INFO: task jbd2/sda1-8:4930 blocked in I/O wait for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:jbd2/sda1-8 state:D stack:24952 task:jbd2/sda1-8 state:D stack:24952 pid:4930 tgid:4930 ppid:2 task_flags:0x240040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5526 [inline] __schedule+0x1259/0x6920 kernel/sched/core.c:7276 __schedule_loop kernel/sched/core.c:7353 [inline] schedule+0xdd/0x2c0 kernel/sched/core.c:7368 io_schedule+0x8a/0xf0 kernel/sched/core.c:8212 bit_wait_io+0xd/0xe0 kernel/sched/wait_bit.c:258 __wait_on_bit+0x65/0x180 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0xdc/0x110 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:106 [inline] __wait_on_buffer+0x64/0x70 fs/buffer.c:118 wait_on_buffer include/linux/buffer_head.h:418 [inline] jbd2_journal_commit_transaction+0x37ef/0x6700 fs/jbd2/commit.c:834 kjournald2+0x200/0x760 fs/jbd2/journal.c:200 kthread+0x373/0x450 kernel/kthread.c:436 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task syz-executor:5586 blocked in I/O wait for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:22952 pid:5586 tgid:5586 ppid:5585 task_flags:0x440100 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5526 [inline] __schedule+0x1259/0x6920 kernel/sched/core.c:7276 __schedule_loop kernel/sched/core.c:7353 [inline] schedule+0xdd/0x2c0 kernel/sched/core.c:7368 io_schedule+0x8a/0xf0 kernel/sched/core.c:8212 bit_wait_io+0xd/0xe0 kernel/sched/wait_bit.c:258 __wait_on_bit+0x65/0x180 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0xdc/0x110 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:106 [inline] do_get_write_access+0x836/0x11e0 fs/jbd2/transaction.c:1113 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1263 __ext4_journal_get_write_access+0x277/0x380 fs/ext4/ext4_jbd2.c:249 ext4_reserve_inode_write+0x1b7/0x330 fs/ext4/inode.c:6509 __ext4_mark_inode_dirty+0x18f/0x910 fs/ext4/inode.c:6694 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6731 __mark_inode_dirty+0x1f3/0x16e0 fs/fs-writeback.c:2729 generic_update_time fs/inode.c:2253 [inline] file_update_time_flags+0x49c/0x520 fs/inode.c:2483 ext4_page_mkwrite+0x324/0x1860 fs/ext4/inode.c:6897 do_page_mkwrite+0x17a/0x440 mm/memory.c:3816 wp_page_shared mm/memory.c:4217 [inline] do_wp_page+0x9ed/0x45c0 mm/memory.c:4440 handle_pte_fault mm/memory.c:6582 [inline] __handle_mm_fault+0x1cd2/0x2f60 mm/memory.c:6707 handle_mm_fault+0x363/0xa20 mm/memory.c:6876 do_user_addr_fault+0x59c/0x12f0 arch/x86/mm/fault.c:1343 handle_page_fault arch/x86/mm/fault.c:1483 [inline] exc_page_fault+0x6f/0xd0 arch/x86/mm/fault.c:1536 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595 RIP: 0033:0x7f451c07c6e2 RSP: 002b:00007ffd33bb85e0 EFLAGS: 00010202 RAX: 00007f451a094000 RBX: 000055558f2cd2f0 RCX: 0000000000000004 RDX: 0000000000000cdf RSI: 000055558f2d9648 RDI: 0000000000000010 RBP: 00007ffd33bb8ae0 R08: 000055558f2d9648 R09: 00000000000000a0 R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd33bb8920 R13: 00007ffd33bb8710 R14: 585858582e7a7973 R15: 00007ffd33bb8660 INFO: task syz.5.4464:22029 blocked in I/O wait for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.5.4464 state:D stack:26056 pid:22029 tgid:22029 ppid:21678 task_flags:0x440040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5526 [inline] __schedule+0x1259/0x6920 kernel/sched/core.c:7276 __schedule_loop kernel/sched/core.c:7353 [inline] schedule+0xdd/0x2c0 kernel/sched/core.c:7368 io_schedule+0x8a/0xf0 kernel/sched/core.c:8212 bit_wait_io+0xd/0xe0 kernel/sched/wait_bit.c:258 __wait_on_bit+0x65/0x180 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0xdc/0x110 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:106 [inline] do_get_write_access+0x836/0x11e0 fs/jbd2/transaction.c:1113 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1263 __ext4_journal_get_write_access+0x277/0x380 fs/ext4/ext4_jbd2.c:249 ext4_reserve_inode_write+0x1b7/0x330 fs/ext4/inode.c:6509 __ext4_mark_inode_dirty+0x18f/0x910 fs/ext4/inode.c:6694 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6731 __mark_inode_dirty+0x1f3/0x16e0 fs/fs-writeback.c:2729 generic_update_time fs/inode.c:2253 [inline] file_update_time_flags+0x49c/0x520 fs/inode.c:2483 ext4_page_mkwrite+0x324/0x1860 fs/ext4/inode.c:6897 do_page_mkwrite+0x17a/0x440 mm/memory.c:3816 do_shared_fault mm/memory.c:6076 [inline] do_fault+0x659/0x1830 mm/memory.c:6138 do_pte_missing mm/memory.c:4700 [inline] handle_pte_fault mm/memory.c:6558 [inline] __handle_mm_fault+0x150b/0x2f60 mm/memory.c:6707 handle_mm_fault+0x363/0xa20 mm/memory.c:6876 do_user_addr_fault+0x59c/0x12f0 arch/x86/mm/fault.c:1343 handle_page_fault arch/x86/mm/fault.c:1483 [inline] exc_page_fault+0x6f/0xd0 arch/x86/mm/fault.c:1536 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595 RIP: 0033:0x7fa31d072809 RSP: 002b:00007ffc7d90db10 EFLAGS: 00010202 RAX: 0000001b2f124000 RBX: 0000000000000000 RCX: 00000000003ffde8 RDX: 0000001b2f123ffc RSI: 00000000003ffde8 RDI: 00007fa31df55700 RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fa31d412000 R10: 00007fa31df55700 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000018c9a R14: ffffffff81af6556 R15: 00007fa31df55720 INFO: task syz.0.4468:22046 blocked in I/O wait for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.4468 state:D stack:27384 pid:22046 tgid:22046 ppid:5597 task_flags:0x440040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5526 [inline] __schedule+0x1259/0x6920 kernel/sched/core.c:7276 __schedule_loop kernel/sched/core.c:7353 [inline] schedule+0xdd/0x2c0 kernel/sched/core.c:7368 io_schedule+0x8a/0xf0 kernel/sched/core.c:8212 bit_wait_io+0xd/0xe0 kernel/sched/wait_bit.c:258 __wait_on_bit+0x65/0x180 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0xdc/0x110 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:106 [inline] do_get_write_access+0x836/0x11e0 fs/jbd2/transaction.c:1113 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1263 __ext4_journal_get_write_access+0x277/0x380 fs/ext4/ext4_jbd2.c:249 ext4_reserve_inode_write+0x1b7/0x330 fs/ext4/inode.c:6509 __ext4_mark_inode_dirty+0x18f/0x910 fs/ext4/inode.c:6694 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6731 __mark_inode_dirty+0x1f3/0x16e0 fs/fs-writeback.c:2729 generic_update_time fs/inode.c:2253 [inline] touch_atime+0x65f/0x770 fs/inode.c:2328 file_accessed include/linux/fs.h:2277 [inline] ext4_file_mmap_prepare+0x56d/0x670 fs/ext4/file.c:901 vfs_mmap_prepare include/linux/fs.h:2069 [inline] call_mmap_prepare mm/vma.c:2776 [inline] __mmap_region+0xeb2/0x32c0 mm/vma.c:2863 mmap_region+0x5a8/0x6d0 mm/vma.c:2964 do_mmap+0x12c7/0x1c30 mm/mmap.c:573 vm_mmap_pgoff+0x28d/0x470 mm/util.c:581 ksys_mmap_pgoff+0x3cb/0x610 mm/mmap.c:619 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:89 [inline] __se_sys_mmap arch/x86/kernel/sys_x86_64.c:82 [inline] __x64_sys_mmap+0x125/0x190 arch/x86/kernel/sys_x86_64.c:82 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe95559dec2 RSP: 002b:00007ffc1150d158 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 0000001b32464000 RCX: 00007fe95559dec2 RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b32464000 RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 R10: 0000000000100001 R11: 0000000000000206 R12: 00000000000003a9 R13: 00000000000927c0 R14: 0000000000137ac2 R15: 00007ffc1150d430 INFO: task syz.3.4469:22047 blocked in I/O wait for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.4469 state:D stack:26888 pid:22047 tgid:22047 ppid:5598 task_flags:0x440040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5526 [inline] __schedule+0x1259/0x6920 kernel/sched/core.c:7276 __schedule_loop kernel/sched/core.c:7353 [inline] schedule+0xdd/0x2c0 kernel/sched/core.c:7368 io_schedule+0x8a/0xf0 kernel/sched/core.c:8212 bit_wait_io+0xd/0xe0 kernel/sched/wait_bit.c:258 __wait_on_bit+0x65/0x180 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0xdc/0x110 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:106 [inline] do_get_write_access+0x836/0x11e0 fs/jbd2/transaction.c:1113 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1263 __ext4_journal_get_write_access+0x277/0x380 fs/ext4/ext4_jbd2.c:249 ext4_reserve_inode_write+0x1b7/0x330 fs/ext4/inode.c:6509 __ext4_mark_inode_dirty+0x18f/0x910 fs/ext4/inode.c:6694 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6731 __mark_inode_dirty+0x1f3/0x16e0 fs/fs-writeback.c:2729 generic_update_time fs/inode.c:2253 [inline] touch_atime+0x65f/0x770 fs/inode.c:2328 file_accessed include/linux/fs.h:2277 [inline] ext4_file_mmap_prepare+0x56d/0x670 fs/ext4/file.c:901 vfs_mmap_prepare include/linux/fs.h:2069 [inline] call_mmap_prepare mm/vma.c:2776 [inline] __mmap_region+0xeb2/0x32c0 mm/vma.c:2863 mmap_region+0x5a8/0x6d0 mm/vma.c:2964 do_mmap+0x12c7/0x1c30 mm/mmap.c:573 vm_mmap_pgoff+0x28d/0x470 mm/util.c:581 ksys_mmap_pgoff+0x3cb/0x610 mm/mmap.c:619 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:89 [inline] __se_sys_mmap arch/x86/kernel/sys_x86_64.c:82 [inline] __x64_sys_mmap+0x125/0x190 arch/x86/kernel/sys_x86_64.c:82 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f95ef79dec2 RSP: 002b:00007ffc1703c568 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 0000001b32764000 RCX: 00007f95ef79dec2 RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b32764000 RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 R10: 0000000000100001 R11: 0000000000000206 R12: 00000000000003a0 R13: 00000000000927c0 R14: 0000000000137a80 R15: 00007ffc1703c840 INFO: task syz.4.4470:22048 blocked in I/O wait for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.4470 state:D stack:27488 pid:22048 tgid:22048 ppid:5600 task_flags:0x440040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5526 [inline] __schedule+0x1259/0x6920 kernel/sched/core.c:7276 __schedule_loop kernel/sched/core.c:7353 [inline] schedule+0xdd/0x2c0 kernel/sched/core.c:7368 io_schedule+0x8a/0xf0 kernel/sched/core.c:8212 bit_wait_io+0xd/0xe0 kernel/sched/wait_bit.c:258 __wait_on_bit+0x65/0x180 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0xdc/0x110 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:106 [inline] do_get_write_access+0x836/0x11e0 fs/jbd2/transaction.c:1113 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1263 __ext4_journal_get_write_access+0x277/0x380 fs/ext4/ext4_jbd2.c:249 ext4_reserve_inode_write+0x1b7/0x330 fs/ext4/inode.c:6509 __ext4_mark_inode_dirty+0x18f/0x910 fs/ext4/inode.c:6694 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6731 __mark_inode_dirty+0x1f3/0x16e0 fs/fs-writeback.c:2729 generic_update_time fs/inode.c:2253 [inline] touch_atime+0x65f/0x770 fs/inode.c:2328 