INFO: task syz-executor:5829 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:22104 pid:5829 tgid:5829 ppid:5828 task_flags:0x440100 flags:0x00080001 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7026 io_schedule+0xbf/0x130 kernel/sched/core.c:7871 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:250 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x93d/0x1320 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1241 __ext4_journal_get_write_access+0x6a/0x340 fs/ext4/ext4_jbd2.c:242 ext4_reserve_inode_write+0x1be/0x340 fs/ext4/inode.c:6326 __ext4_mark_inode_dirty+0x197/0x870 fs/ext4/inode.c:6501 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6538 __mark_inode_dirty+0x1eb/0xe40 fs/fs-writeback.c:2566 generic_update_time+0xcf/0xf0 fs/inode.c:2105 inode_update_time fs/inode.c:2118 [inline] __file_update_time fs/inode.c:2345 [inline] file_update_time+0x17d/0x1c0 fs/inode.c:2375 ext4_page_mkwrite+0x33d/0x1880 fs/ext4/inode.c:6704 do_page_mkwrite+0x171/0x380 mm/memory.c:3361 wp_page_shared mm/memory.c:3762 [inline] do_wp_page+0xb10/0x4f00 mm/memory.c:3981 handle_pte_fault mm/memory.c:6068 [inline] __handle_mm_fault+0x1b2d/0x2a50 mm/memory.c:6195 handle_mm_fault+0x589/0xd10 mm/memory.c:6364 do_user_addr_fault+0x60c/0x1370 arch/x86/mm/fault.c:1336 handle_page_fault arch/x86/mm/fault.c:1476 [inline] exc_page_fault+0x5c/0xb0 arch/x86/mm/fault.c:1532 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f81612781ff RSP: 002b:00007ffe7ce26fe0 EFLAGS: 00010202 RAX: 00007f815f338000 RBX: 00005555559b4630 RCX: 0000000000000003 RDX: 1ffffffff0c1395b RSI: 00005555559b4698 RDI: 0000000000000008 RBP: 00007ffe7ce272d0 R08: 00005555559b46c0 R09: 000000000000272b R10: 0000000000000001 R11: 00007ffe7ce274e0 R12: 00007ffe7ce27330 R13: 0000000000000004 R14: 00007ffe7ce27050 R15: 00007ffe7ce27120 INFO: task syz.2.24:6035 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.24 state:D stack:24056 pid:6035 tgid:6030 ppid:5848 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7026 io_schedule+0xbf/0x130 kernel/sched/core.c:7871 folio_wait_bit_common+0x3d5/0x9e0 mm/filemap.c:1317 folio_wait_writeback+0x3c/0x90 mm/page-writeback.c:3124 __filemap_fdatawait_range+0x11f/0x200 mm/filemap.c:539 file_write_and_wait_range+0x101/0x140 mm/filemap.c:798 ext4_sync_file+0x310/0xf10 fs/ext4/fsync.c:154 vfs_fsync_range+0x139/0x220 fs/sync.c:187 __do_sys_msync+0x3cb/0x5c0 mm/msync.c:96 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x4b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd2e558eec9 RSP: 002b:00007fd2e37f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a RAX: ffffffffffffffda RBX: 00007fd2e57e6090 RCX: 00007fd2e558eec9 RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 RBP: 00007fd2e5611f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fd2e57e6128 R14: 00007fd2e57e6090 R15: 00007ffeeb2c77f8 INFO: task syz.0.31:6063 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.31 state:D stack:26216 pid:6063 tgid:6063 ppid:5838 task_flags:0x440040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7026 io_schedule+0xbf/0x130 kernel/sched/core.c:7871 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:250 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x93d/0x1320 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1241 __ext4_journal_get_write_access+0x6a/0x340 fs/ext4/ext4_jbd2.c:242 ext4_reserve_inode_write+0x1be/0x340 fs/ext4/inode.c:6326 __ext4_mark_inode_dirty+0x197/0x870 fs/ext4/inode.c:6501 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6538 __mark_inode_dirty+0x1eb/0xe40 fs/fs-writeback.c:2566 generic_update_time+0xcf/0xf0 fs/inode.c:2105 inode_update_time fs/inode.c:2118 [inline] __file_update_time fs/inode.c:2345 [inline] file_update_time+0x17d/0x1c0 fs/inode.c:2375 ext4_page_mkwrite+0x33d/0x1880 fs/ext4/inode.c:6704 do_page_mkwrite+0x171/0x380 mm/memory.c:3361 