INFO: task syz.1.17:5150 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.17 state:D stack:27744 pid: 5150 ppid: 4787 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5049 [inline]
__schedule+0x11bb/0x4390 kernel/sched/core.c:6395
schedule+0x11b/0x1e0 kernel/sched/core.c:6478
io_schedule+0x7c/0xd0 kernel/sched/core.c:8503
__lock_metapage+0x1a9/0x380 fs/jfs/jfs_metapage.c:49
lock_metapage fs/jfs/jfs_metapage.c:63 [inline]
__get_metapage+0x43e/0x1060 fs/jfs/jfs_metapage.c:640
ea_write+0x5df/0xdd0 fs/jfs/xattr.c:256
ea_put fs/jfs/xattr.c:626 [inline]
__jfs_setxattr+0x7cf/0x1000 fs/jfs/xattr.c:792
__jfs_xattr_set+0xd7/0x160 fs/jfs/xattr.c:941
__vfs_setxattr+0x3e0/0x420 fs/xattr.c:182
__vfs_setxattr_noperm+0x129/0x5e0 fs/xattr.c:216
vfs_setxattr+0x168/0x2f0 fs/xattr.c:303
do_setxattr fs/xattr.c:588 [inline]
setxattr+0x2da/0x300 fs/xattr.c:611
path_setxattr+0x142/0x280 fs/xattr.c:630
__do_sys_lsetxattr fs/xattr.c:653 [inline]
__se_sys_lsetxattr fs/xattr.c:649 [inline]
__x64_sys_lsetxattr+0xb4/0xd0 fs/xattr.c:649
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f080c8c89a9
RSP: 002b:00007f080bb17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
RAX: ffffffffffffffda RBX: 00007f080caf0080 RCX: 00007f080c8c89a9
RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000040
RBP: 00007f080c94ad69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f080caf0080 R15: 00007ffea9b69b08
INFO: task syz.2.18:5155 blocked for more than 144 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.18 state:D stack:27232 pid: 5155 ppid: 4792 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5049 [inline]
__schedule+0x11bb/0x4390 kernel/sched/core.c:6395
schedule+0x11b/0x1e0 kernel/sched/core.c:6478
io_schedule+0x7c/0xd0 kernel/sched/core.c:8503
__lock_metapage+0x1a9/0x380 fs/jfs/jfs_metapage.c:49
lock_metapage fs/jfs/jfs_metapage.c:63 [inline]
__get_metapage+0x43e/0x1060 fs/jfs/jfs_metapage.c:640
ea_write+0x5df/0xdd0 fs/jfs/xattr.c:256
ea_put fs/jfs/xattr.c:626 [inline]
__jfs_setxattr+0x7cf/0x1000 fs/jfs/xattr.c:792
__jfs_xattr_set+0xd7/0x160 fs/jfs/xattr.c:941
__vfs_setxattr+0x3e0/0x420 fs/xattr.c:182
__vfs_setxattr_noperm+0x129/0x5e0 fs/xattr.c:216
vfs_setxattr+0x168/0x2f0 fs/xattr.c:303
do_setxattr fs/xattr.c:588 [inline]
setxattr+0x2da/0x300 fs/xattr.c:611
path_setxattr+0x142/0x280 fs/xattr.c:630
__do_sys_lsetxattr fs/xattr.c:653 [inline]
__se_sys_lsetxattr fs/xattr.c:649 [inline]
__x64_sys_lsetxattr+0xb4/0xd0 fs/xattr.c:649
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f614035a9a9
RSP: 002b:00007f613f5a9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
RAX: ffffffffffffffda RBX: 00007f6140582080 RCX: 00007f614035a9a9
RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000040
RBP: 00007f61403dcd69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f6140582080 R15: 00007fff48a15748
INFO: task syz.4.20:5158 blocked for more than 146 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.20 state:D stack:27744 pid: 5158 ppid: 4794 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5049 [inline]
__schedule+0x11bb/0x4390 kernel/sched/core.c:6395
schedule+0x11b/0x1e0 kernel/sched/core.c:6478
io_schedule+0x7c/0xd0 kernel/sched/core.c:8503
__lock_metapage+0x1a9/0x380 fs/jfs/jfs_metapage.c:49
lock_metapage fs/jfs/jfs_metapage.c:63 [inline]
__get_metapage+0x43e/0x1060 fs/jfs/jfs_metapage.c:640
ea_write+0x5df/0xdd0 fs/jfs/xattr.c:256
ea_put fs/jfs/xattr.c:626 [inline]
__jfs_setxattr+0x7cf/0x1000 fs/jfs/xattr.c:792
__jfs_xattr_set+0xd7/0x160 fs/jfs/xattr.c:941
__vfs_setxattr+0x3e0/0x420 fs/xattr.c:182
__vfs_setxattr_noperm+0x129/0x5e0 fs/xattr.c:216
vfs_setxattr+0x168/0x2f0 fs/xattr.c:303
do_setxattr fs/xattr.c:588 [inline]
setxattr+0x2da/0x300 fs/xattr.c:611
path_setxattr+0x142/0x280 fs/xattr.c:630
__do_sys_lsetxattr fs/xattr.c:653 [inline]
__se_sys_lsetxattr fs/xattr.c:649 [inline]
__x64_sys_lsetxattr+0xb4/0xd0 fs/xattr.c:649
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f0f9532e9a9
RSP: 002b:00007f0f9457d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
RAX: ffffffffffffffda RBX: 00007f0f95556080 RCX: 00007f0f9532e9a9
RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000040
RBP: 00007f0f953b0d69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f0f95556080 R15: 00007ffc567100b8
