INFO: task jbd2/sda1-8:5162 blocked for more than 143 seconds. Tainted: G U 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:jbd2/sda1-8 state:D stack:25992 pid:5162 tgid:5162 ppid:2 task_flags:0x240040 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x116f/0x5de0 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6860 io_schedule+0xbf/0x130 kernel/sched/core.c:7742 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:105 [inline] __wait_on_buffer+0x64/0x70 fs/buffer.c:123 wait_on_buffer include/linux/buffer_head.h:422 [inline] jbd2_journal_commit_transaction+0x382e/0x6830 fs/jbd2/commit.c:808 kjournald2+0x1f4/0x760 fs/jbd2/journal.c:201 kthread+0x3c2/0x780 kernel/kthread.c:464 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task syz-executor:5812 blocked for more than 143 seconds. Tainted: G U 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:23240 pid:5812 tgid:5812 ppid:5810 task_flags:0x440100 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x116f/0x5de0 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6860 io_schedule+0xbf/0x130 kernel/sched/core.c:7742 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x93d/0x12a0 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1241 __ext4_journal_get_write_access+0x6a/0x340 fs/ext4/ext4_jbd2.c:241 ext4_reserve_inode_write+0x1be/0x320 fs/ext4/inode.c:5892 __ext4_mark_inode_dirty+0x197/0x870 fs/ext4/inode.c:6066 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6103 __mark_inode_dirty+0x1eb/0xe50 fs/fs-writeback.c:2527 generic_update_time+0xcf/0xf0 fs/inode.c:2064 inode_update_time fs/inode.c:2077 [inline] __file_update_time fs/inode.c:2305 [inline] file_update_time+0x17d/0x1c0 fs/inode.c:2335 ext4_page_mkwrite+0x35e/0x1750 fs/ext4/inode.c:6221 do_page_mkwrite+0x171/0x380 mm/memory.c:3287 wp_page_shared mm/memory.c:3688 [inline] do_wp_page+0xb9e/0x58e0 mm/memory.c:3907 handle_pte_fault mm/memory.c:6013 [inline] __handle_mm_fault+0x1ada/0x2a40 mm/memory.c:6140 handle_mm_fault+0x3fe/0xad0 mm/memory.c:6309 do_user_addr_fault+0x60c/0x1370 arch/x86/mm/fault.c:1337 handle_page_fault arch/x86/mm/fault.c:1480 [inline] exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1538 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f31bbc77e83 RSP: 002b:00007fff7f32d710 EFLAGS: 00010206 RAX: 00000000000000ac RBX: 00000000000000ac RCX: 00000000000000ad RDX: ffffffff8a9f9d87 RSI: 000055556b7db670 RDI: 00007f31b9c00000 RBP: 00007fff7f32da00 R08: 000055556b7db688 R09: 00000000000000b9 R10: 00007f31bbc00000 R11: 00007fff7f32dc10 R12: 00007fff7f32da60 R13: 0000000000000004 R14: 00007fff7f32d780 R15: 00007fff7f32d850 INFO: task syz.2.28:6005 blocked for more than 144 seconds. Tainted: G U 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.28 state:D stack:19640 pid:6005 tgid:6005 ppid:5825 task_flags:0x400640 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x116f/0x5de0 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6860 io_schedule+0xbf/0x130 kernel/sched/core.c:7742 folio_wait_bit_common+0x3d6/0x9e0 mm/filemap.c:1317 __folio_lock mm/filemap.c:1664 [inline] lock_folio_maybe_drop_mmap mm/filemap.c:3190 [inline] filemap_fault+0xd62/0x2740 mm/filemap.c:3424 __do_fault+0x10a/0x490 mm/memory.c:5098 do_read_fault mm/memory.c:5518 [inline] do_fault mm/memory.c:5652 [inline] do_pte_missing+0x1031/0x3fb0 mm/memory.c:4160 handle_pte_fault mm/memory.c:5997 [inline] __handle_mm_fault+0x103d/0x2a40 mm/memory.c:6140 handle_mm_fault+0x3fe/0xad0 mm/memory.c:6309 