INFO: task kworker/0:0:14871 blocked for more than 143 seconds.
Not tainted 6.7.0-rc8-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:0 state:D stack:22880 pid:14871 tgid:14871 ppid:2 flags:0x00004000
Workqueue: events_long flush_old_commits
Call Trace:
context_switch kernel/sched/core.c:5376 [inline]
__schedule+0xedb/0x5af0 kernel/sched/core.c:6688
__schedule_loop kernel/sched/core.c:6763 [inline]
schedule+0xe9/0x270 kernel/sched/core.c:6778
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6835
__mutex_lock_common kernel/locking/mutex.c:679 [inline]
__mutex_lock+0x5b9/0x9d0 kernel/locking/mutex.c:747
reiserfs_write_lock+0x79/0x100 fs/reiserfs/lock.c:27
reiserfs_sync_fs+0x95/0x140 fs/reiserfs/super.c:76
flush_old_commits+0xf5/0x1f0 fs/reiserfs/super.c:111
process_one_work+0x886/0x15d0 kernel/workqueue.c:2627
process_scheduled_works kernel/workqueue.c:2700 [inline]
worker_thread+0x8b9/0x1290 kernel/workqueue.c:2781
kthread+0x2c6/0x3a0 kernel/kthread.c:388
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242
INFO: task syz-executor.0:10445 blocked for more than 143 seconds.
Not tainted 6.7.0-rc8-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0 state:D stack:24176 pid:10445 tgid:10443 ppid:5098 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5376 [inline]
__schedule+0xedb/0x5af0 kernel/sched/core.c:6688
__schedule_loop kernel/sched/core.c:6763 [inline]
schedule+0xe9/0x270 kernel/sched/core.c:6778
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6835
__mutex_lock_common kernel/locking/mutex.c:679 [inline]
__mutex_lock+0x5b9/0x9d0 kernel/locking/mutex.c:747
reiserfs_write_lock+0x79/0x100 fs/reiserfs/lock.c:27
reiserfs_get_block+0x265/0x4570 fs/reiserfs/inode.c:680
do_mpage_readpage+0x6f8/0x1a90 fs/mpage.c:233
mpage_readahead+0x34d/0x590 fs/mpage.c:381
read_pages+0x1d1/0xdc0 mm/readahead.c:160
page_cache_ra_unbounded+0x457/0x5f0 mm/readahead.c:269
do_page_cache_ra mm/readahead.c:299 [inline]
page_cache_ra_order+0x72b/0xa80 mm/readahead.c:546
ondemand_readahead+0x493/0x1130 mm/readahead.c:668
page_cache_sync_ra+0x174/0x1d0 mm/readahead.c:695
page_cache_sync_readahead include/linux/pagemap.h:1283 [inline]
filemap_get_pages+0xc06/0x1830 mm/filemap.c:2497
filemap_splice_read+0x3d0/0x9f0 mm/filemap.c:2869
vfs_splice_read fs/splice.c:993 [inline]
vfs_splice_read+0x2c8/0x3b0 fs/splice.c:962
splice_direct_to_actor+0x2a5/0xa30 fs/splice.c:1069
do_splice_direct+0x1af/0x280 fs/splice.c:1194
do_sendfile+0xb3e/0x1310 fs/read_write.c:1254
__do_sys_sendfile64 fs/read_write.c:1322 [inline]
__se_sys_sendfile64 fs/read_write.c:1308 [inline]
__x64_sys_sendfile64+0x1d6/0x220 fs/read_write.c:1308
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0x40/0x110 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7fa2b067cce9
RSP: 002b:00007fa2b143e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007fa2b079bf80 RCX: 00007fa2b067cce9
RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005
RBP: 00007fa2b06c947a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000011f06 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007fa2b079bf80 R15: 00007ffd17df4db8
INFO: task syz-executor.0:10479 blocked for more than 144 seconds.
