INFO: task syz.0.16:6596 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.16 state:D stack:24280 pid:6596 tgid:6595 ppid:6484 task_flags:0x400140 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5357 [inline]
__schedule+0x16f3/0x4c20 kernel/sched/core.c:6961
__schedule_loop kernel/sched/core.c:7043 [inline]
schedule+0x165/0x360 kernel/sched/core.c:7058
io_schedule+0x81/0xe0 kernel/sched/core.c:7903
folio_wait_bit_common+0x6b5/0xb90 mm/filemap.c:1317
folio_lock include/linux/pagemap.h:1133 [inline]
release_metapage+0x103/0xab0 fs/jfs/jfs_metapage.c:870
discard_metapage fs/jfs/jfs_metapage.h:88 [inline]
__get_metapage+0x9a0/0xde0 fs/jfs/jfs_metapage.c:753
jfs_readdir+0x1e01/0x3ae0 fs/jfs/jfs_dtree.c:3041
wrap_directory_iterator+0x96/0xe0 fs/readdir.c:65
iterate_dir+0x3a2/0x580 fs/readdir.c:108
__do_sys_getdents64 fs/readdir.c:410 [inline]
__se_sys_getdents64+0xe4/0x260 fs/readdir.c:396
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd6e6d2e9a9
RSP: 002b:00007fd6e5f9e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
RAX: ffffffffffffffda RBX: 00007fd6e6f55fa0 RCX: 00007fd6e6d2e9a9
RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 0000000000000004
RBP: 00007fd6e6db0d69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fd6e6f55fa0 R15: 00007ffec78deda8
INFO: task syz.1.17:6674 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.17 state:D stack:24584 pid:6674 tgid:6673 ppid:6647 task_flags:0x400140 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5357 [inline]
__schedule+0x16f3/0x4c20 kernel/sched/core.c:6961
__schedule_loop kernel/sched/core.c:7043 [inline]
schedule+0x165/0x360 kernel/sched/core.c:7058
io_schedule+0x81/0xe0 kernel/sched/core.c:7903
folio_wait_bit_common+0x6b5/0xb90 mm/filemap.c:1317
folio_lock include/linux/pagemap.h:1133 [inline]
release_metapage+0x103/0xab0 fs/jfs/jfs_metapage.c:870
discard_metapage fs/jfs/jfs_metapage.h:88 [inline]
__get_metapage+0x9a0/0xde0 fs/jfs/jfs_metapage.c:753
jfs_readdir+0x1e01/0x3ae0 fs/jfs/jfs_dtree.c:3041
wrap_directory_iterator+0x96/0xe0 fs/readdir.c:65
iterate_dir+0x3a2/0x580 fs/readdir.c:108
__do_sys_getdents64 fs/readdir.c:410 [inline]
__se_sys_getdents64+0xe4/0x260 fs/readdir.c:396
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa5c1ace9a9
RSP: 002b:00007fa5c0d3e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
RAX: ffffffffffffffda RBX: 00007fa5c1cf5fa0 RCX: 00007fa5c1ace9a9
RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 0000000000000004
RBP: 00007fa5c1b50d69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fa5c1cf5fa0 R15: 00007ffeebba2b38
Showing all locks held in the system:
1 lock held by khungtaskd/38:
#0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
#0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
#0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775
5 locks held by kworker/u8:6/148:
2 locks held by getty/5599:
#0: ffff88823bf4e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 drivers/tty/n_tty.c:2222
2 locks held by syz.0.16/6596:
#0: ffff88803def3728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x253/0x320 fs/file.c:1232
#1: ffff888042b68f88 (&type->i_mutex_dir_key#8){++++}-{4:4}, at: wrap_directory_iterator+0x5d/0xe0 fs/readdir.c:54
2 locks held by syz.1.17/6674:
#0: ffff88802875d928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x253/0x320 fs/file.c:1232
#1: ffff8880429067d8 (&type->i_mutex_dir_key#8){++++}-{4:4}, at: wrap_directory_iterator+0x5d/0xe0 fs/readdir.c:54
