INFO: task jbd2/sda1-8:3522 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:jbd2/sda1-8 state:D stack:25360 pid: 3522 ppid: 2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5049 [inline] __schedule+0x11c3/0x4350 kernel/sched/core.c:6395 schedule+0x11b/0x1e0 kernel/sched/core.c:6478 io_schedule+0x7c/0xd0 kernel/sched/core.c:8503 bit_wait_io+0xd/0xc0 kernel/sched/wait_bit.c:209 __wait_on_bit kernel/sched/wait_bit.c:49 [inline] out_of_line_wait_on_bit+0x173/0x230 kernel/sched/wait_bit.c:64 wait_on_buffer include/linux/buffer_head.h:390 [inline] jbd2_journal_commit_transaction+0x2f0b/0x5c30 fs/jbd2/commit.c:848 kjournald2+0x45a/0x900 fs/jbd2/journal.c:213 kthread+0x42e/0x520 kernel/kthread.c:334 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287 INFO: task syz-executor:4169 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:22896 pid: 4169 ppid: 4168 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5049 [inline] __schedule+0x11c3/0x4350 kernel/sched/core.c:6395 schedule+0x11b/0x1e0 kernel/sched/core.c:6478 io_schedule+0x7c/0xd0 kernel/sched/core.c:8503 bit_wait_io+0xd/0xc0 kernel/sched/wait_bit.c:209 __wait_on_bit kernel/sched/wait_bit.c:49 [inline] out_of_line_wait_on_bit+0x173/0x230 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:101 [inline] do_get_write_access+0x134/0xe40 fs/jbd2/transaction.c:1116 jbd2_journal_get_write_access+0x108/0x140 fs/jbd2/transaction.c:1251 __ext4_journal_get_write_access+0x24d/0x6e0 fs/ext4/ext4_jbd2.c:235 ext4_reserve_inode_write+0x203/0x2e0 fs/ext4/inode.c:5866 __ext4_mark_inode_dirty+0x13b/0x6c0 fs/ext4/inode.c:6050 ext4_dirty_inode+0xbf/0x100 fs/ext4/inode.c:6087 __mark_inode_dirty+0x2c8/0xc90 fs/fs-writeback.c:2480 generic_update_time+0x1cd/0x1f0 fs/inode.c:1881 inode_update_time fs/inode.c:1894 [inline] file_update_time+0x3c0/0x440 fs/inode.c:2083 ext4_page_mkwrite+0x1bc/0x1250 fs/ext4/inode.c:6205 do_page_mkwrite+0x168/0x3c0 mm/memory.c:2922 wp_page_shared+0x163/0x6c0 mm/memory.c:3259 handle_pte_fault mm/memory.c:4668 [inline] __handle_mm_fault mm/memory.c:4785 [inline] handle_mm_fault+0x1fbd/0x4440 mm/memory.c:4883 do_user_addr_fault+0x494/0xc90 arch/x86/mm/fault.c:1355 handle_page_fault arch/x86/mm/fault.c:1443 [inline] exc_page_fault+0x60/0x100 arch/x86/mm/fault.c:1496 asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:606 RIP: 0033:0x7f1e0f3845e3 RSP: 002b:00007fff7bdc02d0 EFLAGS: 00010206 RAX: 00007f1e07f12458 RBX: 00007fff7bdc0400 RCX: 0000000000000000 RDX: 00007f1e07f12454 RSI: 0000000000000008 RDI: 00007fff7bdc0400 RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 R10: 00007fff7bdc03e0 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000ba8 R14: fffffffffffff458 R15: 0000000000000000 INFO: task udevd:4176 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:26960 pid: 4176 ppid: 3560 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5049 [inline] __schedule+0x11c3/0x4350 kernel/sched/core.c:6395 schedule+0x11b/0x1e0 kernel/sched/core.c:6478 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6537 __mutex_lock_common+0xdf5/0x2400 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743 device_lock include/linux/device.h:809 [inline] uevent_show+0x16c/0x320 drivers/base/core.c:2408 dev_attr_show+0x50/0xb0 drivers/base/core.c:2110 sysfs_kf_seq_show+0x316/0x4c0 fs/sysfs/file.c:61 seq_read_iter+0x460/0xc50 fs/seq_file.c:230 call_read_iter include/linux/fs.h:2173 [inline] new_sync_read fs/read_write.c:404 [inline] vfs_read+0x75e/0xd50 fs/read_write.c:485 ksys_read+0x153/0x260 fs/read_write.c:623 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7f4d88624407 RSP: 002b:00007ffe7449ab90 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 00007f4d88536880 RCX: 00007f4d88624407 RDX: 0000000000001000 RSI: 000055e04fdc6a00 RDI: 0000000000000008 RBP: 00007f4d8876cff0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a R13: 00007f4d8876cea0 R14: 0000000000000000 R15: 000055e04fdaf280 INFO: task kworker/1:6:4254 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:6 state:D stack:19376 pid: 4254 ppid: 2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5049 [inline] __schedule+0x11c3/0x4350 kernel/sched/core.c:6395 schedule+0x11b/0x1e0 kernel/sched/core.c:6478 io_schedule+0x7c/0xd0 kernel/sched/core.c:8503 bit_wait_io+0xd/0xc0 kernel/sched/wait_bit.c:209 __wait_on_bit kernel/sched/wait_bit.c:49 [inline] out_of_line_wait_on_bit+0x173/0x230 kernel/sched/wait_bit.c:64 wait_on_buffer include/linux/buffer_head.h:390 [inline] __ext4_find_entry+0x1306/0x1d20 fs/ext4/namei.c:1683 ext4_lookup_entry fs/ext4/namei.c:1776 [inline] ext4_lookup+0x382/0x930 fs/ext4/namei.c:1844 __lookup_slow+0x29d/0x410 fs/namei.c:1671 lookup_slow+0x53/0x70 fs/namei.c:1688 walk_component+0x314/0x460 fs/namei.c:1984 link_path_walk+0x688/0xde0 fs/namei.c:-1 path_openat+0x28e/0x2fb0 fs/namei.c:3789 do_file_open_root+0x2e5/0x6b0 fs/namei.c:3845 file_open_root+0x163/0x1c0 fs/open.c:1235 kernel_read_file_from_path_initns+0x14d/0x220 fs/kernel_read_file.c:163 fw_get_filesystem_firmware+0x3c2/0xa50 drivers/base/firmware_loader/main.c:536 _request_firmware+0x9a7/0x12b0 drivers/base/firmware_loader/main.c:856 request_firmware+0x32/0x50 drivers/base/firmware_loader/main.c:925 as102_fw_upload+0x1a7/0x300 drivers/media/usb/as102/as102_fw.c:180 as102_dvb_register+0x493/0x5b0 drivers/media/usb/as102/as102_drv.c:355 as102_usb_probe+0x528/0x780 drivers/media/usb/as102/as102_usb_drv.c:399 usb_probe_interface+0x5be/0xae0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x276/0xc70 drivers/base/dd.c:595 __driver_probe_device+0x1f5/0x390 drivers/base/dd.c:775 driver_probe_device+0x4f/0x420 drivers/base/dd.c:805 __device_attach_driver+0x2b0/0x500 drivers/base/dd.c:927 bus_for_each_drv+0x184/0x210 drivers/base/bus.c:429 __device_attach+0x2a7/0x480 drivers/base/dd.c:999 bus_probe_device+0xba/0x1d0 drivers/base/bus.c:489 device_add+0xbcf/0x1050 drivers/base/core.c:3427 usb_set_configuration+0x19d5/0x2030 drivers/usb/core/message.c:2223 usb_generic_driver_probe+0x89/0x150 drivers/usb/core/generic.c:238 usb_probe_device+0x126/0x250 drivers/usb/core/driver.c:293 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x276/0xc70 drivers/base/dd.c:595 __driver_probe_device+0x1f5/0x390 drivers/base/dd.c:775 driver_probe_device+0x4f/0x420 drivers/base/dd.c:805 __device_attach_driver+0x2b0/0x500 drivers/base/dd.c:927 bus_for_each_drv+0x184/0x210 drivers/base/bus.c:429 __device_attach+0x2a7/0x480 drivers/base/dd.c:999 bus_probe_device+0xba/0x1d0 drivers/base/bus.c:489 device_add+0xbcf/0x1050 drivers/base/core.c:3427 usb_new_device+0x9f6/0x15d0 drivers/usb/core/hub.c:2637 hub_port_connect drivers/usb/core/hub.c:5502 [inline] hub_port_connect_change drivers/usb/core/hub.c:5642 [inline] port_event drivers/usb/core/hub.c:5804 [inline] hub_event+0x2b8d/0x5260 drivers/usb/core/hub.c:5886 