INFO: task syz.8.3761:18202 blocked for more than 143 seconds. Not tainted 6.1.130-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.8.3761 state:D stack:27888 pid:18202 ppid:10131 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5243 [inline] __schedule+0x143f/0x4570 kernel/sched/core.c:6560 schedule+0xbf/0x180 kernel/sched/core.c:6636 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6695 rwsem_down_read_slowpath kernel/locking/rwsem.c:1094 [inline] __down_read_common kernel/locking/rwsem.c:1261 [inline] __down_read kernel/locking/rwsem.c:1274 [inline] down_read+0x6ff/0xa30 kernel/locking/rwsem.c:1522 iterate_supers+0xac/0x1e0 fs/super.c:755 ksys_sync+0xb9/0x1c0 fs/sync.c:102 __do_sys_sync+0xa/0x10 fs/sync.c:113 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f59b498d169 RSP: 002b:00007f59b58b2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 RAX: ffffffffffffffda RBX: 00007f59b4ba5fa0 RCX: 00007f59b498d169 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007f59b4ba5fa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000001 R14: 00007f59b4ba5fa0 R15: 00007ffffa8ce0a8 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/12: #0: ffffffff8d32e850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 kernel/rcu/tasks.h:517 1 lock held by rcu_tasks_trace/13: #0: ffffffff8d32f050 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 kernel/rcu/tasks.h:517 1 lock held by khungtaskd/28: #0: ffffffff8d32e680 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:350 [inline] #0: ffffffff8d32e680 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:791 [inline] #0: ffffffff8d32e680 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 kernel/locking/lockdep.c:6510 2 locks held by getty/4008: #0: ffff88814cdf4098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:244 #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x54a/0x1620 drivers/tty/n_tty.c:2198 2 locks held by kworker/u4:12/4380: #0: ffff888017c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 kernel/workqueue.c:2267 #1: ffffc9000460fd20 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 kernel/workqueue.c:2267 4 locks held by kworker/u4:23/8024: #0: ffff88801a267938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 kernel/workqueue.c:2267 #1: ffffc900042d7d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 kernel/workqueue.c:2267 #2: ffff88814cf580e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1b/0xf0 fs/super.c:415 #3: ffff88814cf5ab98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x1e5/0x3de0 fs/ext4/inode.c:2714 2 locks held by kworker/u4:26/9037: 1 lock held by syz.6.3651/17785: #0: ffff8880681780e0 (&type->s_umount_key#50/1){+.+.}-{3:3}, at: alloc_super+0x217/0x930 fs/super.c:228 1 lock held by syz.8.3761/18202: #0: ffff8880681780e0 (&type->s_umount_key#91){.+.+}-{3:3}, at: iterate_supers+0xac/0x1e0 fs/super.c:755 1 lock held by syz.5.4120/19497: #0: ffffffff8d333b80 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5f0 kernel/rcu/tree.c:4019 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.130-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1e3/0x2cb lib/dump_stack.c:106 nmi_cpu_backtrace+0x4e1/0x560 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x1ca/0x430 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline] watchdog+0xf88/0xfd0 kernel/hung_task.c:377 kthread+0x28d/0x320 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 4239 Comm: syz-executor Not tainted 6.1.130-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 RIP: 0010:mem_cgroup_handle_over_high+0xe5/0x2b0 mm/memcontrol.c:2630 Code: 20 0e 36 e0 45 4a c7 04 32 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 60 0f 85 cb 01 00 00 48 8d 65 d8 5b 41 5c 41 5d <41> 5e 41 5f 5d c3 49 81 c7 28 05 00 00 4c 89 f8 48 c1 e8 03 80 3c RSP: 0018:ffffc90003bc7e98 EFLAGS: 00000246 RAX: aa681076e374b300 RBX: ffff888024da3b80 RCX: ffffffff973c0103 RDX: dffffc0000000000 RSI: ffffffff8b0c1d40 RDI: ffffc90003bc7e40 RBP: ffffc90003bc7ea8 R08: dffffc0000000000 R09: ffffc90003bc7be0 R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 R13: 0000000000000000 R14: 1ffff92000778fc4 R15: ffff888024da3b80 FS: 000055558d549500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c3ee3f0 CR3: 0000000027b65000 CR4: 00000000003526f0 DR0: fffffffffffffffc DR1: 0000000000000006 DR2: 0200000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: resume_user_mode_work include/linux/resume_user_mode.h:58 [inline] exit_to_user_mode_loop+0x9b/0x100 kernel/entry/common.c:177 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:210 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline] syscall_exit_to_user_mode+0x60/0x270 kernel/entry/common.c:303 do_syscall_64+0x47/0xb0 arch/x86/entry/common.c:87 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f54e27bf9e3 Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e db 1b 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 RSP: 002b:00007fff990e9e98 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f54e27bf9e3 RDX: 00007fff990e9eb0 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 00007fff991ed0b0 R09: 0000000000000010 R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff990ea300 R13: 0000000000000004 R14: 00007fff990e9eec R15: 00007fff990e9f80