INFO: task kworker/u8:1:12 blocked for more than 143 seconds. Not tainted 6.12.0-syzkaller-01892-g8f7c8b88bda4 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:1 state:D stack:23920 pid:12 tgid:12 ppid:2 flags:0x00004000 Workqueue: writeback wb_workfn (flush-8:0) Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0xe5a/0x5ae0 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6848 io_schedule+0xbf/0x130 kernel/sched/core.c:7681 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247 __wait_on_bit_lock+0x112/0x1a0 kernel/sched/wait_bit.c:90 out_of_line_wait_on_bit_lock+0xda/0x110 kernel/sched/wait_bit.c:117 wait_on_bit_lock_io include/linux/wait_bit.h:221 [inline] __lock_buffer+0x67/0x70 fs/buffer.c:71 lock_buffer include/linux/buffer_head.h:426 [inline] do_get_write_access+0x8c3/0x1270 fs/jbd2/transaction.c:972 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1245 __ext4_journal_get_write_access+0x6a/0x390 fs/ext4/ext4_jbd2.c:239 ext4_mb_mark_context+0x176/0xdb0 fs/ext4/mballoc.c:4003 ext4_mb_mark_diskspace_used+0x467/0x8c0 fs/ext4/mballoc.c:4133 ext4_mb_new_blocks+0xa33/0x4e80 fs/ext4/mballoc.c:6235 ext4_ext_map_blocks+0x1bca/0x5a30 fs/ext4/extents.c:4379 ext4_map_create_blocks fs/ext4/inode.c:516 [inline] ext4_map_blocks+0x457/0x1370 fs/ext4/inode.c:702 mpage_map_one_extent fs/ext4/inode.c:2219 [inline] mpage_map_and_submit_extent fs/ext4/inode.c:2272 [inline] ext4_do_writepages+0x198c/0x32f0 fs/ext4/inode.c:2735 ext4_writepages+0x303/0x730 fs/ext4/inode.c:2824 do_writepages+0x1b3/0x820 mm/page-writeback.c:2683 __writeback_single_inode+0x166/0xfa0 fs/fs-writeback.c:1680 writeback_sb_inodes+0x603/0xfa0 fs/fs-writeback.c:1976 __writeback_inodes_wb+0xff/0x2e0 fs/fs-writeback.c:2047 wb_writeback+0x72d/0xb60 fs/fs-writeback.c:2158 wb_check_old_data_flush fs/fs-writeback.c:2262 [inline] wb_do_writeback fs/fs-writeback.c:2315 [inline] wb_workfn+0x8c3/0xbc0 fs/fs-writeback.c:2343 process_one_work+0x958/0x1b30 kernel/workqueue.c:3229 process_scheduled_works kernel/workqueue.c:3310 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task jbd2/sda1-8:5181 blocked for more than 143 seconds. Not tainted 6.12.0-syzkaller-01892-g8f7c8b88bda4 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:jbd2/sda1-8 state:D stack:26432 pid:5181 tgid:5181 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0xe5a/0x5ae0 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6848 jbd2_journal_wait_updates+0x128/0x240 fs/jbd2/transaction.c:847 jbd2_journal_commit_transaction+0x87d/0x6ac0 fs/jbd2/commit.c:454 kjournald2+0x1f8/0x760 fs/jbd2/journal.c:201 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task syz-executor:5831 blocked for more than 144 seconds. Not tainted 6.12.0-syzkaller-01892-g8f7c8b88bda4 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:23424 pid:5831 tgid:5831 ppid:5829 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0xe5a/0x5ae0 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6848 wait_transaction_locked+0x1a2/0x230 fs/jbd2/transaction.c:156 add_transaction_credits+0x111/0xcd0 fs/jbd2/transaction.c:226 start_this_handle+0x3d2/0x1430 fs/jbd2/transaction.c:407 jbd2__journal_start+0x394/0x6a0 fs/jbd2/transaction.c:505 __ext4_journal_start_sb+0x358/0x660 fs/ext4/ext4_jbd2.c:112 __ext4_journal_start fs/ext4/ext4_jbd2.h:326 [inline] ext4_dirty_inode+0xa1/0x130 fs/ext4/inode.c:6038 __mark_inode_dirty+0x1f6/0xe60 fs/fs-writeback.c:2515 generic_update_time+0xcf/0xf0 fs/inode.c:2113 inode_update_time fs/inode.c:2126 [inline] __file_update_time fs/inode.c:2354 [inline] file_update_time+0x17d/0x1c0 fs/inode.c:2384 ext4_page_mkwrite+0x368/0x1760 fs/ext4/inode.c:6159 do_page_mkwrite+0x177/0x380 mm/memory.c:3162 wp_page_shared mm/memory.c:3563 [inline] do_wp_page+0xcbf/0x4930 mm/memory.c:3713 handle_pte_fault mm/memory.c:5782 [inline] __handle_mm_fault+0x1a93/0x2a10 