process_one_work+0x867/0xff0 kernel/workqueue.c:2310 worker_thread+0xad7/0x12a0 kernel/workqueue.c:2457 kthread+0x42e/0x520 kernel/kthread.c:334 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287 INFO: task syz.2.53:4412 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.53 state:D stack:27568 pid: 4412 ppid: 4189 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5049 [inline] __schedule+0x11c3/0x4350 kernel/sched/core.c:6395 schedule+0x11b/0x1e0 kernel/sched/core.c:6478 io_schedule+0x7c/0xd0 kernel/sched/core.c:8503 bit_wait_io+0xd/0xc0 kernel/sched/wait_bit.c:209 __wait_on_bit kernel/sched/wait_bit.c:49 [inline] out_of_line_wait_on_bit+0x173/0x230 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:101 [inline] do_get_write_access+0x134/0xe40 fs/jbd2/transaction.c:1116 jbd2_journal_get_write_access+0x108/0x140 fs/jbd2/transaction.c:1251 __ext4_journal_get_write_access+0x24d/0x6e0 fs/ext4/ext4_jbd2.c:235 ext4_reserve_inode_write+0x203/0x2e0 fs/ext4/inode.c:5866 __ext4_mark_inode_dirty+0x13b/0x6c0 fs/ext4/inode.c:6050 ext4_dirty_inode+0xbf/0x100 fs/ext4/inode.c:6087 __mark_inode_dirty+0x2c8/0xc90 fs/fs-writeback.c:2480 generic_update_time+0x1cd/0x1f0 fs/inode.c:1881 inode_update_time fs/inode.c:1894 [inline] file_update_time+0x3c0/0x440 fs/inode.c:2083 ext4_page_mkwrite+0x1bc/0x1250 fs/ext4/inode.c:6205 do_page_mkwrite+0x168/0x3c0 mm/memory.c:2922 do_shared_fault mm/memory.c:4328 [inline] do_fault mm/memory.c:4396 [inline] handle_pte_fault mm/memory.c:4650 [inline] __handle_mm_fault mm/memory.c:4785 [inline] handle_mm_fault+0x1e47/0x4440 mm/memory.c:4883 do_user_addr_fault+0x494/0xc90 arch/x86/mm/fault.c:1355 handle_page_fault arch/x86/mm/fault.c:1443 [inline] exc_page_fault+0x60/0x100 arch/x86/mm/fault.c:1496 asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:606 RIP: 0033:0x7f3fbc3e1c09 RSP: 002b:00007ffd845a8340 EFLAGS: 00010202 RAX: 0000001b32a24000 RBX: 0000000000000000 RCX: 00000000005ffde8 RDX: 0000001b32a23ffc RSI: 00000000005ffde8 RDI: 00007f3fbd2c3700 RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f3fbc780000 R10: 00007f3fbd2c3700 R11: 0000000000000000 R12: 0000000000000000 R13: 000000000000bc08 R14: ffffffff819d82f4 R15: 00007f3fbd2c3720 INFO: task syz.1.66:4444 blocked for more than 145 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.66 state:D stack:26704 pid: 4444 ppid: 4188 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5049 [inline] __schedule+0x11c3/0x4350 kernel/sched/core.c:6395 schedule+0x11b/0x1e0 kernel/sched/core.c:6478 io_schedule+0x7c/0xd0 kernel/sched/core.c:8503 bit_wait_io+0xd/0xc0 kernel/sched/wait_bit.c:209 __wait_on_bit kernel/sched/wait_bit.c:49 [inline] out_of_line_wait_on_bit+0x173/0x230 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:101 [inline] do_get_write_access+0x134/0xe40 fs/jbd2/transaction.c:1116 jbd2_journal_get_write_access+0x108/0x140 fs/jbd2/transaction.c:1251 __ext4_journal_get_write_access+0x24d/0x6e0 fs/ext4/ext4_jbd2.c:235 ext4_reserve_inode_write+0x203/0x2e0 fs/ext4/inode.c:5866 __ext4_mark_inode_dirty+0x13b/0x6c0 fs/ext4/inode.c:6050 ext4_dirty_inode+0xbf/0x100 fs/ext4/inode.c:6087 __mark_inode_dirty+0x2c8/0xc90 fs/fs-writeback.c:2480 generic_update_time+0x1cd/0x1f0 fs/inode.c:1881 inode_update_time fs/inode.c:1894 [inline] file_update_time+0x3c0/0x440 fs/inode.c:2083 ext4_page_mkwrite+0x1bc/0x1250 fs/ext4/inode.c:6205 do_page_mkwrite+0x168/0x3c0 mm/memory.c:2922 