INFO: task syz-executor.5:30931 blocked for more than 143 seconds. Not tainted 5.14.0-rc5-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.5 state:D stack:27312 pid:30931 ppid: 8457 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:4681 [inline] __schedule+0x93a/0x26f0 kernel/sched/core.c:5938 schedule+0xd3/0x270 kernel/sched/core.c:6017 rwsem_down_write_slowpath+0x7b9/0x11d0 kernel/locking/rwsem.c:1106 __down_write_common kernel/locking/rwsem.c:1261 [inline] __down_write_common kernel/locking/rwsem.c:1258 [inline] __down_write kernel/locking/rwsem.c:1270 [inline] down_write+0x137/0x150 kernel/locking/rwsem.c:1407 inode_lock include/linux/fs.h:774 [inline] fuse_flush+0x20b/0x5d0 fs/fuse/file.c:486 filp_close+0xb4/0x170 fs/open.c:1312 do_dup2+0x282/0x520 fs/file.c:1051 ksys_dup3+0x233/0x350 fs/file.c:1162 __do_sys_dup2 fs/file.c:1188 [inline] __se_sys_dup2 fs/file.c:1176 [inline] __x64_sys_dup2+0x71/0x3c0 fs/file.c:1176 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x4665e9 RSP: 002b:00007fb5e9bc2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 R13: 00007ffce1605b1f R14: 00007fb5e9bc2300 R15: 0000000000022000 INFO: task syz-executor.5:30942 blocked for more than 143 seconds. Not tainted 5.14.0-rc5-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.5 state:D stack:28008 pid:30942 ppid: 8457 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4681 [inline] __schedule+0x93a/0x26f0 kernel/sched/core.c:5938 schedule+0xd3/0x270 kernel/sched/core.c:6017 fuse_wait_on_page_writeback fs/fuse/file.c:452 [inline] fuse_wait_on_page_writeback+0x120/0x170 fs/fuse/file.c:448 fuse_launder_page fs/fuse/file.c:2316 [inline] fuse_launder_page+0xe9/0x130 fs/fuse/file.c:2306 do_launder_page mm/truncate.c:595 [inline] invalidate_inode_pages2_range+0x994/0xf80 mm/truncate.c:661 fuse_finish_open+0x2d9/0x560 fs/fuse/file.c:202 fuse_open_common+0x2f9/0x4c0 fs/fuse/file.c:254 do_dentry_open+0x4c8/0x11d0 fs/open.c:826 do_open fs/namei.c:3374 [inline] path_openat+0x1c23/0x27f0 fs/namei.c:3507 do_filp_open+0x1aa/0x400 fs/namei.c:3534 do_sys_openat2+0x16d/0x420 fs/open.c:1204 do_sys_open fs/open.c:1220 [inline] __do_sys_creat fs/open.c:1294 [inline] __se_sys_creat fs/open.c:1288 [inline] __x64_sys_creat+0xc9/0x120 fs/open.c:1288 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x4665e9 RSP: 002b:00007fb5e9ba1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038 R13: 00007ffce1605b1f R14: 00007fb5e9ba1300 R15: 0000000000022000 Showing all locks held in the system: 1 lock held by khungtaskd/1649: #0: ffffffff8b97c1c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6446 1 lock held by in:imklog/8360: #0: ffff88802baeeff0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 fs/file.c:974 1 lock held by syz-executor.5/30931: #0: ffff888037b0b090 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:774 [inline] #0: ffff888037b0b090 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: fuse_flush+0x20b/0x5d0 fs/fuse/file.c:486 2 locks held by syz-executor.5/30942: #0: ffff88807de28460 (sb_writers#15){.+.+}-{0:0}, at: do_open fs/namei.c:3367 [inline] #0: ffff88807de28460 (sb_writers#15){.+.+}-{0:0}, at: path_openat+0x1aee/0x27f0 fs/namei.c:3507 #1: ffff888037b0b090 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:774 [inline] #1: ffff888037b0b090 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: fuse_open_common+0x366/0x4c0 fs/fuse/file.c:241 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 1649 Comm: khungtaskd Not tainted 5.14.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:105 nmi_cpu_backtrace.cold+0x44/0xd7 lib/nmi_backtrace.c:105 nmi_trigger_cpumask_backtrace+0x1b3/0x230 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:210 [inline] watchdog+0xd0a/0xfc0 kernel/hung_task.c:295 kthread+0x3e5/0x4d0 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 4858 Comm: systemd-journal Not tainted 5.14.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:build_open_flags+0x91/0x6f0 fs/open.c:1036 Code: 0f 85 ff 04 00 00 e8 4e 4e af ff 49 8d 7d 10 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 33 06 00 00 <4d> 8b 7d 10 31 ff 4c 89 f8 48 83 e0 c0 48 89 c6 48 89 04 24 e8 76 RSP: 0018:ffffc9000132fd88 EFLAGS: 00000246 RAX: dffffc0000000000 RBX: ffffc9000132fdf8 RCX: 0000000000000000 RDX: 1ffff92000265fd8 RSI: ffffffff81c65972 RDI: ffffc9000132fec0 RBP: 0000000000088042 R08: 0000000000000000 R09: 0000000000000001 R10: ffffffff81c65964 R11: 0000000000000000 R12: 0000000000008042 R13: ffffc9000132feb0 R14: 0000000000000006 R15: 0000000000000000 FS: 00007fe9162778c0(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe9137c3000 CR3: 000000002d4a3000 CR4: 0000000000350ef0 Call Trace: do_sys_openat2+0x85/0x420 fs/open.c:1192 do_sys_open fs/open.c:1220 [inline] __do_sys_open fs/open.c:1228 [inline] __se_sys_open fs/open.c:1224 [inline] __x64_sys_open+0x119/0x1c0 fs/open.c:1224 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fe915806840 Code: 73 01 c3 48 8b 0d 68 77 20 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 89 bb 20 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 1e f6 ff ff 48 89 04 24 RSP: 002b:00007ffc0fb12108 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 00007ffc0fb12410 RCX: 00007fe915806840 RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 000055656e6b4890 RBP: 000000000000000d R08: 00000000000001c0 R09: 00000000ffffffff R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff R13: 000055656e6a7040 R14: 00007ffc0fb123d0 R15: 000055656e6b46b0