INFO: task syz.1.10:5971 blocked for more than 143 seconds.
Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.10 state:D stack:23120 pid:5971 tgid:5947 ppid:5822 flags:0x00000004
Call Trace:
<TASK>
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0x17fb/0x4be0 kernel/sched/core.c:6756
__schedule_loop kernel/sched/core.c:6833 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6848
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905
rwsem_down_write_slowpath+0xeee/0x13b0 kernel/locking/rwsem.c:1176
__down_write_common kernel/locking/rwsem.c:1304 [inline]
__down_write kernel/locking/rwsem.c:1313 [inline]
down_write+0x1d7/0x220 kernel/locking/rwsem.c:1578
inode_lock include/linux/fs.h:818 [inline]
vfs_link+0x3b2/0x6e0 fs/namei.c:4784
do_linkat+0x555/0x6f0 fs/namei.c:4863
__do_sys_link fs/namei.c:4897 [inline]
__se_sys_link fs/namei.c:4895 [inline]
__x64_sys_link+0x82/0x90 fs/namei.c:4895
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9b98385d29
RSP: 002b:00007f9b99182038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056
RAX: ffffffffffffffda RBX: 00007f9b98576080 RCX: 00007f9b98385d29
RDX: 0000000000000000 RSI: 0000000020000240 RDI: 00000000200001c0
RBP: 00007f9b98401b08 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f9b98576080 R15: 00007fff074c7eb8
</TASK>
INFO: task syz.1.10:5975 blocked for more than 143 seconds.
Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.10 state:D stack:25952 pid:5975 tgid:5947 ppid:5822 flags:0x00000004
Call Trace:
<TASK>
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0x17fb/0x4be0 kernel/sched/core.c:6756
__schedule_loop kernel/sched/core.c:6833 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6848
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905
rwsem_down_write_slowpath+0xeee/0x13b0 kernel/locking/rwsem.c:1176
__down_write_common kernel/locking/rwsem.c:1304 [inline]
__down_write kernel/locking/rwsem.c:1313 [inline]
down_write_nested+0x1e0/0x220 kernel/locking/rwsem.c:1694
inode_lock_nested include/linux/fs.h:853 [inline]
filename_create+0x260/0x540 fs/namei.c:4080
do_mkdirat+0xbd/0x3a0 fs/namei.c:4326
__do_sys_mkdir fs/namei.c:4354 [inline]
__se_sys_mkdir fs/namei.c:4352 [inline]
__x64_sys_mkdir+0x6c/0x80 fs/namei.c:4352
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9b98385d29
RSP: 002b:00007f9b99161038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
RAX: ffffffffffffffda RBX: 00007f9b98576160 RCX: 00007f9b98385d29
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000200
RBP: 00007f9b98401b08 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f9b98576160 R15: 00007fff074c7eb8
</TASK>
INFO: task syz.1.10:5978 blocked for more than 144 seconds.
Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.10 state:D stack:27360 pid:5978 tgid:5947 ppid:5822 flags:0x00000004
Call Trace:
<TASK>
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0x17fb/0x4be0 kernel/sched/core.c:6756
__schedule_loop kernel/sched/core.c:6833 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6848
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905
rwsem_down_read_slowpath kernel/locking/rwsem.c:1084 [inline]
__down_read_common kernel/locking/rwsem.c:1248 [inline]
__down_read kernel/locking/rwsem.c:1261 [inline]
down_read+0x705/0xa40 kernel/locking/rwsem.c:1526
inode_lock_shared include/linux/fs.h:828 [inline]
lookup_slow+0x45/0x70 fs/namei.c:1807
walk_component+0x2e1/0x410 fs/namei.c:2112
lookup_last fs/namei.c:2610 [inline]
path_lookupat+0x16f/0x450 fs/namei.c:2634
filename_lookup+0x2a3/0x670 fs/namei.c:2663
user_path_at+0x3a/0x60 fs/namei.c:3070
__do_sys_chdir fs/open.c:553 [inline]
__se_sys_chdir+0xbc/0x220 fs/open.c:547
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9b98385d29
RSP: 002b:00007f9b99140038 EFLAGS: 00000246 ORIG_RAX: 0000000000000050
RAX: ffffffffffffffda RBX: 00007f9b98576240 RCX: 00007f9b98385d29
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140
RBP: 00007f9b98401b08 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f9b98576240 R15: 00007fff074c7eb8
</TASK>
INFO: task syz.1.10:5979 blocked for more than 144 seconds.
Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.10 state:D stack:27360 pid:5979 tgid:5947 ppid:5822 flags:0x00000004
Call Trace:
<TASK>
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0x17fb/0x4be0 kernel/sched/core.c:6756
__schedule_loop kernel/sched/core.c:6833 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6848
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905
rwsem_down_write_slowpath+0xeee/0x13b0 kernel/locking/rwsem.c:1176
__down_write_common kernel/locking/rwsem.c:1304 [inline]
__down_write kernel/locking/rwsem.c:1313 [inline]
down_write_nested+0x1e0/0x220 kernel/locking/rwsem.c:1694
inode_lock_nested include/linux/fs.h:853 [inline]
do_rmdir+0x263/0x580 fs/namei.c:4441
__do_sys_unlinkat fs/namei.c:4629 [inline]
__se_sys_unlinkat fs/namei.c:4623 [inline]
__x64_sys_unlinkat+0xde/0xf0 fs/namei.c:4623
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9b98385d29
RSP: 002b:00007f9b9911f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
RAX: ffffffffffffffda RBX: 00007f9b98576320 RCX: 00007f9b98385d29
RDX: 0000000000000200 RSI: 0000000020000280 RDI: 0000000000000008
RBP: 00007f9b98401b08 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f9b98576320 R15: 00007fff074c7eb8
</TASK>
INFO: task syz.1.10:5981 blocked for more than 144 seconds.
Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.10 state:D stack:27360 pid:5981 tgid:5947 ppid:5822 flags:0x00000004
Call Trace:
<TASK>
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0x17fb/0x4be0 kernel/sched/core.c:6756
__schedule_loop kernel/sched/core.c:6833 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6848
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905
rwsem_down_write_slowpath+0xeee/0x13b0 kernel/locking/rwsem.c:1176
__down_write_common kernel/locking/rwsem.c:1304 [inline]
__down_write kernel/locking/rwsem.c:1313 [inline]
down_write+0x1d7/0x220 kernel/locking/rwsem.c:1578
inode_lock include/linux/fs.h:818 [inline]
do_lock_mount+0x112/0x3a0 fs/namespace.c:2607
lock_mount fs/namespace.c:2649 [inline]
do_new_mount_fc fs/namespace.c:3444 [inline]
do_new_mount+0x43d/0xb40 fs/namespace.c:3509
do_mount fs/namespace.c:3847 [inline]
__do_sys_mount fs/namespace.c:4057 [inline]
__se_sys_mount+0x2d6/0x3c0 fs/namespace.c:4034
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9b98385d29
RSP: 002b:00007f9b990fe038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f9b98576400 RCX: 00007f9b98385d29
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000
RBP: 00007f9b98401b08 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f9b98576400 R15: 00007fff074c7eb8
</TASK>
INFO: task syz.1.10:5985 blocked for more than 144 seconds.
Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.10 state:D stack:27360 pid:5985 tgid:5947 ppid:5822 flags:0x00000004
Call Trace:
<TASK>
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0x17fb/0x4be0 kernel/sched/core.c:6756
__schedule_loop kernel/sched/core.c:6833 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6848
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905
rwsem_down_write_slowpath+0xeee/0x13b0 kernel/locking/rwsem.c:1176
__down_write_common kernel/locking/rwsem.c:1304 [inline]
__down_write kernel/locking/rwsem.c:1313 [inline]
down_write+0x1d7/0x220 kernel/locking/rwsem.c:1578
inode_lock include/linux/fs.h:818 [inline]
open_last_lookups fs/namei.c:3745 [inline]
path_openat+0x89a/0x3590 fs/namei.c:3984
do_filp_open+0x27f/0x4e0 fs/namei.c:4014
do_sys_openat2+0x13e/0x1d0 fs/open.c:1402
do_sys_open fs/open.c:1417 [inline]
__do_sys_openat fs/open.c:1433 [inline]
__se_sys_openat fs/open.c:1428 [inline]
__x64_sys_openat+0x247/0x2a0 fs/open.c:1428
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9b98385d29
RSP: 002b:00007f9b990dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f9b985764e0 RCX: 00007f9b98385d29
RDX: 00000000001a10c1 RSI: 0000000020000140 RDI: ffffffffffffff9c
RBP: 00007f9b98401b08 R08: 0000000000000000 R09: 0000000000000000
R10: 9c37611dc13d0d83 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f9b985764e0 R15: 00007fff074c7eb8
</TASK>
INFO: task syz.1.10:5988 blocked for more than 145 seconds.
Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.10 state:D stack:25952 pid:5988 tgid:5947 ppid:5822 flags:0x00000004
Call Trace:
<TASK>
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0x17fb/0x4be0 kernel/sched/core.c:6756
__schedule_loop kernel/sched/core.c:6833 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6848
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6905
rwsem_down_write_slowpath+0xeee/0x13b0 kernel/locking/rwsem.c:1176
__down_write_common kernel/locking/rwsem.c:1304 [inline]
__down_write kernel/locking/rwsem.c:1313 [inline]
down_write+0x1d7/0x220 kernel/locking/rwsem.c:1578
inode_lock include/linux/fs.h:818 [inline]
bch2_write_iter+0x13a/0x2c10 fs/bcachefs/fs-io-buffered.c:1040
new_sync_write fs/read_write.c:586 [inline]
vfs_write+0xaeb/0xd30 fs/read_write.c:679
ksys_pwrite64 fs/read_write.c:786 [inline]
__do_sys_pwrite64 fs/read_write.c:794 [inline]
__se_sys_pwrite64 fs/read_write.c:791 [inline]
__x64_sys_pwrite64+0x1ac/0x240 fs/read_write.c:791
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9b98385d29
RSP: 002b:00007f9b94dec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
RAX: ffffffffffffffda RBX: 00007f9b985765c0 RCX: 00007f9b98385d29
RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000006
RBP: 00007f9b98401b08 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000008000c61 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f9b985765c0 R15: 00007fff074c7eb8
</TASK>
Showing all locks held in the system:
1 lock held by pool_workqueue_/3:
#0: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline]
#0: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:976
1 lock held by khungtaskd/30:
#0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
#0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6744
2 locks held by kworker/u8:7/3495:
#0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3204 [inline]
#0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 kernel/workqueue.c:3310
#1: ffffc9000c907d00 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3205 [inline]
#1: ffffc9000c907d00 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 kernel/workqueue.c:3310
2 locks held by kworker/u8:8/3539:
#0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3204 [inline]
#0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 kernel/workqueue.c:3310
#1: ffffc9000ca97d00 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3205 [inline]
#1: ffffc9000ca97d00 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 kernel/workqueue.c:3310
3 locks held by udevd/5195:
2 locks held by getty/5571:
#0: ffff88814e7a00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 drivers/tty/n_tty.c:2211
5 locks held by syz.1.10/5948:
#0: ffff888079d1a420 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 fs/namespace.c:515
#1: ffff8880534408c8 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: inode_lock include/linux/fs.h:818 [inline]
#1: ffff8880534408c8 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: do_truncate+0x20c/0x310 fs/open.c:63
#2: ffff888054580a38 (&c->snapshot_create_lock){.+.+}-{4:4}, at: bch2_truncate+0x166/0x2d0 fs/bcachefs/io_misc.c:292
#3: ffff888054584398 (&c->btree_trans_barrier){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:158 [inline]
#3: ffff888054584398 (&c->btree_trans_barrier){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:249 [inline]
#3: ffff888054584398 (&c->btree_trans_barrier){.+.+}-{0:0}, at: __bch2_trans_get+0x7e1/0xd30 fs/bcachefs/btree_iter.c:3228
#4: ffff8880545a66d0 (&c->gc_lock){.+.+}-{4:4}, at: bch2_btree_update_start+0x682/0x14e0 fs/bcachefs/btree_update_interior.c:1197
3 locks held by syz.1.10/5971:
#0: ffff888079d1a420 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 fs/namespace.c:515
#1: ffff888053440148 (&sb->s_type->i_mutex_key#27/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:853 [inline]
#1: ffff888053440148 (&sb->s_type->i_mutex_key#27/1){+.+.}-{4:4}, at: filename_create+0x260/0x540 fs/namei.c:4080
#2: ffff8880534408c8 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: inode_lock include/linux/fs.h:818 [inline]
#2: ffff8880534408c8 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: vfs_link+0x3b2/0x6e0 fs/namei.c:4784
2 locks held by syz.1.10/5975:
#0: ffff888079d1a420 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 fs/namespace.c:515