do_shared_fault mm/memory.c:4328 [inline] do_fault mm/memory.c:4396 [inline] handle_pte_fault mm/memory.c:4650 [inline] __handle_mm_fault mm/memory.c:4785 [inline] handle_mm_fault+0x1e47/0x4440 mm/memory.c:4883 do_user_addr_fault+0x494/0xc90 arch/x86/mm/fault.c:1355 handle_page_fault arch/x86/mm/fault.c:1443 [inline] exc_page_fault+0x60/0x100 arch/x86/mm/fault.c:1496 asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:606 RIP: 0033:0x7f903d389ba9 RSP: 002b:00007fffef6bc2e0 EFLAGS: 00010202 RAX: 0000001b32924000 RBX: ffffffff838136e1 RCX: 0000001b32923ff8 RDX: 00000000005ffde8 RSI: 00000000005ffde8 RDI: 00007f903e26b700 RBP: 0000000000000001 R08: 0000000000000000 R09: 00007f903d728000 R10: 00007f903e26b700 R11: 0000000000000000 R12: 00007f903d73c038 R13: 00000000000068f1 R14: ffffffff8381357d R15: 00007f903e26b720 INFO: task syz.0.67:4446 blocked for more than 145 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.67 state:D stack:27664 pid: 4446 ppid: 4191 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5049 [inline] __schedule+0x11c3/0x4350 kernel/sched/core.c:6395 schedule+0x11b/0x1e0 kernel/sched/core.c:6478 io_schedule+0x7c/0xd0 kernel/sched/core.c:8503 bit_wait_io+0xd/0xc0 kernel/sched/wait_bit.c:209 __wait_on_bit kernel/sched/wait_bit.c:49 [inline] out_of_line_wait_on_bit+0x173/0x230 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:101 [inline] do_get_write_access+0x134/0xe40 fs/jbd2/transaction.c:1116 jbd2_journal_get_write_access+0x108/0x140 fs/jbd2/transaction.c:1251 __ext4_journal_get_write_access+0x24d/0x6e0 fs/ext4/ext4_jbd2.c:235 ext4_reserve_inode_write+0x203/0x2e0 fs/ext4/inode.c:5866 __ext4_mark_inode_dirty+0x13b/0x6c0 fs/ext4/inode.c:6050 ext4_dirty_inode+0xbf/0x100 fs/ext4/inode.c:6087 __mark_inode_dirty+0x2c8/0xc90 fs/fs-writeback.c:2480 generic_update_time+0x1cd/0x1f0 fs/inode.c:1881 inode_update_time fs/inode.c:1894 [inline] file_update_time+0x3c0/0x440 fs/inode.c:2083 ext4_page_mkwrite+0x1bc/0x1250 fs/ext4/inode.c:6205 do_page_mkwrite+0x168/0x3c0 mm/memory.c:2922 do_shared_fault mm/memory.c:4328 [inline] do_fault mm/memory.c:4396 [inline] handle_pte_fault mm/memory.c:4650 [inline] __handle_mm_fault mm/memory.c:4785 [inline] handle_mm_fault+0x1e47/0x4440 mm/memory.c:4883 do_user_addr_fault+0x494/0xc90 arch/x86/mm/fault.c:1355 handle_page_fault arch/x86/mm/fault.c:1443 [inline] exc_page_fault+0x60/0x100 arch/x86/mm/fault.c:1496 asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:606 RIP: 0033:0x7f4722fd2ba9 RSP: 002b:00007ffd8a726f00 EFLAGS: 00010202 RAX: 0000001b32821000 RBX: ffffffff87f5d3b6 RCX: 0000001b32820ff8 RDX: 0000001b32224220 RSI: 0000000000000008 RDI: 00007f4723eb4720 RBP: 00000000000003f5 R08: 00007f472336f000 R09: 00007f4723371000 R10: 0000000087f5d3ba R11: 0000000000000003 R12: 00007f4723385038 R13: 000000000000a835 R14: ffffffff87f5deab R15: 00007f4723eb4720 INFO: task dhcpcd-run-hook:4449 blocked for more than 145 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:dhcpcd-run-hook state:D stack:25664 pid: 4449 ppid: 3853 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5049 [inline] __schedule+0x11c3/0x4350 kernel/sched/core.c:6395 schedule+0x11b/0x1e0 kernel/sched/core.c:6478 io_schedule+0x7c/0xd0 kernel/sched/core.c:8503 bit_wait_io+0xd/0xc0 kernel/sched/wait_bit.c:209 __wait_on_bit kernel/sched/wait_bit.c:49 [inline] out_of_line_wait_on_bit+0x173/0x230 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:101 [inline] do_get_write_access+0x134/0xe40 fs/jbd2/transaction.c:1116 jbd2_journal_get_write_access+0x108/0x140 fs/jbd2/transaction.c:1251 __ext4_journal_get_write_access+0x24d/0x6e0 fs/ext4/ext4_jbd2.c:235 ext4_reserve_inode_write+0x203/0x2e0 fs/ext4/inode.c:5866 __ext4_mark_inode_dirty+0x13b/0x6c0 fs/ext4/inode.c:6050 ext4_dirty_inode+0xbf/0x100 fs/ext4/inode.c:6087 __mark_inode_dirty+0x2c8/0xc90 fs/fs-writeback.c:2480 generic_update_time fs/inode.c:1881 [inline] inode_update_time fs/inode.c:1894 [inline] touch_atime+0x3b5/0x640 fs/inode.c:1966 pick_link+0x4a3/0xdc0 fs/namei.c:1765 step_into+0xac6/0xcd0 fs/namei.c:1840 link_path_walk+0x688/0xde0 fs/namei.c:-1 path_lookupat+0x83/0x420 fs/namei.c:2462 filename_lookup+0x21e/0x550 fs/namei.c:2492 user_path_at_empty+0x40/0x190 fs/namei.c:2934 user_path_at include/linux/namei.h:57 [inline] vfs_statx+0x107/0x4c0 fs/stat.c:221 vfs_fstatat fs/stat.c:243 [inline] __do_sys_newfstatat fs/stat.c:411 [inline] __se_sys_newfstatat fs/stat.c:405 [inline] __x64_sys_newfstatat+0x15f/0x200 fs/stat.c:405 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7f3f2f686b0a RSP: 002b:00007ffc3d7a18c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f3f2f686b0a RDX: 00007ffc3d7a18d8 RSI: 0000560ab402d040 RDI: 00000000ffffff9c RBP: 0000560ab401e130 R08: 0000000000000001 R09: 3c00000040001201 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3f2f80e320 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 INFO: task syz.3.68:4451 blocked for more than 146 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.68 state:D stack:27664 pid: 4451 ppid: 4197 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5049 [inline] __schedule+0x11c3/0x4350 kernel/sched/core.c:6395 schedule+0x11b/0x1e0 kernel/sched/core.c:6478 io_schedule+0x7c/0xd0 kernel/sched/core.c:8503 bit_wait_io+0xd/0xc0 kernel/sched/wait_bit.c:209 __wait_on_bit kernel/sched/wait_bit.c:49 [inline] out_of_line_wait_on_bit+0x173/0x230 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:101 [inline] do_get_write_access+0x134/0xe40 fs/jbd2/transaction.c:1116 jbd2_journal_get_write_access+0x108/0x140 fs/jbd2/transaction.c:1251 __ext4_journal_get_write_access+0x24d/0x6e0 fs/ext4/ext4_jbd2.c:235 ext4_reserve_inode_write+0x203/0x2e0 fs/ext4/inode.c:5866 __ext4_mark_inode_dirty+0x13b/0x6c0 fs/ext4/inode.c:6050 ext4_dirty_inode+0xbf/0x100 fs/ext4/inode.c:6087 __mark_inode_dirty+0x2c8/0xc90 fs/fs-writeback.c:2480 generic_update_time+0x1cd/0x1f0 fs/inode.c:1881 inode_update_time fs/inode.c:1894 [inline] file_update_time+0x3c0/0x440 fs/inode.c:2083 ext4_page_mkwrite+0x1bc/0x1250 fs/ext4/inode.c:6205 do_page_mkwrite+0x168/0x3c0 mm/memory.c:2922 do_shared_fault mm/memory.c:4328 [inline] do_fault mm/memory.c:4396 [inline] handle_pte_fault mm/memory.c:4650 [inline] __handle_mm_fault mm/memory.c:4785 [inline] handle_mm_fault+0x1e47/0x4440 mm/memory.c:4883 do_user_addr_fault+0x494/0xc90 arch/x86/mm/fault.c:1355 handle_page_fault arch/x86/mm/fault.c:1443 [inline] exc_page_fault+0x60/0x100 arch/x86/mm/fault.c:1496 asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:606 RIP: 0033:0x7f164b220ea3 RSP: 002b:00007ffe23319900 EFLAGS: 00010246 RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b32564000 RDX: 0000001b32524000 RSI: 0000000000600000 RDI: 00007f164b59b708 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe23319b90 Showing all locks held in the system: 2 locks