Not tainted 6.7.0-rc8-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0 state:D stack:27584 pid:10479 tgid:10443 ppid:5098 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5376 [inline]
__schedule+0xedb/0x5af0 kernel/sched/core.c:6688
__schedule_loop kernel/sched/core.c:6763 [inline]
schedule+0xe9/0x270 kernel/sched/core.c:6778
io_schedule+0xbe/0x130 kernel/sched/core.c:8998
folio_wait_bit_common+0x3dc/0x9c0 mm/filemap.c:1273
__folio_lock mm/filemap.c:1611 [inline]
folio_lock include/linux/pagemap.h:1031 [inline]
folio_lock include/linux/pagemap.h:1027 [inline]
__filemap_get_folio+0x633/0xaa0 mm/filemap.c:1864
pagecache_get_page+0x2c/0x250 mm/folio-compat.c:99
find_or_create_page include/linux/pagemap.h:740 [inline]
grab_cache_page include/linux/pagemap.h:856 [inline]
grab_tail_page fs/reiserfs/inode.c:2193 [inline]
reiserfs_truncate_file+0x405/0x940 fs/reiserfs/inode.c:2261
reiserfs_vfs_truncate_file+0x2c/0x40 fs/reiserfs/file.c:133
reiserfs_direct_IO+0x206/0x270 fs/reiserfs/inode.c:3251
generic_file_direct_write+0x132/0x360 mm/filemap.c:3852
__generic_file_write_iter+0x11d/0x240 mm/filemap.c:4008
generic_file_write_iter+0xe3/0x350 mm/filemap.c:4048
call_write_iter include/linux/fs.h:2020 [inline]
do_iter_readv_writev+0x21e/0x3c0 fs/read_write.c:735
do_iter_write+0x17f/0x7f0 fs/read_write.c:860
vfs_writev+0x221/0x700 fs/read_write.c:933
do_pwritev+0x1af/0x260 fs/read_write.c:1030
__do_sys_pwritev2 fs/read_write.c:1089 [inline]
__se_sys_pwritev2 fs/read_write.c:1080 [inline]
__x64_sys_pwritev2+0xef/0x150 fs/read_write.c:1080
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0x40/0x110 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7fa2b067cce9
RSP: 002b:00007fa2b141d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
RAX: ffffffffffffffda RBX: 00007fa2b079c050 RCX: 00007fa2b067cce9
RDX: 0000000000000005 RSI: 0000000020000340 RDI: 0000000000000005
RBP: 00007fa2b06c947a R08: 0000000000000006 R09: 0000000000000010
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000006e R14: 00007fa2b079c050 R15: 00007ffd17df4db8
Showing all locks held in the system:
1 lock held by khungtaskd/28:
#0: ffffffff8cfa7d60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:301 [inline]
#0: ffffffff8cfa7d60 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:747 [inline]
#0: ffffffff8cfa7d60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 kernel/locking/lockdep.c:6614
2 locks held by getty/4808:
#0: ffff88814a6620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
#1: ffffc900020682f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc6/0x1490 drivers/tty/n_tty.c:2201
4 locks held by kworker/0:0/14871:
#0: ffff888013077538 ((wq_completion)events_long){+.+.}-{0:0}, at: process_one_work+0x789/0x15d0 kernel/workqueue.c:2602
#1: ffffc9000b6d7d80 ((work_completion)(&(&sbi->old_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7eb/0x15d0 kernel/workqueue.c:2603
#2: ffff888085f500e0 (&type->s_umount_key#24){++++}-{3:3}, at: flush_old_commits+0x79/0x1f0 fs/reiserfs/super.c:97
#3: ffff888087e2e090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x79/0x100 fs/reiserfs/lock.c:27
3 locks held by syz-executor.0/10445:
#0: ffff888085f50418 (sb_writers#21){.+.+}-{0:0}, at: __do_sys_sendfile64 fs/read_write.c:1322 [inline]
#0: ffff888085f50418 (sb_writers#21){.+.+}-{0:0}, at: __se_sys_sendfile64 fs/read_write.c:1308 [inline]
