Extracting prog: 5m38.539434992s
Minimizing prog: 1h1m17.135185405s
Simplifying prog options: 6m52.406724706s
Extracting C: 3m20.433481093s
Simplifying C: 21m36.783667034s
extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002440)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000002480)='./sys\x00', &(0x7f00000024c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002500)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000002540)="02155e65", 0x4, 0x2)
program crashed: INFO: task hung in do_get_write_access
single: successfully extracted reproducer
found reproducer with 4 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002440)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000002480)='./sys\x00', &(0x7f00000024c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000002500)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-pwrite64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002440)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000002480)='./sys\x00', &(0x7f00000024c0)='sysfs\x00', 0x0, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000002540)="02155e65", 0x4, 0x2)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat-pwrite64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002440)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002500)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000002540)="02155e65", 0x4, 0x2)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pwrite64
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000002480)='./sys\x00', &(0x7f00000024c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002500)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000002540)="02155e65", 0x4, 0x2)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000002480)='./sys\x00', &(0x7f00000024c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002500)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000002540)="02155e65", 0x4, 0x2)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002440)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000024c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002500)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000002540)="02155e65", 0x4, 0x2)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002440)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000002480)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002500)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000002540)="02155e65", 0x4, 0x2)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002440)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000002480)='./sys\x00', &(0x7f00000024c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pwrite64(r0, &(0x7f0000002540)="02155e65", 0x4, 0x2)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002440)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000002480)='./sys\x00', &(0x7f00000024c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002500)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, 0x0, 0x0, 0x2)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002440)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000002480)='./sys\x00', &(0x7f00000024c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002500)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000002540), 0x0, 0x2)
program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64
program crashed: INFO: task hung in jbd2_journal_commit_transaction
a never seen crash title: INFO: task hung in jbd2_journal_commit_transaction, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002440)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000002480)='./sys\x00', &(0x7f00000024c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002500)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000002540)="02155e65", 0x4, 0x2)
program crashed: INFO: task hung in do_get_write_access
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64
program crashed: INFO: task hung in do_get_write_access
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64
program crashed: INFO: task hung in __rq_qos_throttle
a never seen crash title: INFO: task hung in __rq_qos_throttle, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64
program crashed: INFO: task hung in do_get_write_access
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64
program crashed: INFO: task hung in jbd2_journal_commit_transaction
a never seen crash title: INFO: task hung in jbd2_journal_commit_transaction, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64
program crashed: INFO: task hung in do_get_write_access