held by kworker/0:1/13: #0: ffff8880b8e3a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 kernel/sched/core.c:475 #1: ffff8880b8e27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x517/0x810 kernel/sched/psi.c:891 1 lock held by khungtaskd/27: #0: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 3 locks held by kworker/u4:2/155: #0: ffff8880b8e3a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 kernel/sched/core.c:475 #1: ffff8880b8e27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x4c3/0x810 kernel/sched/psi.c:882 #2: ffff8880b8e280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 kernel/time/timer.c:946 2 locks held by getty/3945: #0: ffff88814c851098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:252 #1: ffffc900026562e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 drivers/tty/n_tty.c:2158 3 locks held by syz-executor/4169: #0: ffff88807a12dc28 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_trylock include/linux/mmap_lock.h:136 [inline] #0: ffff88807a12dc28 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 arch/x86/mm/fault.c:1296 #1: ffff88814c9f6558 (sb_pagefaults){.+.+}-{0:0}, at: __sb_start_write include/linux/fs.h:1817 [inline] #1: ffff88814c9f6558 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs.h:1916 [inline] #1: ffff88814c9f6558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 fs/ext4/inode.c:6204 #2: ffff88814ca02990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 fs/jbd2/transaction.c:462 4 locks held by udevd/4176: #0: ffff88801f9a09e0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0x9d/0xc50 fs/seq_file.c:182 #1: ffff888020df2c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x55/0x3c0 fs/kernfs/file.c:112 #2: ffff88805bf0e748 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 fs/kernfs/file.c:113 #3: ffff88807dbb5220 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:809 [inline] #3: ffff88807dbb5220 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320 drivers/base/core.c:2408 6 locks held by kworker/1:6/4254: #0: ffff88801c71b938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 kernel/workqueue.c:-1 #1: ffffc900031efd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 kernel/workqueue.c:2285 #2: ffff888025470220 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:809 [inline] #2: ffff888025470220 (&dev->mutex){....}-{3:3}, at: hub_event+0x178/0x5260 drivers/usb/core/hub.c:5832 #3: ffff88807dbb5220 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:809 [inline] #3: ffff88807dbb5220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 drivers/base/dd.c:974 #4: ffff88807e2641a8 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:809 [inline] #4: ffff88807e2641a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 drivers/base/dd.c:974 #5: ffff8880734867a0 (&type->i_mutex_dir_key#4){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:803 [inline] #5: ffff8880734867a0 (&type->i_mutex_dir_key#4){++++}-{3:3}, at: lookup_slow+0x46/0x70 fs/namei.c:1687 3 locks held by kworker/u4:5/4281: #0: ffff888019f90138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 kernel/workqueue.c:-1 #1: ffffc9000326fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 kernel/workqueue.c:2285 #2: ffff8881407720e0 (&type->s_umount_key#41){.+.