INFO: task syz.3.90:6267 blocked for more than 143 seconds. Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.90 state:D stack:17104 pid:6267 tgid:6266 ppid:5549 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0x185a/0x4b70 kernel/sched/core.c:6690 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6782 io_schedule+0x8d/0x110 kernel/sched/core.c:7574 folio_wait_bit_common+0x882/0x12b0 mm/filemap.c:1309 folio_wait_writeback+0xe7/0x1e0 mm/page-writeback.c:3189 truncate_inode_partial_folio+0x9e/0x850 mm/truncate.c:208 truncate_inode_pages_range+0x60a/0xfc0 mm/truncate.c:354 truncate_inode_pages mm/truncate.c:423 [inline] truncate_pagecache mm/truncate.c:727 [inline] truncate_setsize+0xcf/0xf0 mm/truncate.c:752 bchfs_truncate+0x6f3/0xc90 fs/bcachefs/fs-io.c:441 notify_change+0xbca/0xe90 fs/attr.c:503 do_truncate+0x220/0x310 fs/open.c:65 handle_truncate fs/namei.c:3395 [inline] do_open fs/namei.c:3778 [inline] path_openat+0x2e1e/0x3590 fs/namei.c:3933 do_filp_open+0x235/0x490 fs/namei.c:3960 do_sys_openat2+0x13e/0x1d0 fs/open.c:1415 do_sys_open fs/open.c:1430 [inline] __do_sys_creat fs/open.c:1508 [inline] __se_sys_creat fs/open.c:1502 [inline] __x64_sys_creat+0x123/0x170 fs/open.c:1502 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe08bf7dff9 RSP: 002b:00007fe08b9ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 RAX: ffffffffffffffda RBX: 00007fe08c135f80 RCX: 00007fe08bf7dff9 RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000000020000240 RBP: 00007fe08bff0296 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007fe08c135f80 R15: 00007ffe7c5374f8 INFO: task syz.3.90:6279 blocked for more than 143 seconds. Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.90 state:D stack:17888 pid:6279 tgid:6266 ppid:5549 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0x185a/0x4b70 kernel/sched/core.c:6690 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6782 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6839 rwsem_down_write_slowpath+0xeee/0x13b0 kernel/locking/rwsem.c:1176 __down_write_common kernel/locking/rwsem.c:1304 [inline] __down_write kernel/locking/rwsem.c:1313 [inline] down_write+0x1d7/0x220 kernel/locking/rwsem.c:1578 inode_lock include/linux/fs.h:815 [inline] process_measurement+0x439/0x1fb0 security/integrity/ima/ima_main.c:250 ima_file_check+0xf2/0x170 security/integrity/ima/ima_main.c:572 security_file_post_open+0xb9/0x280 security/security.c:3129 do_open fs/namei.c:3776 [inline] path_openat+0x2ccd/0x3590 fs/namei.c:3933 do_filp_open+0x235/0x490 fs/namei.c:3960 do_sys_openat2+0x13e/0x1d0 fs/open.c:1415 do_sys_open fs/open.c:1430 [inline] __do_sys_openat fs/open.c:1446 [inline] __se_sys_openat fs/open.c:1441 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1441 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe08bf7dff9 RSP: 002b:00007fe08b9bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fe08c136130 RCX: 00007fe08bf7dff9 RDX: 0000000000000000 RSI: 00000000200001c0 RDI: ffffffffffffff9c RBP: 00007fe08bff0296 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007fe08c136130 R15: 00007ffe7c5374f8 Showing all locks held in the system: 1 lock held by khungtaskd/30: #0: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #0: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6720 2 locks held by kworker/u8:5/194: 2 locks held by kworker/u8:6/2914: 2 locks held by getty/4975: #0: ffff8880324720a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 drivers/tty/n_tty.c:2211 4 locks held by kworker/0:5/5273: #0: ffff8880319a2548 ((wq_completion)bcachefs_write_ref){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3204 [inline] #0: ffff8880319a2548 ((wq_completion)bcachefs_write_ref){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 kernel/workqueue.c:3310 #1: ffffc90004307d00 ((work_completion)(&c->snapshot_delete_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3205 [inline] #1: ffffc90004307d00 ((work_completion)(&c->snapshot_delete_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 kernel/workqueue.c:3310 #2: ffff888067a84398 (&c->btree_trans_barrier){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #2: ffff888067a84398 (&c->btree_trans_barrier){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #2: ffff888067a84398 (&c->btree_trans_barrier){.