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64
program crashed: INFO: task hung in do_get_write_access
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64
program crashed: INFO: task hung in do_get_write_access
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002440)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000002480)='./sys\x00', &(0x7f00000024c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002500)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000002540)="02155e65", 0x4, 0x2)
program crashed: INFO: task hung in do_get_write_access
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002440)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000002480)='./sys\x00', &(0x7f00000024c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002500)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000002540)="02155e65", 0x4, 0x2)
program crashed: INFO: task hung in do_get_write_access
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002440)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000002480)='./sys\x00', &(0x7f00000024c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002500)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000002540)="02155e65", 0x4, 0x2)
program crashed: INFO: task hung in do_get_write_access
validation run: crashed=true
reproducing took 1h49m38.207865221s
repro crashed as (corrupted=false):
INFO
INFO: task syz-executor:5644 blocked in I/O wait for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor state:D stack:20384 pid:5644 tgid:5644 ppid:5635 task_flags:0x440100 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5584 [inline]
__schedule+0x1768/0x5780 kernel/sched/core.c:7389
__schedule_loop kernel/sched/core.c:7466 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7481
io_schedule+0x80/0xe0 kernel/sched/core.c:8153
bit_wait_io+0x13/0x110 kernel/sched/wait_bit.c:258
__wait_on_bit+0xac/0x2f0 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67
wait_on_bit_io include/linux/wait_bit.h:106 [inline]
do_get_write_access+0x667/0x10d0 fs/jbd2/transaction.c:1113
jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263
__ext4_journal_get_write_access+0xec/0x620 fs/ext4/ext4_jbd2.c:253
ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:7451
__ext4_mark_inode_dirty+0x141/0x7e0 fs/ext4/inode.c:7642
ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:7679
__mark_inode_dirty+0x3a8/0x13b0 fs/fs-writeback.c:2751
generic_update_time fs/inode.c:2263 [inline]
file_update_time_flags+0x39f/0x450 fs/inode.c:2493
ext4_page_mkwrite+0x220/0x1490 fs/ext4/inode.c:7864
do_page_mkwrite+0x14a/0x310 mm/memory.c:3889
wp_page_shared mm/memory.c:4295 [inline]
do_wp_page+0x2066/0x3e00 mm/memory.c:4518
handle_pte_fault mm/memory.c:6692 [inline]
__handle_mm_fault mm/memory.c:6817 [inline]
handle_mm_fault+0xef9/0x2130 mm/memory.c:6984
do_user_addr_fault+0xb35/0x1480 arch/x86/mm/fault.c:1343
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x7fbe0aa6ea56
RSP: 002b:00007ffeaa186888 EFLAGS: 00010206
RAX: 00007fbe06f00000 RBX: 0000555587744700 RCX: fffffffffffffbf0
RDX: 00000000000000d9 RSI: 0000555587740590 RDI: 00007fbe06f00000
RBP: 00007ffeaa1868a0 R08: 00007fbe0acfae20 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000555587744d80
R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
INFO: task syz.0.87:6190 blocked in I/O wait for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.87 state:D stack:27672 pid:6190 tgid:6190 ppid:5811 task_flags:0x440040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5584 [inline]
__schedule+0x1768/0x5780 kernel/sched/core.c:7389
__schedule_loop kernel/sched/core.c:7466 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7481
io_schedule+0x80/0xe0 kernel/sched/core.c:8153
bit_wait_io+0x13/0x110 kernel/sched/wait_bit.c:258
__wait_on_bit+0xac/0x2f0 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67
wait_on_bit_io include/linux/wait_bit.h:106 [inline]
do_get_write_access+0x667/0x10d0 fs/jbd2/transaction.c:1113
jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263
__ext4_journal_get_write_access+0xec/0x620 fs/ext4/ext4_jbd2.c:253
ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:7451
__ext4_mark_inode_dirty+0x141/0x7e0 fs/ext4/inode.c:7642
ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:7679
__mark_inode_dirty+0x3a8/0x13b0 fs/fs-writeback.c:2751
generic_update_time fs/inode.c:2263 [inline]
file_update_time_flags+0x39f/0x450 fs/inode.c:2493
ext4_page_mkwrite+0x220/0x1490 fs/ext4/inode.c:7864
do_page_mkwrite+0x14a/0x310 mm/memory.c:3889
do_shared_fault mm/memory.c:6188 [inline]
do_fault mm/memory.c:6250 [inline]
