INFO: task syz-executor.0:19187 blocked for more than 143 seconds. Not tainted 5.16.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:26128 pid:19187 ppid: 10364 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4972 [inline] __schedule+0xb72/0x1460 kernel/sched/core.c:6253 schedule+0x12b/0x1f0 kernel/sched/core.c:6326 blk_mq_freeze_queue_wait+0x105/0x190 block/blk-mq.c:178 loop_set_status+0x22f/0xa50 drivers/block/loop.c:1264 lo_ioctl+0xbc9/0x1f40 blkdev_ioctl+0x3ac/0x790 block/ioctl.c:609 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl+0xfb/0x170 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7ff6c0760ae9 RSP: 002b:00007ff6bdcd6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007ff6c0873f60 RCX: 00007ff6c0760ae9 RDX: 0000000020000040 RSI: 0000000000004c04 RDI: 0000000000000003 RBP: 00007ff6c07baf6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd5bf982ff R14: 00007ff6bdcd6300 R15: 0000000000022000 INFO: task syz-executor.0:19226 blocked for more than 143 seconds. Not tainted 5.16.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:27088 pid:19226 ppid: 10364 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4972 [inline] __schedule+0xb72/0x1460 kernel/sched/core.c:6253 schedule+0x12b/0x1f0 kernel/sched/core.c:6326 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6385 __mutex_lock_common+0xd1f/0x2590 kernel/locking/mutex.c:680 __mutex_lock kernel/locking/mutex.c:740 [inline] mutex_lock_nested+0x1a/0x20 kernel/locking/mutex.c:792 blkdev_get_by_dev+0xfc/0xb80 block/bdev.c:819 blkdev_open+0x137/0x2f0 block/fops.c:501 do_dentry_open+0x78b/0x1020 fs/open.c:822 do_open fs/namei.c:3426 [inline] path_openat+0x2896/0x3660 fs/namei.c:3559 do_filp_open+0x277/0x4f0 fs/namei.c:3586 do_sys_openat2+0x13b/0x500 fs/open.c:1212 do_sys_open fs/open.c:1228 [inline] __do_sys_openat fs/open.c:1244 [inline] __se_sys_openat fs/open.c:1239 [inline] __x64_sys_openat+0x243/0x290 fs/open.c:1239 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7ff6c0713a04 RSP: 002b:00007ff6bdcb4cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007ff6c0713a04 RDX: 0000000000000000 RSI: 00007ff6bdcb4d60 RDI: 00000000ffffff9c RBP: 00007ff6bdcb4d60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007ffd5bf982ff R14: 00007ff6bdcb5300 R15: 0000000000022000 INFO: task syz-executor.2:19200 blocked for more than 144 seconds. Not tainted 5.16.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:27088 pid:19200 ppid: 16561 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4972 [inline] __schedule+0xb72/0x1460 kernel/sched/core.c:6253 schedule+0x12b/0x1f0 kernel/sched/core.c:6326 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6385 __mutex_lock_common+0xd1f/0x2590 kernel/locking/mutex.c:680 __mutex_lock kernel/locking/mutex.c:740 [inline] mutex_lock_nested+0x1a/0x20 kernel/locking/mutex.c:792 blkdev_get_by_dev+0xfc/0xb80 block/bdev.c:819 blkdev_open+0x137/0x2f0 block/fops.c:501 do_dentry_open+0x78b/0x1020 fs/open.c:822 do_open fs/namei.c:3426 [inline] path_openat+0x2896/0x3660 fs/namei.c:3559 do_filp_open+0x277/0x4f0 fs/namei.c:3586 do_sys_openat2+0x13b/0x500 fs/open.c:1212 do_sys_open fs/open.c:1228 [inline] __do_sys_openat fs/open.c:1244 [inline] __se_sys_openat fs/open.c:1239 [inline] __x64_sys_openat+0x243/0x290 fs/open.c:1239 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f78ab447a04 RSP: 002b:00007f78a8a09cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007f78ab447a04 RDX: 0000000000000000 RSI: 00007f78a8a09d60 RDI: 00000000ffffff9c RBP: 00007f78a8a09d60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007fffb51f95cf R14: 00007f78a8a0a300 R15: 0000000000022000 INFO: task syz-executor.2:19204 blocked for more than 144 seconds. Not tainted 5.16.