+}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418 3 locks held by syz.2.53/4412: #0: ffff88807bc8ce28 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_trylock include/linux/mmap_lock.h:136 [inline] #0: ffff88807bc8ce28 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 arch/x86/mm/fault.c:1296 #1: ffff88814c9f6558 (sb_pagefaults){.+.+}-{0:0}, at: __sb_start_write include/linux/fs.h:1817 [inline] #1: ffff88814c9f6558 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs.h:1916 [inline] #1: ffff88814c9f6558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 fs/ext4/inode.c:6204 #2: ffff88814ca02990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 fs/jbd2/transaction.c:462 3 locks held by syz.1.66/4444: #0: ffff88807bc78828 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_trylock include/linux/mmap_lock.h:136 [inline] #0: ffff88807bc78828 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 arch/x86/mm/fault.c:1296 #1: ffff88814c9f6558 (sb_pagefaults){.+.+}-{0:0}, at: __sb_start_write include/linux/fs.h:1817 [inline] #1: ffff88814c9f6558 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs.h:1916 [inline] #1: ffff88814c9f6558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 fs/ext4/inode.c:6204 #2: ffff88814ca02990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 fs/jbd2/transaction.c:462 3 locks held by syz.0.67/4446: #0: ffff88807bc8ab28 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_trylock include/linux/mmap_lock.h:136 [inline] #0: ffff88807bc8ab28 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 arch/x86/mm/fault.c:1296 #1: ffff88814c9f6558 (sb_pagefaults){.+.+}-{0:0}, at: __sb_start_write include/linux/fs.h:1817 [inline] #1: ffff88814c9f6558 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs.h:1916 [inline] #1: ffff88814c9f6558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 fs/ext4/inode.c:6204 #2: ffff88814ca02990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 fs/jbd2/transaction.c:462 2 locks held by dhcpcd-run-hook/4449: #0: ffff88814c9f6460 (sb_writers#5){.+.+}-{0:0}, at: pick_link+0x4a3/0xdc0 fs/namei.c:1765 #1: ffff88814ca02990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 fs/jbd2/transaction.c:462 3 locks held by syz.3.68/4451: #0: ffff88807bc89628 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_trylock include/linux/mmap_lock.h:136 [inline] #0: ffff88807bc89628 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 arch/x86/mm/fault.c:1296 #1: ffff88814c9f6558 (sb_pagefaults){.+.+}-{0:0}, at: __sb_start_write include/linux/fs.h:1817 [inline] #1: ffff88814c9f6558 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs.h:1916 [inline] #1: ffff88814c9f6558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 fs/ext4/inode.c:6204 #2: ffff88814ca02990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 fs/jbd2/transaction.c:462 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 Call Trace: dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106 nmi_cpu_backtrace+0x3a2/0x3d0 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x163/0x280 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:212 [inline] watchdog+0xe1b/0xe60 kernel/hung_task.c:369 kthread+0x42e/0x520 kernel/kthread.c:334 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 skipped: idling at native_safe_halt arch/x86/include/asm/irqflags.h:51 [inline] NMI backtrace for cpu 0 skipped: idling at arch_safe_halt arch/x86/include/asm/irqflags.h:89 [inline] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 arch/x86/kernel/process.c:729