INFO: task syz.3.27:6160 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.27 state:D stack:26504 pid:6160 tgid:6160 ppid:5868 task_flags:0x400040 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] schedule+0x165/0x360 kernel/sched/core.c:7058 io_schedule+0x80/0xd0 kernel/sched/core.c:7903 folio_wait_bit_common+0x6b0/0xb90 mm/filemap.c:1317 folio_lock include/linux/pagemap.h:1139 [inline] writeback_get_folio mm/page-writeback.c:2468 [inline] writeback_iter+0x8d8/0x12a0 mm/page-writeback.c:2562 iomap_writepages+0x14d/0x2d0 fs/iomap/buffered-io.c:1761 gfs2_writepages+0x177/0x250 fs/gfs2/aops.c:175 do_writepages+0x32e/0x550 mm/page-writeback.c:2634 filemap_fdatawrite_wbc mm/filemap.c:386 [inline] __filemap_fdatawrite_range mm/filemap.c:419 [inline] __filemap_fdatawrite mm/filemap.c:425 [inline] filemap_fdatawrite+0x199/0x240 mm/filemap.c:430 gfs2_ordered_write fs/gfs2/log.c:733 [inline] gfs2_log_flush+0x966/0x24c0 fs/gfs2/log.c:1102 gfs2_trans_end+0x37c/0x570 fs/gfs2/trans.c:158 gfs2_page_mkwrite+0x14a8/0x1910 fs/gfs2/file.c:535 do_page_mkwrite+0x14d/0x310 mm/memory.c:3489 do_shared_fault mm/memory.c:5779 [inline] do_fault mm/memory.c:5841 [inline] do_pte_missing mm/memory.c:4362 [inline] handle_pte_fault mm/memory.c:6182 [inline] __handle_mm_fault+0x1916/0x5400 mm/memory.c:6323 handle_mm_fault+0x40a/0x8e0 mm/memory.c:6492 do_user_addr_fault+0xa81/0x1390 arch/x86/mm/fault.c:1336 handle_page_fault arch/x86/mm/fault.c:1476 [inline] exc_page_fault+0x82/0x100 arch/x86/mm/fault.c:1532 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618 RIP: 0033:0x7fdecea550b3 RSP: 002b:00007fffdb562750 EFLAGS: 00010246 RAX: 0000200000000180 RBX: 0000000000000008 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055556cc4f3c8 RBP: 00007fffdb562858 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 00007fdecedb5fac R13: 00007fdecedb5fa0 R14: fffffffffffffffe R15: 00007fffdb5628a0 INFO: lockdep is turned off. NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:332 [inline] watchdog+0xf60/0xfa0 kernel/hung_task.c:495 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x47c/0x820 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 9091 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:check_preemption_disabled+0x40/0x120 lib/smp_processor_id.c:53 Code: 08 65 8b 05 c6 54 43 07 65 8b 0d bb 54 43 07 f7 c1 ff ff ff 7f 74 23 65 48 8b 0d 9b 54 43 07 48 3b 4c 24 08 0f 85 cc 00 00 00 <48> 83 c4 10 5b 41 5e 41 5f 5d e9 01 ca 02 00 cc 48 c7 04 24 00 00 RSP: 0018:ffffc90003b5f828 EFLAGS: 00000046 RAX: 0000000000000001 RBX: 0000000000000001 RCX: 186758ab2f43f600 RDX: 0000000000000000 RSI: ffffffff8c035860 RDI: ffffffff8c035820 RBP: ffffc90003b5f920 R08: ffffffff8fc40337 R09: 1ffffffff1f88066 R10: dffffc0000000000 R11: fffffbfff1f88067 R12: dffffc0000000000 R13: ffff8880383d99c0 R14: ffffffff99f75ff0 R15: 1ffff9200076bf14 FS: 0000000000000000(0000) GS:ffff888125aff000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5ba7892368 CR3: 000000001169a000 CR4: 00000000003526f0 Call Trace: rcu_is_watching_curr_cpu include/linux/context_tracking.h:128 [inline] rcu_is_watching+0x15/0xb0 kernel/rcu/tree.c:751 trace_irq_enable+0x37/0x110 include/trace/events/preemptirq.h:40 trace_hardirqs_on+0x18/0x40 kernel/trace/trace_preemptirq.c:73 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] _raw_spin_unlock_irqrestore+0x85/0x110 kernel/locking/spinlock.c:194 __debug_check_no_obj_freed lib/debugobjects.c:1108 [inline] debug_check_no_obj_freed+0x451/0x470 lib/debugobjects.c:1129 slab_free_hook mm/slub.c:2348 [inline] slab_free mm/slub.c:4680 [inline] kmem_cache_free+0x113/0x400 mm/slub.c:4782 exit_mmap+0x53f/0xb50 mm/mmap.c:1305 __mmput+0x118/0x420 kernel/fork.c:1133 exit_mm+0x1da/0x2c0 kernel/exit.c:582 do_exit+0x648/0x2300 kernel/exit.c:949 do_group_exit+0x21c/0x2d0 kernel/exit.c:1102 __do_sys_exit_group kernel/exit.c:1113 [inline] __se_sys_exit_group kernel/exit.c:1111 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1111 x64_sys_call+0x21f7/0x2200 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f5ba76c26c5 Code: Unable to access opcode bytes at 0x7f5ba76c269b. RSP: 002b:00007ffd949b4658 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 00007ffd949b4904 RCX: 00007f5ba76c26c5 RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 RBP: 0000000000000003 R08: 00007ffd949b4750 R09: 0000000000000002 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 R13: 00007ffd949b4990 R14: 00007f5ba78d2000 R15: 000055efcaa7ad98