INFO: task syz.2.5292:15272 blocked for more than 430 seconds. Not tainted 6.12.0-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.5292 state:D stack:0 pid:15272 tgid:15272 ppid:6959 flags:0x00000001 Call trace: [<819c8d3c>] (__schedule) from [<819c9994>] (__schedule_loop kernel/sched/core.c:6770 [inline]) [<819c8d3c>] (__schedule) from [<819c9994>] (schedule+0x2c/0xfc kernel/sched/core.c:6785) r10:826048f8 r9:8404b000 r8:e05edbf0 r7:00000002 r6:826048fc r5:00000000 r4:8404b000 [<819c9968>] (schedule) from [<819c9a9c>] (io_schedule+0x38/0x48 kernel/sched/core.c:7577) r5:00000000 r4:8404b000 [<819c9a64>] (io_schedule) from [<819cb1c8>] (bit_wait_io+0x14/0x5c kernel/sched/wait_bit.c:209) r5:819cb1b4 r4:00000002 [<819cb1b4>] (bit_wait_io) from [<819ca068>] (__wait_on_bit+0x7c/0x164 kernel/sched/wait_bit.c:49) r5:819cb1b4 r4:e05edbd8 [<819c9fec>] (__wait_on_bit) from [<819ca1cc>] (out_of_line_wait_on_bit+0x7c/0xa0 kernel/sched/wait_bit.c:64) r10:82604d40 r9:8324d7e4 r8:83121c00 r7:000a853c r6:831151b0 r5:8324d7e0 r4:61c88647 [<819ca150>] (out_of_line_wait_on_bit) from [<806a4f04>] (wait_on_bit_io include/linux/wait_bit.h:101 [inline]) [<819ca150>] (out_of_line_wait_on_bit) from [<806a4f04>] (do_get_write_access+0x27c/0x494 fs/jbd2/transaction.c:1096) r4:830d0c40 [<806a4c88>] (do_get_write_access) from [<806a51b0>] (jbd2_journal_get_write_access+0x94/0xc8 fs/jbd2/transaction.c:1245) r10:82ebd000 r9:00000001 r8:000016c6 r7:830d0c40 r6:8324d7e0 r5:00000000 r4:831151b0 [<806a511c>] (jbd2_journal_get_write_access) from [<8061c3e0>] (__ext4_journal_get_write_access+0x38/0x1a4 fs/ext4/ext4_jbd2.c:239) r7:81a26048 r6:e05edd04 r5:83db2400 r4:831151b0 [<8061c3a8>] (__ext4_journal_get_write_access) from [<80640ab4>] (ext4_reserve_inode_write+0x64/0xb8 fs/ext4/inode.c:5830) r9:853e83c0 r8:80645d14 r7:831151b0 r6:e05edd04 r5:83096978 r4:00000000 [<80640a50>] (ext4_reserve_inode_write) from [<80640d48>] (__ext4_mark_inode_dirty+0x60/0x278 fs/ext4/inode.c:6004) r7:8404b000 r6:831151b0 r5:e05edd04 r4:83096978 [<80640ce8>] (__ext4_mark_inode_dirty) from [<80645d14>] (ext4_dirty_inode+0x60/0x7c fs/ext4/inode.c:6041) r10:e05edfb0 r9:853e83c0 r8:def9e280 r7:83db2400 r6:83096978 r5:83096978 r4:831151b0 [<80645cb4>] (ext4_dirty_inode) from [<8055ccfc>] (__mark_inode_dirty+0x54/0x558 fs/fs-writeback.c:2515) r5:00000008 r4:83096978 [<8055cca8>] (__mark_inode_dirty) from [<8053ed74>] (generic_update_time+0x44/0x4c fs/inode.c:2113) r9:853e83c0 r8:def9e280 r7:e05ede90 r6:83096978 r5:83096978 r4:00000006 [<8053ed30>] (generic_update_time) from [<8053ee28>] (inode_update_time fs/inode.c:2126 [inline]) [<8053ed30>] (generic_update_time) from [<8053ee28>] (__file_update_time fs/inode.c:2354 [inline]) [<8053ed30>] (generic_update_time) from [<8053ee28>] (file_update_time+0x7c/0x80 fs/inode.c:2384) r5:83501840 r4:00000000 [<8053edac>] (file_update_time) from [<8064606c>] (ext4_page_mkwrite+0xbc/0x660 