INFO: task kworker/u8:2:46 blocked in I/O wait for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:2 state:D stack:21544 pid:46 tgid:46 ppid:2 task_flags:0x4248060 flags:0x00080000
Workqueue: writeback wb_workfn (flush-8:0)
Call Trace:
context_switch kernel/sched/core.c:5583 [inline]
__schedule+0x17dd/0x5830 kernel/sched/core.c:7382
__schedule_loop kernel/sched/core.c:7459 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7474
io_schedule+0x7f/0xd0 kernel/sched/core.c:8146
bit_wait_io+0x13/0x110 kernel/sched/wait_bit.c:258
__wait_on_bit_lock+0xc9/0x5a0 kernel/sched/wait_bit.c:93
out_of_line_wait_on_bit_lock+0x13b/0x190 kernel/sched/wait_bit.c:120
lock_buffer include/linux/buffer_head.h:488 [inline]
do_get_write_access+0x1b7/0x10c0 fs/jbd2/transaction.c:969
jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263
__ext4_journal_get_write_access+0xec/0x620 fs/ext4/ext4_jbd2.c:253
ext4_mb_mark_context+0x171/0xec0 fs/ext4/mballoc.c:4110
ext4_mb_mark_diskspace_used+0x338/0x760 fs/ext4/mballoc.c:4239
ext4_mb_new_blocks+0x1062/0x4520 fs/ext4/mballoc.c:6327
ext4_ext_map_blocks+0x1427/0x5480 fs/ext4/extents.c:4469
ext4_map_create_blocks+0x116/0x530 fs/ext4/inode.c:697
ext4_map_blocks+0xe8e/0x1c60 fs/ext4/inode.c:942
mpage_map_one_extent fs/ext4/inode.c:2505 [inline]
mpage_map_and_submit_extent fs/ext4/inode.c:2601 [inline]
ext4_do_writepages+0x1978/0x44a0 fs/ext4/inode.c:3077
ext4_writepages+0x1fe/0x4e0 fs/ext4/inode.c:3171
do_writepages+0x338/0x560 mm/page-writeback.c:2562
__writeback_single_inode+0x136/0x1220 fs/fs-writeback.c:1809
writeback_sb_inodes+0x9de/0x1af0 fs/fs-writeback.c:2120
__writeback_inodes_wb+0x114/0x250 fs/fs-writeback.c:2196
wb_writeback+0x42f/0xad0 fs/fs-writeback.c:2307
wb_check_old_data_flush fs/fs-writeback.c:2411 [inline]
wb_do_writeback fs/fs-writeback.c:2490 [inline]
wb_workfn+0xc92/0x10f0 fs/fs-writeback.c:2518
process_one_work kernel/workqueue.c:3505 [inline]
process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3588
worker_thread+0xa47/0xfb0 kernel/workqueue.c:3669
kthread+0x38b/0x480 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
INFO: task jbd2/sda1-8:4968 blocked in I/O wait for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:jbd2/sda1-8 state:D stack:24712 pid:4968 tgid:4968 ppid:2 task_flags:0x240040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5583 [inline]
__schedule+0x17dd/0x5830 kernel/sched/core.c:7382
__schedule_loop kernel/sched/core.c:7459 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7474
io_schedule+0x7f/0xd0 kernel/sched/core.c:8146
bit_wait_io+0x13/0x110 kernel/sched/wait_bit.c:258
__wait_on_bit+0xac/0x300 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67
wait_on_buffer include/linux/buffer_head.h:476 [inline]
jbd2_journal_commit_transaction+0x2f6e/0x5c80 fs/jbd2/commit.c:834
kjournald2+0x3bc/0x740 fs/jbd2/journal.c:200
kthread+0x38b/0x480 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
INFO: task syz-executor:5627 blocked in I/O wait for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor state:D stack:22528 pid:5627 tgid:5627 ppid:5626 task_flags:0x440100 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5583 [inline]
__schedule+0x17dd/0x5830 kernel/sched/core.c:7382
__schedule_loop kernel/sched/core.c:7459 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7474
io_schedule+0x7f/0xd0 kernel/sched/core.c:8146
bit_wait_io+0x13/0x110 kernel/sched/wait_bit.c:258
__wait_on_bit+0xac/0x300 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67
wait_on_bit_io include/linux/wait_bit.h:106 [inline]
do_get_write_access+0x658/0x10c0 fs/jbd2/transaction.c:1113
jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263
__ext4_journal_get_write_access+0xec/0x620 fs/ext4/ext4_jbd2.c:253
ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:7451
__ext4_mark_inode_dirty+0x141/0x7e0 fs/ext4/inode.c:7642
ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:7679
__mark_inode_dirty+0x3a8/0x13b0 fs/fs-writeback.c:2751
generic_update_time fs/inode.c:2264 [inline]
file_update_time_flags+0x399/0x440 fs/inode.c:2494
ext4_page_mkwrite+0x21f/0x1470 fs/ext4/inode.c:7864
do_page_mkwrite+0x147/0x310 mm/memory.c:3856