file_accessed include/linux/fs.h:2277 [inline] ext4_file_mmap_prepare+0x56d/0x670 fs/ext4/file.c:901 vfs_mmap_prepare include/linux/fs.h:2069 [inline] call_mmap_prepare mm/vma.c:2776 [inline] __mmap_region+0xeb2/0x32c0 mm/vma.c:2863 mmap_region+0x5a8/0x6d0 mm/vma.c:2964 do_mmap+0x12c7/0x1c30 mm/mmap.c:573 vm_mmap_pgoff+0x28d/0x470 mm/util.c:581 ksys_mmap_pgoff+0x3cb/0x610 mm/mmap.c:619 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:89 [inline] __se_sys_mmap arch/x86/kernel/sys_x86_64.c:82 [inline] __x64_sys_mmap+0x125/0x190 arch/x86/kernel/sys_x86_64.c:82 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3c1839dec2 RSP: 002b:00007ffeca3d6dd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 0000001b32864000 RCX: 00007f3c1839dec2 RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b32864000 RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000364 R13: 00000000000927c0 R14: 0000000000137acc R15: 00007ffeca3d70b0 Showing all locks held in the system: locks held by khungtaskd/32: 1, last CPU#0: #0: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6871 locks held by klogd/4957: 1, last CPU#0: #0: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0x90/0x600 net/core/sock.c:3658 locks held by getty/5361: 2, on CPU#1: #0: ffff8880371bc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 drivers/tty/n_tty.c:2211 locks held by syz-executor/5586: 3, on CPU#1: #0: ffff88807df351c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 mm/mmap_lock.c:310 #1: ffff888037372558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 mm/memory.c:3816 #2: ffff88803737e938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 fs/jbd2/transaction.c:444 locks held by kworker/u8:15/5910: 6, on CPU#1: #0: ffff888021aa7940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 kernel/workqueue.c:3371 #1: ffffc900052cfd08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 kernel/workqueue.c:3372 #2: ffff8880373720e8 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x21/0xf0 fs/super.c:688 #3: ffff888037370c98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 mm/page-writeback.c:2560 #4: ffff88803737e938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 fs/jbd2/transaction.c:444 #5: ffff8880740b6ed8 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0x45a/0xdd0 fs/ext4/inode.c:822 locks held by udevd/21286: 1, on CPU#1: #0: ffff888027a58350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 block/bdev.c:990 locks held by pr/ttyS0/21613: 2, last CPU#1: #0: ffffffff8edd85b8 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:314 [inline] #0: ffffffff8edd85b8 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:439 [inline] #0: ffffffff8edd85b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 kernel/printk/printk.c:291 #1: ffffffff9bc67c78 (&port_lock_key){-.-.}-{3:3}, at: __uart_port_lock_irqsave include/linux/serial_core.h:613 [inline] #1: ffffffff9bc67c78 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 drivers/tty/serial/8250/8250_core.c:413 locks held by syz.5.4464/22029: 3, on CPU#0: #0: ffff888072e036c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 mm/mmap_lock.c:310 #1: ffff888037372558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 mm/memory.c:3816 #2: ffff88803737e938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 fs/jbd2/transaction.c:444 locks held by syz.0.4468/22046: 3, on CPU#0: #0: ffff888023ab4378 (&mm->mmap_lock){++++}-{4:4}, at: mmap_write_lock_killable include/linux/mmap_lock.h:562 [inline] #0: ffff888023ab4378 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 mm/util.c:579 #1: ffff888037372460 (sb_writers#5){.