INFO: task kworker/u4:3:52 blocked for more than 143 seconds. Not tainted 6.2.0-syzkaller-13277-g2eb29d59ddf0 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u4:3 state:D stack:22928 pid:52 ppid:2 flags:0x00004000 Workqueue: loop2 loop_workfn Call Trace: context_switch kernel/sched/core.c:5304 [inline] __schedule+0xcce/0x5b20 kernel/sched/core.c:6622 schedule+0xde/0x1a0 kernel/sched/core.c:6698 io_schedule+0xbe/0x130 kernel/sched/core.c:8884 folio_wait_bit_common+0x394/0x9b0 mm/filemap.c:1301 __folio_lock mm/filemap.c:1664 [inline] folio_lock include/linux/pagemap.h:952 [inline] folio_lock include/linux/pagemap.h:948 [inline] __filemap_get_folio+0xbab/0xdc0 mm/filemap.c:1936 shmem_get_folio_gfp+0x422/0x1950 mm/shmem.c:1877 shmem_get_folio mm/shmem.c:2068 [inline] shmem_file_read_iter+0x593/0xa40 mm/shmem.c:2633 call_read_iter include/linux/fs.h:1845 [inline] do_iter_readv_writev+0x2e0/0x3b0 fs/read_write.c:733 do_iter_read+0x2f2/0x750 fs/read_write.c:796 vfs_iter_read+0x74/0xa0 fs/read_write.c:838 lo_read_simple drivers/block/loop.c:290 [inline] do_req_filebacked drivers/block/loop.c:500 [inline] loop_handle_cmd drivers/block/loop.c:1879 [inline] loop_process_work+0x1591/0x2110 drivers/block/loop.c:1914 process_one_work+0x9bf/0x1820 kernel/workqueue.c:2390 worker_thread+0x669/0x1090 kernel/workqueue.c:2537 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 INFO: task syz-executor.3:5126 blocked for more than 143 seconds. Not tainted 6.2.0-syzkaller-13277-g2eb29d59ddf0 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.3 state:D stack:24032 pid:5126 ppid:1 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5304 [inline] __schedule+0xcce/0x5b20 kernel/sched/core.c:6622 schedule+0xde/0x1a0 kernel/sched/core.c:6698 io_schedule+0xbe/0x130 kernel/sched/core.c:8884 folio_wait_bit_common+0x394/0x9b0 mm/filemap.c:1301 folio_wait_writeback+0x47/0x3b0 mm/page-writeback.c:3127 __filemap_fdatawait_range+0x10f/0x210 mm/filemap.c:525 filemap_write_and_wait_range mm/filemap.c:687 [inline] filemap_write_and_wait_range+0xe6/0x120 mm/filemap.c:669 filemap_write_and_wait include/linux/pagemap.h:60 [inline] sync_blockdev block/bdev.c:198 [inline] sync_blockdev+0x6b/0x90 block/bdev.c:194 exfat_sync_fs+0x9b/0x160 fs/exfat/super.c:66 sync_filesystem.part.0+0x13c/0x1d0 fs/sync.c:66 sync_filesystem+0x8f/0xc0 fs/sync.c:43 generic_shutdown_super+0x74/0x480 fs/super.c:473 kill_block_super+0x9b/0xf0 fs/super.c:1398 deactivate_locked_super+0x98/0x160 fs/super.c:331 deactivate_super+0xb1/0xd0 fs/super.c:362 cleanup_mnt+0x2ae/0x3d0 fs/namespace.c:1177 task_work_run+0x16f/0x270 kernel/task_work.c:179 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] exit_to_user_mode_loop kernel/entry/common.c:171 [inline] exit_to_user_mode_prepare+0x23c/0x250 kernel/entry/common.c:203 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline] syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:296 do_syscall_64+0x46/0xb0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f6d6e68d567 RSP: 002b:00007fff46524648 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6d6e68d567 RDX: 00007fff4652471b RSI: 000000000000000a RDI: 00007fff46524710 RBP: 00007fff46524710 R08: 00000000ffffffff R09: 00007fff465244e0 R10: 0000555556107873 R11: 0000000000000246 R12: 00007f6d6e6e6b24 R13: 00007fff465257d0 R14: 0000555556107810 R15: 00007fff46525810 INFO: task kworker/u4:8:7241 blocked for more than 143 seconds. Not tainted 6.2.0-syzkaller-13277-g2eb29d59ddf0 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u4:8 state:D stack:26936 pid:7241 ppid:2 flags:0x00004000 Workqueue: loop3 loop_workfn Call Trace: context_switch kernel/sched/core.c:5304 [inline] __schedule+0xcce/0x5b20 kernel/sched/core.c:6622 schedule+0xde/0x1a0 kernel/sched/core.c:6698 io_schedule+0xbe/0x130 kernel/sched/core.c:8884 folio_wait_bit_common+0x394/0x9b0 mm/filemap.c:1301 __folio_lock mm/filemap.c:1664 [inline] folio_lock include/linux/pagemap.h:952 [inline] folio_lock include/linux/pagemap.h:948 [inline] __filemap_get_folio+0xbab/0xdc0 mm/filemap.c:1936 shmem_get_folio_gfp+0x422/0x1950 mm/shmem.c:1877 shmem_get_folio mm/shmem.c:2068 [inline] shmem_write_begin+0x14a/0x380 mm/shmem.c:2561 generic_perform_write+0x256/0x570 