INFO: task syz.0.1229:7251 blocked for more than 430 seconds. Not tainted 6.13.0-rc3-syzkaller-g6f6ecce59d99 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.1229 state:D stack:0 pid:7251 tgid:7250 ppid:3186 flags:0x0000000c Call Trace: [] context_switch kernel/sched/core.c:5369 [inline] [] __schedule+0xdaa/0x393a kernel/sched/core.c:6756 [] __schedule_loop kernel/sched/core.c:6833 [inline] [] schedule+0xc4/0x324 kernel/sched/core.c:6848 [] schedule_preempt_disabled+0x16/0x28 kernel/sched/core.c:6905 [] rwsem_down_read_slowpath+0x56a/0x91e kernel/locking/rwsem.c:1084 [] __down_read_common kernel/locking/rwsem.c:1248 [inline] [] __down_read kernel/locking/rwsem.c:1261 [inline] [] down_read+0xe4/0x45e kernel/locking/rwsem.c:1526 [] mmap_read_lock include/linux/mmap_lock.h:144 [inline] [] exit_mm kernel/exit.c:546 [inline] [] do_exit+0x810/0x296e kernel/exit.c:925 [] do_group_exit+0xd4/0x26c kernel/exit.c:1087 [] get_signal+0x1f4c/0x22de kernel/signal.c:3017 [] arch_do_signal_or_restart+0xa3c/0x1d2c arch/riscv/kernel/signal.c:437 [] exit_to_user_mode_loop kernel/entry/common.c:111 [inline] [] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] [] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] [] syscall_exit_to_user_mode+0x29e/0x316 kernel/entry/common.c:218 [] do_trap_ecall_u+0x86/0x216 arch/riscv/kernel/traps.c:345 [] handle_exception+0x146/0x152 arch/riscv/kernel/entry.S:197 Showing all locks held in the system: 1 lock held by kthreadd/2: 1 lock held by kworker/R-mm_pe/13: 2 locks held by kworker/1:0/25: 1 lock held by khungtaskd/37: #0: ffffffff881d0d40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x68/0x2e6 kernel/locking/lockdep.c:6740 1 lock held by kcompactd0/40: 1 lock held by kswapd0/78: 1 lock held by klogd/2978: 1 lock held by dhcpcd/3023: 2 locks held by getty/3146: #0: ff6000001cd530a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46 drivers/tty/tty_ldsem.c:340 #1: ff2000000008b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xd7c/0x129a drivers/tty/n_tty.c:2211 2 locks held by sshd/3174: 3 locks held by syz-executor/3176: #0: ff6000001d29b730 (&vma->vm_lock->lock){++++}-{4:4}, at: vma_start_read include/linux/mm.h:716 [inline] #0: ff6000001d29b730 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x15a/0xa60 mm/memory.c:6278 #1: ff6000001d752518 (sb_pagefaults){.+.+}-{0:0}, at: __sb_start_write include/linux/fs.h:1725 [inline] #1: ff6000001d752518 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs.h:1890 [inline] #1: ff6000001d752518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1da/0x10cc fs/ext4/inode.c:6158 #2: ff6000001d754958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xdac/0x122e fs/jbd2/transaction.c:446 2 locks held by syz-executor/3186: 3 locks held by syz-executor/3190: 3 locks held by kworker/u9:1/3421: 2 locks held by kworker/0:1/6422: #0: ff6000005cdd3a58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:598 [inline] #0: ff6000005cdd3a58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock kernel/sched/sched.h:1523 [inline] #0: ff6000005cdd3a58 (&rq->__lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1822 [inline] #0: ff6000005cdd3a58 