INFO: task syz-executor.2:6143 blocked for more than 143 seconds. Not tainted 6.7.0-rc6-syzkaller-gaafe7ad77b91 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:0 pid:6143 tgid:6143 ppid:1 flags:0x0000000d Call trace: __switch_to+0x314/0x560 arch/arm64/kernel/process.c:556 context_switch kernel/sched/core.c:5376 [inline] __schedule+0x1354/0x2360 kernel/sched/core.c:6688 __schedule_loop kernel/sched/core.c:6763 [inline] schedule+0xb8/0x19c kernel/sched/core.c:6778 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6835 rwsem_down_write_slowpath+0xcfc/0x1aa0 kernel/locking/rwsem.c:1178 __down_write_common kernel/locking/rwsem.c:1306 [inline] __down_write kernel/locking/rwsem.c:1315 [inline] down_write+0xb4/0xc0 kernel/locking/rwsem.c:1580 __super_lock fs/super.c:56 [inline] __super_lock_excl fs/super.c:71 [inline] deactivate_super+0xd8/0x100 fs/super.c:516 cleanup_mnt+0x34c/0x3dc fs/namespace.c:1256 __cleanup_mnt+0x20/0x30 fs/namespace.c:1263 task_work_run+0x230/0x2e0 kernel/task_work.c:180 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] do_notify_resume+0x214c/0x393c arch/arm64/kernel/signal.c:1305 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:137 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:144 [inline] el0_svc+0x9c/0x158 arch/arm64/kernel/entry-common.c:679 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:696 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:595 Showing all locks held in the system: 1 lock held by khungtaskd/29: #0: ffff80008e6c48c0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:300 2 locks held by getty/5861: #0: ffff0000cce9b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff800094e402f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41c/0x1228 drivers/tty/n_tty.c:2201 1 lock held by syz-executor.2/6143: #0: ffff0000d93f80e0 (&type->s_umount_key#25){++++}-{3:3}, at: __super_lock fs/super.c:56 [inline] #0: ffff0000d93f80e0 (&type->s_umount_key#25){++++}-{3:3}, at: __super_lock_excl fs/super.c:71 [inline] #0: ffff0000d93f80e0 (&type->s_umount_key#25){++++}-{3:3}, at: deactivate_super+0xd8/0x100 fs/super.c:516 4 locks held by syz-executor.1/7079: #0: ffff0000d93f80e0 (&type->s_umount_key#25){++++}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff0000d93f80e0 (&type->s_umount_key#25){++++}-{3:3}, at: super_lock+0x160/0x328 fs/super.c:117 #1: ffff8000976890f0 (&journal->j_mutex){+.+.}-{3:3}, at: reiserfs_mutex_lock_safe fs/reiserfs/reiserfs.h:813 [inline] #1: ffff8000976890f0 (&journal->j_mutex){+.+.}-{3:3}, at: lock_journal fs/reiserfs/journal.c:533 [inline] #1: ffff8000976890f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_end+0x304/0x3e1c fs/reiserfs/journal.c:4026 #2: ffff800097689180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: reiserfs_mutex_lock_safe fs/reiserfs/reiserfs.h:813 [inline] #2: ffff800097689180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: flush_journal_list+0x168/0x18e0 fs/reiserfs/journal.c:1368 #3: ffff0000d502c090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_mutex_lock_safe fs/reiserfs/reiserfs.h:813 [inline] #3: ffff0000d502c090 (&sbi->lock){+.+.}-{3:3}, at: flush_commit_list+0x568/0x18f0 fs/reiserfs/journal.c:1006 1 lock held by syz-executor.5/7159: #0: ffff0000d93f80e0 (&type->s_umount_key#25){++++}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff0000d93f80e0 (&type->s_umount_key#25){++++}-{3:3}, at: super_lock+0x160/0x328 fs/super.c:117 1 lock held by syz-executor.1/7175: #0: ffff0000d93f80e0 (&type->s_umount_key#25){++++}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff0000d93f80e0 (&type->s_umount_key#25){++++}-{3:3}, at: super_lock+0x160/0x328 fs/super.c:117 =============================================