mm/memory.c:5909 handle_mm_fault+0x3fa/0xaa0 mm/memory.c:6077 do_user_addr_fault+0x60d/0x13f0 arch/x86/mm/fault.c:1338 handle_page_fault arch/x86/mm/fault.c:1481 [inline] exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1539 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f58b44678fc RSP: 002b:00007ffdf90a3910 EFLAGS: 00010202 RAX: 00007f58b22e0000 RBX: 000055556bc535e0 RCX: 0000000000000001 RDX: 1ffffffff08e82c1 RSI: 000055556bcc2b18 RDI: 0000000000000002 RBP: 00007ffdf90a3e10 R08: 000055556bcc2b20 R09: 0000000000001058 R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffdf90a3c60 R13: 0000000000000004 R14: 00007ffdf90a3980 R15: 00007ffdf90a3a50 INFO: task syz.4.1145:12830 blocked for more than 144 seconds. Not tainted 6.12.0-syzkaller-01892-g8f7c8b88bda4 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.1145 state:D stack:25968 pid:12830 tgid:12823 ppid:6753 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0xe5a/0x5ae0 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6848 io_schedule+0xbf/0x130 kernel/sched/core.c:7681 folio_wait_bit_common+0x3d8/0x9b0 mm/filemap.c:1309 folio_wait_writeback+0x3c/0x90 mm/page-writeback.c:3189 mpage_prepare_extent_to_map+0x533/0x1470 fs/ext4/inode.c:2496 ext4_do_writepages+0x974/0x32f0 fs/ext4/inode.c:2688 ext4_writepages+0x303/0x730 fs/ext4/inode.c:2824 do_writepages+0x1b3/0x820 mm/page-writeback.c:2683 filemap_fdatawrite_wbc mm/filemap.c:398 [inline] filemap_fdatawrite_wbc+0x104/0x160 mm/filemap.c:388 __filemap_fdatawrite_range+0xb3/0xf0 mm/filemap.c:431 file_write_and_wait_range+0xca/0x140 mm/filemap.c:788 ext4_sync_file+0x290/0xf30 fs/ext4/fsync.c:158 vfs_fsync_range+0x136/0x220 fs/sync.c:187 __do_sys_msync+0x3c6/0x5b0 mm/msync.c:96 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f39fe37e819 RSP: 002b:00007f39ff158038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a RAX: ffffffffffffffda RBX: 00007f39fe536080 RCX: 00007f39fe37e819 RDX: 0000000400000004 RSI: 0080100000000002 RDI: 000000001ffff000 RBP: 00007f39fe3f175e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000001 R14: 00007f39fe536080 R15: 00007fffa1eb99f8 INFO: task syz-executor:12844 blocked for more than 144 seconds. Not tainted 6.12.0-syzkaller-01892-g8f7c8b88bda4 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:25808 pid:12844 tgid:12844 ppid:5831 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0xe5a/0x5ae0 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6848 io_schedule+0xbf/0x130 kernel/sched/core.c:7681 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247 __wait_on_bit_lock+0x112/0x1a0 kernel/sched/wait_bit.c:90 out_of_line_wait_on_bit_lock+0xda/0x110 kernel/sched/wait_bit.c:117 wait_on_bit_lock_io include/linux/wait_bit.h:221 [inline] __lock_buffer+0x67/0x70 fs/buffer.c:71 lock_buffer include/linux/buffer_head.h:426 [inline] do_get_write_access+0x8c3/0x1270 fs/jbd2/transaction.c:972 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1245 __ext4_journal_get_write_access+0x6a/0x390 fs/ext4/ext4_jbd2.c:239 __ext4_new_inode+0x1739/0x4e80 fs/ext4/ialloc.c:1130 ext4_mkdir+0x283/0xb70 fs/ext4/namei.c:3024 vfs_mkdir+0x57d/0x860 fs/namei.c:4311 do_mkdirat+0x301/0x3a0 fs/namei.c:4334 __do_sys_mkdir fs/namei.c:4354 [inline] __se_sys_mkdir fs/namei.c:4352 [inline] __x64_sys_mkdir+0xef/0x140 fs/namei.c:4352 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f9c5497d087 RSP: 002b:00007ffe3529d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 RAX: ffffffffffffffda RBX: 00007ffe3529d2b2 RCX: 00007f9c5497d087 RDX: 0000000009e63f64 RSI: 00000000000001c0 RDI: 00007ffe3529d2a0 RBP: f49998db0aa753ff R08: 0000000000000004 R09: 0000000000000001 R10: 0000000000000001 R11: 0000000000000246 R12: 8421084210842109 R13: 00007ffe3529d2b2 R14: 00007f9c54a12f00 R15: 0000000009e63f64 Showing all locks held in the system: 6 locks held