INFO: task jbd2/sda1-8:5165 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:jbd2/sda1-8 state:D stack:25816 pid:5165 tgid:5165 ppid:2 task_flags:0x240040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 io_schedule+0xbf/0x130 kernel/sched/core.c:7789 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:250 __wait_on_bit+0x65/0x180 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:105 [inline] __wait_on_buffer+0x64/0x70 fs/buffer.c:123 wait_on_buffer include/linux/buffer_head.h:420 [inline] jbd2_journal_commit_transaction+0x37d3/0x67f0 fs/jbd2/commit.c:808 kjournald2+0x1f4/0x760 fs/jbd2/journal.c:201 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 INFO: task syz-executor:5821 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:22816 pid:5821 tgid:5821 ppid:5820 task_flags:0x440100 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 io_schedule+0xbf/0x130 kernel/sched/core.c:7789 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:250 __wait_on_bit+0x65/0x180 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x910/0x12f0 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1242 __ext4_journal_get_write_access+0x6a/0x340 fs/ext4/ext4_jbd2.c:241 ext4_reserve_inode_write+0x1be/0x340 fs/ext4/inode.c:6290 __ext4_mark_inode_dirty+0x197/0x840 fs/ext4/inode.c:6465 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6502 __mark_inode_dirty+0x1f7/0x1670 fs/fs-writeback.c:2587 generic_update_time+0xcf/0xf0 fs/inode.c:2158 inode_update_time fs/inode.c:2171 [inline] file_update_time_flags+0x410/0x520 fs/inode.c:2398 ext4_page_mkwrite+0x33d/0x1880 fs/ext4/inode.c:6668 do_page_mkwrite+0x174/0x380 mm/memory.c:3528 wp_page_shared mm/memory.c:3929 [inline] do_wp_page+0xb5d/0x5010 mm/memory.c:4148 handle_pte_fault mm/memory.c:6289 [inline] __handle_mm_fault+0x1bd2/0x2bb0 mm/memory.c:6411 handle_mm_fault+0x3fe/0xad0 mm/memory.c:6580 do_user_addr_fault+0x60c/0x1370 arch/x86/mm/fault.c:1336 handle_page_fault arch/x86/mm/fault.c:1476 [inline] exc_page_fault+0x64/0xc0 arch/x86/mm/fault.c:1532 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618 RIP: 0033:0x7f814e47641f RSP: 002b:00007fff1eec1f90 EFLAGS: 00010202 RAX: 00007f814c6b4000 RBX: 00007fff1eec2490 RCX: 0000000000000001 RDX: 1ffffffff08b2431 RSI: 00005555894bd508 RDI: 0000000000000002 RBP: 00005555894c4750 R08: 00005555894bd540 R09: 0000000000002486 R10: 0000000000000001 R11: 0000000000000246 R12: 00007fff1eec22e0 R13: 00007fff1eec20d0 R14: 00007fff1eec2360 R15: 00007fff1eec1ff0 INFO: task syz.3.1923:14316 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.1923 state:D stack:26600 pid:14316 tgid:14316 ppid:5831 task_flags:0x440040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 io_schedule+0xbf/0x130 kernel/sched/core.c:7789 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:250 __wait_on_bit+0x65/0x180 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x910/0x12f0 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1242 __ext4_journal_get_write_access+0x6a/0x340 fs/ext4/ext4_jbd2.c:241 ext4_reserve_inode_write+0x1be/0x340 fs/ext4/inode.c:6290 __ext4_mark_inode_dirty+0x197/0x840 fs/ext4/inode.c:6465 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6502 __mark_inode_dirty+0x1f7/0x1670 fs/fs-writeback.c:2587 generic_update_time+0xcf/0xf0 fs/inode.c:2158 inode_update_time fs/inode.c:2171 [inline] file_update_time_flags+0x410/0x520 fs/inode.c:2398 ext4_page_mkwrite+0x33d/0x1880 fs/ext4/inode.c:6668 do_page_mkwrite+0x174/0x380 mm/memory.c:3528 do_shared_fault mm/memory.c:5831 [inline] do_fault+0x3fc/0x1ad0 mm/memory.c:5893 do_pte_missing mm/memory.c:4401 [inline] handle_pte_fault mm/memory.c:6273 [inline] __handle_mm_fault+0x1919/0x2bb0 mm/memory.c:6411 handle_mm_fault+0x3fe/0xad0 mm/memory.c:6580 do_user_addr_fault+0x60c/0x1370 arch/x86/mm/fault.c:1336 handle_page_fault arch/x86/mm/fault.c:1476 [inline] exc_page_fault+0x64/0xc0 arch/x86/mm/fault.c:1532 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618 RIP: 0033:0x7fe8ec46f17a RSP: 002b:00007ffd79ca9ac0 EFLAGS: 00010202 RAX: 0000001b314f7000 RBX: 00007fe8ed315720 RCX: 0000001b314f6ff8 RDX: 0000001b31124220 RSI: 0000000000000008 RDI: 00007fe8ed315720 RBP: ffffffff893ee3d3 R08: 00007fe8ec7e6038 R09: 00007fe8ec7d2000 R10: 00007fe8ebfff008 R11: 0000000000000007 R12: 0000000000000007 R13: 000000000000019b R14: ffffffff893ee364 R15: 000000000001393c INFO: task syz.0.1924:14324 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.1924 state:D stack:28168 pid:14324 tgid:14324 ppid:5833 