+.+}-{0:0}, at: bch2_trans_srcu_lock+0x97/0x1a0 fs/bcachefs/btree_iter.c:3040 #3: ffff888067aa66d0 (&c->gc_lock){++++}-{3:3}, at: bch2_btree_update_start+0x682/0x14e0 fs/bcachefs/btree_update_interior.c:1202 2 locks held by syz.3.90/6267: #0: ffff888059e3a420 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 fs/namespace.c:515 #1: ffff888062131048 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: inode_lock include/linux/fs.h:815 [inline] #1: ffff888062131048 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: do_truncate+0x20c/0x310 fs/open.c:63 1 lock held by syz.3.90/6278: #0: ffff888059e3a420 (sb_writers#16){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x220 fs/splice.c:1163 1 lock held by syz.3.90/6279: #0: ffff888062131048 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: inode_lock include/linux/fs.h:815 [inline] #0: ffff888062131048 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: process_measurement+0x439/0x1fb0 security/integrity/ima/ima_main.c:250 4 locks held by bch-reclaim/loo/6275: #0: ffff888067acb0a8 (&j->reclaim_lock){+.+.}-{3:3}, at: bch2_journal_reclaim_thread+0x167/0x560 fs/bcachefs/journal_reclaim.c:739 #1: ffff888067a84398 (&c->btree_trans_barrier){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff888067a84398 (&c->btree_trans_barrier){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff888067a84398 (&c->btree_trans_barrier){.+.+}-{0:0}, at: __bch2_trans_get+0x7de/0xd20 fs/bcachefs/btree_iter.c:3215 #2: ffff888067a84740 (&wb->flushing.lock){+.+.}-{3:3}, at: btree_write_buffer_flush_seq+0x1a39/0x1bc0 fs/bcachefs/btree_write_buffer.c:509 #3: ffff888067aa66d0 (&c->gc_lock){++++}-{3:3}, at: bch2_btree_update_start+0x682/0x14e0 fs/bcachefs/btree_update_interior.c:1202 2 locks held by syz.1.201/7549: #0: ffff888059e3a0e0 (&type->s_umount_key#66){++++}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888059e3a0e0 (&type->s_umount_key#66){++++}-{3:3}, at: super_lock+0x27c/0x400 fs/super.c:120 #1: ffff888059e3a938 (&s->s_sync_lock){+.+.}-{3:3}, at: wait_sb_inodes fs/fs-writeback.c:2619 [inline] #1: ffff888059e3a938 (&s->s_sync_lock){+.+.}-{3:3}, at: sync_inodes_sb+0x32e/0xb50 fs/fs-writeback.c:2802 2 locks held by syz.3.211/7635: #0: ffff888059e3a0e0 (&type->s_umount_key#66){++++}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888059e3a0e0 (&type->s_umount_key#66){++++}-{3:3}, at: super_lock+0x27c/0x400 fs/super.c:120 #1: ffff888059e3a938 (&s->s_sync_lock){+.+.}-{3:3}, at: wait_sb_inodes fs/fs-writeback.c:2619 [inline] #1: ffff888059e3a938 (&s->s_sync_lock){+.+.}-{3:3}, at: sync_inodes_sb+0x32e/0xb50 fs/fs-writeback.c:2802 2 locks held by syz.3.211/7651: #0: ffff888059e3a0e0 (&type->s_umount_key#66){++++}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888059e3a0e0 (&type->s_umount_key#66){++++}-{3:3}, at: super_lock+0x27c/0x400 fs/super.c:120 #1: ffff888059e3a938 (&s->s_sync_lock){+.+.}-{3:3}, at: wait_sb_inodes fs/fs-writeback.c:2619 [inline] #1: ffff888059e3a938 (&s->s_sync_lock){+.+.}-{3:3}, at: sync_inodes_sb+0x32e/0xb50 fs/fs-writeback.c:2802 2 locks held by syz.3.211/7652: #0: ffff888059e3a0e0 (&type->s_umount_key#66){++++}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888059e3a0e0 (&type->s_umount_key#66){++++}-{3:3}, at: super_lock+0x27c/0x400 fs/super.c:120 #1: ffff888059e3a938 (&s->s_sync_lock){+.+.}-{3:3}, at: wait_sb_inodes fs/fs-writeback.c:2619 [inline] #1: ffff888059e3a938 (&s->s_sync_lock){+.+.}-{3:3}, at: sync_inodes_sb+0x32e/0xb50 fs/fs-writeback.c:2802 2 locks held by syz.4.224/7803: #0: ffff888059e3a0e0 (&type->s_umount_key#66){++++}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888059e3a0e0 (&type->s_umount_key#66){++++}-{3:3}, at: super_lock+0x27c/0x400 fs/super.c:120 #1: ffff888059e3a938 (&s->s_sync_lock){+.+.