2 locks held by syz.2.18/6699:
#0: ffff8880367edd28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x253/0x320 fs/file.c:1232
#1: ffff8880429e2cf8 (&type->i_mutex_dir_key#8){++++}-{4:4}, at: wrap_directory_iterator+0x5d/0xe0 fs/readdir.c:54
2 locks held by syz.3.19/6721:
#0: ffff888035cff328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x253/0x320 fs/file.c:1232
#1: ffff888042b885b8 (&type->i_mutex_dir_key#8){++++}-{4:4}, at: wrap_directory_iterator+0x5d/0xe0 fs/readdir.c:54
2 locks held by syz.4.20/6750:
#0: ffff88803275e928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x253/0x320 fs/file.c:1232
#1: ffff888042b8e7d8 (&type->i_mutex_dir_key#8){++++}-{4:4}, at: wrap_directory_iterator+0x5d/0xe0 fs/readdir.c:54
2 locks held by syz.5.21/6785:
#0: ffff8880332e6d28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x253/0x320 fs/file.c:1232
#1: ffff8880429e4a68 (&type->i_mutex_dir_key#8){++++}-{4:4}, at: wrap_directory_iterator+0x5d/0xe0 fs/readdir.c:54
2 locks held by syz.6.22/6815:
#0: ffff88801b2aff28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x253/0x320 fs/file.c:1232
#1: ffff8880429036c8 (&type->i_mutex_dir_key#8){++++}-{4:4}, at: wrap_directory_iterator+0x5d/0xe0 fs/readdir.c:54
2 locks held by syz.7.23/6845:
#0: ffff888036dadf28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x253/0x320 fs/file.c:1232
#1: ffff888060514098 (&type->i_mutex_dir_key#8){++++}-{4:4}, at: wrap_directory_iterator+0x5d/0xe0 fs/readdir.c:54
2 locks held by syz.8.24/6880:
#0: ffff88803545c528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x253/0x320 fs/file.c:1232
#1: ffff8880605171a8 (&type->i_mutex_dir_key#8){++++}-{4:4}, at: wrap_directory_iterator+0x5d/0xe0 fs/readdir.c:54
=============================================
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)}
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
Call Trace:
dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline]
watchdog+0xf93/0xfe0 kernel/hung_task.c:491
kthread+0x70e/0x8a0 kernel/kthread.c:463
ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 148 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
Workqueue: bat_events batadv_bla_periodic_work
RIP: 0010:__mod_timer+0xa8d/0xf60 kernel/time/timer.c:1126
Code: 28 4c 89 ef 48 c7 c6 60 e4 0c 8b e8 0d 3c 14 03 49 8d 5d 10 48 89 d8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 80 3c 28 00 <8b> 6c 24 10 74 08 48 89 df e8 85 f5 71 00 4c 89 33 bf ff ff ff ff
RSP: 0018:ffffc900039df7a0 EFLAGS: 00000046
RAX: 1ffff110050c3a9c RBX: ffff88802861d4e0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff
RBP: ffff8880b8825a80 R08: ffffffff9931aeab R09: 1ffffffff32635d5
R10: dffffc0000000000 R11: fffffbfff32635d6 R12: ffff8880b8825a80
R13: dffffc0000000000 R14: 00000001000010a8 R15: 0000000000000802
FS: 0000000000000000(0000) GS:ffff8881268bf000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0b98bede80 CR3: 000000000d7a6000 CR4: 00000000003526f0
Call Trace:
queue_delayed_work_on+0x18b/0x280 kernel/workqueue.c:2559
queue_delayed_work include/linux/workqueue.h:684 [inline]
batadv_bla_periodic_work+0xab3/0xbf0 net/batman-adv/bridge_loop_avoidance.c:1509
process_one_work kernel/workqueue.c:3236 [inline]
process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3319
worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400
kthread+0x70e/0x8a0 kernel/kthread.c:463
ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245