INFO: task kworker/1:3:5115 blocked for more than 144 seconds. Not tainted 6.10.0-rc3-syzkaller-00021-g2ef5971ff345 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:3 state:D stack:24400 pid:5115 tgid:5115 ppid:2 flags:0x00004000 Workqueue: events_long bch2_fs_read_only_work Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0xf15/0x5d00 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6837 journal_quiesce fs/bcachefs/journal.c:474 [inline] journal_quiesce+0x274/0x2b0 fs/bcachefs/journal.c:472 bch2_fs_journal_stop+0xec/0x390 fs/bcachefs/journal.c:1181 __bch2_fs_read_only+0x334/0x500 fs/bcachefs/super.c:291 bch2_fs_read_only+0x9b2/0xf10 fs/bcachefs/super.c:356 bch2_fs_read_only_work+0x2c/0x40 fs/bcachefs/super.c:393 process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231 process_scheduled_works kernel/workqueue.c:3312 [inline] worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task syz-executor.4:9802 blocked for more than 145 seconds. Not tainted 6.10.0-rc3-syzkaller-00021-g2ef5971ff345 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:21488 pid:9802 tgid:9801 ppid:9036 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0xf15/0x5d00 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 rwsem_down_write_slowpath kernel/locking/rwsem.c:1178 [inline] __down_write_common+0x950/0x13f0 kernel/locking/rwsem.c:1306 __bch2_fs_stop+0xf4/0x540 fs/bcachefs/super.c:612 bch2_fs_stop fs/bcachefs/super.c:672 [inline] bch2_fs_open+0x761/0x1110 fs/bcachefs/super.c:2139 bch2_mount+0xdea/0x11d0 fs/bcachefs/fs.c:1917 legacy_get_tree+0x109/0x220 fs/fs_context.c:662 vfs_get_tree+0x8f/0x380 fs/super.c:1780 do_new_mount fs/namespace.c:3352 [inline] path_mount+0x14e6/0x1f20 fs/namespace.c:3679 do_mount fs/namespace.c:3692 [inline] __do_sys_mount fs/namespace.c:3898 [inline] __se_sys_mount fs/namespace.c:3875 [inline] __x64_sys_mount+0x297/0x320 fs/namespace.c:3875 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f90adc7e5aa RSP: 002b:00007f90aeab3ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f90aeab3f80 RCX: 00007f90adc7e5aa RDX: 0000000020005d80 RSI: 0000000020005dc0 RDI: 00007f90aeab3f40 RBP: 0000000020005d80 R08: 00007f90aeab3f80 R09: 0000000000000018 R10: 0000000000000018 R11: 0000000000000202 R12: 0000000020005dc0 R13: 00007f90aeab3f40 R14: 0000000000005d9b R15: 0000000020006040 Showing all locks held in the system: 1 lock held by khungtaskd/30: #0: ffffffff8dbb1920 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline] #0: ffffffff8dbb1920 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:781 [inline] #0: ffffffff8dbb1920 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 kernel/locking/lockdep.c:6614 2 locks held by getty/4839: #0: ffff88802a8960a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 drivers/tty/n_tty.c:2201 2 locks held by syz-fuzzer/5085: 3 locks held by kworker/1:3/5115: #0: ffff888015481148 ((wq_completion)events_long){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 kernel/workqueue.c:3206 #1: ffffc9000334fd80 ((work_completion)(&c->read_only_work)){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 kernel/workqueue.c:3207 #2: ffff888053180278 (&c->state_lock){+.+.}-{3:3}, at: bch2_fs_read_only_work+0x24/0x40 fs/bcachefs/super.c:392 3 locks held by kworker/0:4/5165: #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 kernel/workqueue.c:3206 #1: ffffc90003f4fd80 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 kernel/workqueue.c:3207 #2: ffffffff8dbbd0b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 kernel/rcu/tree_exp.h:323 1 lock held by syz-executor.4/9802: #0: ffff888053180278 (&c->state_lock){+.