INFO: task kworker/u8:0:12 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:0 state:D stack:12360 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00004000 Workqueue: writeback wb_workfn (flush-7:6) Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x6b4/0x1550 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xac/0x140 kernel/sched/core.c:6860 io_schedule+0x3f/0x60 kernel/sched/core.c:7742 folio_wait_bit_common+0x203/0x3b0 mm/filemap.c:1317 folio_lock include/linux/pagemap.h:1137 [inline] writeback_get_folio mm/page-writeback.c:2469 [inline] writeback_iter+0x1de/0x350 mm/page-writeback.c:2563 write_cache_pages+0x3f/0xd0 mm/page-writeback.c:2612 blkdev_writepages+0x8b/0xc0 block/fops.c:458 do_writepages+0xf3/0x340 mm/page-writeback.c:2656 __writeback_single_inode+0x44/0x3a0 fs/fs-writeback.c:1680 writeback_sb_inodes+0x27d/0x610 fs/fs-writeback.c:1976 __writeback_inodes_wb+0x93/0xe0 fs/fs-writeback.c:2047 wb_writeback+0x19b/0x450 fs/fs-writeback.c:2158 wb_check_start_all fs/fs-writeback.c:2284 [inline] wb_do_writeback fs/fs-writeback.c:2310 [inline] wb_workfn+0x2d4/0x5a0 fs/fs-writeback.c:2343 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0x2e4/0x5e0 kernel/workqueue.c:3319 worker_thread+0x20a/0x2f0 kernel/workqueue.c:3400 kthread+0x200/0x230 kernel/kthread.c:464 ret_from_fork+0x32/0x40 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task syz-executor:3966 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:11072 pid:3966 tgid:3966 ppid:1 task_flags:0x400140 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x6b4/0x1550 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] rt_mutex_schedule+0x1c/0x80 kernel/sched/core.c:7141 rwbase_write_lock+0x152/0x360 kernel/locking/rwbase_rt.c:272 __super_lock fs/super.c:56 [inline] __super_lock_excl fs/super.c:71 [inline] deactivate_super+0x33/0x40 fs/super.c:505 cleanup_mnt+0x7c/0x130 fs/namespace.c:1435 task_work_run+0x84/0xb0 kernel/task_work.c:227 resume_user_mode_work+0x52/0x60 include/linux/resume_user_mode.h:50 exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x77/0xc0 kernel/entry/common.c:218 do_syscall_64+0x9c/0x180 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f5f3067ff17 RSP: 002b:00007ffd81b910d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 00007f5f30701c05 RCX: 00007f5f3067ff17 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd81b91190 RBP: 00007ffd81b91190 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd81b92220 R13: 00007f5f30701c05 R14: 0000000000014f79 R15: 00007ffd81b92260 INFO: task udevd:5711 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:12720 pid:5711 tgid:5711 ppid:2372 task_flags:0x400140 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x6b4/0x1550 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] rt_mutex_schedule+0x1c/0x80 kernel/sched/core.c:7141 rt_mutex_slowlock_block+0x1dd/0x260 kernel/locking/rtmutex.c:1647 __rt_mutex_slowlock kernel/locking/rtmutex.c:1721 [inline] __rt_mutex_slowlock_locked kernel/locking/rtmutex.c:1760 [inline] rt_mutex_slowlock+0x142/0x300 kernel/locking/rtmutex.c:1800 __rt_mutex_lock kernel/locking/rtmutex.c:1815 [inline] __mutex_lock_common kernel/locking/rtmutex_api.c:518 [inline] mutex_lock_nested+0x9f/0xd0 kernel/locking/rtmutex_api.c:529 bdev_release+0x76/0x180 block/bdev.c:1090 blkdev_release+0xc/0x20 block/fops.c:660 __fput+0x111/0x2b0 fs/file_table.c:465 __do_sys_close fs/open.c:1581 [inline] __se_sys_close+0x7c/0xf0 fs/open.c:1566 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x8f/0x180 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f5f92fad407 RSP: 002b:00007ffd69b45c40 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 RAX: ffffffffffffffda RBX: 00007f5f92ebf880 RCX: 00007f5f92fad407 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 RBP: 00007f5f92ebf6e8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 R13: 000055ded8183410 R14: 