INFO: task syz-executor:5822 blocked for more than 143 seconds. Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:22288 pid:5822 tgid:5822 ppid:5820 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0xe58/0x5ad0 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6848 io_schedule+0xbf/0x130 kernel/sched/core.c:7681 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49 out_of_line_wait_on_bit+0xda/0x110 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x933/0x1270 fs/jbd2/transaction.c:1096 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1245 __ext4_journal_get_write_access+0x6a/0x390 fs/ext4/ext4_jbd2.c:239 ext4_reserve_inode_write+0x13b/0x270 fs/ext4/inode.c:5830 __ext4_mark_inode_dirty+0x1a4/0x860 fs/ext4/inode.c:6004 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6041 __mark_inode_dirty+0x1f7/0xe60 fs/fs-writeback.c:2515 generic_update_time+0xcf/0xf0 fs/inode.c:2112 inode_update_time fs/inode.c:2125 [inline] __file_update_time fs/inode.c:2353 [inline] file_update_time+0x17d/0x1c0 fs/inode.c:2383 ext4_page_mkwrite+0x368/0x1760 fs/ext4/inode.c:6159 do_page_mkwrite+0x177/0x380 mm/memory.c:3176 wp_page_shared mm/memory.c:3577 [inline] do_wp_page+0xc4b/0x47c0 mm/memory.c:3727 handle_pte_fault mm/memory.c:5817 [inline] __handle_mm_fault+0x1ade/0x2a40 mm/memory.c:5944 handle_mm_fault+0x3fa/0xaa0 mm/memory.c:6112 do_user_addr_fault+0x60d/0x13f0 arch/x86/mm/fault.c:1338 handle_page_fault arch/x86/mm/fault.c:1481 [inline] exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1539 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f4693349ccc RSP: 002b:00007ffcbf73f588 EFLAGS: 00010206 RAX: 00007f468fc00000 RBX: 0000555567bc7d30 RCX: 0000000000004e5f RDX: 0000000000005e5f RSI: 0000555567bdc5a0 RDI: 00007f468fc01000 RBP: 0000555567bc7e90 R08: 00007f468fc00000 R09: 0000555567bd9c60 R10: 2f57417f33b787bb R11: 0000000000000202 R12: 0000000000000001 R13: 0000000001000000 R14: 00007ffcbf73f5a0 R15: 0000000000000000 INFO: task syz.2.1285:10938 blocked for more than 143 seconds. Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.1285 state:D stack:26048 pid:10938 tgid:10938 ppid:5832 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0xe58/0x5ad0 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6848 io_schedule+0xbf/0x130 kernel/sched/core.c:7681 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49 out_of_line_wait_on_bit+0xda/0x110 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x933/0x1270 fs/jbd2/transaction.c:1096 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1245 __ext4_journal_get_write_access+0x6a/0x390 fs/ext4/ext4_jbd2.c:239 ext4_reserve_inode_write+0x13b/0x270 fs/ext4/inode.c:5830 __ext4_mark_inode_dirty+0x1a4/0x860 fs/ext4/inode.c:6004 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6041 __mark_inode_dirty+0x1f7/0xe60 fs/fs-writeback.c:2515 generic_update_time+0xcf/0xf0 fs/inode.c:2112 inode_update_time fs/inode.c:2125 [inline] __file_update_time fs/inode.c:2353 [inline] file_update_time+0x17d/0x1c0 fs/inode.c:2383 ext4_page_mkwrite+0x368/0x1760 fs/ext4/inode.c:6159 do_page_mkwrite+0x177/0x380 mm/memory.c:3176 do_shared_fault mm/memory.c:5398 [inline] do_fault mm/memory.c:5460 [inline] do_pte_missing+0x29e/0x3e70 mm/memory.c:3979 handle_pte_fault mm/memory.c:5801 [inline] __handle_mm_fault+0x103c/0x2a40 mm/memory.c:5944 handle_mm_fault+0x3fa/0xaa0 mm/memory.c:6112 do_user_addr_fault+0x60d/0x13f0 arch/x86/mm/fault.c:1338 handle_page_fault arch/x86/mm/fault.c:1481 [inline] exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1539 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f0499d4c0a0 RSP: 002b:00007ffd2f1d6ac8 EFLAGS: 00010202 RAX: 0000001b3051eff6 RBX: 00007f049aa75720 RCX: 0000000000000000 RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000ff6 RBP: fffffffffffffff6 R08: 0000000000000008 R09: 0000000000000ff0 R10: 0000000000000006 R11: 0000000000000006 R12: 0000000000001000 R13: 0000000000000ff0 R14: 000000000000000a R15: 000000000000000a INFO: task syz.4.1284:10940 blocked for more than 144 seconds. Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.1284 state:D stack:27120 pid:10940 tgid:10940 ppid:5835 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0xe58/0x5ad0 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6848 io_schedule+0xbf/0x130 kernel/sched/core.c:7681 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49 out_of_line_wait_on_bit+0xda/0x110 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x933/0x1270 fs/jbd2/transaction.c:1096 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1245 __ext4_journal_get_write_access+0x6a/0x390 fs/ext4/ext4_jbd2.c:239 ext4_reserve_inode_write+0x13b/0x270 fs/ext4/inode.c:5830 __ext4_mark_inode_dirty+0x1a4/0x860 fs/ext4/inode.c:6004 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6041 __mark_inode_dirty+0x1f7/0xe60 fs/fs-writeback.c:2515 generic_update_time+0xcf/0xf0 