mm/filemap.c:3926 __generic_file_write_iter+0x2ae/0x500 mm/filemap.c:4054 generic_file_write_iter+0xe3/0x350 mm/filemap.c:4086 call_write_iter include/linux/fs.h:1851 [inline] do_iter_readv_writev+0x20b/0x3b0 fs/read_write.c:735 do_iter_write+0x182/0x700 fs/read_write.c:861 vfs_iter_write+0x74/0xa0 fs/read_write.c:902 lo_write_bvec drivers/block/loop.c:249 [inline] lo_write_simple drivers/block/loop.c:271 [inline] do_req_filebacked drivers/block/loop.c:495 [inline] loop_handle_cmd drivers/block/loop.c:1879 [inline] loop_process_work+0xdac/0x2110 drivers/block/loop.c:1914 process_one_work+0x9bf/0x1820 kernel/workqueue.c:2390 worker_thread+0x669/0x1090 kernel/workqueue.c:2537 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 INFO: task syz-executor.4:12236 blocked for more than 144 seconds. Not tainted 6.2.0-syzkaller-13277-g2eb29d59ddf0 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:26880 pid:12236 ppid:5129 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5304 [inline] __schedule+0xcce/0x5b20 kernel/sched/core.c:6622 schedule+0xde/0x1a0 kernel/sched/core.c:6698 io_schedule+0xbe/0x130 kernel/sched/core.c:8884 bit_wait_io+0x16/0xe0 kernel/sched/wait_bit.c:209 __wait_on_bit_lock+0x11f/0x1a0 kernel/sched/wait_bit.c:90 out_of_line_wait_on_bit_lock+0xd9/0x110 kernel/sched/wait_bit.c:117 wait_on_bit_lock_io include/linux/wait_bit.h:208 [inline] __lock_buffer+0x66/0x70 fs/buffer.c:70 lock_buffer include/linux/buffer_head.h:400 [inline] buffer_migrate_lock_buffers mm/migrate.c:705 [inline] __buffer_migrate_folio+0x6bb/0x830 mm/migrate.c:751 move_to_new_folio+0x17a/0x6e0 mm/migrate.c:978 migrate_folio_move mm/migrate.c:1289 [inline] migrate_pages_batch+0xffc/0x3660 mm/migrate.c:1821 migrate_pages+0x1b73/0x2300 mm/migrate.c:1973 compact_zone+0x1d3c/0x3ea0 mm/compaction.c:2420 compact_node+0x12a/0x1c0 mm/compaction.c:2717 compact_nodes mm/compaction.c:2730 [inline] sysctl_compaction_handler+0x117/0x160 mm/compaction.c:2774 proc_sys_call_handler+0x49c/0x6d0 fs/proc/proc_sysctl.c:604 call_write_iter include/linux/fs.h:1851 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x9ed/0xe10 fs/read_write.c:584 ksys_write+0x12b/0x250 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f954488c0f9 RSP: 002b:00007f9545559168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f95449abf80 RCX: 00007f954488c0f9 RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000003 RBP: 00007f95448e7ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc9aab0d4f R14: 00007f9545559300 R15: 0000000000022000 INFO: task syz-executor.2:12237 blocked for more than 144 seconds. Not tainted 6.2.0-syzkaller-13277-g2eb29d59ddf0 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:27704 pid:12237 ppid:5120 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5304 [inline] __schedule+0xcce/0x5b20 kernel/sched/core.c:6622 schedule+0xde/0x1a0 kernel/sched/core.c:6698 io_schedule+0xbe/0x130 kernel/sched/core.c:8884 bit_wait_io+0x16/0xe0 kernel/sched/wait_bit.c:209 __wait_on_bit+0x64/0x180 kernel/sched/wait_bit.c:49 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:101 [inline] __wait_on_buffer fs/buffer.c:123 [inline] wait_on_buffer include/linux/buffer_head.h:388 [inline] __bread_slow fs/buffer.c:1221 [inline] __bread_gfp+0x29e/0x330 fs/buffer.c:1413 sb_bread include/linux/buffer_head.h:341 [inline] exfat_load_upcase_table fs/exfat/nls.c:672 [inline] exfat_create_upcase_table+0x5c5/0xd80 fs/exfat/nls.c:784 __exfat_fill_super fs/exfat/super.c:597 [inline] exfat_fill_super+0x17c1/0x30f0 fs/exfat/super.c:649 get_tree_bdev+0x444/0x760 fs/super.c:1294 vfs_get_tree+0x8d/0x350 fs/super.c:1501 do_new_mount fs/namespace.c:3042 [inline] path_mount+0x1342/0x1e40 fs/namespace.c:3372 do_mount fs/namespace.c:3385 [inline] __do_sys_mount fs/namespace.c:3594 [inline] __se_sys_mount fs/namespace.c:3571 [inline] __x64_sys_mount+0x283/0x300 fs/namespace.c:3571 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fabfa88d62a RSP: 002b:00007fabf93fdf88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00000000000014e6 RCX: 00007fabfa88d62a RDX: 0000000020000640 RSI: 0000000020001540 RDI: 00007fabf93fdfe0 RBP: 00007fabf93fe020 R08: 00007fabf93fe020 R09: 0000000020000000 