INFO: task syz-executor:10411 blocked for more than 144 seconds. Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:23616 pid:10411 tgid:10411 ppid:1 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0xe58/0x5ad0 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6848 netfs_wait_for_outstanding_io include/linux/netfs.h:542 [inline] v9fs_evict_inode+0x271/0x310 fs/9p/vfs_inode.c:348 evict+0x409/0x960 fs/inode.c:796 iput_final fs/inode.c:1946 [inline] iput fs/inode.c:1972 [inline] iput+0x52a/0x890 fs/inode.c:1958 dentry_unlink_inode+0x29c/0x480 fs/dcache.c:422 __dentry_kill+0x1d0/0x600 fs/dcache.c:625 dput.part.0+0x4b1/0x9b0 fs/dcache.c:867 dput fs/dcache.c:857 [inline] do_one_tree fs/dcache.c:1563 [inline] shrink_dcache_for_umount+0x159/0x3e0 fs/dcache.c:1577 generic_shutdown_super+0x76/0x3d0 fs/super.c:620 kill_anon_super+0x3a/0x60 fs/super.c:1237 v9fs_kill_super+0x3d/0xa0 fs/9p/vfs_super.c:193 deactivate_locked_super+0xbe/0x1a0 fs/super.c:473 deactivate_super+0xde/0x100 fs/super.c:506 cleanup_mnt+0x222/0x450 fs/namespace.c:1373 task_work_run+0x14e/0x250 kernel/task_work.c:239 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x27b/0x2a0 kernel/entry/common.c:218 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f681ed87057 RSP: 002b:00007fff53b8deb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f681ed87057 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff53b8df70 RBP: 00007fff53b8df70 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff53b8eff0 R13: 00007f681ee018f4 R14: 00007fff53b8f030 R15: 00000000000000cf Showing all locks held in the system: 2 locks held by kworker/u8:0/11: 3 locks held by kworker/u8:1/12: #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3204 #1: ffffc90000117d80 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205 #2: ffffffff8e1c7238 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 kernel/rcu/tree_exp.h:329 1 lock held by khungtaskd/30: #0: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #0: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 kernel/locking/lockdep.c:6744 2 locks held by kworker/u8:2/35: #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3204 #1: ffffc90000ab7d80 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205 1 lock held by udevd/5189: 2 locks held by getty/5575: #0: ffff88803671a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 drivers/tty/n_tty.c:2211 1 lock held by syz-executor/10411: #0: ffff8880555f00e0 (&type->s_umount_key#76){+.+.}-{4:4}, at: __super_lock fs/super.c:56 [inline] #0: ffff8880555f00e0 (&type->s_umount_key#76){+.+.}-{4:4}, at: __super_lock_excl fs/super.c:71 [inline] #0: ffff8880555f00e0 (&type->s_umount_key#76){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 fs/super.c:505 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:234 [inline] watchdog+0xf14/0x1240 kernel/hung_task.c:397 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 16353 Comm: udevd Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:__kasan_check_read+0xa/0x20 mm/kasan/shadow.c:31 Code: c7 c7 b0 83 7c 8d 5b 5d 41 5c e9 f1 88 7c ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 89 f6 <31> d2 e9 1f f1 ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 RSP: 0018:ffffc9000d3df618 EFLAGS: 00000007 RAX: 0000000000000017 RBX: 00000000000005ee RCX: ffffffff8175d18e RDX: 1ffff1100d41ca75 RSI: 0000000000000008 RDI: ffffffff96e53d78 RBP: ffffc9000d3df768 R08: 0000000000000000 R09: fffffbfff2dca7af R10: ffffffff96e53d7f R11: 0000000000000003 R12: ffff88806a0e4880 R13: 0000000000000040 R14: 0000000000000006 R15: 1ffff92001a7becc FS: 00007f3fa793f280(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f482a148178 CR3: 000000002582e000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: instrument_atomic_read include/linux/instrumented.h:68 [inline] _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline] hlock_class+0x4e/0x130 kernel/locking/lockdep.c:228 mark_lock+0xb5/0xc60 kernel/locking/lockdep.c:4727 mark_held_locks+0x9f/0xe0 kernel/locking/lockdep.c:4321 __trace_hardirqs_on_caller kernel/locking/lockdep.c:4347 [inline] lockdep_hardirqs_on_prepare+0x27a/0x420 kernel/locking/lockdep.c:4406 trace_hardirqs_on+0x36/0x40 kernel/trace/trace_preemptirq.c:78 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] _raw_spin_unlock_irqrestore+0x52/0x80 kernel/locking/spinlock.c:194 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] avc_reclaim_node security/selinux/avc.c:488 [inline] avc_alloc_node+0x365/0x5a0 security/selinux/avc.c:507 avc_insert security/selinux/avc.c:618 [inline] avc_compute_av+0xfd/0x5c0 security/selinux/avc.c:993 avc_perm_nonode+0xaa/0x180 security/selinux/avc.c:1117 avc_has_perm_noaudit+0x2d2/0x3a0 security/selinux/avc.c:1160 avc_has_perm+0xc1/0x1c0 security/selinux/avc.c:1195 may_rename security/selinux/hooks.c:1912 [inline] selinux_inode_rename+0x2b3/0x600 security/selinux/hooks.c:3051 security_inode_rename+0x1cc/0x5f0 security/security.c:2263 vfs_rename+0x4ad/0x21f0 fs/namei.c:5006 do_renameat2+0xc5f/0xdd0 fs/namei.c:5224 __do_sys_rename fs/namei.c:5271 [inline] __se_sys_rename fs/namei.c:5269 [inline] __x64_sys_rename+0x7d/0xa0 fs/namei.c:5269 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3fa749a93b Code: 48 8b 15 f0 64 15 00 83 c8 ff 64 83 3a 15 75 0e 48 8b 7c 24 08 e8 d5 d4 07 00 f7 d8 19 c0 48 83 c4 18 c3 b8 52 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 be 64 15 00 f7 d8 64 89 02 48 83 RSP: 002b:00007fffa18e19d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000052 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3fa749a93b RDX: 000055de3bba5b83 RSI: 00007fffa18e19f8 RDI: 00007fffa18e1df8 RBP: 000055db660a7220 R08: 0000000000000006 R09: 74f192643c70f6c3 R10: 00000000000001b6 R11: 0000000000000202 R12: 000055db660b3ec0 R13: 00007fffa18e19f8 R14: 00007fffa18e1df8 R15: 000055db4cdd6160