#0: ffff888085f50418 (sb_writers#21){.+.+}-{0:0}, at: __x64_sys_sendfile64+0x1d6/0x220 fs/read_write.c:1308
#1: ffff88808fa59640 (mapping.invalidate_lock#4){.+.+}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:857 [inline]
#1: ffff88808fa59640 (mapping.invalidate_lock#4){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x13a/0x5f0 mm/readahead.c:225
#2: ffff888087e2e090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x79/0x100 fs/reiserfs/lock.c:27
4 locks held by syz-executor.0/10479:
#0: ffff888085f50418 (sb_writers#21){.+.+}-{0:0}, at: do_pwritev+0x1af/0x260 fs/read_write.c:1030
#1: ffff88808fa594a0 (&sb->s_type->i_mutex_key#25){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:802 [inline]
#1: ffff88808fa594a0 (&sb->s_type->i_mutex_key#25){+.+.}-{3:3}, at: generic_file_write_iter+0x92/0x350 mm/filemap.c:4045
#2: ffff88808fa59278 (&ei->tailpack){+.+.}-{3:3}, at: reiserfs_vfs_truncate_file+0x1f/0x40 fs/reiserfs/file.c:132
#3: ffff888087e2e090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x79/0x100 fs/reiserfs/lock.c:27
2 locks held by syz-executor.4/12496:
#0: ffff888085f500e0 (&type->s_umount_key#24){++++}-{3:3}, at: __super_lock fs/super.c:58 [inline]
#0: ffff888085f500e0 (&type->s_umount_key#24){++++}-{3:3}, at: super_lock+0x23c/0x380 fs/super.c:117
#1: ffff888087e2e090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x79/0x100 fs/reiserfs/lock.c:27
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.7.0-rc8-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xd9/0x1b0 lib/dump_stack.c:106
nmi_cpu_backtrace+0x277/0x390 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x299/0x300 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline]
watchdog+0xf87/0x1210 kernel/hung_task.c:379
kthread+0x2c6/0x3a0 kernel/kthread.c:388
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 5546 Comm: kworker/u4:13 Not tainted 6.7.0-rc8-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
RIP: 0010:__rcu_read_unlock+0xc7/0x580 kernel/rcu/tree_plugin.h:425
Code: 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 c5 01 00 00 <8b> 85 40 04 00 00 85 c0 75 54 65 48 8b 1c 25 00 bd 03 00 48 8d bb
RSP: 0018:ffffc900057e7b58 EFLAGS: 00000246
RAX: 0000000000000003 RBX: 0000000000000000 RCX: ffffffff8a434fe7
RDX: 0000000000000000 RSI: ffffffff8a434cca RDI: ffff8880736ce540
RBP: ffff8880736ce100 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000003 R12: ffff8880736ce100
R13: ffff88809c12cc80 R14: 0000000000000204 R15: ffff888067ba6b40
FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c000b1c678 CR3: 000000000cd77000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
rcu_read_unlock include/linux/rcupdate.h:779 [inline]
batadv_iv_ogm_slide_own_bcast_window net/batman-adv/bat_iv_ogm.c:771 [inline]
batadv_iv_ogm_schedule_buff+0x753/0x14f0 net/batman-adv/bat_iv_ogm.c:825
batadv_iv_ogm_schedule net/batman-adv/bat_iv_ogm.c:868 [inline]
batadv_iv_ogm_schedule net/batman-adv/bat_iv_ogm.c:861 [inline]
batadv_iv_send_outstanding_bat_ogm_packet+0x31e/0x8c0 net/batman-adv/bat_iv_ogm.c:1712
process_one_work+0x886/0x15d0 kernel/workqueue.c:2627
process_scheduled_works kernel/workqueue.c:2700 [inline]
worker_thread+0x8b9/0x1290 kernel/workqueue.c:2781
kthread+0x2c6/0x3a0 kernel/kthread.c:388
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242