INFO: task syz.0.15:4969 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.15        state:D stack:28272 pid: 4969 ppid:  4694 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11ef/0x43c0 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 d_wait_lookup+0x190/0x260 fs/dcache.c:2571
 d_alloc_parallel+0xa19/0x1330 fs/dcache.c:2653
 __lookup_slow+0x134/0x410 fs/namei.c:1656
 lookup_slow+0x53/0x70 fs/namei.c:1688
 walk_component+0x319/0x460 fs/namei.c:1984
 lookup_last fs/namei.c:2439 [inline]
 path_lookupat+0x169/0x440 fs/namei.c:2463
 filename_lookup+0x214/0x540 fs/namei.c:2492
 user_path_at_empty+0x40/0x190 fs/namei.c:2891
 user_path_at include/linux/namei.h:57 [inline]
 vfs_statx+0x107/0x500 fs/stat.c:221
 vfs_fstatat fs/stat.c:243 [inline]
 __do_sys_newfstatat fs/stat.c:411 [inline]
 __se_sys_newfstatat fs/stat.c:405 [inline]
 __x64_sys_newfstatat+0x15f/0x200 fs/stat.c:405
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fa77f8d2959
RSP: 002b:00007fa77eb25058 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
RAX: ffffffffffffffda RBX: 00007fa77fa9e080 RCX: 00007fa77f8d2959
RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c
RBP: 00007fa77f9559bd R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007fa77fa9e080 R15: 00007ffeaf28e568
 </TASK>
INFO: task syz.4.19:4992 blocked for more than 145 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.19        state:D stack:28272 pid: 4992 ppid:  4708 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11ef/0x43c0 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 d_wait_lookup+0x190/0x260 fs/dcache.c:2571
 d_alloc_parallel+0xa19/0x1330 fs/dcache.c:2653
 __lookup_slow+0x134/0x410 fs/namei.c:1656
 lookup_slow+0x53/0x70 fs/namei.c:1688
 walk_component+0x319/0x460 fs/namei.c:1984
 lookup_last fs/namei.c:2439 [inline]
 path_lookupat+0x169/0x440 fs/namei.c:2463
 filename_lookup+0x214/0x540 fs/namei.c:2492
 user_path_at_empty+0x40/0x190 fs/namei.c:2891
 user_path_at include/linux/namei.h:57 [inline]
 vfs_statx+0x107/0x500 fs/stat.c:221
 vfs_fstatat fs/stat.c:243 [inline]
 __do_sys_newfstatat fs/stat.c:411 [inline]
 __se_sys_newfstatat fs/stat.c:405 [inline]
 __x64_sys_newfstatat+0x15f/0x200 fs/stat.c:405
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f2fd4637959
RSP: 002b:00007f2fd388a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
RAX: ffffffffffffffda RBX: 00007f2fd4803080 RCX: 00007f2fd4637959
RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c
RBP: 00007f2fd46ba9bd R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f2fd4803080 R15: 00007ffcc810d808
 </TASK>
INFO: task syz.3.18:4995 blocked for more than 147 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.18        state:D stack:28272 pid: 4995 ppid:  4701 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11ef/0x43c0 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 d_wait_lookup+0x190/0x260 fs/dcache.c:2571
 d_alloc_parallel+0xa19/0x1330 fs/dcache.c:2653
 __lookup_slow+0x134/0x410 fs/namei.c:1656
 lookup_slow+0x53/0x70 fs/namei.c:1688
 walk_component+0x319/0x460 fs/namei.c:1984
 lookup_last fs/namei.c:2439 [inline]
 path_lookupat+0x169/0x440 fs/namei.c:2463
 filename_lookup+0x214/0x540 fs/namei.c:2492
 user_path_at_empty+0x40/0x190 fs/namei.c:2891
 user_path_at include/linux/namei.h:57 [inline]
 vfs_statx+0x107/0x500 fs/stat.c:221
 vfs_fstatat fs/stat.c:243 [inline]
 __do_sys_newfstatat fs/stat.c:411 [inline]
 __se_sys_newfstatat fs/stat.c:405 [inline]
 __x64_sys_newfstatat+0x15f/0x200 fs/stat.c:405
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f0e516d3959
RSP: 002b:00007f0e50926058 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
RAX: ffffffffffffffda RBX: 00007f0e5189f080 RCX: 00007f0e516d3959
RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c
RBP: 00007f0e517569bd R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f0e5189f080 R15: 00007fff56d3f2c8
 </TASK>