R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000640 R13: 0000000020001540 R14: 00007fabf93fdfe0 R15: 0000000020000040 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/12: #0: ffffffff8c794e70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 kernel/rcu/tasks.h:510 1 lock held by rcu_tasks_trace/13: #0: ffffffff8c794b70 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 kernel/rcu/tasks.h:510 1 lock held by khungtaskd/27: #0: ffffffff8c7959c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x340 kernel/locking/lockdep.c:6495 2 locks held by kworker/u4:3/52: #0: ffff8880822a1138 ((wq_completion)loop2){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff8880822a1138 ((wq_completion)loop2){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff8880822a1138 ((wq_completion)loop2){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff8880822a1138 ((wq_completion)loop2){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff8880822a1138 ((wq_completion)loop2){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff8880822a1138 ((wq_completion)loop2){+.+.}-{0:0}, at: process_one_work+0x86d/0x1820 kernel/workqueue.c:2361 #1: ffffc90000bd7da8 ((work_completion)(&worker->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1820 kernel/workqueue.c:2365 3 locks held by kworker/u4:7/2897: #0: ffff8880b983c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2f/0x120 kernel/sched/core.c:539 #1: ffffc9000b557da8 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1820 kernel/workqueue.c:2365 #2: ffff8880b9829698 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x5a/0x1f0 kernel/time/timer.c:999 2 locks held by getty/4755: #0: ffff888027c19098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 drivers/tty/tty_ldisc.c:244 #1: ffffc900015a02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 drivers/tty/n_tty.c:2177 2 locks held by syz-executor.3/5126: #0: ffff88807a9180e0 (&type->s_umount_key#51){+.+.}-{3:3}, at: deactivate_super+0xa9/0xd0 fs/super.c:361 #1: ffff888082e820e0 (&sbi->s_lock#2){+.+.}-{3:3}, at: exfat_sync_fs+0x6d/0x160 fs/exfat/super.c:65 4 locks held by kworker/u4:8/7241: #0: ffff88803fa42938 ((wq_completion)loop3){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff88803fa42938 ((wq_completion)loop3){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff88803fa42938 ((wq_completion)loop3){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff88803fa42938 ((wq_completion)loop3){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline] #0: ffff88803fa42938 ((wq_completion)loop3){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline] #0: ffff88803fa42938 ((wq_completion)loop3){+.+.}-{0:0}, at: process_one_work+0x86d/0x1820 kernel/workqueue.c:2361 #1: ffffc90014c57da8 ((work_completion)(&worker->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1820 kernel/workqueue.c:2365 #2: ffff888016636460 (sb_writers#5){.+.+}-{0:0}, at: process_one_work+0x9bf/0x1820 kernel/workqueue.c:2390 #3: ffff888083b3c7a0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline] #3: ffff888083b3c7a0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x92/0x350 mm/filemap.c:4083 2 locks held by syz-executor.4/12236: #0: ffff8880221fb9e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 fs/file.c:1046 #1: ffff88802bd28460 (sb_writers#3){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 fs/read_write.c:637 1 lock held by syz-executor.2/12237: #0: ffff8880278ce0e0 (&type->s_umount_key#50/1){+.+.}-{3:3}, at: alloc_super+0x22e/0xb60 fs/super.c:228 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.2.0-syzkaller-13277-g2eb29d59ddf0 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd9/0x150 lib/dump_stack.c:106 nmi_cpu_backtrace+0x316/0x3e0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x33f/0x460 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline] watchdog+0xe94/0x11e0 kernel/hung_task.c:379 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 skipped: idling at native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline] NMI backtrace for cpu 0 skipped: idling at arch_safe_halt arch/x86/include/asm/irqflags.h:86 [inline] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x40/0x50 drivers/acpi/processor_idle.c:112