faultin_page mm/gup.c:1193 [inline] __get_user_pages+0x771/0x36f0 mm/gup.c:1491 __get_user_pages_locked mm/gup.c:1757 [inline] get_dump_page+0x257/0x3d0 mm/gup.c:2275 dump_user_range+0x1c3/0xb30 fs/coredump.c:953 elf_core_dump+0x288a/0x3a90 fs/binfmt_elf.c:2128 do_coredump+0x3183/0x4480 fs/coredump.c:759 get_signal+0x22e3/0x26d0 kernel/signal.c:3019 arch_do_signal_or_restart+0x8f/0x7a0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] irqentry_exit_to_user_mode+0x13f/0x280 kernel/entry/common.c:231 asm_exc_stack_segment+0x26/0x30 arch/x86/include/asm/idtentry.h:616 RIP: 0033:0x7f18b578e971 RSP: 002b:8000000000000000 EFLAGS: 00010217 RAX: 0000000000000000 RBX: 00007f18b59b5fa0 RCX: 00007f18b578e969 RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000020003b4b RBP: 00007f18b5810ab1 R08: 00000000000001b0 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f18b59b5fa0 R15: 00007fff3858c4e8 INFO: task syz.2.41:6078 blocked for more than 144 seconds. Tainted: G U 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.41 state:D stack:18104 pid:6078 tgid:6078 ppid:5825 task_flags:0x400640 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x116f/0x5de0 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6860 io_schedule+0xbf/0x130 kernel/sched/core.c:7742 folio_wait_bit_common+0x3d6/0x9e0 mm/filemap.c:1317 __folio_lock mm/filemap.c:1664 [inline] lock_folio_maybe_drop_mmap mm/filemap.c:3190 [inline] filemap_fault+0xd62/0x2740 mm/filemap.c:3424 __do_fault+0x10a/0x490 mm/memory.c:5098 do_read_fault mm/memory.c:5518 [inline] do_fault mm/memory.c:5652 [inline] do_pte_missing+0x1031/0x3fb0 mm/memory.c:4160 handle_pte_fault mm/memory.c:5997 [inline] __handle_mm_fault+0x103d/0x2a40 mm/memory.c:6140 handle_mm_fault+0x3fe/0xad0 mm/memory.c:6309 faultin_page mm/gup.c:1193 [inline] __get_user_pages+0x771/0x36f0 mm/gup.c:1491 __get_user_pages_locked mm/gup.c:1757 [inline] get_dump_page+0x257/0x3d0 mm/gup.c:2275 dump_user_range+0x1c3/0xb30 fs/coredump.c:953 elf_core_dump+0x288a/0x3a90 fs/binfmt_elf.c:2128 do_coredump+0x3183/0x4480 fs/coredump.c:759 get_signal+0x22e3/0x26d0 kernel/signal.c:3019 arch_do_signal_or_restart+0x8f/0x7a0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] irqentry_exit_to_user_mode+0x13f/0x280 kernel/entry/common.c:231 asm_exc_stack_segment+0x26/0x30 arch/x86/include/asm/idtentry.h:616 RIP: 0033:0x7f18b578e971 RSP: 002b:8000000000000000 EFLAGS: 00010217 RAX: 0000000000000000 RBX: 00007f18b59b5fa0 RCX: 00007f18b578e969 RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000020003b4b RBP: 00007f18b5810ab1 R08: 00000000000001b0 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f18b59b5fa0 R15: 00007fff3858c4e8 INFO: task syz.2.101:6407 blocked for more than 144 seconds. Tainted: G U 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.101 state:D stack:24056 pid:6407 tgid:6407 ppid:5825 task_flags:0x440040 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x116f/0x5de0 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6860 io_schedule+0xbf/0x130 kernel/sched/core.c:7742 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x93d/0x12a0 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1241 __ext4_journal_get_write_access+0x6a/0x340 fs/ext4/ext4_jbd2.c:241 ext4_reserve_inode_write+0x1be/0x320 fs/ext4/inode.c:5892 __ext4_mark_inode_dirty+0x197/0x870 fs/ext4/inode.c:6066 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6103 __mark_inode_dirty+0x1eb/0xe50 fs/fs-writeback.c:2527 