}-{3:3}, at: wait_sb_inodes fs/fs-writeback.c:2619 [inline] #1: ffff888059e3a938 (&s->s_sync_lock){+.+.}-{3:3}, at: sync_inodes_sb+0x32e/0xb50 fs/fs-writeback.c:2802 2 locks held by syz.0.232/7900: #0: ffff888059e3a0e0 (&type->s_umount_key#66){++++}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888059e3a0e0 (&type->s_umount_key#66){++++}-{3:3}, at: super_lock+0x27c/0x400 fs/super.c:120 #1: ffff888059e3a938 (&s->s_sync_lock){+.+.}-{3:3}, at: wait_sb_inodes fs/fs-writeback.c:2619 [inline] #1: ffff888059e3a938 (&s->s_sync_lock){+.+.}-{3:3}, at: sync_inodes_sb+0x32e/0xb50 fs/fs-writeback.c:2802 2 locks held by syz.4.347/8364: #0: ffff888059e3a0e0 (&type->s_umount_key#66){++++}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888059e3a0e0 (&type->s_umount_key#66){++++}-{3:3}, at: super_lock+0x27c/0x400 fs/super.c:120 #1: ffff888059e3a938 (&s->s_sync_lock){+.+.}-{3:3}, at: wait_sb_inodes fs/fs-writeback.c:2619 [inline] #1: ffff888059e3a938 (&s->s_sync_lock){+.+.}-{3:3}, at: sync_inodes_sb+0x32e/0xb50 fs/fs-writeback.c:2802 2 locks held by syz.4.347/8368: #0: ffff888059e3a0e0 (&type->s_umount_key#66){++++}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888059e3a0e0 (&type->s_umount_key#66){++++}-{3:3}, at: super_lock+0x27c/0x400 fs/super.c:120 #1: ffff888059e3a938 (&s->s_sync_lock){+.+.}-{3:3}, at: wait_sb_inodes fs/fs-writeback.c:2619 [inline] #1: ffff888059e3a938 (&s->s_sync_lock){+.+.}-{3:3}, at: sync_inodes_sb+0x32e/0xb50 fs/fs-writeback.c:2802 2 locks held by syz.4.347/8369: #0: ffff888059e3a0e0 (&type->s_umount_key#66){++++}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888059e3a0e0 (&type->s_umount_key#66){++++}-{3:3}, at: super_lock+0x27c/0x400 fs/super.c:120 #1: ffff888059e3a938 (&s->s_sync_lock){+.+.}-{3:3}, at: wait_sb_inodes fs/fs-writeback.c:2619 [inline] #1: ffff888059e3a938 (&s->s_sync_lock){+.+.}-{3:3}, at: sync_inodes_sb+0x32e/0xb50 fs/fs-writeback.c:2802 2 locks held by syz.3.361/8417: ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline] watchdog+0xff4/0x1040 kernel/hung_task.c:379 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 4665 Comm: klogd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:memcpy_orig+0x4e/0x140 arch/x86/lib/memcpy_64.S:85 Code: 08 4c 8b 56 10 4c 8b 5e 18 48 8d 76 20 4c 89 07 4c 89 4f 08 4c 89 57 10 4c 89 5f 18 48 8d 7f 20 73 d4 83 c2 20 eb 4c 48 01 d6 <48> 01 d7 48 83 ea 20 66 2e 0f 1f 84 00 00 00 00 00 90 48 83 ea 20 RSP: 0018:ffffc9000326f838 EFLAGS: 00000282 RAX: ffff88806fe08000 RBX: 0000000000000021 RCX: ffffffff8175982d RDX: 0000000000000021 RSI: ffffffff9a3d5819 RDI: ffff88806fe08000 RBP: ffffc9000326f9f0 R08: ffff88806fe08020 R09: 1ffff1100dfc1004 R10: dffffc0000000000 R11: ffffed100dfc1005 R12: dffffc0000000000 R13: ffff88806fe08000 R14: 0000000000000021 R15: 00000000fffff992 FS: 00007f0a5ddc8380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffa0f135f98 CR3: 0000000054268000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: copy_data kernel/printk/printk_ringbuffer.c:1851 [inline] prb_read kernel/printk/printk_ringbuffer.c:1936 [inline] _prb_read_valid+0x6bd/0xac0 kernel/printk/printk_ringbuffer.c:2113 prb_read_valid+0xa9/0xf0 kernel/printk/printk_ringbuffer.c:2182 syslog_print+0x354/0x9c0 kernel/printk/printk.c:1631 do_syslog+0x3bb/0x810 kernel/printk/printk.c:1766 __do_sys_syslog kernel/printk/printk.c:1858 [inline] __se_sys_syslog kernel/printk/printk.c:1856 [inline] __x64_sys_syslog+0x7c/0x90 kernel/printk/printk.c:1856 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f0a5df29fa7 Code: 73 01 c3 48 8b 0d 81 ce 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 51 ce 0c 00 f7 d8 64 89 01 48 RSP: 002b:00007ffe3e401b88 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 RAX: ffffffffffffffda RBX: 00007f0a5e0c84a0 RCX: 00007f0a5df29fa7 RDX: 00000000000003ff RSI: 00007f0a5e0c84a0 RDI: 0000000000000002 RBP: 0000000000000000 R08: 0000000000000007 R09: fee0e0bcbd7c727c R10: 0000000000004000 R11: 0000000000000206 R12: 00007f0a5e0c84a0 R13: 00007f0a5e0b8212 R14: 00007f0a5e0c84d2 R15: 00007f0a5e0c84d2