ci starts bisection 2023-07-28 22:26:17.157980271 +0000 UTC m=+117817.211529951 bisecting fixing commit since 692b7dc87ca6d55ab254f8259e6f970171dc9d01 building syzkaller on 09ffe269727719aad37ea8145eb57fefb0097165 ensuring issue is reproducible on original commit 692b7dc87ca6d55ab254f8259e6f970171dc9d01 testing commit 692b7dc87ca6d55ab254f8259e6f970171dc9d01 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 34646e81092bda042938baf279e08126697d891afd9c6301c7084d07e44a1a0c all runs: crashed: INFO: task hung in reiserfs_sync_fs representative crash: INFO: task hung in reiserfs_sync_fs, types: [HANG] check whether we can drop unnecessary instrumentation disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 692b7dc87ca6d55ab254f8259e6f970171dc9d01 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8e61f7714f8285be9de4ef422e0986737b8b6882adcc0e519abce2064023db5a all runs: crashed: INFO: task hung in reiserfs_sync_fs representative crash: INFO: task hung in reiserfs_sync_fs, types: [HANG] the bug reproduces without the instrumentation disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed kconfig minimization: base=3877 full=7584 leaves diff=1998 split chunks (needed=false): <1998> split chunk #0 of len 1998 into 5 parts testing without sub-chunk 1/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP LEAK UBSAN BUG], they are not needed testing commit 692b7dc87ca6d55ab254f8259e6f970171dc9d01 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c397867b4dadb711704648fe5feae9a0c824b02c0b3cf2dc70945ab1fdbb4333 all runs: crashed: INFO: task hung in reiserfs_sync_fs representative crash: INFO: task hung in reiserfs_sync_fs, types: [HANG] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [BUG KASAN LOCKDEP ATOMIC_SLEEP LEAK UBSAN], they are not needed testing commit 692b7dc87ca6d55ab254f8259e6f970171dc9d01 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 51dcf4e2eeeaa7ff4ed11de9ff1c0808b169312e2d4c641aca49ee8c97ae3d50 all runs: crashed: INFO: task hung in reiserfs_sync_fs representative crash: INFO: task hung in reiserfs_sync_fs, types: [HANG] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [LOCKDEP ATOMIC_SLEEP LEAK UBSAN BUG KASAN], they are not needed testing commit 692b7dc87ca6d55ab254f8259e6f970171dc9d01 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ca026144e559408a05b4231c0276ccc4b4cb6a3f608d8566504abf4a92e6f256 all runs: crashed: INFO: task hung in reiserfs_sync_fs representative crash: INFO: task hung in reiserfs_sync_fs, types: [HANG] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 692b7dc87ca6d55ab254f8259e6f970171dc9d01 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 