+.}-{3:3}, at: __bch2_fs_stop+0xf4/0x540 fs/bcachefs/super.c:612 4 locks held by kworker/u8:1/10686: 1 lock held by syz-executor.2/11069: #0: ffffffff8f74bbe8 (rtnl_mutex){+.+.}-{3:3}, at: tun_detach drivers/net/tun.c:698 [inline] #0: ffffffff8f74bbe8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x250 drivers/net/tun.c:3500 1 lock held by syz-executor.4/11087: 1 lock held by syz-executor.1/11090: #0: ffffffff8dbbd0b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 kernel/rcu/tree_exp.h:291 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc3-syzkaller-00021-g2ef5971ff345 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline] watchdog+0xf86/0x1240 kernel/hung_task.c:379 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 7302 Comm: kworker/0:7 Not tainted 6.10.0-rc3-syzkaller-00021-g2ef5971ff345 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 Workqueue: events close_work RIP: 0010:_find_first_zero_bit+0x76/0xb0 lib/find_bit.c:137 Code: fd 4d 39 ec 73 3d e8 19 cd 0b fd 48 89 e8 48 c1 e8 03 42 80 3c 30 00 75 3f 48 8b 5d 00 31 ff 48 f7 d3 48 89 de e8 2a c8 0b fd <48> 85 db 74 ba f3 48 0f bc db e8 eb cc 0b fd 49 01 dc 4d 39 e5 4d RSP: 0018:ffffc900032fee50 EFLAGS: 00000093 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff84821856 RDX: ffff888020bdbc00 RSI: 0000000000000000 RDI: 0000000000000007 RBP: ffffffff93127d20 R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000004 R12: 000000000000ec00 R13: 0000000000040000 R14: dffffc0000000000 R15: 0000000000000002 FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020065000 CR3: 000000000d97a000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: find_first_zero_bit include/linux/find.h:393 [inline] alloc_lock_chain kernel/locking/lockdep.c:3679 [inline] add_chain_cache kernel/locking/lockdep.c:3711 [inline] lookup_chain_cache_add kernel/locking/lockdep.c:3816 [inline] validate_chain kernel/locking/lockdep.c:3837 [inline] __lock_acquire+0x16d4/0x3b30 kernel/locking/lockdep.c:5137 lock_acquire kernel/locking/lockdep.c:5754 [inline] lock_acquire+0x1b1/0x560 kernel/locking/lockdep.c:5719 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:162 stack_depot_save_flags+0x1fc/0x8f0 lib/stackdepot.c:633 kasan_save_stack+0x42/0x60 mm/kasan/common.c:48 __kasan_record_aux_stack+0xba/0xd0 mm/kasan/generic.c:541 __call_rcu_common.constprop.0+0x9a/0x790 kernel/rcu/tree.c:3072 xa_node_free lib/xarray.c:259 [inline] xas_delete_node lib/xarray.c:496 [inline] update_node lib/xarray.c:760 [inline] xas_store+0xc87/0x1960 lib/xarray.c:845 page_cache_delete_batch mm/filemap.c:321 [inline] delete_from_page_cache_batch+0x6a6/0xb60 mm/filemap.c:343 truncate_inode_pages_range+0x29b/0xe80 mm/truncate.c:359 ext4_evict_inode+0x2cc/0x17d0 fs/ext4/inode.c:193 evict+0x2ed/0x6c0 fs/inode.c:667 iput_final fs/inode.c:1741 [inline] iput.part.0+0x5a8/0x7f0 fs/inode.c:1767 iput+0x5c/0x80 fs/inode.c:1757 dentry_unlink_inode+0x295/0x480 fs/dcache.c:400 __dentry_kill+0x1d0/0x600 fs/dcache.c:603 dput.part.0+0x4b1/0x9b0 fs/dcache.c:845 dput+0x1f/0x30 fs/dcache.c:835 cleanup_mnt+0x1fa/0x450 fs/namespace.c:1266 mntput_no_expire+0x823/0xaf0 fs/namespace.c:1353 mntput+0x6b/0x90 fs/namespace.c:1363 __fput+0x57b/0xbb0 fs/file_table.c:433 __fput_sync+0x47/0x50 fs/file_table.c:507 close_work+0x97/0xc0 kernel/acct.c:207 process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231 process_scheduled_works kernel/workqueue.c:3312 [inline] worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244