fs/inode.c:2112 inode_update_time fs/inode.c:2125 [inline] __file_update_time fs/inode.c:2353 [inline] file_update_time+0x17d/0x1c0 fs/inode.c:2383 ext4_page_mkwrite+0x368/0x1760 fs/ext4/inode.c:6159 do_page_mkwrite+0x177/0x380 mm/memory.c:3176 do_shared_fault mm/memory.c:5398 [inline] do_fault mm/memory.c:5460 [inline] do_pte_missing+0x29e/0x3e70 mm/memory.c:3979 handle_pte_fault mm/memory.c:5801 [inline] __handle_mm_fault+0x103c/0x2a40 mm/memory.c:5944 handle_mm_fault+0x3fa/0xaa0 mm/memory.c:6112 do_user_addr_fault+0x60d/0x13f0 arch/x86/mm/fault.c:1338 handle_page_fault arch/x86/mm/fault.c:1481 [inline] exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1539 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7fd01385efb7 RSP: 002b:00007fffb8e0cc40 EFLAGS: 00010202 RAX: 0000001b30920000 RBX: 00007fd014675720 RCX: 0000001b30320210 RDX: 0000001b3091fffc RSI: 00000000005ffdf0 RDI: 00007fd014675700 RBP: 0000000000000000 R08: 00007fd013b46038 R09: 00007fd013b32000 R10: 00007fd014675700 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 000000000001247e Showing all locks held in the system: 1 lock held by khungtaskd/30: #0: ffffffff8e1bbb40 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #0: ffffffff8e1bbb40 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8e1bbb40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 kernel/locking/lockdep.c:6744 2 locks held by getty/5592: #0: ffff8880323a30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 drivers/tty/n_tty.c:2211 3 locks held by syz-executor/5822: #0: ffff888028f49c40 (&vma->vm_lock->lock){++++}-{4:4}, at: vma_start_read include/linux/mm.h:716 [inline] #0: ffff888028f49c40 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 mm/memory.c:6278 #1: ffff8880361de518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 mm/memory.c:3176 #2: ffff888035c62958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 fs/jbd2/transaction.c:448 6 locks held by kworker/u8:13/8958: #0: ffff8880206fa948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3204 #1: ffffc9000418fd80 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205 #2: ffff8880361de0e0 (&type->s_umount_key#51){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 fs/super.c:562 #3: ffff888035c60b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b3/0x820 mm/page-writeback.c:2702 #4: ffff888035c62958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 fs/jbd2/transaction.c:448 #5: ffff888078112a28 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x352/0x1370 fs/ext4/inode.c:701 3 locks held by syz.2.1285/10938: #0: ffff888028ac8a90 (&vma->vm_lock->lock){++++}-{4:4}, at: vma_start_read include/linux/mm.h:716 [inline] #0: ffff888028ac8a90 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 mm/memory.c:6278 #1: ffff8880361de518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 mm/memory.c:3176 #2: ffff888035c62958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 fs/jbd2/transaction.c:448 3 locks held by syz.4.1284/10940: #0: ffff8880329322f8 (&vma->vm_lock->lock){++++}-{4:4}, at: vma_start_read include/linux/mm.h:716 [inline] #0: ffff8880329322f8 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 mm/memory.c:6278 #1: ffff8880361de518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 mm/memory.c:3176 #2: ffff888035c62958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 fs/jbd2/transaction.c:448 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:234 [inline] watchdog+0xf14/0x1240 kernel/hung_task.c:397 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 7198 Comm: kworker/u8:11 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Workqueue: bat_events batadv_nc_worker RIP: 0010:lock_acquire.part.0+0x104/0x380 kernel/locking/lockdep.c:5849 Code: 8b e8 90 57 c4 09 44 89 e2 44 89 f6 4c 89 ef 65 ff 05 b8 0e 97 7e 6a 00 81 e5 00 02 00 00 6a 00 41 0f 94 c1 6a 00 45 0f b6 c9 b4 24 f8 00 00 00 41 57 44 8b 44 24 2c 8b 4c 24 28 e8 45 ae ff RSP: 0018:ffffc9000436fa08 EFLAGS: 00000006 RAX: 0000000000000001 RBX: 1ffff9200086df45 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805d139618 RBP: 0000000000000200 R08: 0000000000000001 R09: 0000000000000000 R10: ffffffff9060c297 R11: 0000000000000002 R12: 0000000000000000 R13: ffff88805d139618 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000564499bfcf48 CR3: 000000000df7e000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __raw_spin_lock_bh include/linux/spinlock_api_smp.h:126 [inline] _raw_spin_lock_bh+0x33/0x40 kernel/locking/spinlock.c:178 spin_lock_bh include/linux/spinlock.h:356 [inline] batadv_nc_purge_paths+0xca/0x390 net/batman-adv/network-coding.c:442 batadv_nc_worker+0x94a/0x1060 net/batman-adv/network-coding.c:722 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229 process_scheduled_works kernel/workqueue.c:3310 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244