INFO: task syz.2.18:6443 blocked for more than 143 seconds.
Not tainted 6.1.132-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.18 state:D stack:14552 pid:6443 ppid:4263 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5244 [inline]
__schedule+0x5d0/0x1140 kernel/sched/core.c:6561
schedule+0x50/0xb0 kernel/sched/core.c:6637
schedule_preempt_disabled+0x2e/0x40 kernel/sched/core.c:6696
rwsem_down_read_slowpath kernel/locking/rwsem.c:1094 [inline]
__down_read_common kernel/locking/rwsem.c:1261 [inline]
__down_read kernel/locking/rwsem.c:1274 [inline]
down_read+0x2df/0x430 kernel/locking/rwsem.c:1522
inode_lock_shared include/linux/fs.h:768 [inline]
lookup_slow+0x25/0x50 fs/namei.c:1706
walk_component+0x16a/0x1b0 fs/namei.c:1998
lookup_last fs/namei.c:2455 [inline]
path_lookupat+0xa9/0x1f0 fs/namei.c:2479
filename_lookup+0xf8/0x280 fs/namei.c:2508
user_path_at_empty+0x3e/0xf0 fs/namei.c:2905
user_path_at include/linux/namei.h:57 [inline]
do_mount fs/namespace.c:3396 [inline]
__do_sys_mount fs/namespace.c:3607 [inline]
__se_sys_mount+0x24f/0x2d0 fs/namespace.c:3584
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f881298d169
RSP: 002b:00007f88137bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f8812ba6080 RCX: 00007f881298d169
RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000000
RBP: 00007f8812a0e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f8812ba6080 R15: 00007ffc52ce6a58
INFO: task syz.0.16:6458 blocked for more than 144 seconds.
Not tainted 6.1.132-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.16 state:D stack:14552 pid:6458 ppid:4258 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5244 [inline]
__schedule+0x5d0/0x1140 kernel/sched/core.c:6561
schedule+0x50/0xb0 kernel/sched/core.c:6637
schedule_preempt_disabled+0x2e/0x40 kernel/sched/core.c:6696
rwsem_down_read_slowpath kernel/locking/rwsem.c:1094 [inline]
__down_read_common kernel/locking/rwsem.c:1261 [inline]
__down_read kernel/locking/rwsem.c:1274 [inline]
down_read+0x2df/0x430 kernel/locking/rwsem.c:1522
inode_lock_shared include/linux/fs.h:768 [inline]
lookup_slow+0x25/0x50 fs/namei.c:1706
walk_component+0x16a/0x1b0 fs/namei.c:1998
lookup_last fs/namei.c:2455 [inline]
path_lookupat+0xa9/0x1f0 fs/namei.c:2479
filename_lookup+0xf8/0x280 fs/namei.c:2508
user_path_at_empty+0x3e/0xf0 fs/namei.c:2905
user_path_at include/linux/namei.h:57 [inline]
do_mount fs/namespace.c:3396 [inline]
__do_sys_mount fs/namespace.c:3607 [inline]
__se_sys_mount+0x24f/0x2d0 fs/namespace.c:3584
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7ffaaad8d169
RSP: 002b:00007ffaabb26038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffaaafa6080 RCX: 00007ffaaad8d169
RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000000
RBP: 00007ffaaae0e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007ffaaafa6080 R15: 00007fff9954b908
INFO: task syz.4.20:6508 blocked for more than 145 seconds.
Not tainted 6.1.132-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.20 state:D stack:14552 pid:6508 ppid:4265 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5244 [inline]
__schedule+0x5d0/0x1140 kernel/sched/core.c:6561
schedule+0x50/0xb0 kernel/sched/core.c:6637
schedule_preempt_disabled+0x2e/0x40 kernel/sched/core.c:6696
rwsem_down_read_slowpath kernel/locking/rwsem.c:1094 [inline]
__down_read_common kernel/locking/rwsem.c:1261 [inline]
__down_read kernel/locking/rwsem.c:1274 [inline]
down_read+0x2df/0x430 kernel/locking/rwsem.c:1522
inode_lock_shared include/linux/fs.h:768 [inline]
lookup_slow+0x25/0x50 fs/namei.c:1706
walk_component+0x16a/0x1b0 fs/namei.c:1998
lookup_last fs/namei.c:2455 [inline]
path_lookupat+0xa9/0x1f0 fs/namei.c:2479
filename_lookup+0xf8/0x280 fs/namei.c:2508
user_path_at_empty+0x3e/0xf0 fs/namei.c:2905
user_path_at include/linux/namei.h:57 [inline]
do_mount fs/namespace.c:3396 [inline]
__do_sys_mount fs/namespace.c:3607 [inline]
__se_sys_mount+0x24f/0x2d0 fs/namespace.c:3584
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f7723d8d169
RSP: 002b:00007f7724bda038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f7723fa6080 RCX: 00007f7723d8d169
RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000000
RBP: 00007f7723e0e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f7723fa6080 R15: 00007fff59a15c08
INFO: task syz.3.19:6509 blocked for more than 146 seconds.