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x278/0x393a kernel/sched/core.c:6680 #1: ff6000005cdbf688 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x22c/0x71a kernel/sched/psi.c:987 5 locks held by kworker/u10:1/6593: 4 locks held by kworker/u8:0/7179: 2 locks held by syz.0.1229/7250: 1 lock held by syz.0.1229/7251: #0: ff600000195ab650 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:144 [inline] #0: ff600000195ab650 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm kernel/exit.c:546 [inline] #0: ff600000195ab650 (&mm->mmap_lock){++++}-{4:4}, at: do_exit+0x810/0x296e kernel/exit.c:925 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-g6f6ecce59d99 #0 Hardware name: riscv-virtio,qemu (DT) Call Trace: [] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:132 [] show_stack+0x30/0x3c arch/riscv/kernel/stacktrace.c:138 [] __dump_stack lib/dump_stack.c:94 [inline] [] dump_stack_lvl+0x12e/0x1a6 lib/dump_stack.c:120 [] dump_stack+0x1c/0x24 lib/dump_stack.c:129 [] nmi_cpu_backtrace+0x3b0/0x3b2 lib/nmi_backtrace.c:113 [] nmi_trigger_cpumask_backtrace+0x2b6/0x458 lib/nmi_backtrace.c:62 [] arch_trigger_cpumask_backtrace+0x2c/0x3e arch/riscv/kernel/smp.c:347 [] trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:234 [inline] [] watchdog+0xcee/0x1170 kernel/hung_task.c:397 [] kthread+0x28c/0x3a4 kernel/kthread.c:389 [] ret_from_fork+0xe/0x18 arch/riscv/kernel/entry.S:327 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.13.0-rc3-syzkaller-g6f6ecce59d99 #0 Hardware name: riscv-virtio,qemu (DT) epc : fq_pie_timer+0x1ce/0x5e0 net/sched/sch_fq_pie.c:399 ra : fq_pie_timer+0x1c6/0x5e0 net/sched/sch_fq_pie.c:399 epc : ffffffff852414ea ra : ffffffff852414e2 sp : ff200000001a7810 gp : ffffffff899f64c0 tp : ff60000012ea0000 t0 : ff4f4e6900c9eac4 t1 : ffe3ffff00034ee8 t2 : 0000000000000871 s0 : ff200000001a78b0 s1 : 000000000000027d a0 : 0000000000000004 a1 : 0000000000000400 a2 : 0000000000f00000 a3 : ffffffff852414e2 a4 : 0000000000000000 a5 : 0000000000000000 a6 : 0000000000f00000 a7 : 0000000000000003 s2 : ff6000001c665b58 s3 : 000000000000027d s4 : 0000000000000400 s5 : dfffffff00000000 s6 : ffebffff038ccb65 s7 : ffebffff038ccb5a s8 : 0000000000000400 s9 : ff6000001c665b00 s10: 0000000000000004 s11: ff6000001c665b24 t3 : ff60000012ea0b20 t4 : ffe3ffff00034ee8 t5 : ffe3ffff00034ee9 t6 : 000000000000000a status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001 [] fq_pie_timer+0x1ce/0x5e0 net/sched/sch_fq_pie.c:399 [] call_timer_fn+0x1fc/0xaae kernel/time/timer.c:1793 [] expire_timers kernel/time/timer.c:1844 [inline] [] __run_timers+0x6ea/0x8d8 kernel/time/timer.c:2418 [] __run_timer_base kernel/time/timer.c:2430 [inline] [] __run_timer_base kernel/time/timer.c:2422 [inline] [] run_timer_base+0x136/0x1b6 kernel/time/timer.c:2439 [] run_timer_softirq+0x1c/0x54 kernel/time/timer.c:2449 [] handle_softirqs+0x4b2/0x132e kernel/softirq.c:561 [] run_ksoftirqd kernel/softirq.c:950 [inline] [] run_ksoftirqd+0xce/0x144 kernel/softirq.c:942 [] smpboot_thread_fn+0x654/0xb96 kernel/smpboot.c:164 [] kthread+0x28c/0x3a4 kernel/kthread.c:389 [] ret_from_fork+0xe/0x18 arch/riscv/kernel/entry.S:327