INFO: task syz-executor.2:22426 blocked for more than 143 seconds. Not tainted 6.8.0-rc5-syzkaller-00297-gf2e367d6ad3b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:27384 pid:22426 tgid:22419 ppid:22057 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5400 [inline] __schedule+0x177f/0x49a0 kernel/sched/core.c:6727 __schedule_loop kernel/sched/core.c:6802 [inline] schedule+0x149/0x260 kernel/sched/core.c:6817 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6874 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a3/0xd70 kernel/locking/mutex.c:752 bdev_open_by_dev+0x1c7/0x8a0 block/bdev.c:859 blkdev_open+0x16e/0x3c0 block/fops.c:615 do_dentry_open+0x907/0x15a0 fs/open.c:953 do_open fs/namei.c:3641 [inline] path_openat+0x285f/0x3240 fs/namei.c:3798 do_filp_open+0x234/0x490 fs/namei.c:3825 do_sys_openat2+0x13e/0x1d0 fs/open.c:1404 do_sys_open fs/open.c:1419 [inline] __do_sys_openat fs/open.c:1435 [inline] __se_sys_openat fs/open.c:1430 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1430 do_syscall_64+0xf9/0x240 entry_SYSCALL_64_after_hwframe+0x6f/0x77 RIP: 0033:0x7f4e6047dda9 RSP: 002b:00007f4e612890c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f4e605abf80 RCX: 00007f4e6047dda9 RDX: 0000000000149802 RSI: 0000000020001000 RDI: ffffffffffffff9c RBP: 00007f4e604ca47a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f4e605abf80 R15: 00007ffe582314e8 Showing all locks held in the system: 1 lock held by khungtaskd/29: #0: ffffffff8e130c60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:298 [inline] #0: ffffffff8e130c60 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:750 [inline] #0: ffffffff8e130c60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6614 2 locks held by getty/4810: #0: ffff88802b58f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b4/0x1e10 drivers/tty/n_tty.c:2201 1 lock held by syz-executor.0/10572: #0: ffff888020e314c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x114/0x910 block/bdev.c:969 1 lock held by syz-executor.0/10704: #0: ffff888020e314c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x114/0x910 block/bdev.c:969 1 lock held by syz-executor.0/10925: #0: ffff888020e314c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x114/0x910 block/bdev.c:969 1 lock held by syz-executor.0/14033: #0: ffff888020e314c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x114/0x910 block/bdev.c:969 1 lock held by syz-executor.0/14455: #0: ffff888020e314c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x114/0x910 block/bdev.c:969 1 lock held by syz-executor.0/14780: #0: ffff888020e314c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x114/0x910 block/bdev.c:969 1 lock held by syz-executor.0/15182: #0: ffff888020e314c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x114/0x910 block/bdev.c:969 1 lock held by syz-executor.0/15524: #0: ffff888020e314c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x114/0x910 block/bdev.c:969 1 lock held by syz-executor.0/15945: #0: ffff888020e314c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x114/0x910 block/bdev.c:969 1 lock held by syz-executor.0/16268: #0: ffff888020e314c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x114/0x910 block/bdev.c:969 1 lock held by syz-executor.2/6699: 1 lock held by syz-executor.2/10642: 1 lock held by syz-executor.2/13998: 1 lock held by syz-executor.2/17500: 1 lock held by syz-executor.3/25554: 1 lock held by syz-executor.3/25555: 1 lock held by syz-executor.3/25557: 2 locks held by syz-executor.3/25561: 1 lock held by syz-executor.3/26112: 1 lock held by syz-executor.3/26114: 2 locks held by syz-executor.3/26117: 2 locks held by syz-executor.3/26118: 1 lock held by syz-executor.3/29043: 1 lock