by kworker/u8:1/12: #0: ffff888143afb948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 kernel/workqueue.c:3204 #1: ffffc90000117d80 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 kernel/workqueue.c:3205 #2: ffff888033b500e0 (&type->s_umount_key#33){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 fs/super.c:562 #3: ffff888033b52b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b3/0x820 mm/page-writeback.c:2683 #4: ffff888033b54958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 fs/jbd2/transaction.c:448 #5: ffff88807b120c70 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x352/0x1370 fs/ext4/inode.c:701 1 lock held by khungtaskd/30: #0: ffffffff8ddba680 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #0: ffffffff8ddba680 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8ddba680 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 kernel/locking/lockdep.c:6744 1 lock held by klogd/5208: 2 locks held by getty/5600: #0: ffff888030e8b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 drivers/tty/n_tty.c:2211 2 locks held by syz-executor/5831: #0: ffff888027699730 (&vma->vm_lock->lock){++++}-{4:4}, at: vma_start_read include/linux/mm.h:716 [inline] #0: ffff888027699730 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 mm/memory.c:6243 #1: ffff888033b50518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 mm/memory.c:3162 1 lock held by syz.4.1145/12830: #0: ffff888033b52b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b3/0x820 mm/page-writeback.c:2683 3 locks held by syz-executor/12844: #0: ffff888033b50420 (sb_writers#4){.+.+}-{0:0}, at: filename_create+0x10d/0x530 fs/namei.c:4073 #1: ffff888068b65d20 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:853 [inline] #1: ffff888068b65d20 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1c2/0x530 fs/namei.c:4080 #2: ffff888033b54958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 fs/jbd2/transaction.c:448 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-01892-g8f7c8b88bda4 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline] watchdog+0xf0c/0x1240 kernel/hung_task.c:379 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 2972 Comm: kworker/u8:7 Not tainted 6.12.0-syzkaller-01892-g8f7c8b88bda4 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:check_kcov_mode kernel/kcov.c:183 [inline] RIP: 0010:write_comp_data+0x18/0x90 kernel/kcov.c:246 Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 af 17 77 7e 65 8b 05 b0 17 77 7e 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 RSP: 0018:ffffc9000bfdf660 EFLAGS: 00000206 RAX: 0000000080000000 RBX: 000000000000001e RCX: ffffffff8a94d204 RDX: ffff88802feb8000 RSI: 000000000000009f RDI: 0000000000000001 RBP: ffffffff8c9e5d80 R08: 0000000000000001 R09: 000000000000009f R10: 00000000000000dd R11: 000000000000004f R12: 00000000000000dd R13: 0000000000000001 R14: 000000000000002b R15: ffff88806df50c94 FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055ee43784038 CR3: 000000000db7e000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __sanitizer_cov_trace_switch+0x54/0x90 kernel/kcov.c:351 _ieee802_11_parse_elems_full+0x744/0x4300 net/mac80211/parse.c:351 ieee802_11_parse_elems_full+0x8bc/0x1630 net/mac80211/parse.c:984 ieee802_11_parse_elems_crc net/mac80211/ieee80211_i.h:2385 [inline] ieee802_11_parse_elems net/mac80211/ieee80211_i.h:2392 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1575 [inline] ieee80211_ibss_rx_queued_mgmt+0xc54/0x3030 net/mac80211/ibss.c:1606 ieee80211_iface_process_skb net/mac80211/iface.c:1603 [inline] ieee80211_iface_work+0xc0b/0xf00 net/mac80211/iface.c:1657 cfg80211_wiphy_work+0x3d9/0x550 net/wireless/core.c:440 process_one_work+0x958/0x1b30 kernel/workqueue.c:3229 process_scheduled_works kernel/workqueue.c:3310 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244