INFO: task syz.4.20:4921 blocked for more than 143 seconds. Not tainted 6.10.0-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.20 state:D stack:9984 pid:4921 tgid:4918 ppid:2975 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5407 [inline] __schedule+0x615/0x9a0 kernel/sched/core.c:6748 __schedule_loop kernel/sched/core.c:6825 [inline] schedule+0xac/0x140 kernel/sched/core.c:6840 __closure_sync+0x61/0xa0 lib/closure.c:146 closure_sync include/linux/closure.h:195 [inline] bch2_btree_update_start+0x6cf/0x810 fs/bcachefs/btree_update_interior.c:1267 bch2_btree_split_leaf+0x4e/0x1e0 fs/bcachefs/btree_update_interior.c:1851 bch2_trans_commit_error+0x1f9/0x580 fs/bcachefs/btree_trans_commit.c:961 __bch2_trans_commit+0x1c00/0x1f30 fs/bcachefs/btree_trans_commit.c:1189 bch2_trans_commit fs/bcachefs/btree_update.h:183 [inline] bch2_btree_write_buffer_flush_locked+0xe44/0x1100 fs/bcachefs/btree_write_buffer.c:429 btree_write_buffer_flush_seq+0x2cf/0x350 fs/bcachefs/btree_write_buffer.c:510 bch2_btree_write_buffer_journal_flush+0x35/0x60 fs/bcachefs/btree_write_buffer.c:525 journal_flush_pins+0x1e3/0x350 fs/bcachefs/journal_reclaim.c:553 journal_flush_done+0x4a/0xe0 fs/bcachefs/journal_reclaim.c:806 bch2_journal_flush_pins+0xdc/0x170 fs/bcachefs/journal_reclaim.c:839 bch2_journal_flush_all_pins fs/bcachefs/journal_reclaim.h:76 [inline] __bch2_fs_read_only+0x84/0x180 fs/bcachefs/super.c:277 bch2_fs_read_only+0x282/0x470 fs/bcachefs/super.c:357 __bch2_fs_stop+0x5f/0x260 fs/bcachefs/super.c:619 bch2_fs_stop fs/bcachefs/super.c:678 [inline] bch2_fs_open+0xce4/0x12e0 fs/bcachefs/super.c:2161 bch2_mount fs/bcachefs/fs.c:1924 [inline] bch2_fs_get_tree+0x297/0x6b0 fs/bcachefs/fs.c:2088 vfs_get_tree+0x24/0xb0 fs/super.c:1789 do_new_mount+0x15a/0x3a0 fs/namespace.c:3352 do_mount fs/namespace.c:3692 [inline] __do_sys_mount fs/namespace.c:3898 [inline] __se_sys_mount+0x14b/0x1c0 fs/namespace.c:3875 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x8d/0x1a0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc3fad874ca RSP: 002b:00007fc3fbc87e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fc3fbc87ef0 RCX: 00007fc3fad874ca RDX: 00000000200000c0 RSI: 0000000020000180 RDI: 00007fc3fbc87eb0 RBP: 00000000200000c0 R08: 00007fc3fbc87ef0 R09: 0000000000000010 R10: 0000000000000010 R11: 0000000000000246 R12: 0000000020000180 R13: 00007fc3fbc87eb0 R14: 00000000000059ea R15: 0000000020000480 INFO: task bch-reclaim/loo:4987 blocked for more than 143 seconds. Not tainted 6.10.0-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:bch-reclaim/loo state:D stack:15288 pid:4987 tgid:4987 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5407 [inline] __schedule+0x615/0x9a0 kernel/sched/core.c:6748 __schedule_loop kernel/sched/core.c:6825 [inline] schedule+0xac/0x140 kernel/sched/core.c:6840 schedule_preempt_disabled+0x32/0x60 kernel/sched/core.c:6897 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x44a/0x970 kernel/locking/mutex.c:752 bch2_journal_reclaim_thread+0x74/0x160 fs/bcachefs/journal_reclaim.c:726 kthread+0xea/0x100 kernel/kthread.c:389 ret_from_fork+0x32/0x40 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Showing all locks held in the system: 1 lock held by pool_workqueue_/3: #0: ffffffff83d800f8 (rcu_state.exp_mutex){....}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:291 [inline] #0: ffffffff83d800f8 (rcu_state.exp_mutex){....}-{3:3}, at: synchronize_rcu_expedited+0x2c2/0x5e0 kernel/rcu/tree_exp.h:939 1 lock held by khungtaskd/30: #0: ffffffff83d7f250 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline] #0: ffffffff83d7f250 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:781 [inline] #0: ffffffff83d7f250 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x30/0x100 kernel/locking/lockdep.c:6614 2 locks held by getty/1509: #0: ffff88810ae950a0 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x20/0x40 drivers/tty/tty_ldisc.c:243 #1: ffffc90002c432f0 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x243/0x910 drivers/tty/n_tty.c:2211 5 locks held by syz.4.20/4921: #0: ffff888177c80278 (&c->state_lock){....