf80 RCX: 00007f0d97a8c0f9
RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000088000000
RBP: 00007f0d97ae7ae9 R08: 0000000020002340 R09: 0000000020002340
R10: 0000000020000240 R11: 0000000000000206 R12: 0000000000000000
R13: 00007fff6d505eef R14: 00007f0d98834300 R15: 0000000000022000
INFO: task syz-executor.0:32664 blocked for more than 145 seconds.
Not tainted 6.2.0-rc8-syzkaller-00098-gec35307e18ba #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0 state:D stack:23664 pid:32664 ppid:31856 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5293 [inline]
__schedule+0xbdd/0x54f0 kernel/sched/core.c:6606
schedule+0xde/0x1b0 kernel/sched/core.c:6682
wb_wait_for_completion+0x182/0x240 fs/fs-writeback.c:192
__writeback_inodes_sb_nr+0x1d7/0x280 fs/fs-writeback.c:2639
try_to_writeback_inodes_sb+0x98/0xc0 fs/fs-writeback.c:2687
ext4_nonda_switch+0x1aa/0x1f0 fs/ext4/inode.c:3029
ext4_da_write_begin+0x170/0xb50 fs/ext4/inode.c:3056
generic_perform_write+0x256/0x570 mm/filemap.c:3772
ext4_buffered_write_iter+0x15b/0x460 fs/ext4/file.c:285
ext4_file_write_iter+0x8bf/0x1710 fs/ext4/file.c:700
__kernel_write_iter+0x262/0x730 fs/read_write.c:517
dump_emit_page fs/coredump.c:888 [inline]
dump_user_range+0x234/0x700 fs/coredump.c:915
elf_core_dump+0x2718/0x3590 fs/binfmt_elf.c:2137
do_coredump+0x2764/0x3c50 fs/coredump.c:762
get_signal+0x1bfa/0x2440 kernel/signal.c:2845
arch_do_signal_or_restart+0x79/0x5c0 arch/x86/kernel/signal.c:306
exit_to_user_mode_loop kernel/entry/common.c:168 [inline]
exit_to_user_mode_prepare+0x15f/0x250 kernel/entry/common.c:203
irqentry_exit_to_user_mode+0x9/0x40 kernel/entry/common.c:309
exc_page_fault+0xc0/0x170 arch/x86/mm/fault.c:1578
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
RIP: 0033:0x0
RSP: 002b:00000000200001c8 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007f0d97babf80 RCX: 00007f0d97a8c0f9
RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000088000000
RBP: 00007f0d97ae7ae9 R08: 0000000020002340 R09: 0000000020002340
R10: 0000000020000240 R11: 0000000000000206 R12: 0000000000000000
R13: 00007fff6d505eef R14: 00007f0d98834300 R15: 0000000000022000
Showing all locks held in the system:
1 lock held by rcu_tasks_kthre/12:
#0: ffffffff8c791750 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507
1 lock held by rcu_tasks_trace/13:
#0: ffffffff8c791450 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507
1 lock held by khungtaskd/27:
#0: ffffffff8c7922a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x57/0x264 kernel/locking/lockdep.c:6494
3 locks held by kworker/u4:2/40:
#0: ffff8881401e6938 ((wq_completion)writeback){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff8881401e6938 ((wq_completion)writeback){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
#0: ffff8881401e6938 ((wq_completion)writeback){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
#0: ffff8881401e6938 ((wq_completion)writeback){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline]
#0: ffff8881401e6938 ((wq_completion)writeback){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline]
#0: ffff8881401e6938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 kernel/workqueue.c:2260
#1: ffffc90000b17da8 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 kernel/workqueue.c:2264
#2: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
2 locks held by getty/4748:
#0: ffff8880271d7098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 drivers/tty/tty_ldisc.c:244
#1: ffffc900015c02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 drivers/tty/n_tty.c:2177
2 locks held by syz-executor.5/5094:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: filename_create+0xf1/0x4a0 fs/namei.c:3800
#1: ffff888076552218 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:791 [inline]
#1: ffff888076552218 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x1aa/0x4a0 fs/namei.c:3807
2 locks held by syz-executor.2/22510:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: filename_create+0xf1/0x4a0 fs/namei.c:3800
#1: ffff888081625440 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:791 [inline]
#1: ffff888081625440 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x1aa/0x4a0 fs/namei.c:3807
2 locks held by syz-executor.1/28936:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: filename_create+0xf1/0x4a0 fs/namei.c:3800
#1: ffff88804d328400 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:791 [inline]
#1: ffff88804d328400 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x1aa/0x4a0 fs/namei.c:3807
3 locks held by syz-executor.4/29200:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: do_unlinkat+0x183/0x640 fs/namei.c:4299
#1: ffff88805687c030 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:791 [inline]
#1: ffff88805687c030 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: do_unlinkat+0x270/0x640 fs/namei.c:4303
#2: ffff88805687a218 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
#2: ffff88805687a218 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: vfs_unlink+0xd9/0x930 fs/namei.c:4241
2 locks held by syz-executor.0/31856:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: filename_create+0xf1/0x4a0 fs/namei.c:3800
#1: ffff888042272c20 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:791 [inline]
#1: ffff888042272c20 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x1aa/0x4a0 fs/namei.c:3807