Showing all locks held in the system:
4 locks held by kworker/u4:0/9:
#0: ffff888142bb8938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1
#1: ffffc90000ce7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285
#2: ffff88807a59e0e0 (&type->s_umount_key#54){++++}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
#3: ffff888056d626c8 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x1c7/0x520 fs/jfs/inode.c:102
1 lock held by khungtaskd/27:
#0: ffffffff8c11c460 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
4 locks held by kworker/u4:1/144:
#0: ffff888142bb8938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1
#1: ffffc900016cfd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285
#2: ffff88807d1680e0 (&type->s_umount_key#54){++++}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
#3: ffff888056c5b008 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x1c7/0x520 fs/jfs/inode.c:102
4 locks held by kworker/u4:2/154:
#0: ffff888142bb8938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1
#1: ffffc90001fc7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285
#2: ffff8880189b80e0 (&type->s_umount_key#54){++++}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
#3: ffff888056c7d508 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x1c7/0x520 fs/jfs/inode.c:102
4 locks held by kworker/u4:3/1168:
#0: ffff888142bb8938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1
#1: ffffc90004be7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285
#2: ffff888025b860e0 (&type->s_umount_key#54){++++}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
#3: ffff888056c5e788 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x1c7/0x520 fs/jfs/inode.c:102
4 locks held by kworker/u4:4/1443:
#0: ffff888142bb8938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1
#1: ffffc900059f7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285
#2: ffff88805c9c20e0 (&type->s_umount_key#54){++++}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
#3: ffff888056c026c8 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x1c7/0x520 fs/jfs/inode.c:102
4 locks held by kworker/u4:5/3076:
#0: ffff888142bb8938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1
#1: ffffc9000d14fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285
#2: ffff88802b7fa0e0 (&type->s_umount_key#54){++++}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
#3: ffff88805a0901c8 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x1c7/0x520 fs/jfs/inode.c:102
3 locks held by udevd/3562:
2 locks held by getty/3949:
#0: ffff88814cd60098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:252
#1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 drivers/tty/n_tty.c:2158
3 locks held by udevd/4619:
1 lock held by udevd/4636:
4 locks held by kworker/u4:6/5106:
#0: ffff888142bb8938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1
#1: ffffc900037cfd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285
#2: ffff888020e980e0 (&type->s_umount_key#54){++++}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
#3: ffff88805a155508 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x1c7/0x520 fs/jfs/inode.c:102
4 locks held by syz.1.17/5150:
#0: ffff88807d168460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 fs/namespace.c:377
#1: ffff888056c5b3c0 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:787 [inline]
#1: ffff888056c5b3c0 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: vfs_setxattr+0x141/0x2f0 fs/xattr.c:302
#2: ffff888056c5b008 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: __jfs_xattr_set+0xb6/0x160 fs/jfs/xattr.c:940
#3: ffff888056c5b0a0 (&jfs_ip->xattr_sem){+.+.}-{3:3}, at: __jfs_setxattr+0xe1/0x1000 fs/jfs/xattr.c:678
4 locks held by syz.2.18/5155:
#0: ffff888025b86460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 fs/namespace.c:377
#1: ffff888056c5eb40 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:787 [inline]
#1: ffff888056c5eb40 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: vfs_setxattr+0x141/0x2f0 fs/xattr.c:302
#2: ffff888056c5e788 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: __jfs_xattr_set+0xb6/0x160 fs/jfs/xattr.c:940