wp_page_shared mm/memory.c:3762 [inline] do_wp_page+0xb10/0x4f00 mm/memory.c:3981 handle_pte_fault mm/memory.c:6068 [inline] __handle_mm_fault+0x1b2d/0x2a50 mm/memory.c:6195 handle_mm_fault+0x589/0xd10 mm/memory.c:6364 do_user_addr_fault+0x60c/0x1370 arch/x86/mm/fault.c:1336 handle_page_fault arch/x86/mm/fault.c:1476 [inline] exc_page_fault+0x5c/0xb0 arch/x86/mm/fault.c:1532 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7ff6c5c6ee47 RSP: 002b:00007fff474dcfa0 EFLAGS: 00010202 RAX: 0000001b31a23e10 RBX: 00007ff6c6b15720 RCX: ffffffff81a6dc49 RDX: 0000001b31a23e0c RSI: 0000000000000004 RDI: 00007ff6c6b15720 RBP: fffffffffffffe10 R08: 00007ff6c5fe6038 R09: 00007ff6c5fd2000 R10: 00007ff6c57ff008 R11: 000000000000000b R12: 00000000000001f0 R13: 0000000000000000 R14: 0000000000000000 R15: 000000000007ffff INFO: task syz.0.31:6065 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.31 state:D stack:23368 pid:6065 tgid:6063 ppid:5838 task_flags:0x400940 flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7026 io_schedule+0xbf/0x130 kernel/sched/core.c:7871 folio_wait_bit_common+0x3d5/0x9e0 mm/filemap.c:1317 folio_wait_writeback+0x3c/0x90 mm/page-writeback.c:3124 shrink_folio_list+0x1b00/0x4880 mm/vmscan.c:1264 shrink_inactive_list mm/vmscan.c:2050 [inline] shrink_list mm/vmscan.c:2287 [inline] shrink_lruvec+0xf46/0x2b00 mm/vmscan.c:5849 shrink_node_memcgs mm/vmscan.c:6051 [inline] shrink_node+0x982/0x3d50 mm/vmscan.c:6092 shrink_zones mm/vmscan.c:6336 [inline] do_try_to_free_pages+0x362/0x1920 mm/vmscan.c:6398 try_to_free_mem_cgroup_pages+0x31b/0x790 mm/vmscan.c:6726 mem_cgroup_resize_max+0x113/0x2b0 mm/memcontrol-v1.c:1480 mem_cgroup_write+0x295/0x3a0 mm/memcontrol-v1.c:1662 cgroup_file_write+0x1ec/0x790 kernel/cgroup/cgroup.c:4312 kernfs_fop_write_iter+0x3ac/0x570 fs/kernfs/file.c:352 iter_file_splice_write+0xa24/0x12e0 fs/splice.c:738 do_splice_from fs/splice.c:938 [inline] direct_splice_actor+0x192/0x6c0 fs/splice.c:1161 splice_direct_to_actor+0x345/0xa30 fs/splice.c:1105 do_splice_direct_actor fs/splice.c:1204 [inline] do_splice_direct+0x174/0x240 fs/splice.c:1230 do_sendfile+0xb06/0xe50 fs/read_write.c:1370 __do_sys_sendfile64 fs/read_write.c:1431 [inline] __se_sys_sendfile64 fs/read_write.c:1417 [inline] __x64_sys_sendfile64+0x1d8/0x220 fs/read_write.c:1417 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x4b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ff6c5d8eec9 RSP: 002b:00007ff6c6c0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007ff6c5fe6090 RCX: 00007ff6c5d8eec9 RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 RBP: 00007ff6c5e11f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ff6c5fe6128 R14: 00007ff6c5fe6090 R15: 00007fff474dcf68 INFO: task syz.3.34:6070 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.34 state:D stack:26264 pid:6070 tgid:6070 ppid:5841 task_flags:0x440040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7026 io_schedule+0xbf/0x130 kernel/sched/core.c:7871 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:250 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x93d/0x1320 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1241 __ext4_journal_get_write_access+0x6a/0x340 fs/ext4/ext4_jbd2.c:242 ext4_reserve_inode_write+0x1be/0x340 fs/ext4/inode.c:6326 __ext4_mark_inode_dirty+0x197/0x870 fs/ext4/inode.c:6501 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6538 __mark_inode_dirty+0x1eb/0xe40 fs/fs-writeback.c:2566 generic_update_time+0xcf/0xf0 fs/inode.c:2105 inode_update_time fs/inode.c:2118 [inline] __file_update_time fs/inode.c:2345 [inline] file_update_time+0x17d/0x1c0 fs/inode.c:2375 ext4_page_mkwrite+0x33d/0x1880 fs/ext4/inode.c:6704 do_page_mkwrite+0x171/0x380 mm/memory.c:3361 do_shared_fault mm/memory.c:5649 [inline] do_fault mm/memory.c:5711 [inline] do_pte_missing+0x29d/0x3ba0 mm/memory.c:4234 