wp_page_shared mm/memory.c:4262 [inline]
do_wp_page+0x1a77/0x4c30 mm/memory.c:4485
handle_pte_fault mm/memory.c:6659 [inline]
__handle_mm_fault mm/memory.c:6784 [inline]
handle_mm_fault+0x19c9/0x2f80 mm/memory.c:6951
do_user_addr_fault+0xb35/0x1480 arch/x86/mm/fault.c:1343
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x00007f8de8e7df91
RSP: 002b:00007ffc0a53e2d0 EFLAGS: 00010202
RAX: 0000000000000004 RBX: 0000000000000001 RCX: 0000000000000002
RDX: 00007f8de6e98000 RSI: 00000000000018c3 RDI: ffffffff850fffff
RBP: 00007ffc0a53e7d0 R08: 0000000000001000 R09: 000055555e201658
R10: 00000000000000a4 R11: 000055555e201658 R12: 00007ffc0a53e610
R13: 00007ffc0a53e400 R14: 585858582e7a7973 R15: 00007ffc0a53e350
INFO: task syz.5.1000:11190 blocked in I/O wait for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.5.1000 state:D stack:24680 pid:11190 tgid:11190 ppid:9596 task_flags:0x440040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5583 [inline]
__schedule+0x17dd/0x5830 kernel/sched/core.c:7382
__schedule_loop kernel/sched/core.c:7459 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7474
io_schedule+0x7f/0xd0 kernel/sched/core.c:8146
bit_wait_io+0x13/0x110 kernel/sched/wait_bit.c:258
__wait_on_bit+0xac/0x300 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67
wait_on_bit_io include/linux/wait_bit.h:106 [inline]
do_get_write_access+0x658/0x10c0 fs/jbd2/transaction.c:1113
jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263
__ext4_journal_get_write_access+0xec/0x620 fs/ext4/ext4_jbd2.c:253
ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:7451
__ext4_mark_inode_dirty+0x141/0x7e0 fs/ext4/inode.c:7642
ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:7679
__mark_inode_dirty+0x3a8/0x13b0 fs/fs-writeback.c:2751
generic_update_time fs/inode.c:2264 [inline]
file_update_time_flags+0x399/0x440 fs/inode.c:2494
ext4_page_mkwrite+0x21f/0x1470 fs/ext4/inode.c:7864
do_page_mkwrite+0x147/0x310 mm/memory.c:3856
do_shared_fault mm/memory.c:6155 [inline]
do_fault mm/memory.c:6217 [inline]
do_pte_missing+0x70f/0x3570 mm/memory.c:4745
handle_pte_fault mm/memory.c:6632 [inline]
__handle_mm_fault mm/memory.c:6784 [inline]
handle_mm_fault+0x1807/0x2f80 mm/memory.c:6951
do_user_addr_fault+0xb35/0x1480 arch/x86/mm/fault.c:1343
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x00007f635a074111
RSP: 002b:00007ffc8ea806c0 EFLAGS: 00010202
RAX: 0000001b34724000 RBX: 0000000000000000 RCX: 00000000003ffde8
RDX: 0000001b34723ffc RSI: 00000000003ffde8 RDI: 00007f635af55700
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f635a412000
R10: 00007f635af55700 R11: 0000000000000000 R12: 0000000000000000
R13: 00000000000071b0 R14: ffffffff816de000 R15: 00007f635af55720
INFO: task syz.2.1006:11210 blocked in I/O wait for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.1006 state:D stack:24680 pid:11210 tgid:11210 ppid:10175 task_flags:0x440040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5583 [inline]
__schedule+0x17dd/0x5830 kernel/sched/core.c:7382
__schedule_loop kernel/sched/core.c:7459 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7474
io_schedule+0x7f/0xd0 kernel/sched/core.c:8146
bit_wait_io+0x13/0x110 kernel/sched/wait_bit.c:258
__wait_on_bit+0xac/0x300 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67
wait_on_bit_io include/linux/wait_bit.h:106 [inline]
do_get_write_access+0x658/0x10c0 fs/jbd2/transaction.c:1113
jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263
__ext4_journal_get_write_access+0xec/0x620 fs/ext4/ext4_jbd2.c:253
ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:7451
__ext4_mark_inode_dirty+0x141/0x7e0 fs/ext4/inode.c:7642
ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:7679
__mark_inode_dirty+0x3a8/0x13b0 fs/fs-writeback.c:2751
generic_update_time fs/inode.c:2264 [inline]
file_update_time_flags+0x399/0x440 fs/inode.c:2494
ext4_page_mkwrite+0x21f/0x1470 fs/ext4/inode.c:7864
do_page_mkwrite+0x147/0x310 mm/memory.c:3856
do_shared_fault mm/memory.c:6155 [inline]
do_fault mm/memory.c:6217 [inline]
do_pte_missing+0x70f/0x3570 mm/memory.c:4745
handle_pte_fault mm/memory.c:6632 [inline]