#3: ffff888056c5e820 (&jfs_ip->xattr_sem){+.+.}-{3:3}, at: __jfs_setxattr+0xe1/0x1000 fs/jfs/xattr.c:678
4 locks held by syz.4.20/5158:
#0: ffff88805c9c2460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 fs/namespace.c:377
#1: ffff888056c02a80 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:787 [inline]
#1: ffff888056c02a80 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: vfs_setxattr+0x141/0x2f0 fs/xattr.c:302
#2: ffff888056c026c8 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: __jfs_xattr_set+0xb6/0x160 fs/jfs/xattr.c:940
#3: ffff888056c02760 (&jfs_ip->xattr_sem){+.+.}-{3:3}, at: __jfs_setxattr+0xe1/0x1000 fs/jfs/xattr.c:678
4 locks held by syz.0.43/5209:
#0: ffff888062a82460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 fs/namespace.c:377
#1: ffff888056c058c0 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:787 [inline]
#1: ffff888056c058c0 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: vfs_setxattr+0x141/0x2f0 fs/xattr.c:302
#2: ffff888056c05508 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: __jfs_xattr_set+0xb6/0x160 fs/jfs/xattr.c:940
#3: ffff888056c055a0 (&jfs_ip->xattr_sem){+.+.}-{3:3}, at: __jfs_setxattr+0xe1/0x1000 fs/jfs/xattr.c:678
4 locks held by syz.3.49/5258:
#0: ffff8880189b8460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 fs/namespace.c:377
#1: ffff888056c7d8c0 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:787 [inline]
#1: ffff888056c7d8c0 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: vfs_setxattr+0x141/0x2f0 fs/xattr.c:302
#2: ffff888056c7d508 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: __jfs_xattr_set+0xb6/0x160 fs/jfs/xattr.c:940
#3: ffff888056c7d5a0 (&jfs_ip->xattr_sem){+.+.}-{3:3}, at: __jfs_setxattr+0xe1/0x1000 fs/jfs/xattr.c:678
4 locks held by kworker/u4:8/5273:
#0: ffff888142bb8938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1
#1: ffffc90003c6fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285
#2: ffff888062a820e0 (&type->s_umount_key#54){++++}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
#3: ffff888056c05508 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x1c7/0x520 fs/jfs/inode.c:102
4 locks held by syz.5.51/5296:
#0: ffff88805ae40460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 fs/namespace.c:377
#1: ffff888056d9b3c0 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:787 [inline]
#1: ffff888056d9b3c0 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: vfs_setxattr+0x141/0x2f0 fs/xattr.c:302
#2: ffff888056d9b008 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: __jfs_xattr_set+0xb6/0x160 fs/jfs/xattr.c:940
#3: ffff888056d9b0a0 (&jfs_ip->xattr_sem){+.+.}-{3:3}, at: __jfs_setxattr+0xe1/0x1000 fs/jfs/xattr.c:678
4 locks held by kworker/u4:9/5297:
#0: ffff888142bb8938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1
#1: ffffc90003cefd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285
#2: ffff88805ae400e0 (&type->s_umount_key#54){++++}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
#3: ffff888056d9b008 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x1c7/0x520 fs/jfs/inode.c:102
4 locks held by syz.7.52/5305:
#0: ffff88802b7fa460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 fs/namespace.c:377
#1: ffff88805a090580 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:787 [inline]
#1: ffff88805a090580 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: vfs_setxattr+0x141/0x2f0 fs/xattr.c:302
#2: ffff88805a0901c8 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: __jfs_xattr_set+0xb6/0x160 fs/jfs/xattr.c:940
#3: ffff88805a090260 (&jfs_ip->xattr_sem){+.+.}-{3:3}, at: __jfs_setxattr+0xe1/0x1000 fs/jfs/xattr.c:678
4 locks held by syz.8.60/5356:
#0: ffff88807a59e460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 fs/namespace.c:377
#1: ffff888056d62a80 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:787 [inline]
#1: ffff888056d62a80 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: vfs_setxattr+0x141/0x2f0 fs/xattr.c:302
#2: ffff888056d626c8 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: __jfs_xattr_set+0xb6/0x160 fs/jfs/xattr.c:940
#3: ffff888056d62760 (&jfs_ip->xattr_sem){+.+.}-{3:3}, at: __jfs_setxattr+0xe1/0x1000 fs/jfs/xattr.c:678
