INFO: task syz-executor:5625 blocked in I/O wait for more than 143 seconds.
Tainted: G L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor state:D stack:22152 pid:5625 tgid:5625 ppid:5624 task_flags:0x440100 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5598 [inline]
__schedule+0x1ba5/0x5f70 kernel/sched/core.c:7401
__schedule_loop kernel/sched/core.c:7478 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7493
io_schedule+0x7f/0xd0 kernel/sched/core.c:8165
bit_wait_io+0x13/0x110 kernel/sched/wait_bit.c:258
__wait_on_bit+0xac/0x300 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67
wait_on_bit_io include/linux/wait_bit.h:106 [inline]
do_get_write_access+0x658/0x10c0 fs/jbd2/transaction.c:1113
jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263
__ext4_journal_get_write_access+0xec/0x620 fs/ext4/ext4_jbd2.c:253
ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:7427
__ext4_mark_inode_dirty+0x141/0x7e0 fs/ext4/inode.c:7618
ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:7655
__mark_inode_dirty+0x3a8/0x13b0 fs/fs-writeback.c:2818
generic_update_time fs/inode.c:2264 [inline]
file_update_time_flags+0x399/0x440 fs/inode.c:2494
ext4_page_mkwrite+0x21f/0x1470 fs/ext4/inode.c:7840
do_page_mkwrite+0x147/0x310 mm/memory.c:3856
wp_page_shared mm/memory.c:4262 [inline]
do_wp_page+0x1a77/0x4c30 mm/memory.c:4485
handle_pte_fault mm/memory.c:6675 [inline]
__handle_mm_fault mm/memory.c:6800 [inline]
handle_mm_fault+0x19c9/0x2f80 mm/memory.c:6967
do_user_addr_fault+0xb35/0x1480 arch/x86/mm/fault.c:1343
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x00007fbbd087e311
RSP: 002b:00007fff8d8279e0 EFLAGS: 00010202
RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000000
RDX: 00007fbbce98c000 RSI: 0000000000000c98 RDI: ffffffff841fffff
RBP: 00007fff8d827ee0 R08: 0000000000001000 R09: 000055557d2e58b8
R10: 00000000000000a6 R11: 000055557d2e58c8 R12: 00007fff8d827d20
R13: 00007fff8d827b10 R14: 585858582e7a7973 R15: 00007fff8d827a60
INFO: task syz.1.1999:11249 blocked in I/O wait for more than 143 seconds.
Tainted: G L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.1999 state:D stack:24680 pid:11249 tgid:11249 ppid:5636 task_flags:0x440040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5598 [inline]
__schedule+0x1ba5/0x5f70 kernel/sched/core.c:7401
__schedule_loop kernel/sched/core.c:7478 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7493
io_schedule+0x7f/0xd0 kernel/sched/core.c:8165
bit_wait_io+0x13/0x110 kernel/sched/wait_bit.c:258
__wait_on_bit+0xac/0x300 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67
wait_on_bit_io include/linux/wait_bit.h:106 [inline]
do_get_write_access+0x658/0x10c0 fs/jbd2/transaction.c:1113
jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263
__ext4_journal_get_write_access+0xec/0x620 fs/ext4/ext4_jbd2.c:253
ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:7427
__ext4_mark_inode_dirty+0x141/0x7e0 fs/ext4/inode.c:7618
ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:7655
__mark_inode_dirty+0x3a8/0x13b0 fs/fs-writeback.c:2818
generic_update_time fs/inode.c:2264 [inline]
file_update_time_flags+0x399/0x440 fs/inode.c:2494
ext4_page_mkwrite+0x21f/0x1470 fs/ext4/inode.c:7840
do_page_mkwrite+0x147/0x310 mm/memory.c:3856
do_shared_fault mm/memory.c:6171 [inline]
do_fault mm/memory.c:6233 [inline]
do_pte_missing+0x6e0/0x3520 mm/memory.c:4745
handle_pte_fault mm/memory.c:6648 [inline]
__handle_mm_fault mm/memory.c:6800 [inline]
handle_mm_fault+0x1807/0x2f80 mm/memory.c:6967
do_user_addr_fault+0xb35/0x1480 arch/x86/mm/fault.c:1343
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x00007f6b0e074431
RSP: 002b:00007ffe3e312f40 EFLAGS: 00010202
RAX: 0000001b2d222000 RBX: ffffffff823212e0 RCX: 0000001b2d221ff8
RDX: 0000001b2cc24220 RSI: 0000000000000008 RDI: 00007f6b0ef55720
RBP: 0000000000000063 R08: 00007f6b0e410000 R09: 00007f6b0e412000
R10: 00000000823212e4 R11: 0000000000000002 R12: 00007f6b0e426038
R13: 000000000000006a R14: ffffffff82321a7b R15: 00007f6b0ef55720
INFO: task syz.5.2004:11259 blocked in I/O wait for more than 143 seconds.
