INFO: task syz-executor:4196 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:21840 pid: 4196 ppid: 1 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5049 [inline] __schedule+0x11ef/0x43c0 kernel/sched/core.c:6395 schedule+0x11b/0x1e0 kernel/sched/core.c:6478 schedule_timeout+0x184/0x2d0 kernel/time/timer.c:2117 gfs2_gl_hash_clear+0x1ab/0x2f0 fs/gfs2/glock.c:2183 gfs2_put_super+0x769/0x7d0 fs/gfs2/super.c:628 generic_shutdown_super+0x130/0x300 fs/super.c:475 kill_block_super+0x7c/0xe0 fs/super.c:1427 deactivate_locked_super+0x93/0xf0 fs/super.c:335 cleanup_mnt+0x42d/0x4e0 fs/namespace.c:1148 task_work_run+0x125/0x1a0 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] exit_to_user_mode_loop+0x10f/0x130 kernel/entry/common.c:181 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:214 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline] syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:307 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7fb31efb8097 RSP: 002b:00007ffeebe1f598 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 00007fb31f04c1ca RCX: 00007fb31efb8097 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeebe1f650 RBP: 00007ffeebe1f650 R08: 00007ffeebe20650 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeebe206e0 R13: 00007fb31f04c1ca R14: 0000000000051584 R15: 00007ffeebe20720 Showing all locks held in the system: 1 lock held by khungtaskd/27: #0: ffffffff8c31f360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 2 locks held by getty/3944: #0: ffff88802c147098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:252 #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 drivers/tty/n_tty.c:2158 1 lock held by syz-executor/4196: #0: ffff888073f720e0 (&type->s_umount_key#123){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 fs/super.c:365 8 locks held by kworker/1:7/4237: 3 locks held by kworker/0:5/4249: #0: ffff88801bc0c938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 kernel/workqueue.c:-1 #1: ffffc900030efd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 kernel/workqueue.c:2285 #2: ffff88802469d220 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:809 [inline] #2: ffff88802469d220 (&dev->mutex){....}-{3:3}, at: hub_event+0x19f/0x55e0 drivers/usb/core/hub.c:5827 2 locks held by kworker/u4:8/10512: 4 locks held by kworker/0:20/19787: #0: ffff88801bc0c938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 kernel/workqueue.c:-1 #1: ffffc9000374fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 kernel/workqueue.c:2285 #2: ffff888147955220 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:809 [inline] #2: ffff888147955220 (&dev->mutex){....}-{3:3}, at: hub_event+0x19f/0x55e0 drivers/usb/core/hub.c:5827 #3: ffff88807a370220 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:809 [inline] #3: ffff88807a370220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 drivers/base/dd.c:974 1 lock held by syz.3.8115/29806: #0: ffff888073f720e0 (&type->s_umount_key#123){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 fs/super.c:716 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Call Trace: dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106 nmi_cpu_backtrace+0x3a2/0x3d0 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x163/0x280 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:212 [inline] watchdog+0xe0f/0xe50 kernel/hung_task.c:369 kthread+0x436/0x520 kernel/kthread.c:334 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 30064 Comm: udevd Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 RIP: 0010:_raw_spin_lock_irqsave+0xbc/0x100 kernel/locking/spinlock.c:162 Code: 9e 8b f7 48 8d 7b 18 31 f6 31 d2 31 c9 41 b8 01 00 00 00 45 31 c9 ff 75 08 e8 60 3e 96 f7 48 83 c4 08 48 89 df e8 64 94 97 f7 <48> c7 04 24 0e 36 e0 45 4b c7 04 27 00 00 00 00 65 48 8b 04 25 28 RSP: 0018:ffffc90000dd0ae0 EFLAGS: 00000046 RAX: 975c4742df20f800 RBX: ffffffff965121c0 RCX: 0000000000000001 RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000dd0a60 RBP: ffffc90000dd0b78 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffff520001ba14c R12: dffffc0000000000 R13: ffff888069c1eee0 R14: 0000000000000a06 R15: 1ffff920001ba15c FS: 00007f285a73c880(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c356b31 CR3: 000000006403e000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: debug_object_deactivate+0x62/0x390 lib/debugobjects.c:749 debug_rcu_head_unqueue kernel/rcu/rcu.h:188 [inline] rcu_do_batch kernel/rcu/tree.c:2516 [inline] rcu_core+0x995/0x1670 kernel/rcu/tree.c:2763 handle_softirqs+0x339/0x830 kernel/softirq.c:576 __do_softirq kernel/softirq.c:610 [inline] invoke_softirq kernel/softirq.c:450 [inline] __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659 irq_exit_rcu+0x5/0x20 kernel/softirq.c:671 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline] sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1108 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676 RIP: 0010:call_rcu+0x6d6/0x950 kernel/rcu/tree.c:3092 Code: f7 84 24 a0 00 00 00 00 02 00 00 43 c6 44 25 04 f8 75 4f f7 44 24 58 00 02 00 00 74 01 fb 48 c7 84 24 80 00 00 00 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 08 00 00 00 00 65 48 8b 04 RSP: 0018:ffffc9000309f220 EFLAGS: 00000206 RAX: 975c4742df20f800 RBX: ffff888075566558 RCX: 975c4742df20f800 RDX: dffffc0000000000 RSI: ffffffff8a2b3180 RDI: ffffffff8a7a09c0 RBP: ffffc9000309f350 R08: ffffffff8d8a06ef R09: 1ffffffff1b140dd R10: dffffc0000000000 R11: fffffbfff1b140de R12: dffffc0000000000 R13: 1ffff92000613e54 R14: 1ffff11017227654 R15: 0000000000000047 destroy_inode fs/inode.c:316 [inline] evict+0x834/0x8d0 fs/inode.c:662 __dentry_kill+0x431/0x650 fs/dcache.c:586 shrink_dentry_list+0x388/0x680 fs/dcache.c:1181 shrink_dcache_parent+0xae/0x3d0 fs/dcache.c:-1 d_invalidate+0x116/0x260 fs/dcache.c:1717 lookup_fast+0x5e7/0x720 fs/namei.c:1636 walk_component+0x81/0x460 fs/namei.c:1980 link_path_walk+0x665/0xd70 fs/namei.c:-1 path_openat+0x28d/0x2fa0 fs/namei.c:3746 do_filp_open+0x1e2/0x410 fs/namei.c:3777 do_sys_openat2+0x150/0x4b0 fs/open.c:1255 do_sys_open fs/open.c:1271 [inline] __do_sys_openat fs/open.c:1287 [inline] __se_sys_openat fs/open.c:1282 [inline] __x64_sys_openat+0x135/0x160 fs/open.c:1282 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7f285a82a407 Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff RSP: 002b:00007ffe139d43f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f285a73c880 RCX: 00007f285a82a407 RDX: 0000000000080000 RSI: 00007ffe139d4570 RDI: ffffffffffffff9c RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 00005592e36117f5 R13: 00005592e36117f5 R14: 0000000000000001 R15: 00005592e362c140