do_pte_missing+0x717/0x2970 mm/memory.c:4778
handle_pte_fault mm/memory.c:6665 [inline]
__handle_mm_fault mm/memory.c:6817 [inline]
handle_mm_fault+0xd42/0x2130 mm/memory.c:6984
do_user_addr_fault+0xb35/0x1480 arch/x86/mm/fault.c:1343
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x7fd9bafd7d51
RSP: 002b:00007ffe2c80c220 EFLAGS: 00010202
RAX: 0000001b2fb64000 RBX: 0000000000000000 RCX: 000000000003fde8
RDX: 0000001b2fb63fff RSI: 0000000000000008 RDI: 00007fd9bbec5720
RBP: 00007fd9bbec5720 R08: 0000000000000000 R09: 00007fd9bb396038
R10: 00007fd9bbec5700 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003
INFO: task syz.1.89:6191 blocked in I/O wait for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.89 state:D stack:28040 pid:6191 tgid:6191 ppid:5809 task_flags:0x440040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5584 [inline]
__schedule+0x1768/0x5780 kernel/sched/core.c:7389
__schedule_loop kernel/sched/core.c:7466 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7481
io_schedule+0x80/0xe0 kernel/sched/core.c:8153
bit_wait_io+0x13/0x110 kernel/sched/wait_bit.c:258
__wait_on_bit+0xac/0x2f0 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67
wait_on_bit_io include/linux/wait_bit.h:106 [inline]
do_get_write_access+0x667/0x10d0 fs/jbd2/transaction.c:1113
jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263
__ext4_journal_get_write_access+0xec/0x620 fs/ext4/ext4_jbd2.c:253
ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:7451
__ext4_mark_inode_dirty+0x141/0x7e0 fs/ext4/inode.c:7642
ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:7679
__mark_inode_dirty+0x3a8/0x13b0 fs/fs-writeback.c:2751
generic_update_time fs/inode.c:2263 [inline]
file_update_time_flags+0x39f/0x450 fs/inode.c:2493
ext4_page_mkwrite+0x220/0x1490 fs/ext4/inode.c:7864
do_page_mkwrite+0x14a/0x310 mm/memory.c:3889
do_shared_fault mm/memory.c:6188 [inline]
do_fault mm/memory.c:6250 [inline]
do_pte_missing+0x717/0x2970 mm/memory.c:4778
handle_pte_fault mm/memory.c:6665 [inline]
__handle_mm_fault mm/memory.c:6817 [inline]
handle_mm_fault+0xd42/0x2130 mm/memory.c:6984
do_user_addr_fault+0xb35/0x1480 arch/x86/mm/fault.c:1343
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x7f200011c7c3
RSP: 002b:00007ffd859068d0 EFLAGS: 00010246
RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000001b2fc24000 RSI: 0000000000040000 RDI: 00007f2000498708
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd85906b60
INFO: task syz.2.88:6192 blocked in I/O wait for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.88 state:D stack:28200 pid:6192 tgid:6192 ppid:5818 task_flags:0x440040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5584 [inline]
__schedule+0x1768/0x5780 kernel/sched/core.c:7389
__schedule_loop kernel/sched/core.c:7466 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7481
io_schedule+0x80/0xe0 kernel/sched/core.c:8153
bit_wait_io+0x13/0x110 kernel/sched/wait_bit.c:258
__wait_on_bit+0xac/0x2f0 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67
wait_on_bit_io include/linux/wait_bit.h:106 [inline]
do_get_write_access+0x667/0x10d0 fs/jbd2/transaction.c:1113
jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263
__ext4_journal_get_write_access+0xec/0x620 fs/ext4/ext4_jbd2.c:253
ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:7451
__ext4_mark_inode_dirty+0x141/0x7e0 fs/ext4/inode.c:7642
ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:7679
__mark_inode_dirty+0x3a8/0x13b0 fs/fs-writeback.c:2751
generic_update_time fs/inode.c:2263 [inline]
file_update_time_flags+0x39f/0x450 fs/inode.c:2493
ext4_page_mkwrite+0x220/0x1490 fs/ext4/inode.c:7864
do_page_mkwrite+0x14a/0x310 mm/memory.c:3889
do_shared_fault mm/memory.c:6188 [inline]
do_fault mm/memory.c:6250 [inline]
do_pte_missing+0x717/0x2970 mm/memory.c:4778
handle_pte_fault mm/memory.c:6665 [inline]
__handle_mm_fault mm/memory.c:6817 [inline]
handle_mm_fault+0xd42/0x2130 mm/memory.c:6984
do_user_addr_fault+0xb35/0x1480 arch/x86/mm/fault.c:1343
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x7f30ca7ac7c3
RSP: 002b:00007ffff0d057c0 EFLAGS: 00010246
RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000001b2fe24000 RSI: 0000000000040000 RDI: 00007f30cab28708
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffff0d05a50
INFO: task syz.4.90:6193 blocked in I/O wait for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.90 state:D stack:26840 pid:6193 tgid:6193 ppid:5819 task_flags:0x440040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5584 [inline]