424598ac91dcd7bd1f2b5d7ab2af78c74e36aba798bc73fe9db9a2ebefee6998 all runs: OK false negative chance: 0.000 testing without sub-chunk 5/5 disabling configs for [ATOMIC_SLEEP LEAK UBSAN BUG KASAN LOCKDEP], they are not needed testing commit 692b7dc87ca6d55ab254f8259e6f970171dc9d01 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0a6d3a0d0b52e4b4e2b4390f268ff4148a38e368292739a661d3bfec28c318db all runs: crashed: INFO: task hung in reiserfs_sync_fs representative crash: INFO: task hung in reiserfs_sync_fs, types: [HANG] the chunk can be dropped minimized to 400 configs; suspects: [AF_RXRPC ARCH_ENABLE_MEMORY_HOTREMOVE ATM AX25 CC_HAS_UBSAN_BOUNDS CFG80211 CMA DAX DLM DVB_CORE ENCRYPTED_KEYS EXTCON GENEVE GPIOLIB HAMRADIO HAVE_CLK HID_SENSOR_HUB HID_SMARTJOYPLUS HID_THRUSTMASTER IIO INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_IPOIB INFINIBAND_USER_ACCESS INFINIBAND_VIRT_DMA INPUT_TABLET INPUT_TOUCHSCREEN IP_SCTP L2TP LIBNVDIMM MEDIA_COMMON_OPTIONS MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_USB_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_DLN2 MFD_RETU MMC MTD MTD_UBI NETFILTER_CONNCOUNT NET_IPGRE NET_IPGRE_DEMUX NFS_V4_1 NF_TPROXY_IPV6 NILFS2_FS NLMON NLS_CODEPAGE_1250 NLS_CODEPAGE_1251 NLS_CODEPAGE_737 NLS_CODEPAGE_775 NLS_CODEPAGE_850 NLS_CODEPAGE_852 NLS_CODEPAGE_855 NLS_CODEPAGE_857 NLS_CODEPAGE_860 NLS_CODEPAGE_861 NLS_CODEPAGE_862 NLS_CODEPAGE_863 NLS_CODEPAGE_864 NLS_CODEPAGE_865 NLS_CODEPAGE_866 NLS_CODEPAGE_869 NLS_CODEPAGE_874 NLS_CODEPAGE_932 NLS_CODEPAGE_936 NLS_CODEPAGE_949 NLS_CODEPAGE_950 NLS_ISO8859_13 NLS_ISO8859_14 NLS_ISO8859_15 NLS_ISO8859_2 NLS_ISO8859_3 NLS_ISO8859_4 NLS_ISO8859_5 NLS_ISO8859_6 NLS_ISO8859_7 NLS_ISO8859_8 NLS_ISO8859_9 NLS_KOI8_R NLS_KOI8_U NLS_MAC_CELTIC NLS_MAC_CENTEURO NLS_MAC_CROATIAN NLS_MAC_CYRILLIC NLS_MAC_GAELIC NLS_MAC_GREEK NLS_MAC_ICELAND NLS_MAC_INUIT NLS_MAC_ROMAN NLS_MAC_ROMANIAN NLS_MAC_TURKISH NOP_USB_XCEIV NOZOMI NTFS3_FS NTFS3_FS_POSIX_ACL NTFS3_LZX_XPRESS NTFS_FS NTFS_RW NULL_TTY NUMA_BALANCING NUMA_BALANCING_DEFAULT_ENABLED NUMA_EMU NUMA_KEEP_MEMINFO NVDIMM_DAX NVDIMM_KEYS NVDIMM_PFN NVME_CORE NVME_FABRICS NVME_FC NVME_MULTIPATH NVME_RDMA NVME_TARGET NVME_TARGET_FC NVME_TARGET_FCLOOP NVME_TARGET_LOOP NVME_TARGET_RDMA NVME_TARGET_TCP NVME_TCP N_GSM N_HDLC OCFS2_DEBUG_FS OCFS2_FS OCFS2_FS_O2CB OCFS2_FS_STATS OCFS2_FS_USERSPACE_CLUSTER OF_GPIO OF_PMEM OMFS_FS OPENVSWITCH OPENVSWITCH_GENEVE OPENVSWITCH_GRE OPENVSWITCH_VXLAN ORANGEFS_FS OSF_PARTITION OVERLAY_FS OVERLAY_FS_INDEX OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW OVERLAY_FS_REDIRECT_DIR PACKET_DIAG PADATA PAGE_IDLE_FLAG PAGE_POOL PAGE_POOL_STATS PAGE_REPORTING PAHOLE_HAS_SPLIT_BTF PARPORT PARPORT_NOT_PC