3 locks held by syz-executor.0/31982:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1bfa/0x2440 kernel/signal.c:2845
#1: ffff888081d34030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
#1: ffff888081d34030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279
#2: ffff8880279460e0 (&type->s_umount_key#31){++++}-{3:3}, at: try_to_writeback_inodes_sb+0x21/0xc0 fs/fs-writeback.c:2684
3 locks held by syz-executor.0/32012:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1bfa/0x2440 kernel/signal.c:2845
#1: ffff888081f0ac20 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
#1: ffff888081f0ac20 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279
#2: ffff8880279460e0 (&type->s_umount_key#31){++++}-{3:3}, at: try_to_writeback_inodes_sb+0x21/0xc0 fs/fs-writeback.c:2684
3 locks held by syz-executor.0/32418:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1bfa/0x2440 kernel/signal.c:2845
#1: ffff88804bebb628 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
#1: ffff88804bebb628 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279
#2: ffff8880279460e0 (&type->s_umount_key#31){++++}-{3:3}, at: try_to_writeback_inodes_sb+0x21/0xc0 fs/fs-writeback.c:2684
3 locks held by syz-executor.0/32462:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1bfa/0x2440 kernel/signal.c:2845
#1: ffff88805a9c8e08 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
#1: ffff88805a9c8e08 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279
#2: ffff8880279460e0 (&type->s_umount_key#31){++++}-{3:3}, at: try_to_writeback_inodes_sb+0x21/0xc0 fs/fs-writeback.c:2684
1 lock held by syz-executor.5/32485:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.0/32506:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.0/32629:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.5/32650:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
3 locks held by syz-executor.0/32664:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1bfa/0x2440 kernel/signal.c:2845
#1: ffff888044cff258 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
#1: ffff888044cff258 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279
#2: ffff8880279460e0 (&type->s_umount_key#31){++++}-{3:3}, at: try_to_writeback_inodes_sb+0x21/0xc0 fs/fs-writeback.c:2684
1 lock held by syz-executor.5/32684:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.0/334:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.0/359:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.5/385:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.0/457:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.5/480:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.4/495:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.0/502:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.0/526:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.0/561:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.5/576:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.0/628:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.5/666:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.5/709:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.0/739:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.5/745:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.5/770:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.5/806:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.4/841:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.5/850:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.0/864:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.2/876:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.5/886:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.2/896:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.5/918:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.2/938:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.5/950:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.5/997:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.0/1015:
1 lock held by syz-executor.2/1059:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.2/1272:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
1 lock held by syz-executor.0/1452:
#0: ffff888026418b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581
2 locks held by syz-executor.0/1471:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1bfa/0x2440 kernel/signal.c:2845
#1: ffff888081ff6850 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
#1: ffff888081ff6850 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279
2 locks held by syz-executor.3/1570:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1bfa/0x2440 kernel/signal.c:2845
#1: ffff88804beb8400 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
#1: ffff88804beb8400 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279
2 locks held by syz-executor.0/1587:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1bfa/0x2440 kernel/signal.c:2845
#1: ffff888076555440 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
#1: ffff888076555440 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279
2 locks held by syz-executor.3/1592:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1bfa/0x2440 kernel/signal.c:2845
#1: ffff88804605c030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
#1: ffff88804605c030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279
2 locks held by syz-executor.2/1603:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1bfa/0x2440 kernel/signal.c:2845
#1: ffff8880478b5e48 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