Tainted: G L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.5.2004 state:D stack:24680 pid:11259 tgid:11259 ppid:8718 task_flags:0x440040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5598 [inline]
__schedule+0x1ba5/0x5f70 kernel/sched/core.c:7401
__schedule_loop kernel/sched/core.c:7478 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7493
io_schedule+0x7f/0xd0 kernel/sched/core.c:8165
bit_wait_io+0x13/0x110 kernel/sched/wait_bit.c:258
__wait_on_bit+0xac/0x300 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67
wait_on_bit_io include/linux/wait_bit.h:106 [inline]
do_get_write_access+0x658/0x10c0 fs/jbd2/transaction.c:1113
jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263
__ext4_journal_get_write_access+0xec/0x620 fs/ext4/ext4_jbd2.c:253
ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:7427
__ext4_mark_inode_dirty+0x141/0x7e0 fs/ext4/inode.c:7618
ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:7655
__mark_inode_dirty+0x3a8/0x13b0 fs/fs-writeback.c:2818
generic_update_time fs/inode.c:2264 [inline]
file_update_time_flags+0x399/0x440 fs/inode.c:2494
ext4_page_mkwrite+0x21f/0x1470 fs/ext4/inode.c:7840
do_page_mkwrite+0x147/0x310 mm/memory.c:3856
do_shared_fault mm/memory.c:6171 [inline]
do_fault mm/memory.c:6233 [inline]
do_pte_missing+0x6e0/0x3520 mm/memory.c:4745
handle_pte_fault mm/memory.c:6648 [inline]
__handle_mm_fault mm/memory.c:6800 [inline]
handle_mm_fault+0x1807/0x2f80 mm/memory.c:6967
do_user_addr_fault+0xb35/0x1480 arch/x86/mm/fault.c:1343
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x00007ffa4e674431
RSP: 002b:00007ffe2c1a65b0 EFLAGS: 00010202
RAX: 0000001b2d410000 RBX: ffffffff82b558b7 RCX: 0000001b2d40fff8
RDX: 0000001b2ce24220 RSI: 0000000000000008 RDI: 00007ffa4f555720
RBP: 0000000000000110 R08: 00007ffa4ea10000 R09: 00007ffa4ea12000
R10: 0000000082b558bb R11: 0000000000000003 R12: 00007ffa4ea26038
R13: 000000000000042a R14: ffffffff82b553d7 R15: 00007ffa4f555720
INFO: task syz.2.2005:11262 blocked in I/O wait for more than 143 seconds.
Tainted: G L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.2005 state:D stack:24680 pid:11262 tgid:11262 ppid:5641 task_flags:0x440040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5598 [inline]
__schedule+0x1ba5/0x5f70 kernel/sched/core.c:7401
__schedule_loop kernel/sched/core.c:7478 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7493
io_schedule+0x7f/0xd0 kernel/sched/core.c:8165
bit_wait_io+0x13/0x110 kernel/sched/wait_bit.c:258
__wait_on_bit+0xac/0x300 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67
wait_on_bit_io include/linux/wait_bit.h:106 [inline]
do_get_write_access+0x658/0x10c0 fs/jbd2/transaction.c:1113
jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263
__ext4_journal_get_write_access+0xec/0x620 fs/ext4/ext4_jbd2.c:253
ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:7427
__ext4_mark_inode_dirty+0x141/0x7e0 fs/ext4/inode.c:7618
ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:7655
__mark_inode_dirty+0x3a8/0x13b0 fs/fs-writeback.c:2818
generic_update_time fs/inode.c:2264 [inline]
file_update_time_flags+0x399/0x440 fs/inode.c:2494
ext4_page_mkwrite+0x21f/0x1470 fs/ext4/inode.c:7840
do_page_mkwrite+0x147/0x310 mm/memory.c:3856
do_shared_fault mm/memory.c:6171 [inline]
do_fault mm/memory.c:6233 [inline]
do_pte_missing+0x6e0/0x3520 mm/memory.c:4745
handle_pte_fault mm/memory.c:6648 [inline]
__handle_mm_fault mm/memory.c:6800 [inline]
handle_mm_fault+0x1807/0x2f80 mm/memory.c:6967
do_user_addr_fault+0xb35/0x1480 arch/x86/mm/fault.c:1343
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x00007f9c6e674b92
RSP: 002b:00007ffe330c6380 EFLAGS: 00010202
RAX: 0000000000004008 RBX: 00007f9c6f555720 RCX: 0000000000000000
RDX: 0000001b2d320000 RSI: 0000000000000008 RDI: 00007f9c6f555720
RBP: 000000000000054f R08: 00007f9c6ea10000 R09: 00007f9c6ea26038
R10: 0000000000000003 R11: ffffffff816fffff R12: ffffffff8264b394
R13: 00007f9c6ea26038 R14: 000000000000014a R15: ffffffffffffc000
Showing all locks held in the system:
locks held by khungtaskd/35: 1, on CPU#0:
#0: ffffffff9015ad60 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#0: ffffffff9015ad60 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#0: ffffffff9015ad60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6871
locks held by syz-executor/5625: 3, last CPU#1:
#0: ffff888027e5a088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 mm/mmap_lock.c:339
#1: ffff8880384c4570 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline]
#1: ffff8880384c4570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 fs/ext4/inode.c:7839
#2: ffff8880384c2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 fs/jbd2/transaction.c:444
locks held by syz.1.1999/11249: 3, last CPU#0:
#0: ffff888075709088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 mm/mmap_lock.c:339
#1: ffff8880384c4570 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline]
#1: ffff8880384c4570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 fs/ext4/inode.c:7839
#2: ffff8880384c2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 fs/jbd2/transaction.c:444
locks held by syz.5.2004/11259: 3, last CPU#0:
#0: ffff88802ae8a808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 mm/mmap_lock.c:339
#1: ffff8880384c4570 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline]
#1: ffff8880384c4570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 fs/ext4/inode.c:7839
#2: ffff8880384c2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 fs/jbd2/transaction.c:444
locks held by syz.2.2005/11262: 3, last CPU#0:
#0: ffff88802c12b308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 mm/mmap_lock.c:339
#1: ffff8880384c4570 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline]
#1: ffff8880384c4570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 fs/ext4/inode.c:7839
#2: ffff8880384c2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 fs/jbd2/transaction.c:444
=============================================
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
Call Trace:
dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:123
nmi_trigger_cpumask_backtrace+0x17d/0x390 lib/nmi_backtrace.c:66
trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline]
__sys_info lib/sys_info.c:157 [inline]
sys_info+0x135/0x170 lib/sys_info.c:165
check_hung_uninterruptible_tasks kernel/hung_task.c:377 [inline]
watchdog+0x1073/0x10f0 kernel/hung_task.c:598
kthread+0x38b/0x480 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 5638 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
RIP: 0010:__lock_acquire+0x115/0x2de0 kernel/locking/lockdep.c:-1
Code: 50 58 48 83 fa 07 77 0c 48 8b 78 40 48 01 d1 48 39 cf 74 16 45 31 f6 48 89 df 31 d2 e8 04 f0 ff ff 48 85 c0 0f 84 b9 13 00 00 <48> 8b 4c 24 08 44 8b b1 a0 0b 00 00 49 83 fe 30 0f 93 c1 83 3d e1
RSP: 0018:ffffc900043bf0d8 EFLAGS: 00000046
RAX: ffffffff958bef48 RBX: ffffffff9015ad60 RCX: ffffffff9bf2a1e0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9bf2a1e0
RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
R10: ffffc900043bf398 R11: ffffffff81b3fbb0 R12: ffffffff9015ad60
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
FS: 000055557c8f3500(0000) GS:ffff8881234cd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005631c82e4000 CR3: 0000000070cfc000 CR4: 00000000003526f0
Call Trace:
lock_acquire+0x115/0x350 kernel/locking/lockdep.c:5942
rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
rcu_read_lock include/linux/rcupdate.h:849 [inline]
class_rcu_constructor include/linux/rcupdate.h:1216 [inline]
is_module_text_address+0x39/0x1e0 kernel/module/main.c:3957
kernel_text_address+0x94/0xe0 kernel/extable.c:119
__kernel_text_address+0xd/0x30 kernel/extable.c:79
unwind_get_return_address+0x4d/0x90 arch/x86/kernel/unwind_orc.c:385
arch_stack_walk+0xfb/0x150 arch/x86/kernel/stacktrace.c:26
stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
kasan_save_stack mm/kasan/common.c:57 [inline]
kasan_save_track+0x3f/0x90 mm/kasan/common.c:79
kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:599
poison_slab_object mm/kasan/common.c:267 [inline]
__kasan_slab_free+0x70/0x90 mm/kasan/common.c:299
kasan_slab_free include/linux/kasan.h:239 [inline]
slab_free_hook mm/slub.c:2780 [inline]
slab_free mm/slub.c:6615 [inline]
kfree+0x1c7/0x650 mm/slub.c:6908
tomoyo_realpath_from_path+0x608/0x640 security/tomoyo/realpath.c:286
tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
tomoyo_check_open_permission+0x229/0x470 security/tomoyo/file.c:776
security_file_open+0xa9/0x240 security/security.c:2761
do_dentry_open+0x495/0x1360 fs/open.c:977
vfs_open_consume+0x4a/0x350 fs/open.c:1131
do_open fs/namei.c:4851 [inline]
path_openat+0x16fc/0x20f0 fs/namei.c:5016
do_file_open+0x23e/0x4a0 fs/namei.c:5045
do_sys_openat2+0x115/0x200 fs/open.c:1443
do_sys_open fs/open.c:1449 [inline]
__do_sys_openat fs/open.c:1789 [inline]
__se_sys_openat fs/open.c:1784 [inline]
__x64_sys_openat+0x138/0x170 fs/open.c:1784
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0x171/0x540 arch/x86/entry/syscall_64.c:89
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x00007f811876980e
Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
RSP: 002b:00007ffda8e7deb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 000055557c8f3500 RCX: 00007f811876980e
RDX: 0000000000000000 RSI: 00007ffda8e7e020 RDI: ffffffffffffff9c
RBP: 00007ffda8e7e020 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda8e7f0b0
R13: 00007f81188373e3 R14: 000055557c8f34e8 R15: 0000000000000005