PARTITION_ADVANCED PCCARD PCCARD_NONSTATIC PCIEAER PCI_ENDPOINT PCI_IOV PCMCIA PCMCIA_LOAD_CIS PERCPU_STATS PERSISTENT_KEYRINGS PER_VMA_LOCK_STATS PHONET PHYLINK PHY_CPCAP_USB PHY_QCOM_USB_HS PHY_QCOM_USB_HSIC PHY_SAMSUNG_USB2 PHY_TUSB1210 PKCS7_TEST_KEY PKCS8_PRIVATE_KEY_PARSER PM_CLK PNFS_BLOCK PNFS_FILE_LAYOUT PNFS_FLEXFILE_LAYOUT PPP PPPOATM PPPOE PPPOL2TP PPP_ASYNC PPP_BSDCOMP PPP_DEFLATE PPP_FILTER PPP_MPPE PPP_MULTILINK PPP_SYNC_TTY PPTP PREEMPT PREEMPT_NOTIFIERS PRISM2_USB PROC_CHILDREN PSI PSTORE PSTORE_842_COMPRESS PSTORE_COMPRESS PSTORE_DEFLATE_COMPRESS PSTORE_DEFLATE_COMPRESS_DEFAULT PSTORE_LZ4HC_COMPRESS PSTORE_LZ4_COMPRESS PSTORE_LZO_COMPRESS PSTORE_ZSTD_COMPRESS QCOM_QMI_HELPERS QNX4FS_FS QNX6FS_FS QRTR QRTR_TUN R8712U RADIO_ADAPTERS RADIO_SHARK RADIO_SHARK2 RADIO_TEA575X RAID6_PQ RAID_ATTRS RC_ATI_REMOTE RC_CORE RC_DEVICES RDMA_RXE RDMA_SIW RDS RDS_RDMA RDS_TCP READ_ONLY_THP_FOR_FS REALTEK_AUTOPM REED_SOLOMON REED_SOLOMON_DEC8 REGMAP REGMAP_I2C REGMAP_IRQ REGMAP_MMIO REGULATOR REGULATOR_TWL4030 REISERFS_FS REISERFS_FS_POSIX_ACL REISERFS_FS_SECURITY REISERFS_FS_XATTR REISERFS_PROC_INFO RESET_CONTROLLER RFKILL RFKILL_INPUT RFKILL_LEDS RMI4_2D_SENSOR RMI4_CORE RMI4_F03 RMI4_F03_SERIO RMI4_F11 RMI4_F12 RMI4_F30 ROMFS_BACKED_BY_BOTH ROMFS_FS ROMFS_ON_BLOCK ROMFS_ON_MTD ROSE RTC_DRV_HID_SENSOR_TIME RXKAD SCHED_CORE SCSI_FC_ATTRS SCSI_HPSA SCSI_ISCSI_ATTRS SCSI_LOGGING SCSI_NETLINK SCSI_SAS_ATA SCSI_SAS_ATTRS SCSI_SAS_LIBSAS SCSI_SCAN_ASYNC SCSI_SRP_ATTRS SCTP_COOKIE_HMAC_MD5 SCTP_COOKIE_HMAC_SHA1 SCTP_DEFAULT_COOKIE_HMAC_MD5 SECONDARY_TRUSTED_KEYRING SECURITY_INFINIBAND SECURITY_NETWORK_XFRM SERIAL_DEV_BUS SERIAL_DEV_CTRL_TTYPORT SERIAL_MCTRL_GPIO SGI_PARTITION SIGNATURE SIGNED_PE_FILE_VERIFICATION SLHC SLIP SLIP_COMPRESSED SLIP_MODE_SLIP6 SLIP_SMART SMARTJOYPLUS_FF SMBFS SMC SMC_DIAG SMSC_PHY SMS_SIANO_MDTV SMS_SIANO_RC SMS_USB_DRV SND SND_ALOOP SND_BCD2000 SND_CTL_FAST_LOOKUP SND_CTL_LED SND_DEBUG SND_DMA_SGBUF SND_DRIVERS SND_DUMMY SND_DYNAMIC_MINORS SND_HDA SND_HDA_CODEC_ANALOG SND_HDA_CODEC_CA0110 SND_HDA_CODEC_CA0132 SND_HDA_CODEC_CIRRUS SND_HDA_CODEC_CMEDIA SND_HDA_CODEC_CONEXANT SND_HDA_CODEC_HDMI SND_HDA_CODEC_REALTEK SND_HDA_CODEC_SI3054 SND_HDA_CODEC_SIGMATEL SND_HDA_CODEC_VIA SND_HDA_COMPONENT SND_HDA_CORE SND_HDA_GENERIC SND_HDA_GENERIC_LEDS SND_HDA_HWDEP SND_HDA_I915 SND_HDA_INPUT_BEEP SND_HDA_INTEL SND_HDA_PATCH_LOADER SND_HDA_RECONFIG SND_HRTIMER SND_HWDEP SND_INTEL_DSP_CONFIG SND_INTEL_NHLT SND_INTEL_SOUNDWIRE_ACPI SND_JACK SND_JACK_INPUT_DEV SND_MIXER_OSS SND_OSSEMUL SND_PCI SND_PCM SND_PCMCIA SND_PCM_OSS SND_PCM_OSS_PLUGINS SND_PCM_TIMER SND_PCM_XRUN_DEBUG SND_PROC_FS SND_RAWMIDI SND_SEQUENCER SND_SEQUENCER_OSS