held by syz-executor.3/29062: 1 lock held by syz-executor.3/29070: 1 lock held by syz-executor.2/19217: 2 locks held by syz-executor.3/22332: 1 lock held by syz-executor.2/22426: #0: ffff888020e314c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open_by_dev+0x1c7/0x8a0 block/bdev.c:859 1 lock held by syz-executor.3/22875: #0: ffff888020e314c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open_by_dev+0x1c7/0x8a0 block/bdev.c:859 1 lock held by syz-executor.2/23270: #0: ffff888020e314c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open_by_dev+0x1c7/0x8a0 block/bdev.c:859 1 lock held by syz-executor.3/23608: #0: ffff888020e314c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open_by_dev+0x1c7/0x8a0 block/bdev.c:859 1 lock held by syz-executor.3/24156: 1 lock held by syz-executor.0/24433: #0: ffff888020e314c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open_by_dev+0x1c7/0x8a0 block/bdev.c:859 1 lock held by syz-executor.2/24627: ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc5-syzkaller-00297-gf2e367d6ad3b #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1e7/0x2e0 lib/dump_stack.c:106 nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline] watchdog+0xfaf/0xff0 kernel/hung_task.c:379 kthread+0x2ef/0x390 kernel/kthread.c:388 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:242 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 24622 Comm: syz-executor.3 Not tainted 6.8.0-rc5-syzkaller-00297-gf2e367d6ad3b #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 RIP: 0010:__kasan_check_write+0xa/0x20 mm/kasan/shadow.c:37 Code: ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 f6 48 8b 0c 24 01 00 00 00 e9 cc e4 ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 RSP: 0000:ffffc900095cf838 EFLAGS: 00000246 RAX: 1845f63b44185a00 RBX: 00007f879bb0a000 RCX: ffffffff81c8ce20 RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea0001e504b4 RBP: ffffc900095cfa10 R08: ffffffff81dbac56 R09: 1ffffffff1f08785 R10: dffffc0000000000 R11: fffffbfff1f08786 R12: 000000000000000b R13: ffffea0001e50480 R14: ffffc900095cfd90 R15: 00007f879bb02000 FS: 00005555568bd480(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f879bb02423 CR3: 00000000b1aa4000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: instrument_atomic_read_write include/linux/instrumented.h:96 [inline] atomic_inc include/linux/atomic/atomic-instrumented.h:435 [inline] page_ref_inc include/linux/page_ref.h:158 [inline] folio_ref_inc include/linux/page_ref.h:165 [inline] filemap_map_order0_folio mm/filemap.c:3514 [inline] filemap_map_pages+0xef0/0x1830 mm/filemap.c:3559 do_fault_around mm/memory.c:4716 [inline] do_read_fault mm/memory.c:4749 [inline] do_fault mm/memory.c:4888 [inline] do_pte_missing mm/memory.c:3745 [inline] handle_pte_fault mm/memory.c:5164 [inline] __handle_mm_fault+0x485d/0x72d0 mm/memory.c:5305 handle_mm_fault+0x27e/0x770 mm/memory.c:5470 do_user_addr_fault arch/x86/mm/fault.c:1355 [inline] handle_page_fault arch/x86/mm/fault.c:1498 [inline] exc_page_fault+0x456/0x870 arch/x86/mm/fault.c:1554 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570 RIP: 0033:0x7f879ba97e7b Code: b9 cd cc cc cc cc cc cc cc 48 89 f1 0f 1f 00 48 89 f8 48 89 fe 48 83 e9 01 49 f7 e1 48 c1 ea 03 48 8d 04 92 48 01 c0 48 29 c6 <41> 0f b6 04 30 88 01 48 89 f8 48 89 d7 48 83 f8 09 77 d2 48 89 c8 RSP: 002b:00007ffd9f54aa58 EFLAGS: 00010206 RAX: 0000000000000000 RBX: 00007ffd9f54afc0 RCX: 00007ffd9f54af67 RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 RBP: 0000000000000016 R08: 00007f879bb02420 R09: cccccccccccccccd R10: 00000000ffffffff R11: 0000000000000001 R12: 0000000000000075 R13: 00007ffd9f54b140 R14: 00007ffd9f54af68 R15: 0000000000000003