generic_update_time+0xcf/0xf0 fs/inode.c:2064 inode_update_time fs/inode.c:2077 [inline] __file_update_time fs/inode.c:2305 [inline] file_update_time+0x17d/0x1c0 fs/inode.c:2335 ext4_page_mkwrite+0x35e/0x1750 fs/ext4/inode.c:6221 do_page_mkwrite+0x171/0x380 mm/memory.c:3287 do_shared_fault mm/memory.c:5594 [inline] do_fault mm/memory.c:5656 [inline] do_pte_missing+0x29c/0x3fb0 mm/memory.c:4160 handle_pte_fault mm/memory.c:5997 [inline] __handle_mm_fault+0x103d/0x2a40 mm/memory.c:6140 handle_mm_fault+0x3fe/0xad0 mm/memory.c:6309 do_user_addr_fault+0x7a6/0x1370 arch/x86/mm/fault.c:1388 handle_page_fault arch/x86/mm/fault.c:1480 [inline] exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1538 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f18b566eada RSP: 002b:00007fff3858c520 EFLAGS: 00010202 RAX: 0000001b2fb02000 RBX: 00007f18b64e5720 RCX: 0000001b2fb01ff8 RDX: 0000001b2f720220 RSI: 0000000000000008 RDI: 00007f18b64e5720 RBP: ffffffff82302681 R08: 00007f18b59b6038 R09: 00007f18b59a2000 R10: 00007f18b4dff008 R11: 000000000000000e R12: 000000000000000e R13: 0000000000000063 R14: ffffffff82302e1d R15: 000000000000008f INFO: task syz.0.107:6428 blocked for more than 145 seconds. Tainted: G U 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.107 state:D stack:26360 pid:6428 tgid:6428 ppid:5821 task_flags:0x440040 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x116f/0x5de0 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6860 io_schedule+0xbf/0x130 kernel/sched/core.c:7742 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x93d/0x12a0 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1241 __ext4_journal_get_write_access+0x6a/0x340 fs/ext4/ext4_jbd2.c:241 ext4_reserve_inode_write+0x1be/0x320 fs/ext4/inode.c:5892 __ext4_mark_inode_dirty+0x197/0x870 fs/ext4/inode.c:6066 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6103 __mark_inode_dirty+0x1eb/0xe50 fs/fs-writeback.c:2527 generic_update_time+0xcf/0xf0 fs/inode.c:2064 inode_update_time fs/inode.c:2077 [inline] __file_update_time fs/inode.c:2305 [inline] file_update_time+0x17d/0x1c0 fs/inode.c:2335 ext4_page_mkwrite+0x35e/0x1750 fs/ext4/inode.c:6221 do_page_mkwrite+0x171/0x380 mm/memory.c:3287 do_shared_fault mm/memory.c:5594 [inline] do_fault mm/memory.c:5656 [inline] do_pte_missing+0x29c/0x3fb0 mm/memory.c:4160 handle_pte_fault mm/memory.c:5997 [inline] __handle_mm_fault+0x103d/0x2a40 mm/memory.c:6140 handle_mm_fault+0x3fe/0xad0 mm/memory.c:6309 do_user_addr_fault+0x60c/0x1370 arch/x86/mm/fault.c:1337 handle_page_fault arch/x86/mm/fault.c:1480 [inline] exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1538 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7fa6a5e6eada RSP: 002b:00007ffe96794dd0 EFLAGS: 00010202 RAX: 0000001b2f8fc000 RBX: 00007fa6a6ce5720 RCX: 0000001b2f8fbff8 RDX: 0000001b2f520220 RSI: 0000000000000008 RDI: 00007fa6a6ce5720 RBP: ffffffff8b66c2da R08: 00007fa6a61b6038 R09: 00007fa6a61a2000 R10: 00007fa6a55ff008 R11: 0000000000000002 R12: 0000000000000002 R13: 00000000000000d7 R14: ffffffff8b66c80f R15: 00000000000000e9 INFO: task syz.0.107:6429 blocked for more than 145 seconds. Tainted: G U 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.107 state:D stack:27224 pid:6429 tgid:6428 ppid:5821 task_flags:0x400040 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x116f/0x5de0 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6860 io_schedule+0xbf/0x130 kernel/sched/core.c:7742 folio_wait_bit_common+0x3d6/0x9e0 