0000000000000008 R15: 000055ded8193a40 INFO: task syz.5.977:7412 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.5.977 state:D stack:13024 pid:7412 tgid:7411 ppid:3519 task_flags:0x400140 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x6b4/0x1550 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xac/0x140 kernel/sched/core.c:6860 io_schedule+0x3f/0x60 kernel/sched/core.c:7742 folio_wait_bit_common+0x203/0x3b0 mm/filemap.c:1317 folio_lock include/linux/pagemap.h:1137 [inline] __find_get_block_slow fs/buffer.c:205 [inline] find_get_block_common+0xea/0x540 fs/buffer.c:1403 bdev_getblk+0x2d/0x2a0 fs/buffer.c:-1 __bread_gfp+0x24/0xf0 fs/buffer.c:1510 sb_bread include/linux/buffer_head.h:347 [inline] hfs_mdb_commit+0x24d/0x390 fs/hfs/mdb.c:318 hfs_sync_fs+0x9/0x20 fs/hfs/super.c:37 iterate_supers+0xa3/0x150 fs/super.c:934 ksys_sync+0x5c/0xa0 fs/sync.c:104 __ia32_sys_sync+0x9/0x20 fs/sync.c:113 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x8f/0x180 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f03de63ebe9 RSP: 002b:00007f03de4af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 RAX: ffffffffffffffda RBX: 00007f03de875fa0 RCX: 00007f03de63ebe9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007f03de875fa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f03de876038 R14: 00007f03de875fa0 R15: 00007fff1d795c68 INFO: task syz.4.976:7416 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.976 state:D stack:13024 pid:7416 tgid:7415 ppid:3963 task_flags:0x400140 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x6b4/0x1550 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xac/0x140 kernel/sched/core.c:6860 io_schedule+0x3f/0x60 kernel/sched/core.c:7742 bit_wait_io+0xc/0x60 kernel/sched/wait_bit.c:247 __wait_on_bit_lock+0xbe/0x1d0 kernel/sched/wait_bit.c:90 out_of_line_wait_on_bit_lock+0x8f/0xb0 kernel/sched/wait_bit.c:117 lock_buffer include/linux/buffer_head.h:433 [inline] hfs_mdb_commit+0x3f/0x390 fs/hfs/mdb.c:271 hfs_sync_fs+0x9/0x20 fs/hfs/super.c:37 iterate_supers+0xa3/0x150 fs/super.c:934 ksys_sync+0x5c/0xa0 fs/sync.c:104 __ia32_sys_sync+0x9/0x20 fs/sync.c:113 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x8f/0x180 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f9056c8ebe9 RSP: 002b:00007f9056aff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 RAX: ffffffffffffffda RBX: 00007f9056ec5fa0 RCX: 00007f9056c8ebe9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007f9056ec5fa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f9056ec6038 R14: 00007f9056ec5fa0 R15: 00007ffef7e54978 INFO: task syz.7.980:7418 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.7.980 state:D stack:13240 pid:7418 tgid:7417 ppid:3961 task_flags:0x400140 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x6b4/0x1550 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xac/0x140 kernel/sched/core.c:6860 io_schedule+0x3f/0x60 kernel/sched/core.c:7742 bit_wait_io+0xc/0x60 kernel/sched/wait_bit.c:247 __wait_on_bit_lock+0xbe/0x1d0 kernel/sched/wait_bit.c:90 out_of_line_wait_on_bit_lock+0x8f/0xb0 kernel/sched/wait_bit.c:117 wait_on_bit_lock_io include/linux/wait_bit.h:221 [inline] __lock_buffer fs/buffer.c:71 [inline] lock_buffer include/linux/buffer_head.h:433 [inline] __block_write_full_folio+0x1fa/0x440 fs/buffer.c:1906 write_cache_pages+0x76/0xd0 mm/page-writeback.c:2613 blkdev_writepages+0x8b/0xc0 block/fops.c:458 do_writepages+0xf3/0x340 mm/page-writeback.c:2656 filemap_fdatawrite_wbc mm/filemap.c:386 [inline] __filemap_fdatawrite_range mm/filemap.c:419 [inline] __filemap_fdatawrite mm/filemap.c:425 [inline] filemap_fdatawrite+0x82/0xc0 mm/filemap.c:430 sync_bdevs+0xf6/0x150 block/bdev.c:1262 ksys_sync+0x63/0xa0 fs/sync.c:105 __ia32_sys_sync+0x9/0x20 fs/sync.c:113 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x8f/0x180 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fcc4df8ebe9 