handle_pte_fault mm/memory.c:6052 [inline] __handle_mm_fault+0x152a/0x2a50 mm/memory.c:6195 handle_mm_fault+0x589/0xd10 mm/memory.c:6364 do_user_addr_fault+0x60c/0x1370 arch/x86/mm/fault.c:1336 handle_page_fault arch/x86/mm/fault.c:1476 [inline] exc_page_fault+0x5c/0xb0 arch/x86/mm/fault.c:1532 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7fa69f86eefa RSP: 002b:00007ffc4e2d5490 EFLAGS: 00010202 RAX: 0000001b31d23000 RBX: 00007fa6a0715720 RCX: 0000001b31d22ff8 RDX: 0000001b31924220 RSI: 0000000000000008 RDI: 00007fa6a0715720 RBP: ffffffff8aed1908 R08: 00007fa69fbe6038 R09: 00007fa69fbd2000 R10: 00007fa69f3ff008 R11: 0000000000000018 R12: 0000000000000018 R13: 00000000000001ca R14: ffffffff8aed1f93 R15: 000000000000032a INFO: task syz.1.35:6073 blocked for more than 145 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.35 state:D stack:27128 pid:6073 tgid:6073 ppid:5845 task_flags:0x440040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7026 io_schedule+0xbf/0x130 kernel/sched/core.c:7871 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:250 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x93d/0x1320 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1241 __ext4_journal_get_write_access+0x6a/0x340 fs/ext4/ext4_jbd2.c:242 ext4_reserve_inode_write+0x1be/0x340 fs/ext4/inode.c:6326 __ext4_mark_inode_dirty+0x197/0x870 fs/ext4/inode.c:6501 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6538 __mark_inode_dirty+0x1eb/0xe40 fs/fs-writeback.c:2566 generic_update_time+0xcf/0xf0 fs/inode.c:2105 inode_update_time fs/inode.c:2118 [inline] touch_atime+0x4f0/0x5d0 fs/inode.c:2190 file_accessed include/linux/fs.h:2663 [inline] ext4_file_mmap_prepare+0x4a6/0x5a0 fs/ext4/file.c:828 vfs_mmap_prepare include/linux/fs.h:2400 [inline] call_mmap_prepare mm/vma.c:2585 [inline] __mmap_region+0xee2/0x27b0 mm/vma.c:2653 mmap_region+0x32b/0x3f0 mm/vma.c:2739 do_mmap+0xa3e/0x1210 mm/mmap.c:558 vm_mmap_pgoff+0x29e/0x470 mm/util.c:580 ksys_mmap_pgoff+0x32c/0x5c0 mm/mmap.c:604 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:89 [inline] __se_sys_mmap arch/x86/kernel/sys_x86_64.c:82 [inline] __x64_sys_mmap+0x125/0x190 arch/x86/kernel/sys_x86_64.c:82 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x4b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7057d8ef03 RSP: 002b:00007ffdc8a76668 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 0000001b31764000 RCX: 00007f7057d8ef03 RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b31764000 RBP: 0000000000600000 R08: 0000000000000004 R09: 0000000000040000 R10: 0000000000100001 R11: 0000000000000246 R12: 0000000000000008 R13: 00000000000927c0 R14: 00000000000183b4 R15: 00007ffdc8a76950 Showing all locks held in the system: 1 lock held by rcu_exp_gp_kthr/18: #0: ffff8880b863a458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:646 [inline] #0: ffff8880b863a458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 kernel/sched/core.c:631 1 lock held by khungtaskd/31: #0: ffffffff8e1c3320 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff8e1c3320 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #0: ffffffff8e1c3320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6775 4 locks held by klogd/5201: #0: ffff8880b863a458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:646 [inline] #0: ffff8880b863a458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 kernel/sched/core.c:631 #1: ffff8880b8624088 (psi_seq){-.-.}-{0:0}, at: psi_sched_switch kernel/sched/stats.h:220 [inline] #1: ffff8880b8624088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 kernel/sched/core.c:6923 #2: ffff8880b8624088 (psi_seq){-.-.