INFO: task syz-executor:5783 blocked for more than 143 se[ 942.406254][ T38] INFO: task syz-executor:5783 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:19784 pid:5783 tgid:5783 ppid:5782 task_flags:0x440100 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1480/0x50a0 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0x165/0x360 kernel/sched/core.c:6960 io_schedule+0x81/0xe0 kernel/sched/core.c:7789 bit_wait_io+0x11/0xd0 kernel/sched/wait_bit.c:250 __wait_on_bit+0xb9/0x300 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0x123/0x170 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x5fc/0xf30 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x230 fs/jbd2/transaction.c:1242 __ext4_journal_get_write_access+0x1c3/0x570 fs/ext4/ext4_jbd2.c:241 ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:6290 __ext4_mark_inode_dirty+0x14b/0x6e0 fs/ext4/inode.c:6465 ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:6502 __mark_inode_dirty+0x390/0x1330 fs/fs-writeback.c:2587 generic_update_time fs/inode.c:2155 [inline] inode_update_time fs/inode.c:2168 [inline] file_update_time_flags+0x442/0x4f0 fs/inode.c:2395 ext4_page_mkwrite+0x20f/0x1190 fs/ext4/inode.c:6668 do_page_mkwrite+0x150/0x310 mm/memory.c:3528 wp_page_shared mm/memory.c:3929 [inline] do_wp_page+0x25e8/0x4970 mm/memory.c:4148 handle_pte_fault mm/memory.c:6289 [inline] __handle_mm_fault mm/memory.c:6411 [inline] handle_mm_fault+0x9f6/0x1330 mm/memory.c:6580 do_user_addr_fault+0xa7c/0x1380 arch/x86/mm/fault.c:1336 handle_page_fault arch/x86/mm/fault.c:1476 [inline] exc_page_fault+0x82/0x100 arch/x86/mm/fault.c:1532 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618 RIP: 0033:0x7fae5d797416 RSP: 002b:00007ffc2a718b08 EFLAGS: 00010202 RAX: 00007fae56a38000 RBX: 0000555582b7abb0 RCX: 0000000000000001 RDX: 00000000000000a6 RSI: 0000555582b882e0 RDI: 00007fae56a38000 RBP: 0000555582b7ce50 R08: 0000000000000007 R09: 0000555582b7e9b0 R10: ff066f3c1887c2c3 R11: 0000000000000202 R12: 0000000000000001 R13: 0000000000000002 R14: 00007ffc2a718b20 R15: 0000000000000000 INFO: task syz.2.2340:13089 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.2340 state:D stack:24112 pid:13089 tgid:13089 ppid:5806 task_flags:0x440040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1480/0x50a0 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0x165/0x360 kernel/sched/core.c:6960 io_schedule+0x81/0xe0 kernel/sched/core.c:7789 bit_wait_io+0x11/0xd0 kernel/sched/wait_bit.c:250 __wait_on_bit+0xb9/0x300 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0x123/0x170 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x5fc/0xf30 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x230 fs/jbd2/transaction.c:1242 __ext4_journal_get_write_access+0x1c3/0x570 fs/ext4/ext4_jbd2.c:241 ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:6290 __ext4_mark_inode_dirty+0x14b/0x6e0 fs/ext4/inode.c:6465 ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:6502 __mark_inode_dirty+0x390/0x1330 fs/fs-writeback.c:2587 generic_update_time fs/inode.c:2155 [inline] inode_update_time fs/inode.c:2168 [inline] file_update_time_flags+0x442/0x4f0 fs/inode.c:2395 ext4_page_mkwrite+0x20f/0x1190 fs/ext4/inode.c:6668 do_page_mkwrite+0x150/0x310 mm/memory.c:3528 do_shared_fault mm/memory.c:5831 [inline] do_fault mm/memory.c:5893 [inline] do_pte_missing+0x78b/0x27a0 mm/memory.c:4401 handle_pte_fault mm/memory.c:6273 [inline] __handle_mm_fault mm/memory.c:6411 [inline] handle_mm_fault+0xcc1/0x1330 mm/memory.c:6580 do_user_addr_fault+0xa7c/0x1380 arch/x86/mm/fault.c:1336 handle_page_fault arch/x86/mm/fault.c:1476 [inline] exc_page_fault+0x82/0x100 arch/x86/mm/fault.c:1532 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618 RIP: 0033:0x7f025f7af11a RSP: 002b:00007ffc8cad9630 EFLAGS: 00010202 RAX: 0000001b2ee23000 RBX: 00007f0260655720 RCX: 0000001b2ee22ff8 RDX: 0000001b2ea24220 RSI: 0000000000000008 RDI: 00007f0260655720 RBP: ffffffff8229a007 R08: 00007f025fb26128 R09: 00007f025fb12000 R10: 00007f025ef35008 R11: 0000000000000012 R12: 0000000000000012 R13: 00000000000001d9 R14: ffffffff8229a367 R15: 00000000000005e0 INFO: task syz.7.2341:13094 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.7.2341 state:D stack:27032 pid:13094 tgid:13094 ppid:8630 task_flags:0x440040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1480/0x50a0 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0x165/0x360 kernel/sched/core.c:6960 io_schedule+0x81/0xe0 kernel/sched/core.c:7789 bit_wait_io+0x11/0xd0 kernel/sched/wait_bit.c:250 __wait_on_bit+0xb9/0x300 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0x123/0x170 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x5fc/0xf30 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x230 fs/jbd2/transaction.c:1242 __ext4_journal_get_write_access+0x1c3/0x570 fs/ext4/ext4_jbd2.c:241 ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:6290 __ext4_mark_inode_dirty+0x14b/0x6e0 fs/ext4/inode.c:6465 ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:6502 __mark_inode_dirty+0x390/0x1330 fs/fs-writeback.c:2587 generic_update_time fs/inode.c:2155 [inline] inode_update_time fs/inode.c:2168 [inline] file_update_time_flags+0x442/0x4f0 fs/inode.c:2395 ext4_page_mkwrite+0x20f/0x1190 fs/ext4/inode.c:6668 do_page_mkwrite+0x150/0x310 mm/memory.c:3528 do_shared_fault mm/memory.c:5831 [inline] do_fault mm/memory.c:5893 [inline] do_pte_missing+0x78b/0x27a0 mm/memory.c:4401 handle_pte_fault mm/memory.c:6273 [inline] __handle_mm_fault mm/memory.c:6411 [inline] handle_mm_fault+0xcc1/0x1330 mm/memory.c:6580 do_user_addr_fault+0xa7c/0x1380 arch/x86/mm/fault.c:1336 handle_page_fault arch/x86/mm/fault.c:1476 [inline] exc_page_fault+0x82/0x100 arch/x86/mm/fault.c:1532 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618 RIP: 0033:0x7fed9c435ad3 RSP: 002b:00007ffda93dacc0 EFLAGS: 00010246 RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000001b2fd24000 RSI: 0000000000400000 RDI: 00007fed9c66e090 RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 00000000000927c0 R14: 00000000000c1be5 R15: 00007ffda93daf70 Showing all locks held in the system: 1 lock held by khungtaskd/38: #0: ffffffff8d5ae880 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff8d5ae880 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline] #0: ffffffff8d5ae880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775 2 locks held by getty/5555: #0: ffff8880349b50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 drivers/tty/n_tty.c:2211 3 locks held by syz-executor/5783: #0: ffff888034539088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1a7/0x4a0 mm/mmap_lock.c:259 #1: ffff888034be25f8 (sb_pagefaults){.+.+}-{0:0}, at: percpu_down_read_freezable include/linux/percpu-rwsem.h:83 [inline] #1: ffff888034be25f8 (sb_pagefaults){.+.+}-{0:0}, at: __sb_start_write include/linux/fs/super.h:19 [inline] #1: ffff888034be25f8 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline] #1: ffff888034be25f8 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1f7/0x1190 fs/ext4/inode.c:6667 #2: ffff888034be8bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0 fs/jbd2/transaction.c:444 3 locks held by syz.2.2340/13089: #0: ffff88802617e308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1a7/0x4a0 mm/mmap_lock.c:259 #1: ffff888034be25f8 (sb_pagefaults){.+.+}-{0:0}, at: percpu_down_read_freezable include/linux/percpu-rwsem.h:83 [inline] #1: ffff888034be25f8 (sb_pagefaults){.+.+}-{0:0}, at: __sb_start_write include/linux/fs/super.h:19 [inline] #1: ffff888034be25f8 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline] #1: ffff888034be25f8 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1f7/0x1190 fs/ext4/inode.c:6667 #2: ffff888034be8bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0 fs/jbd2/transaction.c:444 3 locks held by syz.7.2341/13094: #0: ffff888039b791c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1a7/0x4a0 mm/mmap_lock.c:259 #1: ffff888034be25f8 (sb_pagefaults){.+.+}-{0:0}, at: percpu_down_read_freezable include/linux/percpu-rwsem.h:83 [inline] #1: ffff888034be25f8 (sb_pagefaults){.+.+}-{0:0}, at: __sb_start_write include/linux/fs/super.h:19 [inline] #1: ffff888034be25f8 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline] #1: ffff888034be25f8 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1f7/0x1190 fs/ext4/inode.c:6667 #2: ffff888034be8bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0 fs/jbd2/transaction.c:444 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline] watchdog+0xf95/0xfe0 kernel/hung_task.c:515 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:82 Code: 03 ca 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 66 15 00 f3 0f 1e fa fb f4 d8 c9 03 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffffff8d207d80 EFLAGS: 000002c2 RAX: c90095dbc3d70500 RBX: ffffffff819663da RCX: c90095dbc3d70500 RDX: 0000000000000001 RSI: ffffffff8ce0970f RDI: ffffffff8b3f4be0 RBP: ffffffff8d207ea8 R08: ffff8880b8833c5b R09: 1ffff1101710678b R10: dffffc0000000000 R11: ffffed101710678c R12: ffffffff8edb0a70 R13: 1ffffffff1a60668 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff888126d06000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000056032aa68660 CR3: 000000000d3a8000 CR4: 00000000003526f0 Call Trace: arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline] default_idle+0x13/0x20 arch/x86/kernel/process.c:767 default_idle_call+0x73/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:191 [inline] do_idle+0x1ea/0x520 kernel/sched/idle.c:332 cpu_startup_entry+0x44/0x60 kernel/sched/idle.c:430 rest_init+0x2de/0x300 init/main.c:757 start_kernel+0x3a7/0x400 init/main.c:1206 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x143/0x1c0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x147