fs/ext4/inode.c:6159) r7:e05ede90 r6:00000000 r5:83db2400 r4:83096978 [<80645fb0>] (ext4_page_mkwrite) from [<8048f264>] (do_page_mkwrite+0x54/0x10c mm/memory.c:3162) r10:e05edfb0 r9:84882700 r8:00000200 r7:00001255 r6:def9e280 r5:8404b000 r4:e05ede90 [<8048f210>] (do_page_mkwrite) from [<80495f40>] (do_shared_fault mm/memory.c:5373 [inline]) [<8048f210>] (do_page_mkwrite) from [<80495f40>] (do_fault mm/memory.c:5435 [inline]) [<8048f210>] (do_page_mkwrite) from [<80495f40>] (do_pte_missing mm/memory.c:3965 [inline]) [<8048f210>] (do_page_mkwrite) from [<80495f40>] (handle_pte_fault mm/memory.c:5766 [inline]) [<8048f210>] (do_page_mkwrite) from [<80495f40>] (__handle_mm_fault mm/memory.c:5909 [inline]) [<8048f210>] (do_page_mkwrite) from [<80495f40>] (handle_mm_fault+0xa5c/0x135c mm/memory.c:6077) r7:00000040 r6:2ea20000 r5:8404b000 r4:00001255 [<804954e4>] (handle_mm_fault) from [<802142b0>] (do_page_fault+0x1c8/0x3d8 arch/arm/mm/fault.c:328) r10:00000002 r9:84882700 r8:00000255 r7:8404b000 r6:00000a06 r5:2ea20000 r4:e05edfb0 [<802140e8>] (do_page_fault) from [<80214640>] (do_translation_fault+0xfc/0x12c arch/arm/mm/fault.c:475) r10:00000000 r9:7e86fac8 r8:80214544 r7:e05edfb0 r6:2ea20000 r5:00000a06 r4:8261d1ec [<80214544>] (do_translation_fault) from [<802146a8>] (do_DataAbort+0x38/0xa8 arch/arm/mm/fault.c:596) r9:7e86fac8 r8:80214544 r7:e05edfb0 r6:2ea20000 r5:00000a06 r4:8261d1ec [<80214670>] (do_DataAbort) from [<80200ebc>] (__dabt_usr+0x5c/0x60 arch/arm/kernel/entry-armv.S:433) Exception stack(0xe05edfb0 to 0xe05edff8) dfa0: 005ffdf0 001d88f8 00600000 00270000 dfc0: 00258000 002703b4 7e86f998 00000001 00000000 7e86fac8 00000000 000008de dfe0: 2ea20000 7e86f838 000004b4 0002503c 60000010 ffffffff r8:824b1044 r7:8404b000 r6:ffffffff r5:60000010 r4:0002503c INFO: task syz.1.5293:15273 blocked for more than 430 seconds. Not tainted 6.12.0-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.5293 state:D stack:0 pid:15273 tgid:15273 ppid:3404 flags:0x00000001 Call trace: [<819c8d3c>] (__schedule) from [<819c9994>] (__schedule_loop kernel/sched/core.c:6770 [inline]) [<819c8d3c>] (__schedule) from [<819c9994>] (schedule+0x2c/0xfc kernel/sched/core.c:6785) r10:826048f8 r9:84abbc00 r8:e05c1bf0 r7:00000002 r6:826048fc r5:00000000 r4:84abbc00 [<819c9968>] (schedule) from [<819c9a9c>] (io_schedule+0x38/0x48 kernel/sched/core.c:7577) r5:00000000 r4:84abbc00 [<819c9a64>] (io_schedule) from [<819cb1c8>] (bit_wait_io+0x14/0x5c kernel/sched/wait_bit.c:209) r5:819cb1b4 r4:00000002 [<819cb1b4>] (bit_wait_io) from [<819ca068>] (__wait_on_bit+0x7c/0x164 kernel/sched/wait_bit.c:49) r5:819cb1b4 r4:e05c1bd8 [<819c9fec>] (__wait_on_bit) from [<819ca1cc>] (out_of_line_wait_on_bit+0x7c/0xa0 kernel/sched/wait_bit.c:64) r10:82604d40 r9:8324d7e4 r8:83121c00 r7:000a855d r6:8324b600 r5:8324d7e0 r4:61c88647 [<819ca150>] (out_of_line_wait_on_bit) from [<806a4f04>] (wait_on_bit_io