__handle_mm_fault mm/memory.c:6784 [inline]
handle_mm_fault+0x1807/0x2f80 mm/memory.c:6951
do_user_addr_fault+0xb35/0x1480 arch/x86/mm/fault.c:1343
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x00007fa01d474111
RSP: 002b:00007ffc49e4ac20 EFLAGS: 00010202
RAX: 0000001b30424000 RBX: 0000000000000000 RCX: 00000000003ffde8
RDX: 0000001b30423ffc RSI: 00000000003ffde8 RDI: 00007fa01e355700
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fa01d812000
R10: 00007fa01e355700 R11: ffffffff816fffff R12: 0000000000000000
R13: 0000000000000150 R14: ffffffff816ddefe R15: 00007fa01e355720
INFO: task syz.3.1009:11212 blocked in I/O wait for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.1009 state:D stack:26112 pid:11212 tgid:11212 ppid:9693 task_flags:0x440040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5583 [inline]
__schedule+0x17dd/0x5830 kernel/sched/core.c:7382
__schedule_loop kernel/sched/core.c:7459 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7474
io_schedule+0x7f/0xd0 kernel/sched/core.c:8146
bit_wait_io+0x13/0x110 kernel/sched/wait_bit.c:258
__wait_on_bit+0xac/0x300 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67
wait_on_bit_io include/linux/wait_bit.h:106 [inline]
do_get_write_access+0x658/0x10c0 fs/jbd2/transaction.c:1113
jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263
__ext4_journal_get_write_access+0xec/0x620 fs/ext4/ext4_jbd2.c:253
ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:7451
__ext4_mark_inode_dirty+0x141/0x7e0 fs/ext4/inode.c:7642
ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:7679
__mark_inode_dirty+0x3a8/0x13b0 fs/fs-writeback.c:2751
generic_update_time fs/inode.c:2264 [inline]
file_update_time_flags+0x399/0x440 fs/inode.c:2494
ext4_page_mkwrite+0x21f/0x1470 fs/ext4/inode.c:7864
do_page_mkwrite+0x147/0x310 mm/memory.c:3856
do_shared_fault mm/memory.c:6155 [inline]
do_fault mm/memory.c:6217 [inline]
do_pte_missing+0x70f/0x3570 mm/memory.c:4745
handle_pte_fault mm/memory.c:6632 [inline]
__handle_mm_fault mm/memory.c:6784 [inline]
handle_mm_fault+0x1807/0x2f80 mm/memory.c:6951
do_user_addr_fault+0xb35/0x1480 arch/x86/mm/fault.c:1343
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x00007f669306c7c3
RSP: 002b:00007ffff4a2a710 EFLAGS: 00010246
RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b32864000
RDX: 0000001b32824000 RSI: 0000000000400000 RDI: 00007f66933e8708
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffff4a2a9a0
INFO: task syz.7.1008:11216 blocked in I/O wait for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.7.1008 state:D stack:28072 pid:11216 tgid:11216 ppid:9805 task_flags:0x440040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5583 [inline]
__schedule+0x17dd/0x5830 kernel/sched/core.c:7382
__schedule_loop kernel/sched/core.c:7459 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7474
io_schedule+0x7f/0xd0 kernel/sched/core.c:8146
bit_wait_io+0x13/0x110 kernel/sched/wait_bit.c:258
__wait_on_bit+0xac/0x300 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67
wait_on_bit_io include/linux/wait_bit.h:106 [inline]
do_get_write_access+0x658/0x10c0 fs/jbd2/transaction.c:1113
jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263
__ext4_journal_get_write_access+0xec/0x620 fs/ext4/ext4_jbd2.c:253
ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:7451
__ext4_mark_inode_dirty+0x141/0x7e0 fs/ext4/inode.c:7642
ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:7679
__mark_inode_dirty+0x3a8/0x13b0 fs/fs-writeback.c:2751
generic_update_time fs/inode.c:2264 [inline]
file_update_time_flags+0x399/0x440 fs/inode.c:2494
ext4_page_mkwrite+0x21f/0x1470 fs/ext4/inode.c:7864
do_page_mkwrite+0x147/0x310 mm/memory.c:3856
do_shared_fault mm/memory.c:6155 [inline]
do_fault mm/memory.c:6217 [inline]
do_pte_missing+0x70f/0x3570 mm/memory.c:4745
handle_pte_fault mm/memory.c:6632 [inline]
__handle_mm_fault mm/memory.c:6784 [inline]
handle_mm_fault+0x1807/0x2f80 mm/memory.c:6951
do_user_addr_fault+0xb35/0x1480 arch/x86/mm/fault.c:1343
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x00007f419fe6c7c3
RSP: 002b:00007ffd13a50100 EFLAGS: 00010246
RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000001b31024000 RSI: 0000000000040000 RDI: 00007f41a01e8708
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd13a50390
INFO: task syz.9.1007:11217 blocked in I/O wait for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.9.1007 state:D stack:26936 pid:11217 tgid:11217 ppid:10028 task_flags:0x440040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5583 [inline]
__schedule+0x17dd/0x5830 kernel/sched/core.c:7382
__schedule_loop kernel/sched/core.c:7459 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7474
io_schedule+0x7f/0xd0 kernel/sched/core.c:8146
bit_wait_io+0x13/0x110 kernel/sched/wait_bit.c:258
__wait_on_bit+0xac/0x300 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67
wait_on_bit_io include/linux/wait_bit.h:106 [inline]
do_get_write_access+0x658/0x10c0 fs/jbd2/transaction.c:1113
jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263
__ext4_journal_get_write_access+0xec/0x620 fs/ext4/ext4_jbd2.c:253
ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:7451
__ext4_mark_inode_dirty+0x141/0x7e0 fs/ext4/inode.c:7642
ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:7679
__mark_inode_dirty+0x3a8/0x13b0 fs/fs-writeback.c:2751
generic_update_time fs/inode.c:2264 [inline]
touch_atime+0x568/0x670 fs/inode.c:2339
file_accessed include/linux/fs.h:2283 [inline]
ext4_file_mmap_prepare+0x277/0x450 fs/ext4/file.c:919
vfs_mmap_prepare include/linux/fs.h:2075 [inline]
call_mmap_prepare mm/vma.c:2986 [inline]
__mmap_region mm/vma.c:3103 [inline]
mmap_region+0x1191/0x2820 mm/vma.c:3201
do_mmap+0xe0a/0x1300 mm/mmap.c:573
vm_mmap_pgoff+0x27a/0x520 mm/util.c:581
ksys_mmap_pgoff+0x4dc/0x760 mm/mmap.c:619
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0x16a/0x530 arch/x86/entry/syscall_64.c:89
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x00007f384bd9f882
RSP: 002b:00007fffd174e558 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 0000001b2f064000 RCX: 00007f384bd9f882
RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b2f064000
RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000
R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000024
R13: 00000000000927c0 R14: 000000000006c818 R15: 00007fffd174e830
Showing all locks held in the system:
locks held by kworker/u8:1/14: 5, last CPU#0:
#0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline]
#0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3588
#1: ffffc90000137c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#1: ffffc90000137c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#1: ffffc90000137c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline]
#1: ffffc90000137c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3588
#2: ffffffff8ffe61f0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 kernel/jump_label.c:247
#3: ffffffff9023dce0 (jump_label_mutex){+.+.}-{4:4}, at: jump_label_lock kernel/jump_label.c:27 [inline]
#3: ffffffff9023dce0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 kernel/jump_label.c:238
#4: ffffffff8fffd220 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 arch/x86/kernel/jump_label.c:145
locks held by pr/ttyS0/34: 2, last CPU#1:
#0: ffffffff90034058 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:314 [inline]
#0: ffffffff90034058 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:493 [inline]
#0: ffffffff90034058 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 kernel/printk/printk.c:291
#1: ffffffff9c21ef58 (&port_lock_key){-.-.}-{3:3}, at: __uart_port_lock_irqsave include/linux/serial_core.h:613 [inline]
#1: ffffffff9c21ef58 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 drivers/tty/serial/8250/8250_core.c:413
locks held by khungtaskd/35: 1, last CPU#0:
#0: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#0: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#0: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6871
locks held by kworker/u8:2/46: 6, on CPU#0:
#0: ffff888021ed7950 ((wq_completion)writeback){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#0: ffff888021ed7950 ((wq_completion)writeback){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#0: ffff888021ed7950 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline]