#1: ffff8880478b5e48 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279
2 locks held by syz-executor.0/1610:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1bfa/0x2440 kernel/signal.c:2845
#1: ffff88804828e850 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
#1: ffff88804828e850 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279
2 locks held by syz-executor.2/1628:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1bfa/0x2440 kernel/signal.c:2845
#1: ffff888044cfca38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
#1: ffff888044cfca38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279
2 locks held by syz-executor.0/1648:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1bfa/0x2440 kernel/signal.c:2845
#1: ffff8880460dac20 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
#1: ffff8880460dac20 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279
2 locks held by syz-executor.0/1683:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1bfa/0x2440 kernel/signal.c:2845
#1: ffff88804cac4a38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
#1: ffff88804cac4a38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279
2 locks held by syz-executor.2/1704:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1bfa/0x2440 kernel/signal.c:2845
#1: ffff888044cd8e08 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
#1: ffff888044cd8e08 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279
2 locks held by syz-executor.0/1735:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1bfa/0x2440 kernel/signal.c:2845
#1: ffff88807338ac20 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
#1: ffff88807338ac20 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279
2 locks held by syz-executor.1/1766:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1bfa/0x2440 kernel/signal.c:2845
#1: ffff888081548e08 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
#1: ffff888081548e08 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279
2 locks held by syz-executor.2/1788:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1bfa/0x2440 kernel/signal.c:2845
#1: ffff88803a116850 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
#1: ffff88803a116850 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279
2 locks held by syz-executor.0/1789:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1bfa/0x2440 kernel/signal.c:2845
#1: ffff88804a431810 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
#1: ffff88804a431810 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279
2 locks held by syz-executor.0/2161:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1bfa/0x2440 kernel/signal.c:2845
#1: ffff88804d32ca38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
#1: ffff88804d32ca38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279
2 locks held by syz-executor.4/2192:
#0: ffff888027946460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1bfa/0x2440 kernel/signal.c:2845
#1: ffff88805687a218 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
#1: ffff88805687a218 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279
2 locks held by sed/2432:
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.2.0-rc8-syzkaller-00098-gec35307e18ba #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xd1/0x138 lib/dump_stack.c:106
nmi_cpu_backtrace.cold+0x24/0x18a lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x333/0x3c0 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline]
watchdog+0xc75/0xfc0 kernel/hung_task.c:377
kthread+0x2e8/0x3a0 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 2438 Comm: dhcpcd-run-hook Not tainted 6.2.0-rc8-syzkaller-00098-gec35307e18ba #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
RIP: 0010:mas_next_nentry+0x173/0xab0 lib/maple_tree.c:4664
Code: df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 81 08 00 00 4d 8b 36 49 83 c6 01 e8 d9 a6 c5 f7 48 8d 45 08 48 89 c2 48 89 44 24 30 <48> b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 42 08
RSP: 0018:ffffc9000a6df998 EFLAGS: 00000293
RAX: ffffc9000a6dfb88 RBX: 0000000000000008 RCX: 0000000000000000
RDX: ffffc9000a6dfb88 RSI: ffffffff89bb6237 RDI: 0000000000000001
RBP: ffffc9000a6dfb80 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000001
R13: 00007f7b7d487fff R14: 00007f7b7d42c000 R15: ffffc9000a6dfb98
FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffcc6f462c8 CR3: 000000002b3d0000 CR4: 0000000000350ef0
Call Trace:
mas_next_entry lib/maple_tree.c:4759 [inline]
mas_find+0x1da/0xd10 lib/maple_tree.c:6021
unmap_vmas+0x231/0x370 mm/memory.c:1682
exit_mmap+0x18d/0x7b0 mm/mmap.c:3089
__mmput+0x128/0x4c0 kernel/fork.c:1207
mmput+0x60/0x70 kernel/fork.c:1229
exit_mm kernel/exit.c:563 [inline]
do_exit+0x9ac/0x2950 kernel/exit.c:854
do_group_exit+0xd4/0x2a0 kernel/exit.c:1012
__do_sys_exit_group kernel/exit.c:1023 [inline]
__se_sys_exit_group kernel/exit.c:1021 [inline]
__x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1021
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f7b7d56a309
Code: Unable to access opcode bytes at 0x7f7b7d56a2df.
RSP: 002b:00007ffcc6f461d8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000563b22536e04 RCX: 00007f7b7d56a309
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000003 R08: ffffffffffffff88 R09: 0000000000000000
R10: 0000563b2253f1c0 R11: 0000000000000202 R12: 0000563b21d33070
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000