include/linux/wait_bit.h:101 [inline]) [<819ca150>] (out_of_line_wait_on_bit) from [<806a4f04>] (do_get_write_access+0x27c/0x494 fs/jbd2/transaction.c:1096) r4:830d0c40 [<806a4c88>] (do_get_write_access) from [<806a51b0>] (jbd2_journal_get_write_access+0x94/0xc8 fs/jbd2/transaction.c:1245) r10:82ebd000 r9:00000001 r8:000016c6 r7:830d0c40 r6:8324d7e0 r5:00000000 r4:8324b600 [<806a511c>] (jbd2_journal_get_write_access) from [<8061c3e0>] (__ext4_journal_get_write_access+0x38/0x1a4 fs/ext4/ext4_jbd2.c:239) r7:81a26048 r6:e05c1d04 r5:83db2400 r4:8324b600 [<8061c3a8>] (__ext4_journal_get_write_access) from [<80640ab4>] (ext4_reserve_inode_write+0x64/0xb8 fs/ext4/inode.c:5830) r9:853e8720 r8:80645d14 r7:8324b600 r6:e05c1d04 r5:83096fb8 r4:00000000 [<80640a50>] (ext4_reserve_inode_write) from [<80640d48>] (__ext4_mark_inode_dirty+0x60/0x278 fs/ext4/inode.c:6004) r7:84abbc00 r6:8324b600 r5:e05c1d04 r4:83096fb8 [<80640ce8>] (__ext4_mark_inode_dirty) from [<80645d14>] (ext4_dirty_inode+0x60/0x7c fs/ext4/inode.c:6041) r10:e05c1fb0 r9:853e8720 r8:def9a380 r7:83db2400 r6:83096fb8 r5:83096fb8 r4:8324b600 [<80645cb4>] (ext4_dirty_inode) from [<8055ccfc>] (__mark_inode_dirty+0x54/0x558 fs/fs-writeback.c:2515) r5:00000008 r4:83096fb8 [<8055cca8>] (__mark_inode_dirty) from [<8053ed74>] (generic_update_time+0x44/0x4c fs/inode.c:2113) r9:853e8720 r8:def9a380 r7:e05c1e90 r6:83096fb8 r5:83096fb8 r4:00000006 [<8053ed30>] (generic_update_time) from [<8053ee28>] (inode_update_time fs/inode.c:2126 [inline]) [<8053ed30>] (generic_update_time) from [<8053ee28>] (__file_update_time fs/inode.c:2354 [inline]) [<8053ed30>] (generic_update_time) from [<8053ee28>] (file_update_time+0x7c/0x80 fs/inode.c:2384) r5:842add80 r4:00000000 [<8053edac>] (file_update_time) from [<8064606c>] (ext4_page_mkwrite+0xbc/0x660 fs/ext4/inode.c:6159) r7:e05c1e90 r6:00000000 r5:83db2400 r4:83096fb8 [<80645fb0>] (ext4_page_mkwrite) from [<8048f264>] (do_page_mkwrite+0x54/0x10c mm/memory.c:3162) r10:e05c1fb0 r9:85112a00 r8:00000200 r7:00001255 r6:def9a380 r5:84abbc00 r4:e05c1e90 [<8048f210>] (do_page_mkwrite) from [<80495f40>] (do_shared_fault mm/memory.c:5373 [inline]) [<8048f210>] (do_page_mkwrite) from [<80495f40>] (do_fault mm/memory.c:5435 [inline]) [<8048f210>] (do_page_mkwrite) from [<80495f40>] (do_pte_missing mm/memory.c:3965 [inline]) [<8048f210>] (do_page_mkwrite) from [<80495f40>] (handle_pte_fault mm/memory.c:5766 [inline]) [<8048f210>] (do_page_mkwrite) from [<80495f40>] (__handle_mm_fault mm/memory.c:5909 [inline]) [<8048f210>] (do_page_mkwrite) from [<80495f40>] (handle_mm_fault+0xa5c/0x135c mm/memory.c:6077) r7:00000040 r6:30520000 r5:84abbc00 r4:00001255 [<804954e4>] (handle_mm_fault) from [<802142b0>] (do_page_fault+0x1c8/0x3d8 arch/arm/mm/fault.c:328) r10:00000002 r9:85112a00 r8:00000255 r7:84abbc00 r6:00000a06 r5:30520000 r4:e05c1fb0 [<802140e8>] (do_page_fault) from [<80214640>] (do_translation_fault+0xfc/0x12c arch/arm/mm/fault.c:475) r10:00000000 r9:7e8ecac8 r8:80214544 r7:e05c1fb0 r6:30520000 r5:00000a06 r4:8261d1ec [<80214544>] (do_translation_fault) from [<802146a8>] (do_DataAbort+0x38/0xa8 arch/arm/mm/fault.c:596) r9:7e8ecac8 r8:80214544 r7:e05c1fb0 r6:30520000 r5:00000a06 r4:8261d1ec [<80214670>] (do_DataAbort) from [<80200ebc>] (__dabt_usr+0x5c/0x60 arch/arm/kernel/entry-armv.S:433) Exception stack(0xe05c1fb0 to 0xe05c1ff8) 1fa0: 005ffdf0 001d88f8 00600000 00270000 1fc0: 00258000 002703b4 7e8ec998 00000001 00000000 7e8ecac8 00000000 0000087f 1fe0: 30520000 7e8ec838 000004b4 0002503c 60000010 ffffffff r8:824b1044 r7:84abbc00 r6:ffffffff r5:60000010 r4:0002503c NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.12.0-syzkaller #0 Hardware name: ARM-Versatile Express Call trace: [<819a6c18>] (dump_backtrace) from [<819a6d14>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:00000000 r6:00000113 r5:60000193 r4:8203faa4 [<819a6cfc>] (show_stack) from [<819c4e24>] (__dump_stack lib/dump_stack.c:94 [inline]) [<819a6cfc>] (show_stack) from [<819c4e24>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:120) [<819c4db4>] (dump_stack_lvl) from [<819c4e48>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r5:00000001 r4:00000001 [<819c4e30>] (dump_stack) from [<81993ed0>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<81993d70>] (nmi_cpu_backtrace) from [<8199401c>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000001 r6:8260c610 r5:8261af4c r4:ffffffff [<81993eec>] (nmi_trigger_cpumask_backtrace) from [<80210408>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851) r9:000b2ec0 r8:828b7cfc r7:8260c770 r6:00007f32 r5:8261b508 r4:839aa01c [<802103f0>] (arch_trigger_cpumask_backtrace) from [<80359154>] (trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]) [<802103f0>] (arch_trigger_cpumask_backtrace) from [<80359154>] (check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]) [<802103f0>] (arch_trigger_cpumask_backtrace) from [<80359154>] (watchdog+0x498/0x5b8 kernel/hung_task.c:379) [<80358cbc>] (watchdog) from [<80270248>] (kthread+0x104/0x134 kernel/kthread.c:389) r10:00000000 r9:df819e58 r8:82cd0880 r7:00000000 r6:80358cbc r5:82e46000 r4:82fa3580 [<80270144>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80270144 r4:82fa3580 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 10974 Comm: syz.1.3154 Not tainted 6.12.0-syzkaller #0 Hardware name: ARM-Versatile Express PC is at 0x18b8c LR is at 0x18b8c pc : [<00018b8c>] lr : [<00018b8c>] psr: 20000010 sp : 20002ed0 ip : 20002ed0 fp : 76b9a0bc r10: 003d0f00 r9 : 00006364 r8 : 00000000 r7 : 00000000 r6 : 00000000 r5 : 00000000 r4 : 00000000 r3 : 00000000 r2 : 000001e4 r1 : 00000004 r0 : ffffffff Flags: nzCv IRQs on FIQs on Mode USER_32 ISA ARM Segment user Control: 30c5387d Table: 851b23c0 DAC: fffffffd Call trace: invalid frame pointer 0x76b9a0bc