INFO: task syz-executor:5851 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:24024 pid:5851 tgid:5851 ppid:5850 task_flags:0x440100 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7058 io_schedule+0xbf/0x130 kernel/sched/core.c:7903 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:250 __wait_on_bit+0x65/0x180 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x93d/0x1320 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1241 __ext4_journal_get_write_access+0x6a/0x340 fs/ext4/ext4_jbd2.c:242 ext4_reserve_inode_write+0x1be/0x340 fs/ext4/inode.c:6326 __ext4_mark_inode_dirty+0x197/0x870 fs/ext4/inode.c:6501 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6538 __mark_inode_dirty+0x1ee/0xe40 fs/fs-writeback.c:2527 generic_update_time+0xcf/0xf0 fs/inode.c:2063 inode_update_time fs/inode.c:2076 [inline] __file_update_time fs/inode.c:2304 [inline] file_update_time+0x17d/0x1c0 fs/inode.c:2334 ext4_page_mkwrite+0x33d/0x1880 fs/ext4/inode.c:6704 do_page_mkwrite+0x174/0x380 mm/memory.c:3361 wp_page_shared mm/memory.c:3762 [inline] do_wp_page+0xb10/0x4f00 mm/memory.c:3981 handle_pte_fault mm/memory.c:6068 [inline] __handle_mm_fault+0x1b2d/0x2a50 mm/memory.c:6195 handle_mm_fault+0x589/0xd10 mm/memory.c:6364 do_user_addr_fault+0x60c/0x1370 arch/x86/mm/fault.c:1336 handle_page_fault arch/x86/mm/fault.c:1476 [inline] exc_page_fault+0x5c/0xb0 arch/x86/mm/fault.c:1532 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f554e068c55 RSP: 002b:00007ffd2ab44b20 EFLAGS: 00010206 RAX: 00007f554ae3fee0 RBX: 00007ffd2ab44c20 RCX: 0000000000000000 RDX: 00007f554ae3fedc RSI: 0000000000000008 RDI: 00007ffd2ab44c20 RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 R10: 00007ffd2ab44c00 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000120 R14: fffffffffffffee0 R15: 0000000000000120 INFO: task syz.4.1360:13467 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.1360 state:D stack:26264 pid:13467 tgid:13467 ppid:12949 task_flags:0x440040 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7058 io_schedule+0xbf/0x130 kernel/sched/core.c:7903 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:250 __wait_on_bit+0x65/0x180 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x93d/0x1320 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1241 __ext4_journal_get_write_access+0x6a/0x340 fs/ext4/ext4_jbd2.c:242 ext4_reserve_inode_write+0x1be/0x340 fs/ext4/inode.c:6326 __ext4_mark_inode_dirty+0x197/0x870 fs/ext4/inode.c:6501 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6538 __mark_inode_dirty+0x1ee/0xe40 fs/fs-writeback.c:2527 generic_update_time+0xcf/0xf0 fs/inode.c:2063 inode_update_time fs/inode.c:2076 [inline] __file_update_time fs/inode.c:2304 [inline] file_update_time+0x17d/0x1c0 fs/inode.c:2334 ext4_page_mkwrite+0x33d/0x1880 fs/ext4/inode.c:6704 do_page_mkwrite+0x174/0x380 mm/memory.c:3361 do_shared_fault mm/memory.c:5649 [inline] do_fault mm/memory.c:5711 [inline] do_pte_missing+0x29d/0x3ba0 mm/memory.c:4234 handle_pte_fault mm/memory.c:6052 [inline] __handle_mm_fault+0x152a/0x2a50 mm/memory.c:6195 handle_mm_fault+0x589/0xd10 mm/memory.c:6364 do_user_addr_fault+0x60c/0x1370 arch/x86/mm/fault.c:1336 handle_page_fault arch/x86/mm/fault.c:1476 [inline] exc_page_fault+0x5c/0xb0 arch/x86/mm/fault.c:1532 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f46ea26ed6a RSP: 002b:00007ffd53e14b30 EFLAGS: 00010202 RAX: 0000001b2d516000 RBX: 00007f46eb0e5720 RCX: 0000001b2d515ff8 RDX: 0000001b2d124220 RSI: 0000000000000008 RDI: 00007f46eb0e5720 RBP: ffffffff8b8b30da R08: 00007f46ea5b6128 R09: 00007f46ea5a2000 R10: 00007f46e99fd008 R11: 0000000000000013 R12: 0000000000000013 R13: 00000000000000ee R14: ffffffff8b8b30b4 R15: 0000000000000109 INFO: task syz.2.1361:13472 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.1361 state:D stack:28216 pid:13472 tgid:13472 ppid:5867 task_flags:0x440040 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7058 io_schedule+0xbf/0x130 kernel/sched/core.c:7903 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:250 __wait_on_bit+0x65/0x180 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x93d/0x1320 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1241 __ext4_journal_get_write_access+0x6a/0x340 fs/ext4/ext4_jbd2.c:242 ext4_reserve_inode_write+0x1be/0x340 fs/ext4/inode.c:6326 __ext4_mark_inode_dirty+0x197/0x870 fs/ext4/inode.c:6501 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6538 __mark_inode_dirty+0x1ee/0xe40 fs/fs-writeback.c:2527 generic_update_time+0xcf/0xf0 fs/inode.c:2063 inode_update_time fs/inode.c:2076 [inline] __file_update_time fs/inode.c:2304 [inline] file_update_time+0x17d/0x1c0 fs/inode.c:2334 