SND_SEQ_DEVICE SND_SEQ_DUMMY SND_SEQ_HRTIMER_DEFAULT SND_SEQ_MIDI SND_SEQ_MIDI_EVENT SND_SEQ_VIRMIDI SND_SUPPORT_OLD_API SND_TIMER SND_USB SND_USB_6FIRE SND_USB_AUDIO SND_USB_AUDIO_USE_MEDIA_CONTROLLER SND_USB_CAIAQ SND_USB_CAIAQ_INPUT SND_USB_HIFACE SND_USB_LINE6 SND_USB_POD SND_USB_PODHD SND_USB_TONEPORT SND_USB_UA101 SND_USB_US122L SND_USB_USX2Y SND_USB_VARIAX SND_VERBOSE_PROCFS SND_VIRMIDI SND_VIRTIO SND_VMASTER SND_X86 SOCK_VALIDATE_XMIT SOLARIS_X86_PARTITION SONY_FF SOUND SOUND_OSS_CORE SOUND_OSS_CORE_PRECLAIM SPI SPI_DLN2 SPI_DYNAMIC SPI_MASTER SQUASHFS SQUASHFS_4K_DEVBLK_SIZE SQUASHFS_COMPILE_DECOMP_SINGLE SQUASHFS_DECOMP_SINGLE SQUASHFS_FILE_DIRECT SQUASHFS_LZ4 SQUASHFS_LZO SQUASHFS_XATTR SQUASHFS_XZ SQUASHFS_ZLIB SQUASHFS_ZSTD SSB SSB_PCIHOST_POSSIBLE SSB_PCMCIAHOST_POSSIBLE SSB_SDIOHOST_POSSIBLE STAGING STP STREAM_PARSER SUNRPC_BACKCHANNEL SUN_PARTITION SW_SYNC SYSFB SYSV68_PARTITION SYSV_FS TABLET_USB_ACECAD TABLET_USB_AIPTEK TABLET_USB_HANWANG TABLET_USB_KBTAB TABLET_USB_PEGASUS TAHVO_USB TAHVO_USB_HOST_BY_DEFAULT TASKS_TRACE_RCU TCG_CRB TCG_TIS TCG_TIS_CORE TCG_TPM TCP_CONG_BBR TCP_CONG_BIC TCP_CONG_CDG TCP_CONG_DCTCP TCP_CONG_HSTCP TCP_CONG_HTCP TCP_CONG_HYBLA TCP_CONG_ILLINOIS TCP_CONG_LP TCP_CONG_NV TCP_CONG_SCALABLE TCP_CONG_VEGAS TCP_CONG_VENO TCP_CONG_WESTWOOD TCP_CONG_YEAH TEXTSEARCH TEXTSEARCH_BM TEXTSEARCH_FSM TEXTSEARCH_KMP THERMAL_NETLINK THP_SWAP THRUSTMASTER_FF TIPC TIPC_CRYPTO TIPC_DIAG TIPC_MEDIA_IB TIPC_MEDIA_UDP TLS TLS_TOE TOUCHSCREEN_SUR40 TOUCHSCREEN_USB_3M TOUCHSCREEN_USB_COMPOSITE TOUCHSCREEN_USB_DMC_TSC10 TOUCHSCREEN_USB_E2I TOUCHSCREEN_USB_EASYTOUCH TOUCHSCREEN_USB_EGALAX TOUCHSCREEN_USB_ELO TOUCHSCREEN_USB_ETT_TC45USB TOUCHSCREEN_USB_ETURBO TOUCHSCREEN_USB_GENERAL_TOUCH TOUCHSCREEN_USB_GOTOP TOUCHSCREEN_USB_GUNZE TOUCHSCREEN_USB_IDEALTEK TOUCHSCREEN_USB_IRTOUCH TOUCHSCREEN_USB_ITM TOUCHSCREEN_USB_JASTEC TOUCHSCREEN_USB_NEXIO TOUCHSCREEN_USB_PANJIT TOUCHSCREEN_USB_ZYTRONIC TRANSPARENT_HUGEPAGE TRANSPARENT_HUGEPAGE_MADVISE TTPCI_EEPROM TTY_PRINTK TUN_VNET_CROSS_LE TWL4030_CORE TYPEC TYPEC_FUSB302 TYPEC_TCPCI TYPEC_TCPM TYPEC_TPS6598X TYPEC_UCSI UBIFS_ATIME_SUPPORT UBIFS_FS UBIFS_FS_ADVANCED_COMPR UBIFS_FS_LZO UBIFS_FS_SECURITY UBIFS_FS_XATTR UBIFS_FS_ZLIB UBIFS_FS_ZSTD UBSAN_ONLY_BOUNDS UCSI_ACPI UDF_FS UDMABUF UFS_FS UFS_FS_WRITE UHID ULTRIX_PARTITION UNICODE UNIXWARE_DISKLABEL UNIX_DIAG USB4 USB4_NET USBIP_CORE USBIP_HOST USBIP_VHCI_HCD USBIP_VUDC USBPCWATCHDOG USB_ACM USB_ADUTUX USB_AIRSPY USB_ALI_M5632 USB_AN2720 USB_APPLEDISPLAY USB_ARMLINUX USB_BDC_UDC USB_BELKIN USB_C67X00_HCD USB_CATC USB_CDC_PHONET USB_CHAOSKEY USB_CHIPIDEA USB_CHIPIDEA_HOST USB_CHIPIDEA_PCI USB_CHIPIDEA_UDC