RSP: 002b:00007fcc4ddf7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 RAX: ffffffffffffffda RBX: 00007fcc4e1c5fa0 RCX: 00007fcc4df8ebe9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007fcc4e1c5fa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fcc4e1c6038 R14: 00007fcc4e1c5fa0 R15: 00007ffe84d0e1d8 INFO: task syz.0.981:7421 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.981 state:D stack:13024 pid:7421 tgid:7420 ppid:3968 task_flags:0x400140 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x6b4/0x1550 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] rt_mutex_schedule+0x1c/0x80 kernel/sched/core.c:7141 rt_mutex_slowlock_block kernel/locking/rtmutex.c:1647 [inline] __rt_mutex_slowlock kernel/locking/rtmutex.c:1721 [inline] __rt_mutex_slowlock_locked+0xb47/0xd30 kernel/locking/rtmutex.c:1760 __rwbase_read_lock+0x65/0x1b0 kernel/locking/rwbase_rt.c:114 __super_lock fs/super.c:58 [inline] super_lock+0x12f/0x170 fs/super.c:120 super_lock_shared fs/super.c:139 [inline] iterate_supers+0x8c/0x150 fs/super.c:931 ksys_sync+0x3c/0xa0 fs/sync.c:102 __ia32_sys_sync+0x9/0x20 fs/sync.c:113 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x8f/0x180 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f43f6f0ebe9 RSP: 002b:00007f43f6d7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 RAX: ffffffffffffffda RBX: 00007f43f7145fa0 RCX: 00007f43f6f0ebe9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007f43f7145fa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f43f7146038 R14: 00007f43f7145fa0 R15: 00007ffcc4a3d638 Showing all locks held in the system: 3 locks held by kworker/u8:0/12: #0: ffff888102af4538 ((wq_completion)writeback){....}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff888102af4538 ((wq_completion)writeback){....}-{0:0}, at: process_scheduled_works+0x27f/0x5e0 kernel/workqueue.c:3319 #1: ffffc900000b3e48 ((work_completion)(&(&wb->dwork)->work)){....}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc900000b3e48 ((work_completion)(&(&wb->dwork)->work)){....}-{0:0}, at: process_scheduled_works+0x29f/0x5e0 kernel/workqueue.c:3319 #2: ffff888100a9b0d0 (&type->s_umount_key#47){....}-{3:3}, at: super_trylock_shared+0x16/0x50 fs/super.c:562 1 lock held by khungtaskd/39: #0: ffffffff84048c00 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff84048c00 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #0: ffffffff84048c00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x2e/0x100 kernel/locking/lockdep.c:6764 2 locks held by kworker/1:1/48: #0: ffff88810008c738 ((wq_completion)events_long){....}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline] #0: ffff88810008c738 ((wq_completion)events_long){....}-{0:0}, at: process_scheduled_works+0x27f/0x5e0 kernel/workqueue.c:3319 #1: ffffc90000a2fe48 ((work_completion)(&(&sbi->mdb_work)->work)){....}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #1: ffffc90000a2fe48 ((work_completion)(&(&sbi->mdb_work)->work)){....}-{0:0}, at: process_scheduled_works+0x29f/0x5e0 kernel/workqueue.c:3319 2 locks held by getty/2524: #0: ffff888105b438a0 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x20/0x40 drivers/tty/tty_ldisc.c:243 #1: ffffc90000bfb2e0 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x1cf/0x700 drivers/tty/n_tty.c:2222 1 lock held by syz-executor/3966: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:56 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock_excl fs/super.c:71 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: deactivate_super+0x33/0x40 fs/super.c:505 1 lock held by udevd/5711: #0: ffff888106ab54c8 (&disk->open_mutex){....}-{3:3}, at: bdev_release+0x76/0x180 block/bdev.c:1090 1 lock held by syz.5.977/7412: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.4.976/7416: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.7.980/7418: #0: ffff888106ab54c8 (&disk->open_mutex){....