#0: ffff888021ed7950 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3588
#1: ffffc90000b67c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#1: ffffc90000b67c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#1: ffffc90000b67c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3470 [inline]
#1: ffffc90000b67c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3588
#2: ffff888025d62100 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 fs/super.c:642
#3: ffff888025d00cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 fs/ext4/inode.c:3170
#4: ffff888025d60950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 fs/jbd2/transaction.c:444
#5: ffff8880775e53a8 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0xacb/0x1c60 fs/ext4/inode.c:926
locks held by klogd/4995: 1, last CPU#0:
#0: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#0: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#0: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline]
#0: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 arch/x86/kernel/unwind_orc.c:495
locks held by syz-executor/5627: 3, on CPU#1:
#0: ffff88801ef496c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 mm/mmap_lock.c:339
#1: ffff888025d62570 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline]
#1: ffff888025d62570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 fs/ext4/inode.c:7863
#2: ffff888025d60950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 fs/jbd2/transaction.c:444
locks held by getty/6780: 2, on CPU#1:
#0: ffff8880375a60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc900071ab2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 drivers/tty/n_tty.c:2211
locks held by syz.5.1000/11190: 3, on CPU#1:
#0: ffff8880688e9e48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 mm/mmap_lock.c:339
#1: ffff888025d62570 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline]
#1: ffff888025d62570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 fs/ext4/inode.c:7863
#2: ffff888025d60950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 fs/jbd2/transaction.c:444
locks held by syz.2.1006/11210: 3, on CPU#1:
#0: ffff8880763056c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 mm/mmap_lock.c:339
#1: ffff888025d62570 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline]
#1: ffff888025d62570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 fs/ext4/inode.c:7863
#2: ffff888025d60950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 fs/jbd2/transaction.c:444
locks held by syz.3.1009/11212: 3, on CPU#1:
#0: ffff88802b92ad08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 mm/mmap_lock.c:339
#1: ffff888025d62570 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline]
#1: ffff888025d62570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 fs/ext4/inode.c:7863
#2: ffff888025d60950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 fs/jbd2/transaction.c:444
locks held by syz.7.1008/11216: 3, on CPU#1:
#0: ffff888076119e48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 mm/mmap_lock.c:339
#1: ffff888025d62570 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline]
#1: ffff888025d62570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 fs/ext4/inode.c:7863
#2: ffff888025d60950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 fs/jbd2/transaction.c:444
locks held by syz.9.1007/11217: 3, on CPU#1:
#0: ffff88807cb83440 (&mm->mmap_lock){++++}-{4:4}, at: mmap_write_lock_killable include/linux/mmap_lock.h:566 [inline]
#0: ffff88807cb83440 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 mm/util.c:579
#1: ffff888025d62478 (sb_writers#4){.+.+}-{0:0}, at: file_accessed include/linux/fs.h:2283 [inline]
#1: ffff888025d62478 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 fs/ext4/file.c:919
#2: ffff888025d60950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 fs/jbd2/transaction.c:444
=============================================
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
Call Trace:
dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:123
nmi_trigger_cpumask_backtrace+0x17d/0x390 lib/nmi_backtrace.c:66
trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline]
__sys_info lib/sys_info.c:157 [inline]
sys_info+0x135/0x170 lib/sys_info.c:165
check_hung_uninterruptible_tasks kernel/hung_task.c:377 [inline]
watchdog+0x1073/0x10f0 kernel/hung_task.c:598
kthread+0x38b/0x480 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 101 PID: 5300 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
RIP: 0010:in_softirq_really kernel/kcov.c:167 [inline]
RIP: 0010:check_kcov_mode kernel/kcov.c:179 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x2e/0x80 kernel/kcov.c:223
Code: 48 8b 04 24 65 48 8b 0d d8 cb 19 13 65 48 8b 15 d8 cb 19 13 f7 c2 00 01 00 ff 74 29 89 d6 81 e6 00 01 00 0f 81 fe 00 01 00 00 <40> 0f 95 c6 81 fa 00 00 00 10 0f 93 c2 40 08 f2 75 35 83 b9 44 17
RSP: 0018:ffffc90000a38ab8 EFLAGS: 00000246
RAX: ffffffff8756854c RBX: 000000000000096c RCX: ffff88802ccd9f40
RDX: 8000000000000101 RSI: 0000000000000100 RDI: 000000000000096c
RBP: ffffc90000a38cb0 R08: 0000000000000100 R09: 0000000000000002
R10: 0000000000000003 R11: 8000000000000100 R12: 000000000000096c
R13: ffff8880440e3300 R14: ffff8880440e3318 R15: 1ffff1100881c663
FS: 00007f3e8baae780(0000) GS:ffff8881234f0000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000563cf8708168 CR3: 00000000786be000 CR4: 00000000003526f0
Call Trace:
mac80211_hwsim_tx_frame_no_nl+0xd1c/0x1820 drivers/net/wireless/virtual/mac80211_hwsim_main.c:1999
mac80211_hwsim_tx_frame+0x199/0x1f0 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2440
mac80211_hwsim_beacon_tx+0x396/0x820 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2516
__iterate_interfaces+0x2af/0x5a0 net/mac80211/util.c:775
ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 net/mac80211/util.c:811
mac80211_hwsim_beacon+0xaf/0x240 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2548
__run_hrtimer kernel/time/hrtimer.c:2079 [inline]
__hrtimer_run_queues+0x3bc/0xa10 kernel/time/hrtimer.c:2136
hrtimer_run_softirq+0x1e3/0x2e0 kernel/time/hrtimer.c:2153
handle_softirqs+0x265/0x8d0 kernel/softirq.c:669
__do_softirq kernel/softirq.c:703 [inline]
invoke_softirq kernel/softirq.c:542 [inline]
__irq_exit_rcu+0xc6/0x220 kernel/softirq.c:786
irq_exit_rcu+0x9/0x30 kernel/softirq.c:809
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1073 [inline]
sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1073
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:trace_lock_acquire include/trace/events/lock.h:23 [inline]
RIP: 0010:lock_acquire+0x51/0x350 kernel/locking/lockdep.c:5905
Code: 8b 05 2b c2 3e 13 48 89 44 24 50 0f 1f 44 00 00 65 8b 05 2a c2 3e 13 83 f8 08 0f 83 9b 01 00 00 89 c0 48 0f a3 05 97 16 1a 10 <73> 0d e8 38 53 09 00 84 c0 0f 84 e2 01 00 00 83 3d b9 45 1a 10 00
RSP: 0018:ffffc900035b7b00 EFLAGS: 00000297
RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000001
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807f076540
RBP: 00000000000000c5 R08: 0000000000000001 R09: 0000000000000000
R10: dffffc0000000000 R11: fffffbfff1ffe705 R12: ffff88807f076540
R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
__might_fault+0xcb/0x130 mm/memory.c:7542
_inline_copy_to_user include/linux/uaccess.h:197 [inline]
_copy_to_user+0x2c/0xb0 lib/usercopy.c:24
copy_to_user include/linux/uaccess.h:230 [inline]
__do_sys_newuname kernel/sys.c:1361 [inline]
__se_sys_newuname+0x199/0x420 kernel/sys.c:1354
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0x16a/0x530 arch/x86/entry/syscall_64.c:89
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x00007f3e8bb9da57
Code: 47 08 48 89 47 08 48 8b 47 10 48 89 47 10 48 8b 47 18 48 89 47 18 48 c7 c0 f2 ff ff ff c3 0f 1f 44 00 00 b8 3f 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 71 43 0e 00 f7 d8 64 89 01 48
RSP: 002b:00007fff0d268298 EFLAGS: 00000206 ORIG_RAX: 000000000000003f
RAX: ffffffffffffffda RBX: 00000000000000fb RCX: 00007f3e8bb9da57
RDX: 0000563cf87f40d0 RSI: 00000000000000fb RDI: 00007fff0d2682a0
RBP: 00007fff0d268500 R08: 000000000000dc03 R09: 0000563cf870d685
R10: 0000000000000001 R11: 0000000000000206 R12: 00000000000000fb
R13: 0000563cf8709da0 R14: 0000563cf870e820 R15: 0000563cf870d96b