Showing all locks held in the system:
3 locks held by kworker/1:0/21:
1 lock held by khungtaskd/27:
 #0: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
3 locks held by kworker/u4:1/144:
1 lock held by kswapd0/254:
2 locks held by udevd/3560:
2 locks held by getty/3954:
 #0: ffff88802c68e098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:252
 #1: ffffc900025e62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 drivers/tty/n_tty.c:2158
2 locks held by syz.0.15/4965:
1 lock held by syz.0.15/4969:
 #0: ffff88806f028188 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:797 [inline]
 #0: ffff88806f028188 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x46/0x70 fs/namei.c:1687
2 locks held by syz.4.19/4986:
1 lock held by syz.4.19/4992:
 #0: ffff88806f0286d0 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:797 [inline]
 #0: ffff88806f0286d0 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x46/0x70 fs/namei.c:1687
2 locks held by syz.3.18/4991:
1 lock held by syz.3.18/4995:
 #0: ffff888056dd8188 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:797 [inline]
 #0: ffff888056dd8188 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x46/0x70 fs/namei.c:1687
1 lock held by syz.1.16/4999:
1 lock held by syz.1.16/5004:
 #0: ffff888056dd86d0 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:797 [inline]
 #0: ffff888056dd86d0 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x46/0x70 fs/namei.c:1687
1 lock held by syz.2.17/5012:
1 lock held by syz.2.17/5015:
 #0: ffff88806f028c18 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:797 [inline]
 #0: ffff88806f028c18 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x46/0x70 fs/namei.c:1687
1 lock held by syz.5.20/5370:
1 lock held by syz.5.20/5374:
 #0: ffff888056dd8c18 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:797 [inline]
 #0: ffff888056dd8c18 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x46/0x70 fs/namei.c:1687
1 lock held by syz.6.21/5398:
1 lock held by syz.6.21/5400:
 #0: ffff88806f029160 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:797 [inline]
 #0: ffff88806f029160 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x46/0x70 fs/namei.c:1687
1 lock held by syz.9.24/5407:
1 lock held by syz.9.24/5411:
 #0: ffff88806f0296a8 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:797 [inline]
 #0: ffff88806f0296a8 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x46/0x70 fs/namei.c:1687
1 lock held by syz.7.22/5409:
1 lock held by syz.7.22/5410:
 #0: ffff888056dd9160 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:797 [inline]
 #0: ffff888056dd9160 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x46/0x70 fs/namei.c:1687
1 lock held by syz.8.23/5415:
1 lock held by syz.8.23/5416:
 #0: ffff888056dd96a8 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:797 [inline]
 #0: ffff888056dd96a8 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x46/0x70 fs/namei.c:1687

=============================================

NMI backtrace for cpu 0
CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 nmi_cpu_backtrace+0x3a2/0x3d0 lib/nmi_backtrace.c:111
 nmi_trigger_cpumask_backtrace+0x163/0x280 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:212 [inline]
 watchdog+0xe0f/0xe50 kernel/hung_task.c:369
 kthread+0x436/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
RIP: 0010:trace_irq_enable_rcuidle+0x0/0x180 include/trace/events/preemptirq.h:40
Code: 00 65 c7 05 46 d2 83 7e 00 00 00 00 e8 c9 7a dd ff 48 8b 7c 24 08 5b e9 0e 69 3d 08 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <55> 41 57 41 56 41 54 53 48 89 f3 49 89 fe e8 ad d3 f9 ff 66 90 e8
RSP: 0018:ffffc90000da7978 EFLAGS: 00000046
RAX: ffffffff817f609b RBX: 0000000000000000 RCX: ffff888017a00000
RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffffffff81be5b74
RBP: ffffc90000da7a28 R08: ffffffff8100480f R09: 0000000000000001
R10: 000000005af1ea47 R11: 000000008db9e64c R12: ffff8881400088c0
R13: ffff88802514a500 R14: 0000000000070b78 R15: 0000000000000286
FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000002000d000 CR3: 000000005ae13000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 trace_hardirqs_on+0x57/0x80 kernel/trace/trace_preemptirq.c:44
 kasan_quarantine_put+0xd4/0x220 mm/kasan/quarantine.c:231
 kasan_slab_free include/linux/kasan.h:230 [inline]
 slab_free_hook mm/slub.c:1710 [inline]
 slab_free_freelist_hook+0xea/0x170 mm/slub.c:1736
 slab_free mm/slub.c:3504 [inline]
 kmem_cache_free+0x8f/0x210 mm/slub.c:3520
 rcu_do_batch kernel/rcu/tree.c:2523 [inline]
 rcu_core+0x9d2/0x1670 kernel/rcu/tree.c:2763
 handle_softirqs+0x339/0x830 kernel/softirq.c:576
 run_ksoftirqd+0xa4/0x100 kernel/softirq.c:943
 smpboot_thread_fn+0x4f6/0x970 kernel/smpboot.c:164
 kthread+0x436/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>