}-{3:3}, at: sync_bdevs+0xd2/0x150 block/bdev.c:1250 1 lock held by syz.0.981/7421: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.9.984/9294: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.3.987/9305: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.2.986/9307: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.1.985/9317: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.8.983/9328: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz-executor/9342: #0: ffff888106ab54c8 (&disk->open_mutex){....}-{3:3}, at: bdev_open+0x73/0x390 block/bdev.c:907 1 lock held by syz.4.992/11201: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.5.989/11219: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.7.991/11224: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.0.988/11230: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.3.997/13111: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.9.994/13114: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.1.995/13117: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.2.996/13133: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.8.993/13136: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz-executor/13151: #0: ffff888106ab54c8 (&disk->open_mutex){....}-{3:3}, at: bdev_open+0x73/0x390 block/bdev.c:907 1 lock held by syz.4.1002/15020: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.7.1001/15034: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.0.998/15033: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.5.999/15037: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.8.1003/16920: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.1.1005/16930: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.2.1006/16934: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.9.1004/16936: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.3.1007/16941: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz-executor/16958: #0: ffff888106ab54c8 (&disk->open_mutex){....}-{3:3}, at: bdev_open+0x73/0x390 block/bdev.c:907 1 lock held by syz.4.1012/18826: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.7.1011/18834: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.0.1008/18841: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 1 lock held by syz.5.1009/18844: #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: __super_lock fs/super.c:58 [inline] #0: ffff888104f080d0 (&type->s_umount_key#66){....}-{3:3}, at: super_lock+0x12f/0x170 fs/super.c:120 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 Call Trace: dump_stack_lvl+0xa2/0xf0 lib/dump_stack.c:120 nmi_cpu_backtrace+0x109/0x170 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x8e/0x140 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:274 [inline] watchdog+0x681/0x6b0 kernel/hung_task.c:437 kthread+0x200/0x230 kernel/kthread.c:464 ret_from_fork+0x32/0x40 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:81 Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c1 a0 04 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffc9000011bee0 EFLAGS: 000002c6 RAX: 3162daae1993b000 RBX: 0000000000000001 RCX: 3162daae1993b000 RDX: 00000000ffffe580 RSI: ffffffff83a34c33 RDI: ffffffff83c10baf RBP: ffffc9000011bef8 R08: 0000000000000000 R09: 000000000000009e R10: 0000000000000000 R11: ffffffff81270a00 R12: 0000000000000000 R13: ffff8881016b8000 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8881b69f2000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005555689cf4a8 CR3: 0000000003f14000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline] default_idle+0x13/0x20 arch/x86/kernel/process.c:748 default_idle_call+0x3d/0x70 kernel/sched/idle.c:117 cpuidle_idle_call kernel/sched/idle.c:185 [inline] do_idle+0xd7/0x240 kernel/sched/idle.c:325 cpu_startup_entry+0x25/0x30 kernel/sched/idle.c:423 start_secondary+0x95/0xa0 arch/x86/kernel/smpboot.c:315 common_startup_64+0x13e/0x147