}-{3:3}, at: __bch2_fs_stop+0x57/0x260 fs/bcachefs/super.c:618 #1: ffff888177ccafe8 (&j->reclaim_lock){....}-{3:3}, at: journal_flush_done+0x35/0xe0 fs/bcachefs/journal_reclaim.c:804 #2: ffff888177c842d0 (&c->btree_trans_barrier){....}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:116 [inline] #2: ffff888177c842d0 (&c->btree_trans_barrier){....}-{0:0}, at: srcu_read_lock include/linux/srcu.h:215 [inline] #2: ffff888177c842d0 (&c->btree_trans_barrier){....}-{0:0}, at: __bch2_trans_get+0x243/0x390 fs/bcachefs/btree_iter.c:3193 #3: ffff888177c84718 (&wb->flushing.lock){....}-{3:3}, at: btree_write_buffer_flush_seq+0x2c2/0x350 fs/bcachefs/btree_write_buffer.c:509 #4: ffff888177ca6750 (&c->gc_lock){....}-{3:3}, at: bch2_btree_update_start+0x2ff/0x810 fs/bcachefs/btree_update_interior.c:1195 1 lock held by bch-reclaim/loo/4987: #0: ffff888177ccafe8 (&j->reclaim_lock){....}-{3:3}, at: bch2_journal_reclaim_thread+0x74/0x160 fs/bcachefs/journal_reclaim.c:726 1 lock held by syz.1.1564/19313: ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x3e/0xe0 lib/dump_stack.c:114 nmi_cpu_backtrace+0x146/0x160 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x8e/0x140 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline] watchdog+0x5db/0x600 kernel/hung_task.c:379 kthread+0xea/0x100 kernel/kthread.c:389 ret_from_fork+0x32/0x40 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 19297 Comm: syz.7.1563 Not tainted 6.10.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:io_serial_out+0x15/0x20 drivers/tty/serial/8250/8250_port.c:413 Code: 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f b6 8f f9 00 00 00 d3 e6 03 77 40 89 d0 89 f2 ee cc cc cc cc 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffc90000f27708 EFLAGS: 00000006 RAX: 0000000000000000 RBX: ffffffff88af1d64 RCX: 0000000000000000 RDX: 00000000000003f9 RSI: 00000000000003f9 RDI: ffffffff88ca7bb0 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: ffffffff81d8fb00 R12: 0000000000000086 R13: 0000000000000000 R14: 0000000000000065 R15: ffffffff88ca7bb0 FS: 00007f310efc66c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb950d69160 CR3: 000000014f4fa000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: serial8250_console_write+0xda/0x5a0 drivers/tty/serial/8250/8250_port.c:3358 console_emit_next_record kernel/printk/printk.c:2913 [inline] console_flush_all+0x2d7/0x4c0 kernel/printk/printk.c:2979 console_unlock+0x54/0x150 kernel/printk/printk.c:3048 vprintk_emit+0x252/0x3b0 kernel/printk/printk.c:2348 bch2_print_maybe_redirect fs/bcachefs/super.c:104 [inline] __bch2_print+0xad/0xf0 fs/bcachefs/super.c:123 bch2_fs_online+0xd2/0x370 fs/bcachefs/super.c:689 bch2_fs_alloc fs/bcachefs/super.c:955 [inline] bch2_fs_open+0x12c2/0x12e0 fs/bcachefs/super.c:2124 bch2_mount fs/bcachefs/fs.c:1924 [inline] bch2_fs_get_tree+0x297/0x6b0 fs/bcachefs/fs.c:2088 vfs_get_tree+0x24/0xb0 fs/super.c:1789 do_new_mount+0x15a/0x3a0 fs/namespace.c:3352 do_mount fs/namespace.c:3692 [inline] __do_sys_mount fs/namespace.c:3898 [inline] __se_sys_mount+0x14b/0x1c0 fs/namespace.c:3875 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x8d/0x1a0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f310e1874ca Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f310efc5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f310efc5ef0 RCX: 00007f310e1874ca RDX: 00000000200000c0 RSI: 0000000020000180 RDI: 00007f310efc5eb0 RBP: 00000000200000c0 R08: 00007f310efc5ef0 R09: 0000000000000010 R10: 0000000000000010 R11: 0000000000000246 R12: 0000000020000180 R13: 00007f310efc5eb0 R14: 00000000000059ea R15: 0000000020000480