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:27088 pid:19204 ppid: 16561 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4972 [inline] __schedule+0xb72/0x1460 kernel/sched/core.c:6253 schedule+0x12b/0x1f0 kernel/sched/core.c:6326 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6385 __mutex_lock_common+0xd1f/0x2590 kernel/locking/mutex.c:680 __mutex_lock kernel/locking/mutex.c:740 [inline] mutex_lock_nested+0x1a/0x20 kernel/locking/mutex.c:792 blkdev_get_by_dev+0xfc/0xb80 block/bdev.c:819 blkdev_open+0x137/0x2f0 block/fops.c:501 do_dentry_open+0x78b/0x1020 fs/open.c:822 do_open fs/namei.c:3426 [inline] path_openat+0x2896/0x3660 fs/namei.c:3559 do_filp_open+0x277/0x4f0 fs/namei.c:3586 do_sys_openat2+0x13b/0x500 fs/open.c:1212 do_sys_open fs/open.c:1228 [inline] __do_sys_openat fs/open.c:1244 [inline] __se_sys_openat fs/open.c:1239 [inline] __x64_sys_openat+0x243/0x290 fs/open.c:1239 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f78ab447a04 RSP: 002b:00007f78a89e8cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007f78ab447a04 RDX: 0000000000000000 RSI: 00007f78a89e8d60 RDI: 00000000ffffff9c RBP: 00007f78a89e8d60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007fffb51f95cf R14: 00007f78a89e9300 R15: 0000000000022000 Showing all locks held in the system: 1 lock held by khungtaskd/26: #0: ffffffff8cb1dc00 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 2 locks held by systemd-journal/2957: #0: ffff8880b9b395d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x110 kernel/sched/core.c:478 #1: ffff88801f44a220 (&dentry->d_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:349 [inline] #1: ffff88801f44a220 (&dentry->d_lock){+.+.}-{2:2}, at: fast_dput fs/dcache.c:764 [inline] #1: ffff88801f44a220 (&dentry->d_lock){+.+.}-{2:2}, at: dput+0x313/0x6e0 fs/dcache.c:875 1 lock held by in:imklog/6149: #0: ffff88801e591c70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x2f0 fs/file.c:990 3 locks held by rs:main Q:Reg/6150: #0: ffff8880b9a395d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x110 kernel/sched/core.c:478 #1: ffff8880b9a27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x4c1/0x780 kernel/sched/psi.c:880 #2: ffff888070a5c9b8 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:783 [inline] #2: ffff888070a5c9b8 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x520 fs/ext4/file.c:263 1 lock held by syz-executor.0/19187: #0: ffff88801b30eb60 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_set_status+0x2a/0xa50 drivers/block/loop.c:1248 1 lock held by syz-executor.0/19226: #0: ffff88801b46b118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xfc/0xb80 block/bdev.c:819 1 lock held by syz-executor.2/19200: #0: ffff88801b46b118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xfc/0xb80 block/bdev.c:819 1 lock held by syz-executor.2/19204: #0: ffff88801b46b118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xfc/0xb80 block/bdev.c:819 2 locks held by systemd-udevd/19196: #0: ffff88801b46b118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xfc/0xb80 block/bdev.c:819 #1: ffff88801b30eb60 (&lo->lo_mutex){+.+.}-{3:3}, at: lo_open+0x68/0x100 drivers/block/loop.c:1733 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 26 Comm: khungtaskd Not tainted 5.16.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1dc/0x2d8 lib/dump_stack.c:106 nmi_cpu_backtrace+0x45f/0x490 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x16a/0x280 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:210 [inline] watchdog+0xc82/0xcd0 kernel/hung_task.c:295 kthread+0x468/0x490 kernel/kthread.c:327 ret_from_fork+0x1f/0x30 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 2957 Comm: systemd-journal Not tainted 5.16.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0033:0x7f561394046c Code: d1 49 89 e1 31 d2 41 b8 10 00 00 00 41 89 f6 49 89 e7 e8 57 fc ff ff 85 c0 41 89 c4 0f 88 5f ff ff ff 48 8b 04 24 4c 8b 40 08 <4d> 85 c0 0f 84 bb 00 00 00 49 83 f8 0f 0f 87 e1 00 00 00 e8 6c 7b RSP: 002b:00007ffc8fbd4990 EFLAGS: 00000202 RAX: 00007f5610effa10 RBX: 000000000012ea10 RCX: 000000000012ea10 RDX: 0000000000000000 RSI: 0000000000000010 RDI: 00005589b69cf120 RBP: 00005589b69cee80 R08: 0000000000000288 R09: 00005589b69cf120 R10: bded690dc82bb430 R11: 70d8d082dfe1aa02 R12: 0000000000000001 R13: 00007ffc8fbd4a08 R14: 0000000000000006 R15: 00007ffc8fbd4990 FS: 00007f5613c528c0 GS: 0000000000000000