USB_CONFIGFS USB_CONFIGFS_ACM USB_CONFIGFS_ECM USB_CONFIGFS_ECM_SUBSET USB_CONFIGFS_EEM USB_CONFIGFS_F_FS USB_CONFIGFS_F_HID USB_CONFIGFS_F_LB_SS USB_CONFIGFS_F_MIDI USB_CONFIGFS_F_PRINTER USB_DWC2 USB_GADGET USB_MUSB_HDRC USB_NET_CDC_SUBSET USB_ROLE_SWITCH USB_STORAGE_REALTEK USB_ULPI_BUS USB_USBNET VIDEO_DEV VXLAN WIRELESS WLAN ZONE_DEVICE] disabling configs for [UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP LEAK], they are not needed testing current HEAD f837f0a3c94882a29e38ff211a36c1c8a0f07804 testing commit f837f0a3c94882a29e38ff211a36c1c8a0f07804 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ba2457c5b7c333a9de65597effb50e64ab5545c791a9644575e1373b3276cd0c all runs: crashed: INFO: task hung in reiserfs_sync_fs representative crash: INFO: task hung in reiserfs_sync_fs, types: [HANG] crash still not fixed/happens on the oldest tested release revisions tested: 8, total time: 1h39m27.738331272s (build: 44m53.357437426s, test: 50m54.552549625s) crash still not fixed on HEAD or HEAD had kernel test errors commit msg: Merge tag 'arm64-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux crash: INFO: task hung in reiserfs_sync_fs INFO: task kworker/1:1:25 blocked for more than 143 seconds. Not tainted 6.5.0-rc3-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:1 state:D stack:13400 pid:25 ppid:2 flags:0x00004000 Workqueue: events_long flush_old_commits Call Trace: context_switch kernel/sched/core.c:5381 [inline] __schedule+0x402/0x1450 kernel/sched/core.c:6710 schedule+0x59/0xa0 kernel/sched/core.c:6786 schedule_preempt_disabled+0x1b/0xa0 kernel/sched/core.c:6845 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0x53b/0x9e0 kernel/locking/mutex.c:747 reiserfs_write_lock+0x2a/0x40 fs/reiserfs/lock.c:27 reiserfs_sync_fs+0x40/0x90 fs/reiserfs/super.c:76 flush_old_commits+0x55/0xa0 fs/reiserfs/super.c:111 process_one_work+0x297/0x4f0 kernel/workqueue.c:2597 worker_thread+0x4e/0x330 kernel/workqueue.c:2748 kthread+0xde/0x110 kernel/kthread.c:389 ret_from_fork+0x2c/0x40 arch/x86/kernel/process.c:145 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:296 RIP: 0000:0x0 Code: Unable to access opcode bytes at 0xffffffffffffffd6. RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/12: #0: ffffffff831789d0 (rcu_tasks.tasks_gp_mutex){....}-{3:3}, at: rcu_tasks_one_gp+0x26/0x3d0 kernel/rcu/tasks.h:522 4 locks held by kworker/1:1/25: #0: ffff888100064b38 ((wq_completion)events_long){....}-{0:0}, at: wake_up_worker kernel/workqueue.c:898 [inline] #0: ffff888100064b38 ((wq_completion)events_long){....}-{0:0}, at: process_one_work+0x200/0x4f0 kernel/workqueue.c:2559 #1: ffffc9000034fe58 ((work_completion)(&(&sbi->old_work)->work)){....