__schedule+0x1768/0x5780 kernel/sched/core.c:7389
__schedule_loop kernel/sched/core.c:7466 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7481
io_schedule+0x80/0xe0 kernel/sched/core.c:8153
bit_wait_io+0x13/0x110 kernel/sched/wait_bit.c:258
__wait_on_bit+0xac/0x2f0 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67
wait_on_bit_io include/linux/wait_bit.h:106 [inline]
do_get_write_access+0x667/0x10d0 fs/jbd2/transaction.c:1113
jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263
__ext4_journal_get_write_access+0xec/0x620 fs/ext4/ext4_jbd2.c:253
ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:7451
__ext4_mark_inode_dirty+0x141/0x7e0 fs/ext4/inode.c:7642
ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:7679
__mark_inode_dirty+0x3a8/0x13b0 fs/fs-writeback.c:2751
generic_update_time fs/inode.c:2263 [inline]
file_update_time_flags+0x39f/0x450 fs/inode.c:2493
ext4_page_mkwrite+0x220/0x1490 fs/ext4/inode.c:7864
do_page_mkwrite+0x14a/0x310 mm/memory.c:3889
do_shared_fault mm/memory.c:6188 [inline]
do_fault mm/memory.c:6250 [inline]
do_pte_missing+0x717/0x2970 mm/memory.c:4778
handle_pte_fault mm/memory.c:6665 [inline]
__handle_mm_fault mm/memory.c:6817 [inline]
handle_mm_fault+0xd42/0x2130 mm/memory.c:6984
do_user_addr_fault+0xb35/0x1480 arch/x86/mm/fault.c:1343
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x7f9f3a95c7c3
RSP: 002b:00007fff4fcf01e0 EFLAGS: 00010246
RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000001b30324000 RSI: 0000000000040000 RDI: 00007f9f3acd8708
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff4fcf0470
Showing all locks held in the system:
locks held by khungtaskd/38: 1, on CPU#0:
#0: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#0: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#0: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6871
locks held by kworker/u8:5/94: 4, on CPU#1:
#0: ffff8880342e1940 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#0: ffff8880342e1940 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#0: ffff8880342e1940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline]
#0: ffff8880342e1940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578
#1: ffffc90003717c40 ((work_completion)(&(&bat_priv->bla.work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#1: ffffc90003717c40 ((work_completion)(&(&bat_priv->bla.work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#1: ffffc90003717c40 ((work_completion)(&(&bat_priv->bla.work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline]
#1: ffffc90003717c40 ((work_completion)(&(&bat_priv->bla.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578
#2: ffffffff8f255b40 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 kernel/softirq.c:186
#3: ffff8880b853cd60 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 kernel/sched/core.c:677
locks held by getty/5371: 2, last CPU#0:
#0: ffff8880374c20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc900044ce2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 drivers/tty/n_tty.c:2211
locks held by syz-executor/5644: 3, last CPU#0:
#0: ffff888040e63448 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 mm/mmap_lock.c:339
#1: ffff888036b5a6a0 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline]
#1: ffff888036b5a6a0 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ff/0x1490 fs/ext4/inode.c:7863
#2: ffff888036bfebd0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 fs/jbd2/transaction.c:444
locks held by syz.0.87/6190: 3, last CPU#0:
#0: ffff88803d18e448 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 mm/mmap_lock.c:339
#1: ffff888036b5a6a0 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline]
#1: ffff888036b5a6a0 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ff/0x1490 fs/ext4/inode.c:7863
#2: ffff888036bfebd0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 fs/jbd2/transaction.c:444
locks held by syz.1.89/6191: 3, last CPU#0:
#0: ffff88802b4d9088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 mm/mmap_lock.c:339
#1: ffff888036b5a6a0 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline]
#1: ffff888036b5a6a0 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ff/0x1490 fs/ext4/inode.c:7863
#2: ffff888036bfebd0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 fs/jbd2/transaction.c:444
locks held by syz.2.88/6192: 3, last CPU#1:
#0: ffff88803d050588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 mm/mmap_lock.c:339
#1: ffff888036b5a6a0 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline]
#1: ffff888036b5a6a0 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ff/0x1490 fs/ext4/inode.c:7863