+.+}-{0:0}, at: file_accessed include/linux/fs.h:2277 [inline] #1: ffff888037372460 (sb_writers#5){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x56d/0x670 fs/ext4/file.c:901 #2: ffff88803737e938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 fs/jbd2/transaction.c:444 locks held by syz.3.4469/22047: 3, on CPU#1: #0: ffff88802b2683b8 (&mm->mmap_lock){++++}-{4:4}, at: mmap_write_lock_killable include/linux/mmap_lock.h:562 [inline] #0: ffff88802b2683b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 mm/util.c:579 #1: ffff888037372460 (sb_writers#5){.+.+}-{0:0}, at: file_accessed include/linux/fs.h:2277 [inline] #1: ffff888037372460 (sb_writers#5){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x56d/0x670 fs/ext4/file.c:901 #2: ffff88803737e938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 fs/jbd2/transaction.c:444 locks held by syz.4.4470/22048: 3, on CPU#0: #0: ffff88802b26b6b8 (&mm->mmap_lock){++++}-{4:4}, at: mmap_write_lock_killable include/linux/mmap_lock.h:562 [inline] #0: ffff88802b26b6b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 mm/util.c:579 #1: ffff888037372460 (sb_writers#5){.+.+}-{0:0}, at: file_accessed include/linux/fs.h:2277 [inline] #1: ffff888037372460 (sb_writers#5){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x56d/0x670 fs/ext4/file.c:901 #2: ffff88803737e938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 fs/jbd2/transaction.c:444 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:123 nmi_trigger_cpumask_backtrace+0x21f/0x2a0 lib/nmi_backtrace.c:66 trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x141/0x190 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xcb1/0x1030 kernel/hung_task.c:561 kthread+0x373/0x450 kernel/kthread.c:436 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 21613 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 RIP: 0010:io_serial_in+0x87/0xb0 drivers/tty/serial/8250/8250_port.c:410 Code: cc 5b fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c e9 4d 32 23 06 e8 38 07 cf fc eb a2 e8 c1 07 RSP: 0018:ffffc9000520f958 EFLAGS: 00000002 RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 RDX: 00000000000003fd RSI: ffffffff85b04460 RDI: ffffffff9bc67ca0 RBP: ffffffff9bc67c60 R08: 0000000000000001 R09: 000000000000001f R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000 R13: 0000000000000020 R14: fffffbfff378cfe9 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff888123c5d000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000565442300168 CR3: 000000000eb96000 CR4: 00000000003526f0 Call Trace: serial_in drivers/tty/serial/8250/8250.h:128 [inline] serial_lsr_in drivers/tty/serial/8250/8250.h:150 [inline] wait_for_lsr+0x13a/0x210 drivers/tty/serial/8250/8250_port.c:2013 serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 drivers/tty/serial/8250/8250_port.c:3270 __serial8250_console_fifo_write+0xa5/0x290 drivers/tty/serial/8250/8250_port.c:3345 serial8250_console_fifo_write drivers/tty/serial/8250/8250_port.c:3378 [inline] __serial8250_console_write drivers/tty/serial/8250/8250_port.c:3429 [inline] serial8250_console_write+0xf46/0x1330 drivers/tty/serial/8250/8250_port.c:3493 nbcon_emit_next_record+0x8f7/0xa70 kernel/printk/nbcon.c:1070 nbcon_emit_one+0x1a8/0x2b0 kernel/printk/nbcon.c:1157 nbcon_kthread_func+0x613/0x7d0 kernel/printk/nbcon.c:1271 kthread+0x373/0x450 kernel/kthread.c:436 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245