}-{0:0}, at: wake_up_worker kernel/workqueue.c:898 [inline] #1: ffffc9000034fe58 ((work_completion)(&(&sbi->old_work)->work)){....}-{0:0}, at: process_one_work+0x200/0x4f0 kernel/workqueue.c:2559 #2: ffff8881013530e0 (&type->s_umount_key#57){....}-{3:3}, at: flush_old_commits+0x2e/0xa0 fs/reiserfs/super.c:97 #3: ffff888101fe8090 (&sbi->lock){....}-{3:3}, at: reiserfs_write_lock+0x2a/0x40 fs/reiserfs/lock.c:27 1 lock held by khungtaskd/26: #0: ffffffff83179080 (rcu_read_lock ){....}-{1:2}, at: debug_show_all_locks+0x12/0x120 kernel/locking/lockdep.c:6615 2 locks held by getty/1656: #0: ffff888102acb098 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x23/0x50 drivers/tty/tty_ldisc.c:243 #1: ffffc90000dfb2f0 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x51c/0x650 drivers/tty/n_tty.c:2187 4 locks held by syz-executor.0/2639: ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 26 Comm: khungtaskd Not tainted 6.5.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x3d/0x60 lib/dump_stack.c:106 nmi_cpu_backtrace+0xcc/0x110 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x115/0x130 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline] watchdog+0x593/0x5c0 kernel/hung_task.c:379 kthread+0xde/0x110 kernel/kthread.c:389 ret_from_fork+0x2c/0x40 arch/x86/kernel/process.c:145 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:296 RIP: 0000:0x0 Code: Unable to access opcode bytes at 0xffffffffffffffd6. RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 2639 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 RIP: 0010:__lock_release kernel/locking/lockdep.c:5466 [inline] RIP: 0010:lock_release+0xf2/0x230 kernel/locking/lockdep.c:5781 Code: ff 48 85 c0 0f 84 f4 00 00 00 66 83 78 22 1f 76 0c 66 83 68 22 20 66 83 78 22 1f 77 39 8b 54 24 04 89 95 20 0a 00 00 48 8b 00 <48> 89 85 18 0a 00 00 41 8d 46 ff 39 d0 74 1d 83 c2 01 48 89 e1 44 RSP: 0018:ffffc90000003de8 EFLAGS: 00000097 RAX: 258037f253abe824 RBX: ffffffff83179080 RCX: ffffc90000003dec RDX: 0000000000000005 RSI: ffffffff83179080 RDI: ffff888107670cb0 RBP: ffff8881076701c0 R08: 0000000000000000 R09: ffff888107670c88 R10: 0000000000000008 R11: 0000000000000005 R12: 0000000000000046 R13: ffffffff810be00e R14: 0000000000000006 R15: 000000000002d5c0 FS: 00007f02e22606c0(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000002076f000 CR3: 0000000100ed0000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rcu_lock_release include/linux/rcupdate.h:308 [inline] rcu_read_unlock include/linux/rcupdate.h:782 [inline] select_task_rq_fair+0x196/0x1210 kernel/sched/fair.c:7787 select_task_rq kernel/sched/core.c:3620 [inline] try_to_wake_up+0x18a/0x750 