#2: ffff888036bfebd0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 fs/jbd2/transaction.c:444
locks held by syz.4.90/6193: 3, last CPU#0:
#0: ffff888036dcf448 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 mm/mmap_lock.c:339
#1: ffff888036b5a6a0 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline]
#1: ffff888036b5a6a0 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ff/0x1490 fs/ext4/inode.c:7863
#2: ffff888036bfebd0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 fs/jbd2/transaction.c:444
=============================================
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)}
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
Call Trace:
dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:123
nmi_trigger_cpumask_backtrace+0x17d/0x390 lib/nmi_backtrace.c:66
trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline]
__sys_info lib/sys_info.c:157 [inline]
sys_info+0x135/0x170 lib/sys_info.c:165
check_hung_uninterruptible_tasks kernel/hung_task.c:377 [inline]
watchdog+0x1073/0x10f0 kernel/hung_task.c:598
kthread+0x38b/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 94 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
Workqueue: bat_events batadv_bla_periodic_work
RIP: 0010:hlock_class kernel/locking/lockdep.c:234 [inline]
RIP: 0010:mark_lock+0x3e/0x190 kernel/locking/lockdep.c:4775
Code: 03 00 48 83 f9 01 bb 09 00 00 00 83 db 00 83 fa 08 0f 45 da bd 01 00 00 00 89 d9 d3 e5 25 ff 1f 00 00 48 0f a3 05 02 cc 33 13 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 90 e9 77 94 eb 42 83 3d 09 5c
RSP: 0018:ffffc900037175e0 EFLAGS: 00000003
RAX: 000000000000000b RBX: 0000000000000009 RCX: 0000000000000009
RDX: 0000000000000008 RSI: ffff88801f7d8ce0 RDI: ffff88801f7d8000
RBP: 0000000000000200 R08: ffffffff8b783fe2 R09: 0000000000000000
R10: dffffc0000000000 R11: fffffbfff21ab518 R12: 0000000000000003
R13: 0000000000000000 R14: ffff88801f7d8000 R15: 0000000000000005
FS: 0000000000000000(0000) GS:ffff88812480e000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000558a9fa624b0 CR3: 000000000f1b0000 CR4: 00000000003526f0
Call Trace:
mark_usage kernel/locking/lockdep.c:4718 [inline]
__lock_acquire+0x747/0x2de0 kernel/locking/lockdep.c:5242
lock_acquire+0x115/0x350 kernel/locking/lockdep.c:5942
rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
rcu_read_lock include/linux/rcupdate.h:849 [inline]
__rt_spin_lock kernel/locking/spinlock_rt.c:50 [inline]
rt_spin_lock+0x1fe/0x400 kernel/locking/spinlock_rt.c:57
spin_lock_bh include/linux/spinlock_rt.h:90 [inline]
batadv_bla_purge_backbone_gw+0x14b/0x5f0 net/batman-adv/bridge_loop_avoidance.c:1261
batadv_bla_periodic_work+0xc8/0xb70 net/batman-adv/bridge_loop_avoidance.c:1494
process_one_work kernel/workqueue.c:3495 [inline]
process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3578
worker_thread+0xa47/0xfb0 kernel/workqueue.c:3659
kthread+0x38b/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
final repro crashed as (corrupted=false):
INFO
INFO: task syz-executor:5644 blocked in I/O wait for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor state:D stack:20384 pid:5644 tgid:5644 ppid:5635 task_flags:0x440100 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5584 [inline]
__schedule+0x1768/0x5780 kernel/sched/core.c:7389
__schedule_loop kernel/sched/core.c:7466 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7481
io_schedule+0x80/0xe0 kernel/sched/core.c:8153
bit_wait_io+0x13/0x110 kernel/sched/wait_bit.c:258
__wait_on_bit+0xac/0x2f0 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67
wait_on_bit_io include/linux/wait_bit.h:106 [inline]
do_get_write_access+0x667/0x10d0 fs/jbd2/transaction.c:1113
jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263
__ext4_journal_get_write_access+0xec/0x620 fs/ext4/ext4_jbd2.c:253
ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:7451
__ext4_mark_inode_dirty+0x141/0x7e0 fs/ext4/inode.c:7642
ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:7679
__mark_inode_dirty+0x3a8/0x13b0 fs/fs-writeback.c:2751
generic_update_time fs/inode.c:2263 [inline]
file_update_time_flags+0x39f/0x450 fs/inode.c:2493
ext4_page_mkwrite+0x220/0x1490 fs/ext4/inode.c:7864
do_page_mkwrite+0x14a/0x310 mm/memory.c:3889
wp_page_shared mm/memory.c:4295 [inline]
do_wp_page+0x2066/0x3e00 mm/memory.c:4518
handle_pte_fault mm/memory.c:6692 [inline]
__handle_mm_fault mm/memory.c:6817 [inline]
handle_mm_fault+0xef9/0x2130 mm/memory.c:6984
do_user_addr_fault+0xb35/0x1480 arch/x86/mm/fault.c:1343
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x7fbe0aa6ea56