}-{0:0}, at: psi_sched_switch kernel/sched/stats.h:220 [inline] #2: ffff8880b8624088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 kernel/sched/core.c:6923 #3: ffff8880b863a458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:646 [inline] #3: ffff8880b863a458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 kernel/sched/core.c:631 2 locks held by getty/5604: #0: ffff88814e0150a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 drivers/tty/n_tty.c:2222 3 locks held by syz-executor/5829: #0: ffff88802587d088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11b/0x530 mm/mmap_lock.c:147 #1: ffff8880343aa520 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 mm/memory.c:3361 #2: ffff8880343ae950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 fs/jbd2/transaction.c:444 3 locks held by syz.0.31/6063: #0: ffff88802f1021c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11b/0x530 mm/mmap_lock.c:147 #1: ffff8880343aa520 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 mm/memory.c:3361 #2: ffff8880343ae950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 fs/jbd2/transaction.c:444 3 locks held by syz.0.31/6065: #0: ffff88807bd30428 (sb_writers#10){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 fs/splice.c:1105 #1: ffff88802441bc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880594655a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880594655a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 3 locks held by syz.3.34/6070: #0: ffff888078e1f588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11b/0x530 mm/mmap_lock.c:147 #1: ffff8880343aa520 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 mm/memory.c:3361 #2: ffff8880343ae950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 fs/jbd2/transaction.c:444 3 locks held by syz.1.35/6073: #0: ffff88803268ed60 (&mm->mmap_lock){++++}-{4:4}, at: mmap_write_lock_killable include/linux/mmap_lock.h:415 [inline] #0: ffff88803268ed60 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 mm/util.c:578 #1: ffff8880343aa428 (sb_writers#4){.+.+}-{0:0}, at: file_accessed include/linux/fs.h:2663 [inline] #1: ffff8880343aa428 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x4a6/0x5a0 fs/ext4/file.c:828 #2: ffff8880343ae950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 fs/jbd2/transaction.c:444 2 locks held by dhcpcd/6096: #0: ffff88802ae34258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1669 [inline] #0: ffff88802ae34258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 net/packet/af_packet.c:3251 #1: ffffffff8e1ce8b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 kernel/rcu/tree_exp.h:343 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline] watchdog+0xf0e/0x1260 kernel/hung_task.c:491 kthread+0x3c2/0x780 kernel/kthread.c:463 ret_from_fork+0x56d/0x730 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:82 Code: 89 5e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 b7 1c 00 fb f4 bc 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 RSP: 0018:ffffffff8de07e08 EFLAGS: 000002c6 RAX: 000000000014b871 RBX: 0000000000000000 RCX: ffffffff8b4d4f19 RDX: 0000000000000000 RSI: ffffffff8d9b4b00 RDI: ffffffff8bd00dc0 RBP: fffffbfff1bd2f00 R08: 0000000000000001 R09: ffffed10170c6655 R10: ffff8880b86332ab R11: 0000000000000000 R12: 0000000000000000 R13: ffffffff8de97800 R14: ffffffff905fae90 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff888124e79000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005576e6739660 CR3: 000000000df82000 CR4: 00000000003526f0 Call Trace: arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline] default_idle+0x13/0x20 arch/x86/kernel/process.c:757 default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:190 [inline] do_idle+0x38d/0x500 kernel/sched/idle.c:330 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:428 rest_init+0x16b/0x2b0 init/main.c:745 start_kernel+0x3f3/0x4e0 init/main.c:1099 x86_64_start_reservations+0x18/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x130/0x190 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x148