#1: ffff888053440148 (&sb->s_type->i_mutex_key#27/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:853 [inline]
#1: ffff888053440148 (&sb->s_type->i_mutex_key#27/1){+.+.}-{4:4}, at: filename_create+0x260/0x540 fs/namei.c:4080
1 lock held by syz.1.10/5978:
#0: ffff888053440148 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:828 [inline]
#0: ffff888053440148 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: lookup_slow+0x45/0x70 fs/namei.c:1807
2 locks held by syz.1.10/5979:
#0: ffff888079d1a420 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 fs/namespace.c:515
#1: ffff888053440148 (&sb->s_type->i_mutex_key#27/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:853 [inline]
#1: ffff888053440148 (&sb->s_type->i_mutex_key#27/1){+.+.}-{4:4}, at: do_rmdir+0x263/0x580 fs/namei.c:4441
1 lock held by syz.1.10/5981:
#0: ffff888053440148 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: inode_lock include/linux/fs.h:818 [inline]
#0: ffff888053440148 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: do_lock_mount+0x112/0x3a0 fs/namespace.c:2607
2 locks held by syz.1.10/5985:
#0: ffff888079d1a420 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 fs/namespace.c:515
#1: ffff888053440148 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: inode_lock include/linux/fs.h:818 [inline]
#1: ffff888053440148 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: open_last_lookups fs/namei.c:3745 [inline]
#1: ffff888053440148 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: path_openat+0x89a/0x3590 fs/namei.c:3984
2 locks held by syz.1.10/5988:
#0: ffff888079d1a420 (sb_writers#19){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2964 [inline]
#0: ffff888079d1a420 (sb_writers#19){.+.+}-{0:0}, at: vfs_write+0x225/0xd30 fs/read_write.c:675
#1: ffff8880534408c8 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: inode_lock include/linux/fs.h:818 [inline]
#1: ffff8880534408c8 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: bch2_write_iter+0x13a/0x2c10 fs/bcachefs/fs-io-buffered.c:1040
1 lock held by syz-executor/8354:
#0: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline]
#0: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:976
2 locks held by syz.2.283/8743:
2 locks held by syz.5.286/8770:
#0: ffffffff8eeb8b68 (uuid_mutex){+.+.}-{4:4}, at: btrfs_get_tree_super fs/btrfs/super.c:1841 [inline]
#0: ffffffff8eeb8b68 (uuid_mutex){+.+.}-{4:4}, at: btrfs_get_tree+0x309/0x1a30 fs/btrfs/super.c:2093
#1: ffffffff8e9f9d88 (lock#3){+.+.}-{4:4}, at: __lru_add_drain_all+0x66/0x560 mm/swap.c:798
=============================================
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call Trace:
<TASK>
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:234 [inline]
watchdog+0xff6/0x1040 kernel/hung_task.c:397
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
</TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 8810 Comm: dhcpcd-run-hook Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:filemap_read+0xd8/0xf50 mm/filemap.c:2614
Code: 48 8b 7c 24 28 e8 68 fb 2a 00 48 8b 5c 24 28 48 8b 03 48 89 84 24 88 00 00 00 48 8d 58 58 48 89 d8 48 c1 e8 03 42 80 3c 20 00 <74> 08 48 89 df e8 3e fb 2a 00 48 8d bc 24 20 01 00 00 4c 8b 2b 4c
RSP: 0018:ffffc900050bfa00 EFLAGS: 00000246
RAX: 1ffff1100b71b673 RBX: ffff88805b8db398 RCX: ffff88802d903c00
RDX: 0000000000000000 RSI: ffffc900050bfd90 RDI: ffffc900050bfd40
RBP: ffffc900050bfcb0 R08: ffffffff81d888b9 R09: 1ffff11006a33c70
R10: dffffc0000000000 R11: ffffed1006a33c71 R12: dffffc0000000000
R13: 1ffff92000a17fa4 R14: dffffc0000000000 R15: ffffc900050bfd40
FS: 00007ff53e143380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005603a434e768 CR3: 000000007ed50000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<NMI>
</NMI>
<TASK>
new_sync_read fs/read_write.c:484 [inline]
vfs_read+0x991/0xb70 fs/read_write.c:565
ksys_read+0x18f/0x2b0 fs/read_write.c:708
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff53e297b6a
Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83
RSP: 002b:00007ffd1e7cd228 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007ff53e297b6a
RDX: 00000000000003ff RSI: 00005603a434c500 RDI: 000000000000000a
RBP: 00005603a434c500 R08: 00005603a434cc58 R09: 0000000000000000
R10: 0000000000000008 R11: 0000000000000246 R12: 00000000000003ff
R13: 00007ff53e143300 R14: 0000000000000001 R15: 00005603a434c910
</TASK>