4 locks held by syz.6.69/5400:
#0: ffff888020e98460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 fs/namespace.c:377
#1: ffff88805a1558c0 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:787 [inline]
#1: ffff88805a1558c0 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: vfs_setxattr+0x141/0x2f0 fs/xattr.c:302
#2: ffff88805a155508 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: __jfs_xattr_set+0xb6/0x160 fs/jfs/xattr.c:940
#3: ffff88805a1555a0 (&jfs_ip->xattr_sem){+.+.}-{3:3}, at: __jfs_setxattr+0xe1/0x1000 fs/jfs/xattr.c:678
4 locks held by syz.9.74/5432:
#0: ffff88807deea460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 fs/namespace.c:377
#1: ffff888056d64f80 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:787 [inline]
#1: ffff888056d64f80 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: vfs_setxattr+0x141/0x2f0 fs/xattr.c:302
#2: ffff888056d64bc8 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: __jfs_xattr_set+0xb6/0x160 fs/jfs/xattr.c:940
#3: ffff888056d64c60 (&jfs_ip->xattr_sem){+.+.}-{3:3}, at: __jfs_setxattr+0xe1/0x1000 fs/jfs/xattr.c:678
3 locks held by kworker/u4:11/5448:
4 locks held by kworker/u4:14/5546:
#0: ffff888142bb8938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1
#1: ffffc9000487fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285
#2: ffff88807deea0e0 (&type->s_umount_key#54){++++}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
#3: ffff888056d64bc8 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x1c7/0x520 fs/jfs/inode.c:102
2 locks held by udevd/5569:
1 lock held by syz.1.450/6273:
2 locks held by syz.3.451/6275:
2 locks held by syz.0.452/6277:
1 lock held by syz-executor/6282:
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
Call Trace:
dump_stack_lvl+0x168/0x230 lib/dump_stack.c:106
nmi_cpu_backtrace+0x397/0x3d0 lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x163/0x280 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:212 [inline]
watchdog+0xe0f/0xe50 kernel/hung_task.c:369
kthread+0x436/0x520 kernel/kthread.c:334
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 6281 Comm: syz.1.453 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
RIP: 0010:memory_is_nonzero mm/kasan/generic.c:101 [inline]
RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:128 [inline]
RIP: 0010:memory_is_poisoned mm/kasan/generic.c:159 [inline]
RIP: 0010:check_region_inline mm/kasan/generic.c:180 [inline]
RIP: 0010:kasan_check_range+0x5c/0x290 mm/kasan/generic.c:189
Code: 01 00 00 00 00 fc ff df 49 89 fb 49 c1 eb 03 49 b8 00 00 00 00 00 fc ff df 4f 8d 0c 03 48 8d 5c 37 ff 48 c1 eb 03 4e 8d 14 3b <4d> 89 d6 4d 29 ce 49 83 fe 10 7f 26 4d 85 f6 0f 84 39 01 00 00 48
RSP: 0000:ffffc900030efda0 EFLAGS: 00000a07
RAX: ffff888022981d01 RBX: 1ffff9200061dfc0 RCX: ffffffff815b4d2a
RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc900030efe00
RBP: ffffc900030efe70 R08: dffffc0000000000 R09: fffff5200061dfc0
R10: fffff5200061dfc1 R11: 1ffff9200061dfc0 R12: 0000000000000001
R13: 1ffff1100f510018 R14: ffff888022981dc0 R15: dffffc0000000001
FS: 00007f26d7c016c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f26cff77000 CR3: 000000004a843000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
instrument_atomic_read_write include/linux/instrumented.h:101 [inline]
atomic_long_try_cmpxchg include/linux/atomic/atomic-instrumented.h:1660 [inline]
rwsem_clear_reader_owned kernel/locking/rwsem.c:213 [inline]
__up_read+0x1ea/0x660 kernel/locking/rwsem.c:1326
mmap_read_unlock include/linux/mmap_lock.h:144 [inline]
do_user_addr_fault+0x673/0xc80 arch/x86/mm/fault.c:1382
handle_page_fault arch/x86/mm/fault.c:1445 [inline]
exc_page_fault+0x60/0x100 arch/x86/mm/fault.c:1501
asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:606
RIP: 0033:0x7f26d8853d46
Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01
RSP: 002b:00007f26d7c004a0 EFLAGS: 00010206
RAX: 0000000000796001 RBX: 00007f26d7c00540 RCX: 000000000000006a
RDX: 0000000000000055 RSI: 0000000000000001 RDI: 00007f26d7c005e0
RBP: 0000000000000102 R08: 00007f26cf7e1000 R09: 0000000000796000
R10: 0000000000000000 R11: 00007f26d7c00550 R12: 0000000000000001
R13: 00007f26d8a2f880 R14: 0000000000000000 R15: 00007f26d7c005e0