RSP: 002b:00007ffeaa186888 EFLAGS: 00010206
RAX: 00007fbe06f00000 RBX: 0000555587744700 RCX: fffffffffffffbf0
RDX: 00000000000000d9 RSI: 0000555587740590 RDI: 00007fbe06f00000
RBP: 00007ffeaa1868a0 R08: 00007fbe0acfae20 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000555587744d80
R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
INFO: task syz.0.87:6190 blocked in I/O wait for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.87 state:D stack:27672 pid:6190 tgid:6190 ppid:5811 task_flags:0x440040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5584 [inline]
__schedule+0x1768/0x5780 kernel/sched/core.c:7389
__schedule_loop kernel/sched/core.c:7466 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7481
io_schedule+0x80/0xe0 kernel/sched/core.c:8153
bit_wait_io+0x13/0x110 kernel/sched/wait_bit.c:258
__wait_on_bit+0xac/0x2f0 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67
wait_on_bit_io include/linux/wait_bit.h:106 [inline]
do_get_write_access+0x667/0x10d0 fs/jbd2/transaction.c:1113
jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263
__ext4_journal_get_write_access+0xec/0x620 fs/ext4/ext4_jbd2.c:253
ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:7451
__ext4_mark_inode_dirty+0x141/0x7e0 fs/ext4/inode.c:7642
ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:7679
__mark_inode_dirty+0x3a8/0x13b0 fs/fs-writeback.c:2751
generic_update_time fs/inode.c:2263 [inline]
file_update_time_flags+0x39f/0x450 fs/inode.c:2493
ext4_page_mkwrite+0x220/0x1490 fs/ext4/inode.c:7864
do_page_mkwrite+0x14a/0x310 mm/memory.c:3889
do_shared_fault mm/memory.c:6188 [inline]
do_fault mm/memory.c:6250 [inline]
do_pte_missing+0x717/0x2970 mm/memory.c:4778
handle_pte_fault mm/memory.c:6665 [inline]
__handle_mm_fault mm/memory.c:6817 [inline]
handle_mm_fault+0xd42/0x2130 mm/memory.c:6984
do_user_addr_fault+0xb35/0x1480 arch/x86/mm/fault.c:1343
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x7fd9bafd7d51
RSP: 002b:00007ffe2c80c220 EFLAGS: 00010202
RAX: 0000001b2fb64000 RBX: 0000000000000000 RCX: 000000000003fde8
RDX: 0000001b2fb63fff RSI: 0000000000000008 RDI: 00007fd9bbec5720
RBP: 00007fd9bbec5720 R08: 0000000000000000 R09: 00007fd9bb396038
R10: 00007fd9bbec5700 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003
INFO: task syz.1.89:6191 blocked in I/O wait for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.89 state:D stack:28040 pid:6191 tgid:6191 ppid:5809 task_flags:0x440040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5584 [inline]
__schedule+0x1768/0x5780 kernel/sched/core.c:7389
__schedule_loop kernel/sched/core.c:7466 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7481
io_schedule+0x80/0xe0 kernel/sched/core.c:8153
bit_wait_io+0x13/0x110 kernel/sched/wait_bit.c:258
__wait_on_bit+0xac/0x2f0 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67
wait_on_bit_io include/linux/wait_bit.h:106 [inline]
do_get_write_access+0x667/0x10d0 fs/jbd2/transaction.c:1113
jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263
__ext4_journal_get_write_access+0xec/0x620 fs/ext4/ext4_jbd2.c:253
ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:7451
__ext4_mark_inode_dirty+0x141/0x7e0 fs/ext4/inode.c:7642
ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:7679
__mark_inode_dirty+0x3a8/0x13b0 fs/fs-writeback.c:2751
generic_update_time fs/inode.c:2263 [inline]
file_update_time_flags+0x39f/0x450 fs/inode.c:2493
ext4_page_mkwrite+0x220/0x1490 fs/ext4/inode.c:7864
do_page_mkwrite+0x14a/0x310 mm/memory.c:3889
do_shared_fault mm/memory.c:6188 [inline]
do_fault mm/memory.c:6250 [inline]
do_pte_missing+0x717/0x2970 mm/memory.c:4778
handle_pte_fault mm/memory.c:6665 [inline]
__handle_mm_fault mm/memory.c:6817 [inline]
handle_mm_fault+0xd42/0x2130 mm/memory.c:6984
do_user_addr_fault+0xb35/0x1480 arch/x86/mm/fault.c:1343
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x7f200011c7c3
RSP: 002b:00007ffd859068d0 EFLAGS: 00010246
RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000001b2fc24000 RSI: 0000000000040000 RDI: 00007f2000498708
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd85906b60
INFO: task syz.2.88:6192 blocked in I/O wait for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.88 state:D stack:28200 pid:6192 tgid:6192 ppid:5818 task_flags:0x440040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5584 [inline]
__schedule+0x1768/0x5780 kernel/sched/core.c:7389
__schedule_loop kernel/sched/core.c:7466 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7481
io_schedule+0x80/0xe0 kernel/sched/core.c:8153
bit_wait_io+0x13/0x110 kernel/sched/wait_bit.c:258