task_flags:0x440040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 io_schedule+0xbf/0x130 kernel/sched/core.c:7789 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:250 __wait_on_bit+0x65/0x180 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x910/0x12f0 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1242 __ext4_journal_get_write_access+0x6a/0x340 fs/ext4/ext4_jbd2.c:241 ext4_reserve_inode_write+0x1be/0x340 fs/ext4/inode.c:6290 __ext4_mark_inode_dirty+0x197/0x840 fs/ext4/inode.c:6465 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6502 __mark_inode_dirty+0x1f7/0x1670 fs/fs-writeback.c:2587 generic_update_time+0xcf/0xf0 fs/inode.c:2158 inode_update_time fs/inode.c:2171 [inline] touch_atime+0x4f0/0x5d0 fs/inode.c:2243 file_accessed include/linux/fs.h:2254 [inline] ext4_file_mmap_prepare+0x4a6/0x5a0 fs/ext4/file.c:828 vfs_mmap_prepare include/linux/fs.h:2058 [inline] call_mmap_prepare mm/vma.c:2633 [inline] __mmap_region+0xede/0x2a00 mm/vma.c:2729 mmap_region+0x32b/0x3f0 mm/vma.c:2823 do_mmap+0xa3e/0x1210 mm/mmap.c:558 vm_mmap_pgoff+0x29e/0x470 mm/util.c:581 ksys_mmap_pgoff+0x32c/0x5c0 mm/mmap.c:604 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:89 [inline] __se_sys_mmap arch/x86/kernel/sys_x86_64.c:82 [inline] __x64_sys_mmap+0x125/0x190 arch/x86/kernel/sys_x86_64.c:82 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa16c38f803 RSP: 002b:00007ffec9e6a658 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 0000001b30e64000 RCX: 00007fa16c38f803 RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b30e64000 RBP: 0000000000400000 R08: 0000000000000004 R09: 0000000000040000 R10: 0000000000100001 R11: 0000000000000246 R12: 00000000000001f6 R13: 00000000000927c0 R14: 000000000009d9a4 R15: 00007ffec9e6a940 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline] #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6775 2 locks held by getty/5594: #0: ffff88803190b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 drivers/tty/n_tty.c:2211 3 locks held by syz-executor/5821: #0: ffff888076057bc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x117/0x580 mm/mmap_lock.c:259 #1: ffff88814dff4518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x174/0x380 mm/memory.c:3528 #2: ffff888031e70950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e7/0x1410 fs/jbd2/transaction.c:444 3 locks held by syz.3.1923/14316: #0: ffff8880332f5bc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x117/0x580 mm/mmap_lock.c:259 #1: ffff88814dff4518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x174/0x380 mm/memory.c:3528 #2: ffff888031e70950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e7/0x1410 fs/jbd2/transaction.c:444 3 locks held by syz.0.1924/14324: #0: ffff888020af4cc0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_write_lock_killable include/linux/mmap_lock.h:353 [inline] #0: ffff888020af4cc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 mm/util.c:579 #1: ffff88814dff4420 (sb_writers#4){.+.+}-{0:0}, at: file_accessed include/linux/fs.h:2254 [inline] #1: ffff88814dff4420 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x4a6/0x5a0 fs/ext4/file.c:828 #2: ffff888031e70950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e7/0x1410 fs/jbd2/transaction.c:444 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:161 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x133/0x180 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline] watchdog+0xe66/0x1180 kernel/hung_task.c:515 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:82 Code: 66 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 47 14 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 RAX: 00000000005297a1 RBX: 0000000000000000 RCX: ffffffff8b7616d9 RDX: 0000000000000000 RSI: ffffffff8dacbd52 RDI: ffffffff8bf2b780 RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 R13: ffffffff8e097b40 R14: ffffffff908901d0 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055d6f69ce660 CR3: 000000000e184000 CR4: 00000000003526f0 Call Trace: arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline] default_idle+0x13/0x20 arch/x86/kernel/process.c:767 default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:191 [inline] do_idle+0x38d/0x510 kernel/sched/idle.c:332 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:430 rest_init+0x16b/0x2b0 init/main.c:757 start_kernel+0x3ef/0x4d0 init/main.c:1206 x86_64_start_reservations+0x18/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x130/0x190 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x148