INFO: task syz.2.422:9698 blocked for more than 143 seconds. Tainted: G W syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disabl[ 461.568764][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.422 state:D stack:29352 pid:9698 tgid:9669 ppid:8952 task_flags:0x400040 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x16f3/0x4c20 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] rt_mutex_schedule+0x77/0xf0 kernel/sched/core.c:7339 rt_mutex_slowlock_block kernel/locking/rtmutex.c:1647 [inline] __rt_mutex_slowlock kernel/locking/rtmutex.c:1721 [inline] __rt_mutex_slowlock_locked+0x1e04/0x25e0 kernel/locking/rtmutex.c:1760 rt_mutex_slowlock+0xb5/0x160 kernel/locking/rtmutex.c:1800 __rt_mutex_lock kernel/locking/rtmutex.c:1815 [inline] rwbase_write_lock+0x14f/0x750 kernel/locking/rwbase_rt.c:244 inode_lock_nested include/linux/fs.h:914 [inline] filename_create+0x1f8/0x3c0 fs/namei.c:4139 do_mkdirat+0xa0/0x590 fs/namei.c:4391 __do_sys_mkdirat fs/namei.c:4416 [inline] __se_sys_mkdirat fs/namei.c:4414 [inline] __x64_sys_mkdirat+0x87/0xa0 fs/namei.c:4414 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f771a87d457 RSP: 002b:00007f7718680e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 RAX: ffffffffffffffda RBX: 00007f7718680ef0 RCX: 00007f771a87d457 RDX: 00000000000001ff RSI: 00002000000000c0 RDI: 00000000ffffff9c RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0 R13: 00007f7718680eb0 R14: 0000000000000000 R15: 0000000000000000 INFO: task syz.2.422:9699 blocked for more than 143 seconds. Tainted: G W syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.422 state:D stack:29144 pid:9699 tgid:9669 ppid:8952 task_flags:0x400040 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x16f3/0x4c20 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] rt_mutex_schedule+0x77/0xf0 kernel/sched/core.c:7339 rt_mutex_slowlock_block kernel/locking/rtmutex.c:1647 [inline] __rt_mutex_slowlock kernel/locking/rtmutex.c:1721 [inline] __rt_mutex_slowlock_locked+0x1e04/0x25e0 kernel/locking/rtmutex.c:1760 __rwbase_read_lock+0xbc/0x180 kernel/locking/rwbase_rt.c:114 rwbase_read_lock kernel/locking/rwbase_rt.c:147 [inline] __down_read kernel/locking/rwsem.c:1466 [inline] down_read+0x127/0x1f0 kernel/locking/rwsem.c:1539 inode_lock_shared include/linux/fs.h:884 [inline] lookup_slow+0x46/0x70 fs/namei.c:1824 walk_component+0x2d2/0x400 fs/namei.c:2129 lookup_last fs/namei.c:2630 [inline] path_lookupat+0x163/0x430 fs/namei.c:2654 filename_lookup+0x212/0x570 fs/namei.c:2683 user_path_at+0x3a/0x60 fs/namei.c:3127 do_mount fs/namespace.c:4133 [inline] __do_sys_mount fs/namespace.c:4347 [inline] __se_sys_mount+0x2d3/0x410 fs/namespace.c:4324 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f771a87ebe9 RSP: 002b:00007f771825e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f771aaa6360 RCX: 00007f771a87ebe9 RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 RBP: 00007f771a901e19 R08: 0000200000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f771aaa63f8 R14: 00007f771aaa6360 R15: 00007ffd89f3a398 INFO: task syz.2.422:9716 blocked for more than 143 seconds. Tainted: G W syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.422 state:D stack:28632 pid:9716 tgid:9669 ppid:8952 task_flags:0x400040 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x16f3/0x4c20 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] rt_mutex_schedule+0x77/0xf0 kernel/sched/core.c:7339 rt_mutex_slowlock_block kernel/locking/rtmutex.c:1647 [inline] __rt_mutex_slowlock kernel/locking/rtmutex.c:1721 [inline] __rt_mutex_slowlock_locked+0x1e04/0x25e0 kernel/locking/rtmutex.c:1760 rt_mutex_slowlock+0xb5/0x160 kernel/locking/rtmutex.c:1800 __rt_mutex_lock kernel/locking/rtmutex.c:1815 [inline] rwbase_write_lock+0x14f/0x750 kernel/locking/rwbase_rt.c:244 inode_lock include/linux/fs.h:869 [inline] open_last_lookups fs/namei.c:3804 [inline] path_openat+0x8e6/0x3840 fs/namei.c:4043 do_filp_open+0x1fa/0x410 fs/namei.c:4073 do_sys_openat2+0x121/0x1c0 fs/open.c:1435 do_sys_open fs/open.c:1450 [inline] __do_sys_openat fs/open.c:1466 [inline] __se_sys_openat fs/open.c:1461 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1461 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f771a87ebe9 RSP: 002b:00007f7717a18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f771aaa6540 RCX: 00007f771a87ebe9 RDX: 0000000000143042 RSI: 0000200000000040 RDI: ffffffffffffff9c RBP: 00007f771a901e19 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f771aaa65d8 R14: 00007f771aaa6540 R15: 00007ffd89f3a398 INFO: lockdep is turned off. NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline] watchdog+0xf93/0xfe0 kernel/hung_task.c:491 kthread+0x70e/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:unwind_next_frame+0x34e/0x2390 arch/x86/kernel/unwind_orc.c:495 Code: 8f 0f 83 48 11 00 00 48 c7 c0 3c 61 2a 8f 49 29 c5 48 c7 c6 10 b9 9d 8f 49 c1 fd 02 4a 8d 14 6d 00 00 00 00 4c 01 ea 48 01 d2 <48> 01 f2 48 bd 00 00 00 00 00 fc ff df 0f 84 37 01 00 00 4c 8d 62 RSP: 0018:ffffc90000197538 EFLAGS: 00000206 RAX: ffffffff8f3305dc RBX: ffffffff8f3305dc RCX: ffffffff8f3305e4 RDX: 0000000000000048 RSI: ffffffff8faaafb8 RDI: ffffffff8b620c20 RBP: ffffffff8f3305e0 R08: 000000000000000e R09: 0000000000000000 R10: ffffc90000197658 R11: ffffffff81aae020 R12: ffffffff81aadfcb R13: 000000000000000c R14: ffffc90000197608 R15: ffffffff8f3305e0 FS: 0000000000000000(0000) GS:ffff8881268c5000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3b36c7f000 CR3: 00000000203fa000 CR4: 00000000003526f0 Call Trace: arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:68 kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:576 poison_slab_object mm/kasan/common.c:243 [inline] __kasan_slab_free+0x5b/0x80 mm/kasan/common.c:275 kasan_slab_free include/linux/kasan.h:233 [inline] slab_free_hook mm/slub.c:2417 [inline] slab_free mm/slub.c:4680 [inline] kfree+0x195/0x550 mm/slub.c:4879 slab_free_after_rcu_debug+0x60/0x3c0 mm/slub.c:4717 rcu_do_batch kernel/rcu/tree.c:2605 [inline] rcu_core kernel/rcu/tree.c:2861 [inline] rcu_cpu_kthread+0xbf6/0x1b50 kernel/rcu/tree.c:2949 smpboot_thread_fn+0x53f/0xa60 kernel/smpboot.c:160 kthread+0x70e/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245