__wait_on_bit+0xac/0x2f0 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67
wait_on_bit_io include/linux/wait_bit.h:106 [inline]
do_get_write_access+0x667/0x10d0 fs/jbd2/transaction.c:1113
jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263
__ext4_journal_get_write_access+0xec/0x620 fs/ext4/ext4_jbd2.c:253
ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:7451
__ext4_mark_inode_dirty+0x141/0x7e0 fs/ext4/inode.c:7642
ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:7679
__mark_inode_dirty+0x3a8/0x13b0 fs/fs-writeback.c:2751
generic_update_time fs/inode.c:2263 [inline]
file_update_time_flags+0x39f/0x450 fs/inode.c:2493
ext4_page_mkwrite+0x220/0x1490 fs/ext4/inode.c:7864
do_page_mkwrite+0x14a/0x310 mm/memory.c:3889
do_shared_fault mm/memory.c:6188 [inline]
do_fault mm/memory.c:6250 [inline]
do_pte_missing+0x717/0x2970 mm/memory.c:4778
handle_pte_fault mm/memory.c:6665 [inline]
__handle_mm_fault mm/memory.c:6817 [inline]
handle_mm_fault+0xd42/0x2130 mm/memory.c:6984
do_user_addr_fault+0xb35/0x1480 arch/x86/mm/fault.c:1343
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x7f30ca7ac7c3
RSP: 002b:00007ffff0d057c0 EFLAGS: 00010246
RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000001b2fe24000 RSI: 0000000000040000 RDI: 00007f30cab28708
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffff0d05a50
INFO: task syz.4.90:6193 blocked in I/O wait for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.90 state:D stack:26840 pid:6193 tgid:6193 ppid:5819 task_flags:0x440040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5584 [inline]
__schedule+0x1768/0x5780 kernel/sched/core.c:7389
__schedule_loop kernel/sched/core.c:7466 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7481
io_schedule+0x80/0xe0 kernel/sched/core.c:8153
bit_wait_io+0x13/0x110 kernel/sched/wait_bit.c:258
__wait_on_bit+0xac/0x2f0 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67
wait_on_bit_io include/linux/wait_bit.h:106 [inline]
do_get_write_access+0x667/0x10d0 fs/jbd2/transaction.c:1113
jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263
__ext4_journal_get_write_access+0xec/0x620 fs/ext4/ext4_jbd2.c:253
ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:7451
__ext4_mark_inode_dirty+0x141/0x7e0 fs/ext4/inode.c:7642
ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:7679
__mark_inode_dirty+0x3a8/0x13b0 fs/fs-writeback.c:2751
generic_update_time fs/inode.c:2263 [inline]
file_update_time_flags+0x39f/0x450 fs/inode.c:2493
ext4_page_mkwrite+0x220/0x1490 fs/ext4/inode.c:7864
do_page_mkwrite+0x14a/0x310 mm/memory.c:3889
do_shared_fault mm/memory.c:6188 [inline]
do_fault mm/memory.c:6250 [inline]
do_pte_missing+0x717/0x2970 mm/memory.c:4778
handle_pte_fault mm/memory.c:6665 [inline]
__handle_mm_fault mm/memory.c:6817 [inline]
handle_mm_fault+0xd42/0x2130 mm/memory.c:6984
do_user_addr_fault+0xb35/0x1480 arch/x86/mm/fault.c:1343
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x7f9f3a95c7c3
RSP: 002b:00007fff4fcf01e0 EFLAGS: 00010246
RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000001b30324000 RSI: 0000000000040000 RDI: 00007f9f3acd8708
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff4fcf0470
Showing all locks held in the system:
locks held by khungtaskd/38: 1, on CPU#0:
#0: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#0: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#0: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6871
locks held by kworker/u8:5/94: 4, on CPU#1:
#0: ffff8880342e1940 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#0: ffff8880342e1940 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#0: ffff8880342e1940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline]
#0: ffff8880342e1940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578
#1: ffffc90003717c40 ((work_completion)(&(&bat_priv->bla.work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#1: ffffc90003717c40 ((work_completion)(&(&bat_priv->bla.work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#1: ffffc90003717c40 ((work_completion)(&(&bat_priv->bla.work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline]
#1: ffffc90003717c40 ((work_completion)(&(&bat_priv->bla.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578
#2: ffffffff8f255b40 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 kernel/softirq.c:186
#3: ffff8880b853cd60 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 kernel/sched/core.c:677
locks held by getty/5371: 2, last CPU#0:
#0: ffff8880374c20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc900044ce2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 drivers/tty/n_tty.c:2211