mm/filemap.c:1317 folio_wait_writeback+0x3c/0x90 mm/page-writeback.c:3149 __filemap_fdatawait_range+0x11f/0x200 mm/filemap.c:539 file_write_and_wait_range+0x101/0x140 mm/filemap.c:798 ext4_sync_file+0x310/0xf10 fs/ext4/fsync.c:154 vfs_fsync_range+0x136/0x220 fs/sync.c:187 __do_sys_msync+0x3cb/0x5c0 mm/msync.c:96 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x230 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa6a5f8e969 RSP: 002b:00007fa6a6d67038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a RAX: ffffffffffffffda RBX: 00007fa6a61b5fa0 RCX: 00007fa6a5f8e969 RDX: 0000000400000004 RSI: 0180000000000000 RDI: 000000001ffff000 RBP: 00007fa6a6010ab1 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007fa6a61b5fa0 R15: 00007ffe96794d48 INFO: task syz.1.108:6430 blocked for more than 145 seconds. Tainted: G U 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.108 state:D stack:25672 pid:6430 tgid:6430 ppid:5828 task_flags:0x440040 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x116f/0x5de0 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6860 io_schedule+0xbf/0x130 kernel/sched/core.c:7742 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x93d/0x12a0 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1241 __ext4_journal_get_write_access+0x6a/0x340 fs/ext4/ext4_jbd2.c:241 ext4_reserve_inode_write+0x1be/0x320 fs/ext4/inode.c:5892 __ext4_mark_inode_dirty+0x197/0x870 fs/ext4/inode.c:6066 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6103 __mark_inode_dirty+0x1eb/0xe50 fs/fs-writeback.c:2527 generic_update_time+0xcf/0xf0 fs/inode.c:2064 inode_update_time fs/inode.c:2077 [inline] __file_update_time fs/inode.c:2305 [inline] file_update_time+0x17d/0x1c0 fs/inode.c:2335 ext4_page_mkwrite+0x35e/0x1750 fs/ext4/inode.c:6221 do_page_mkwrite+0x171/0x380 mm/memory.c:3287 do_shared_fault mm/memory.c:5594 [inline] do_fault mm/memory.c:5656 [inline] do_pte_missing+0x29c/0x3fb0 mm/memory.c:4160 handle_pte_fault mm/memory.c:5997 [inline] __handle_mm_fault+0x103d/0x2a40 mm/memory.c:6140 handle_mm_fault+0x3fe/0xad0 mm/memory.c:6309 do_user_addr_fault+0x60c/0x1370 arch/x86/mm/fault.c:1337 handle_page_fault arch/x86/mm/fault.c:1480 [inline] exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1538 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f9f80e6eada RSP: 002b:00007ffff752ac00 EFLAGS: 00010202 RAX: 0000001b2f9f2000 RBX: 00007f9f81ce5720 RCX: 0000001b2f9f1ff8 RDX: 0000001b2f620220 RSI: 0000000000000008 RDI: 00007f9f81ce5720 RBP: ffffffff820f80a8 R08: 00007f9f811b62d8 R09: 00007f9f811a2000 R10: 00007f9f7e9f6008 R11: 000000000000001a R12: 000000000000001a R13: 000000000000017c R14: ffffffff820f8e56 R15: 00000000000001ba INFO: task syz.3.106:6431 blocked for more than 146 seconds. Tainted: G U 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.106 state:D stack:25672 pid:6431 tgid:6431 ppid:5833 task_flags:0x440040 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x116f/0x5de0 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6860 io_schedule+0xbf/0x130 kernel/sched/core.c:7742 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x93d/0x12a0 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1241 __ext4_journal_get_write_access+0x6a/0x340 fs/ext4/ext4_jbd2.c:241 ext4_reserve_inode_write+0x1be/0x320 fs/ext4/inode.c:5892 __ext4_mark_inode_dirty+0x197/0x870 fs/ext4/inode.c:6066 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6103 __mark_inode_dirty+0x1eb/0xe50 fs/fs-writeback.c:2527 