ext4_page_mkwrite+0x33d/0x1880 fs/ext4/inode.c:6704 do_page_mkwrite+0x174/0x380 mm/memory.c:3361 do_shared_fault mm/memory.c:5649 [inline] do_fault mm/memory.c:5711 [inline] do_pte_missing+0x29d/0x3ba0 mm/memory.c:4234 handle_pte_fault mm/memory.c:6052 [inline] __handle_mm_fault+0x152a/0x2a50 mm/memory.c:6195 handle_mm_fault+0x589/0xd10 mm/memory.c:6364 do_user_addr_fault+0x60c/0x1370 arch/x86/mm/fault.c:1336 handle_page_fault arch/x86/mm/fault.c:1476 [inline] exc_page_fault+0x5c/0xb0 arch/x86/mm/fault.c:1532 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f7a23e61051 RSP: 002b:00007ffcf8215c50 EFLAGS: 00010202 RAX: 0000001b32e64000 RBX: 00007f7a24ce5720 RCX: 0000000000000003 RDX: 0000001b32e63fff RSI: 0000000000000008 RDI: 00007f7a24ce5720 RBP: 00007f7a241b6038 R08: 0000000000000000 R09: 0000000000000000 R10: 00007f7a24ce5700 R11: 0000000000000000 R12: 00000000fffffc03 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 INFO: task syz.1.1362:13473 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.1362 state:D stack:27784 pid:13473 tgid:13473 ppid:5865 task_flags:0x440040 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7058 io_schedule+0xbf/0x130 kernel/sched/core.c:7903 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:250 __wait_on_bit+0x65/0x180 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x93d/0x1320 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1241 __ext4_journal_get_write_access+0x6a/0x340 fs/ext4/ext4_jbd2.c:242 ext4_reserve_inode_write+0x1be/0x340 fs/ext4/inode.c:6326 __ext4_mark_inode_dirty+0x197/0x870 fs/ext4/inode.c:6501 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6538 __mark_inode_dirty+0x1ee/0xe40 fs/fs-writeback.c:2527 generic_update_time+0xcf/0xf0 fs/inode.c:2063 inode_update_time fs/inode.c:2076 [inline] __file_update_time fs/inode.c:2304 [inline] file_update_time+0x17d/0x1c0 fs/inode.c:2334 ext4_page_mkwrite+0x33d/0x1880 fs/ext4/inode.c:6704 do_page_mkwrite+0x174/0x380 mm/memory.c:3361 do_shared_fault mm/memory.c:5649 [inline] do_fault mm/memory.c:5711 [inline] do_pte_missing+0x29d/0x3ba0 mm/memory.c:4234 handle_pte_fault mm/memory.c:6052 [inline] __handle_mm_fault+0x152a/0x2a50 mm/memory.c:6195 handle_mm_fault+0x589/0xd10 mm/memory.c:6364 do_user_addr_fault+0x60c/0x1370 arch/x86/mm/fault.c:1336 handle_page_fault arch/x86/mm/fault.c:1476 [inline] exc_page_fault+0x5c/0xb0 arch/x86/mm/fault.c:1532 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f245566ed6a RSP: 002b:00007ffc515c0f30 EFLAGS: 00010202 RAX: 0000001b33124000 RBX: 00007f24564e5720 RCX: 0000001b33123ff8 RDX: 00000000003ffde8 RSI: 00000000003ffde8 RDI: 00007f24564e5700 RBP: ffffffff82319db7 R08: 00007f24559b6038 R09: 00007f24559a2000 R10: 00007f24551ff008 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000001 R14: ffffffff823194dd R15: 0000000000000001 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffffffff8e5c10a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff8e5c10a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #0: ffffffff8e5c10a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6775 3 locks held by syz-executor/5851: #0: ffff888031c37088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11b/0x530 mm/mmap_lock.c:147 #1: ffff88814d9e8520 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x174/0x380 mm/memory.c:3361 #2: ffff88814d9ec950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 fs/jbd2/transaction.c:444 3 locks held by syz.4.1360/13467: #0: ffff88807ad9b588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11b/0x530 mm/mmap_lock.c:147 #1: ffff88814d9e8520 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x174/0x380 mm/memory.c:3361 #2: ffff88814d9ec950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 fs/jbd2/transaction.c:444 3 locks held by syz.2.1361/13472: #0: ffff88806bb72088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11b/0x530 mm/mmap_lock.c:147 #1: ffff88814d9e8520 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x174/0x380 mm/memory.c:3361 #2: ffff88814d9ec950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 fs/jbd2/transaction.c:444 3 locks held by syz.1.1362/13473: #0: ffff888034ca9088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11b/0x530 mm/mmap_lock.c:147 #1: ffff88814d9e8520 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x174/0x380 mm/memory.c:3361 #2: ffff88814d9ec950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 fs/jbd2/transaction.c:444 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline] watchdog+0xf0e/0x1260 kernel/hung_task.c:491 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x5d4/0x6f0 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245