locks held by syz-executor/5644: 3, last CPU#0:
#0: ffff888040e63448 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 mm/mmap_lock.c:339
#1: ffff888036b5a6a0 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline]
#1: ffff888036b5a6a0 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ff/0x1490 fs/ext4/inode.c:7863
#2: ffff888036bfebd0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 fs/jbd2/transaction.c:444
locks held by syz.0.87/6190: 3, last CPU#0:
#0: ffff88803d18e448 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 mm/mmap_lock.c:339
#1: ffff888036b5a6a0 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline]
#1: ffff888036b5a6a0 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ff/0x1490 fs/ext4/inode.c:7863
#2: ffff888036bfebd0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 fs/jbd2/transaction.c:444
locks held by syz.1.89/6191: 3, last CPU#0:
#0: ffff88802b4d9088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 mm/mmap_lock.c:339
#1: ffff888036b5a6a0 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline]
#1: ffff888036b5a6a0 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ff/0x1490 fs/ext4/inode.c:7863
#2: ffff888036bfebd0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 fs/jbd2/transaction.c:444
locks held by syz.2.88/6192: 3, last CPU#1:
#0: ffff88803d050588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 mm/mmap_lock.c:339
#1: ffff888036b5a6a0 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline]
#1: ffff888036b5a6a0 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ff/0x1490 fs/ext4/inode.c:7863
#2: ffff888036bfebd0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 fs/jbd2/transaction.c:444
locks held by syz.4.90/6193: 3, last CPU#0:
#0: ffff888036dcf448 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 mm/mmap_lock.c:339
#1: ffff888036b5a6a0 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline]
#1: ffff888036b5a6a0 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ff/0x1490 fs/ext4/inode.c:7863
#2: ffff888036bfebd0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 fs/jbd2/transaction.c:444
=============================================
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)}
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
Call Trace:
dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:123
nmi_trigger_cpumask_backtrace+0x17d/0x390 lib/nmi_backtrace.c:66
trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline]
__sys_info lib/sys_info.c:157 [inline]
sys_info+0x135/0x170 lib/sys_info.c:165
check_hung_uninterruptible_tasks kernel/hung_task.c:377 [inline]
watchdog+0x1073/0x10f0 kernel/hung_task.c:598
kthread+0x38b/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 94 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
Workqueue: bat_events batadv_bla_periodic_work
RIP: 0010:hlock_class kernel/locking/lockdep.c:234 [inline]
RIP: 0010:mark_lock+0x3e/0x190 kernel/locking/lockdep.c:4775
Code: 03 00 48 83 f9 01 bb 09 00 00 00 83 db 00 83 fa 08 0f 45 da bd 01 00 00 00 89 d9 d3 e5 25 ff 1f 00 00 48 0f a3 05 02 cc 33 13 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 90 e9 77 94 eb 42 83 3d 09 5c
RSP: 0018:ffffc900037175e0 EFLAGS: 00000003
RAX: 000000000000000b RBX: 0000000000000009 RCX: 0000000000000009
RDX: 0000000000000008 RSI: ffff88801f7d8ce0 RDI: ffff88801f7d8000
RBP: 0000000000000200 R08: ffffffff8b783fe2 R09: 0000000000000000
R10: dffffc0000000000 R11: fffffbfff21ab518 R12: 0000000000000003
R13: 0000000000000000 R14: ffff88801f7d8000 R15: 0000000000000005
FS: 0000000000000000(0000) GS:ffff88812480e000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000558a9fa624b0 CR3: 000000000f1b0000 CR4: 00000000003526f0
Call Trace:
mark_usage kernel/locking/lockdep.c:4718 [inline]
__lock_acquire+0x747/0x2de0 kernel/locking/lockdep.c:5242
lock_acquire+0x115/0x350 kernel/locking/lockdep.c:5942
rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
rcu_read_lock include/linux/rcupdate.h:849 [inline]
__rt_spin_lock kernel/locking/spinlock_rt.c:50 [inline]
rt_spin_lock+0x1fe/0x400 kernel/locking/spinlock_rt.c:57
spin_lock_bh include/linux/spinlock_rt.h:90 [inline]
batadv_bla_purge_backbone_gw+0x14b/0x5f0 net/batman-adv/bridge_loop_avoidance.c:1261
batadv_bla_periodic_work+0xc8/0xb70 net/batman-adv/bridge_loop_avoidance.c:1494
process_one_work kernel/workqueue.c:3495 [inline]
process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3578
worker_thread+0xa47/0xfb0 kernel/workqueue.c:3659
kthread+0x38b/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245