INFO: task kworker/0:9:6857 blocked for more than 144 seconds. Not tainted 6.2.0-rc6-syzkaller-00273-g837c07cf68fe #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:9 state:D stack:26800 pid:6857 ppid:2 flags:0x00004000 Workqueue: events_long flush_old_commits Call Trace: context_switch kernel/sched/core.c:5293 [inline] __schedule+0xb8a/0x5450 kernel/sched/core.c:6606 schedule+0xde/0x1b0 kernel/sched/core.c:6682 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6741 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0xa48/0x1360 kernel/locking/mutex.c:747 reiserfs_write_lock+0x79/0x100 fs/reiserfs/lock.c:27 reiserfs_sync_fs+0x81/0x130 fs/reiserfs/super.c:76 flush_old_commits+0xfb/0x200 fs/reiserfs/super.c:111 process_one_work+0x9bf/0x1710 kernel/workqueue.c:2289 worker_thread+0x669/0x1090 kernel/workqueue.c:2436 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/12: #0: ffffffff8c78f7b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507 1 lock held by rcu_tasks_trace/13: #0: ffffffff8c78f4b0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507 1 lock held by khungtaskd/27: #0: ffffffff8c790300 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x57/0x264 kernel/locking/lockdep.c:6494 2 locks held by kworker/1:2/892: #0: ffff888012472538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012472538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012472538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012472538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff888012472538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff888012472538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 kernel/workqueue.c:2260 #1: ffffc9000468fda8 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 kernel/workqueue.c:2264 2 locks held by getty/4752: #0: ffff88814a08d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 drivers/tty/tty_ldisc.c:244 #1: ffffc900015d02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 drivers/tty/n_tty.c:2177 2 locks held by syz-executor.3/5121: #0: ffff8880279ca0e0 (&type->s_umount_key#55){++++}-{3:3}, at: deactivate_super+0xa9/0xd0 fs/super.c:362 #1: ffffffff8c79afb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:292 [inline] #1: ffffffff8c79afb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x5df/0x780 kernel/rcu/tree_exp.h:946 4 locks held by kworker/0:9/6857: #0: ffff888012471538 ((wq_completion)events_long){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888012471538 ((wq_completion)events_long){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888012471538 ((wq_completion)events_long){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888012471538 ((wq_completion)events_long){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff888012471538 ((wq_completion)events_long){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff888012471538 ((wq_completion)events_long){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 kernel/workqueue.c:2260 #1: ffffc90004b0fda8 ((work_completion)(&(&sbi->old_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 kernel/workqueue.c:2264 #2: ffff8880831400e0 (&type->s_umount_key#55){++++}-{3:3}, at: flush_old_commits+0x7c/0x200 fs/reiserfs/super.c:97 #3: ffff88807eff5090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x79/0x100 fs/reiserfs/lock.c:27 3 locks held by syz-executor.2/10706: 1 lock held by syz-executor.4/12710: 1 lock held by syz-executor.1/12735: 1 lock held by syz-executor.0/12741: 1 lock held by syz-executor.0/12742: 1 lock held by syz-executor.5/12745: 1 lock held by syz-executor.5/12746: #0: ffffffff8d5a3348 (ubi_devices_mutex){+.+.}-{3:3}, at: ctrl_cdev_ioctl+0x1ce/0x3a0 drivers/mtd/ubi/cdev.c:1067 1 lock held by syz-executor.5/12748: #0: ffffffff8d5a3348 (ubi_devices_mutex){+.+.}-{3:3}, at: ctrl_cdev_ioctl+0x2d5/0x3a0 drivers/mtd/ubi/cdev.c:1042 1 lock held by syz-executor.4/12751: ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.2.0-rc6-syzkaller-00273-g837c07cf68fe #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd1/0x138 lib/dump_stack.c:106 nmi_cpu_backtrace.cold+0x24/0x18a lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x333/0x3c0 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline] watchdog+0xc75/0xfc0 kernel/hung_task.c:377 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 12740 Comm: syz-executor.2 Not tainted 6.2.0-rc6-syzkaller-00273-g837c07cf68fe #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 RIP: 0010:arch_atomic_dec_and_test arch/x86/include/asm/atomic.h:123 [inline] RIP: 0010:atomic_dec_and_test include/linux/atomic/atomic-instrumented.h:576 [inline] RIP: 0010:page_ref_dec_and_test include/linux/page_ref.h:210 [inline] RIP: 0010:put_page_testzero include/linux/mm.h:761 [inline] RIP: 0010:folio_put_testzero include/linux/mm.h:766 [inline] RIP: 0010:release_pages+0x34c/0x1330 mm/swap.c:1034 Code: 00 45 8b 65 34 31 ff 44 89 e6 e8 2f a4 d1 ff 45 85 e4 0f 84 18 09 00 00 e8 71 a7 d1 ff be 04 00 00 00 48 89 ef e8 74 bd 1f 00 ff 4d 00 40 0f 94 c5 31 ff 89 ee e8 c3 a3 d1 ff 40 84 ed 0f 84 RSP: 0018:ffffc900030df850 EFLAGS: 00000246 RAX: 0000000000000001 RBX: ffff88801f9e4290 RCX: ffffffff81af4b7c RDX: fffff940003ffae7 RSI: 0000000000000004 RDI: ffffea0001ffd734 RBP: ffffea0001ffd734 R08: 0000000000000001 R09: ffffea0001ffd737 R10: fffff940003ffae6 R11: 0000000000000000 R12: 0000000000000014 R13: ffffea0001ffd700 R14: dffffc0000000000 R15: 0000000000000050 FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020007b00 CR3: 000000000c48e000 CR4: 0000000000350ee0 Call Trace: tlb_batch_pages_flush+0xa8/0x1a0 mm/mmu_gather.c:97 tlb_flush_mmu_free mm/mmu_gather.c:292 [inline] tlb_flush_mmu mm/mmu_gather.c:299 [inline] tlb_finish_mmu+0x14b/0x7e0 mm/mmu_gather.c:391 exit_mmap+0x202/0x7b0 mm/mmap.c:3100 __mmput+0x128/0x4c0 kernel/fork.c:1207 mmput+0x60/0x70 kernel/fork.c:1229 exit_mm kernel/exit.c:563 [inline] do_exit+0x9ac/0x2950 kernel/exit.c:854 do_group_exit+0xd4/0x2a0 kernel/exit.c:1012 get_signal+0x21c3/0x2450 kernel/signal.c:2859 arch_do_signal_or_restart+0x79/0x5c0 arch/x86/kernel/signal.c:306 exit_to_user_mode_loop kernel/entry/common.c:168 [inline] exit_to_user_mode_prepare+0x15f/0x250 kernel/entry/common.c:203 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline] syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:296 do_syscall_64+0x46/0xb0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fe32f48c0c9 Code: Unable to access opcode bytes at 0x7fe32f48c09f. RSP: 002b:00007fe330226218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 0000000000000001 RBX: 00007fe32f5abf88 RCX: 00007fe32f48c0c9 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe32f5abf8c RBP: 00007fe32f5abf80 R08: 00007fff543f7080 R09: 0000000000000000 R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fe32f5abf8c R13: 00007fff543a8b2f R14: 00007fe330226300 R15: 0000000000022000