kernel/sched/core.c:4330 hrtimer_wakeup+0x1d/0x20 kernel/time/hrtimer.c:1942 __run_hrtimer kernel/time/hrtimer.c:1688 [inline] __hrtimer_run_queues+0x110/0x300 kernel/time/hrtimer.c:1752 hrtimer_interrupt+0xfd/0x230 kernel/time/hrtimer.c:1814 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1098 [inline] __sysvec_apic_timer_interrupt+0x89/0x1a0 arch/x86/kernel/apic/apic.c:1115 sysvec_apic_timer_interrupt+0x89/0xb0 arch/x86/kernel/apic/apic.c:1109 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645 RIP: 0010:console_trylock_spinning kernel/printk/printk.c:1979 [inline] RIP: 0010:vprintk_emit+0x220/0x2c0 kernel/printk/printk.c:2306 Code: 81 48 c7 c7 e0 65 09 83 e8 cd df fe ff e8 68 09 00 00 9c 58 f6 c4 02 0f 85 81 00 00 00 4c 89 f0 f6 c4 02 74 01 fb f3 0f 1e fa <68> ec 17 0f 81 45 31 c9 41 b8 01 00 00 00 31 c9 ba 01 00 00 00 31 RSP: 0018:ffffc90001f1b8d0 EFLAGS: 00000202 RAX: 0000000000000246 RBX: 0000000000000086 RCX: ffffc90001f1b894 RDX: 0000000000000004 RSI: ffffffff82ba0c88 RDI: ffffffff82bc60f4 RBP: ffffc90001f1b908 R08: 000000000008000e R09: ffff888107670c60 R10: 0000000000080000 R11: 0000000000000004 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000246 R15: ffffffff82c64980 _printk+0x5f/0x80 kernel/printk/printk.c:2328 __reiserfs_warning+0x92/0x100 fs/reiserfs/prints.c:290 reiserfs_read_bitmap_block+0xec/0x130 fs/reiserfs/bitmap.c:1434 scan_bitmap_block.constprop.0+0x7e/0x390 fs/reiserfs/bitmap.c:164 scan_bitmap fs/reiserfs/bitmap.c:402 [inline] allocate_without_wrapping_disk fs/reiserfs/bitmap.c:1161 [inline] blocknrs_and_prealloc_arrays_from_search_start fs/reiserfs/bitmap.c:1274 [inline] reiserfs_allocate_blocknrs+0x737/0xf70 fs/reiserfs/bitmap.c:1375 reiserfs_new_unf_blocknrs fs/reiserfs/reiserfs.h:3360 [inline] _allocate_block fs/reiserfs/inode.c:645 [inline] reiserfs_get_block+0x343/0x12c0 fs/reiserfs/inode.c:756 __block_write_begin_int+0x14b/0x520 fs/buffer.c:2128 reiserfs_write_begin+0xdf/0x250 fs/reiserfs/inode.c:2773 generic_perform_write+0xdb/0x230 mm/filemap.c:3923 generic_file_write_iter+0x5c/0xc0 mm/filemap.c:4044 call_write_iter include/linux/fs.h:1871 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x24f/0x460 fs/read_write.c:584 ksys_write+0x70/0xf0 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x38/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f02e147cb29 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f02e22600c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f02e159bf80 RCX: 00007f02e147cb29 RDX: 000000000208e24b RSI: 0000000020000280 RDI: 0000000000000005 RBP: 00007f02e14c847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000006 R14: 00007f02e159bf80 R15: 00007fff003b5408