INFO: task syz.5.235:7896 blocked for more than 143 seconds.
Tainted: G W 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.5.235 state:D stack:14656 pid:7896 tgid:7895 ppid:6108 task_flags:0x400140 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5357 [inline]
__schedule+0x16f3/0x4c20 kernel/sched/core.c:6961
__schedule_loop kernel/sched/core.c:7043 [inline]
rt_mutex_schedule+0x77/0xf0 kernel/sched/core.c:7339
rt_mutex_slowlock_block kernel/locking/rtmutex.c:1647 [inline]
__rt_mutex_slowlock kernel/locking/rtmutex.c:1721 [inline]
__rt_mutex_slowlock_locked+0x1e04/0x25e0 kernel/locking/rtmutex.c:1760
rt_mutex_slowlock+0xb5/0x160 kernel/locking/rtmutex.c:1800
__rt_mutex_lock kernel/locking/rtmutex.c:1815 [inline]
rwbase_write_lock+0x14f/0x750 kernel/locking/rwbase_rt.c:244
inode_lock include/linux/fs.h:869 [inline]
bch2_direct_write+0x19b/0x2cf0 fs/bcachefs/fs-io-direct.c:613
bch2_write_iter+0x192/0x2ba0 fs/bcachefs/fs-io-buffered.c:1064
iter_file_splice_write+0x9cb/0x10b0 fs/splice.c:738
do_splice_from fs/splice.c:935 [inline]
direct_splice_actor+0x104/0x160 fs/splice.c:1158
splice_direct_to_actor+0x5b3/0xcd0 fs/splice.c:1102
do_splice_direct_actor fs/splice.c:1201 [inline]
do_splice_direct+0x187/0x270 fs/splice.c:1227
do_sendfile+0x4ec/0x7f0 fs/read_write.c:1370
__do_sys_sendfile64 fs/read_write.c:1431 [inline]
__se_sys_sendfile64+0x13e/0x190 fs/read_write.c:1417
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f374335ebe9
RSP: 002b:00007f37415c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007f3743585fa0 RCX: 00007f374335ebe9
RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007
RBP: 00007f37433e1e19 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000020fffe82 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f3743586038 R14: 00007f3743585fa0 R15: 00007ffeb4b61808
INFO: task syz.5.235:7942 blocked for more than 143 seconds.
Tainted: G W 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.5.235 state:D stack:21896 pid:7942 tgid:7895 ppid:6108 task_flags:0x400040 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5357 [inline]
__schedule+0x16f3/0x4c20 kernel/sched/core.c:6961
__schedule_loop kernel/sched/core.c:7043 [inline]
schedule+0x165/0x360 kernel/sched/core.c:7058
__bch2_two_state_lock+0x1ea/0x370 fs/bcachefs/two_state_shared_lock.c:7
bch2_two_state_lock fs/bcachefs/two_state_shared_lock.h:55 [inline]
bch2_page_fault+0x2fc/0x7a0 fs/bcachefs/fs-io-pagecache.c:592
__do_fault+0x135/0x390 mm/memory.c:5152
do_shared_fault mm/memory.c:5637 [inline]
do_fault mm/memory.c:5711 [inline]
do_pte_missing mm/memory.c:4234 [inline]
handle_pte_fault mm/memory.c:6052 [inline]
__handle_mm_fault mm/memory.c:6195 [inline]
handle_mm_fault+0x117f/0x3400 mm/memory.c:6364
faultin_page mm/gup.c:1144 [inline]
__get_user_pages+0x16e4/0x2b60 mm/gup.c:1446
__get_user_pages_locked mm/gup.c:1772 [inline]
__gup_longterm_locked+0x110c/0x1660 mm/gup.c:2488
gup_fast_fallback+0x1deb/0x1f90 mm/gup.c:3232
iov_iter_extract_user_pages lib/iov_iter.c:1846 [inline]
iov_iter_extract_pages+0x35a/0x5e0 lib/iov_iter.c:1909
__bio_iov_iter_get_pages block/bio.c:1237 [inline]
bio_iov_iter_get_pages+0x49b/0x11c0 block/bio.c:1336
bch2_direct_IO_read fs/bcachefs/fs-io-direct.c:148 [inline]
bch2_read_iter+0x9ba/0x1450 fs/bcachefs/fs-io-direct.c:215
new_sync_read fs/read_write.c:491 [inline]
vfs_read+0x560/0xa30 fs/read_write.c:572
ksys_read+0x14b/0x260 fs/read_write.c:715
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f374335ebe9
RSP: 002b:00007f37415a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007f3743586090 RCX: 00007f374335ebe9
RDX: 0000000000001000 RSI: 0000200000001400 RDI: 0000000000000009
RBP: 00007f37433e1e19 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f3743586128 R14: 00007f3743586090 R15: 00007ffeb4b61808
INFO: lockdep is turned off.
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G W 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT_{RT,(full)}
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
Call Trace:
dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline]
watchdog+0xf93/0xfe0 kernel/hung_task.c:491
kthread+0x711/0x8a0 kernel/kthread.c:463
ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 8177 Comm: syz-executor Tainted: G W 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT_{RT,(full)}
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x80 kernel/kcov.c:210
Code: 89 fb e8 23 00 00 00 48 8b 3d b4 99 66 0b 48 89 de 5b e9 53 9c 54 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 b0 f5 91 65 8b 35 d8 54
RSP: 0018:ffffc90004ee7b88 EFLAGS: 00000293
RAX: ffffffff84754b7d RBX: dffffc0000000000 RCX: ffff88802d385940
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
RBP: ffff888026a62490 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000100 R11: ffffffff8475a060 R12: 0000000000000000
R13: 0000000000000000 R14: ffff888032f9e980 R15: 0000000000000002
FS: 00005555575bf500(0000) GS:ffff8881268c5000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffa34ed6038 CR3: 0000000070fca000 CR4: 00000000003526f0
Call Trace:
tomoyo_check_acl+0x196/0x400 security/tomoyo/domain.c:173
tomoyo_path_number_perm+0x2dc/0x5a0 security/tomoyo/file.c:733
security_file_ioctl+0xcb/0x2d0 security/security.c:2943
__do_sys_ioctl fs/ioctl.c:592 [inline]
__se_sys_ioctl+0x47/0x170 fs/ioctl.c:584
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f660091e7eb
Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
RSP: 002b:00007fff836b84f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 000000000000362a RCX: 00007f660091e7eb
RDX: 00007fff836b8568 RSI: 0000000040086602 RDI: 0000000000000006
RBP: 00007fff836b8600 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff836b96f0
R13: 00007f66009a1c05 R14: 00005555575bf4a8 R15: 0000000000000006