generic_update_time+0xcf/0xf0 fs/inode.c:2064 inode_update_time fs/inode.c:2077 [inline] __file_update_time fs/inode.c:2305 [inline] file_update_time+0x17d/0x1c0 fs/inode.c:2335 ext4_page_mkwrite+0x35e/0x1750 fs/ext4/inode.c:6221 do_page_mkwrite+0x171/0x380 mm/memory.c:3287 do_shared_fault mm/memory.c:5594 [inline] do_fault mm/memory.c:5656 [inline] do_pte_missing+0x29c/0x3fb0 mm/memory.c:4160 handle_pte_fault mm/memory.c:5997 [inline] __handle_mm_fault+0x103d/0x2a40 mm/memory.c:6140 handle_mm_fault+0x3fe/0xad0 mm/memory.c:6309 do_user_addr_fault+0x60c/0x1370 arch/x86/mm/fault.c:1337 handle_page_fault arch/x86/mm/fault.c:1480 [inline] exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1538 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f4e81c6eada RSP: 002b:00007fff687d7ea0 EFLAGS: 00010202 RAX: 0000001b2fdcd000 RBX: 00007f4e82ae5720 RCX: 0000001b2fdccff8 RDX: 0000001b2f820220 RSI: 0000000000000008 RDI: 00007f4e82ae5720 RBP: ffffffff825d5427 R08: 00007f4e81fb61f8 R09: 00007f4e81fa2000 R10: 00007f4e80bfb008 R11: 0000000000000017 R12: 0000000000000017 R13: 000000000000207c R14: ffffffff825d5fca R15: 000000000002e391 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6764 2 locks held by getty/5581: #0: ffff888031fed0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc900033132f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 drivers/tty/n_tty.c:2222 3 locks held by syz-executor/5812: #0: ffff888032d4e088 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 arch/x86/mm/fault.c:1328 #1: ffff888030668518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 mm/memory.c:3287 #2: ffff88803066c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 fs/jbd2/transaction.c:444 3 locks held by syz.2.28/6005: #0: ffff888029916420 (sb_writers#5){.+.+}-{0:0}, at: get_signal+0x22e3/0x26d0 kernel/signal.c:3019 #1: ffff8880797329e0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock_killable include/linux/mmap_lock.h:193 [inline] #1: ffff8880797329e0 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x187/0xb30 fs/coredump.c:941 #2: ffff88807a3b68e8 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:922 [inline] #2: ffff88807a3b68e8 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x2d8/0x2740 mm/filemap.c:3391 3 locks held by syz.2.41/6078: #0: ffff888029916420 (sb_writers#5){.+.+}-{0:0}, at: get_signal+0x22e3/0x26d0 kernel/signal.c:3019 #1: ffff8880324c29e0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock_killable include/linux/mmap_lock.h:193 [inline] #1: ffff8880324c29e0 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x187/0xb30 fs/coredump.c:941 #2: ffff88807a3b68e8 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:922 [inline] #2: ffff88807a3b68e8 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x2d8/0x2740 mm/filemap.c:3391 6 locks held by kworker/u8:10/6251: #0: ffff888141eed948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3213 #1: ffffc9000368fd18 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3214 #2: ffff8880306680e0 (&type->s_umount_key#31){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 fs/super.c:562 #3: ffff88803066ab98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b2/0x820 mm/page-writeback.c:2656 #4: ffff88803066c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 fs/jbd2/transaction.c:444 #5: ffff88807a3b65d8 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x355/0x1390 fs/ext4/inode.c:705 3 locks held by syz.2.101/6407: #0: ffff8880324c1fe0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_trylock include/linux/mmap_lock.h:203 [inline] #0: ffff8880324c1fe0 (&mm->mmap_lock){++++}-{4:4}, at: get_mmap_lock_carefully mm/memory.c:6346 [inline] #0: ffff8880324c1fe0 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x35/0x6e0 mm/memory.c:6406 #1: ffff888030668518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 mm/memory.c:3287 #2: ffff88803066c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 fs/jbd2/transaction.c:444 3 locks held by syz.0.107/6428: #0: ffff888028c5b308 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 arch/x86/mm/fault.c:1328 #1: ffff888030668518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 mm/memory.c:3287 #2: ffff88803066c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 fs/jbd2/transaction.c:444 3 locks held by syz.1.108/6430: #0: ffff88802f09b6c8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 arch/x86/mm/fault.c:1328 #1: ffff888030668518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 mm/memory.c:3287 #2: ffff88803066c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 fs/jbd2/transaction.c:444 3 locks held by syz.3.106/6431: #0: ffff888025506bc8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 arch/x86/mm/fault.c:1328 #1: ffff888030668518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 mm/memory.c:3287 #2: ffff88803066c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 fs/jbd2/transaction.c:444 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) Tainted: [U]=USER Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:274 [inline] watchdog+0xf70/0x12c0 kernel/hung_task.c:437 kthread+0x3c2/0x780 kernel/kthread.c:464 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 6265 Comm: kworker/u8:24 Tainted: G U 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) Tainted: [U]=USER Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:lookup_chain_cache kernel/locking/lockdep.c:3799 [inline] RIP: 0010:lookup_chain_cache_add kernel/locking/lockdep.c:3822 [inline] RIP: 0010:validate_chain kernel/locking/lockdep.c:3877 [inline] RIP: 0010:__lock_acquire+0xace/0x1ba0 kernel/locking/lockdep.c:5235 Code: 4c 8b 04 24 48 b8 eb 83 b5 80 46 86 c8 61 49 0f af c0 48 c1 e8 2d 48 8d 0c c5 00 50 e7 96 48 89 04 24 48 8b 04 c5 00 50 e7 96 <48> 89 4c 24 08 48 85 c0 48 8d 48 f8 48 0f 45 c1 eb 04 48 83 e8 08 RSP: 0018:ffffc900033cfa20 EFLAGS: 00000006 RAX: ffffffff93b59568 RBX: ffff88802fd2a968 RCX: ffffffff97029158 RDX: 6ea0bb6bce3a2705 RSI: 0000000003150bf9 RDI: ffff88802fd2a968 RBP: ffff88802fd2a8f0 R08: 6ea0bb6bce3a2705 R09: 0000000000000001 R10: 0000000000000003 R11: 0000000000000000 R12: 00000000000003dc R13: 0000000000000003 R14: ffff88802fd29e00 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff888124aef000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000556be973e680 CR3: 000000000e180000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_acquire kernel/locking/lockdep.c:5866 [inline] lock_acquire+0x179/0x350 kernel/locking/lockdep.c:5823 local_lock_acquire include/linux/local_lock_internal.h:38 [inline] kcov_remote_start+0xb6/0x6d0 kernel/kcov.c:865 kcov_remote_start_common include/linux/kcov.h:50 [inline] ieee80211_iface_work+0x272/0x1020 net/mac80211/iface.c:1674 cfg80211_wiphy_work+0x3dc/0x550 net/wireless/core.c:435 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400 kthread+0x3c2/0x780 kernel/kthread.c:464 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245