Not tainted 6.1.132-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.19 state:D stack:14552 pid:6509 ppid:4261 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5244 [inline]
__schedule+0x5d0/0x1140 kernel/sched/core.c:6561
schedule+0x50/0xb0 kernel/sched/core.c:6637
schedule_preempt_disabled+0x2e/0x40 kernel/sched/core.c:6696
rwsem_down_read_slowpath kernel/locking/rwsem.c:1094 [inline]
__down_read_common kernel/locking/rwsem.c:1261 [inline]
__down_read kernel/locking/rwsem.c:1274 [inline]
down_read+0x2df/0x430 kernel/locking/rwsem.c:1522
inode_lock_shared include/linux/fs.h:768 [inline]
lookup_slow+0x25/0x50 fs/namei.c:1706
walk_component+0x16a/0x1b0 fs/namei.c:1998
lookup_last fs/namei.c:2455 [inline]
path_lookupat+0xa9/0x1f0 fs/namei.c:2479
filename_lookup+0xf8/0x280 fs/namei.c:2508
user_path_at_empty+0x3e/0xf0 fs/namei.c:2905
user_path_at include/linux/namei.h:57 [inline]
do_mount fs/namespace.c:3396 [inline]
__do_sys_mount fs/namespace.c:3607 [inline]
__se_sys_mount+0x24f/0x2d0 fs/namespace.c:3584
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fbe9138d169
RSP: 002b:00007fbe9221f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007fbe915a6080 RCX: 00007fbe9138d169
RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000000
RBP: 00007fbe9140e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007fbe915a6080 R15: 00007fff6eeeb078
INFO: task syz.6.17:6517 blocked for more than 147 seconds.
Not tainted 6.1.132-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.6.17 state:D stack:14552 pid:6517 ppid:4256 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5244 [inline]
__schedule+0x5d0/0x1140 kernel/sched/core.c:6561
schedule+0x50/0xb0 kernel/sched/core.c:6637
schedule_preempt_disabled+0x2e/0x40 kernel/sched/core.c:6696
rwsem_down_read_slowpath kernel/locking/rwsem.c:1094 [inline]
__down_read_common kernel/locking/rwsem.c:1261 [inline]
__down_read kernel/locking/rwsem.c:1274 [inline]
down_read+0x2df/0x430 kernel/locking/rwsem.c:1522
inode_lock_shared include/linux/fs.h:768 [inline]
lookup_slow+0x25/0x50 fs/namei.c:1706
walk_component+0x16a/0x1b0 fs/namei.c:1998
lookup_last fs/namei.c:2455 [inline]
path_lookupat+0xa9/0x1f0 fs/namei.c:2479
filename_lookup+0xf8/0x280 fs/namei.c:2508
user_path_at_empty+0x3e/0xf0 fs/namei.c:2905
user_path_at include/linux/namei.h:57 [inline]
do_mount fs/namespace.c:3396 [inline]
__do_sys_mount fs/namespace.c:3607 [inline]
__se_sys_mount+0x24f/0x2d0 fs/namespace.c:3584
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f86b038d169
RSP: 002b:00007f86b1213038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f86b05a6080 RCX: 00007f86b038d169
RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000000
RBP: 00007f86b040e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f86b05a6080 R15: 00007fff66072d78
Showing all locks held in the system:
1 lock held by rcu_tasks_kthre/12:
#0: ffffffff849a9538 (rcu_tasks.tasks_gp_mutex){....}-{3:3}, at: rcu_tasks_one_gp kernel/rcu/tasks.h:517 [inline]
#0: ffffffff849a9538 (rcu_tasks.tasks_gp_mutex){....}-{3:3}, at: rcu_tasks_kthread+0x98/0x450 kernel/rcu/tasks.h:562
1 lock held by khungtaskd/27:
#0: ffffffff849a9410 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:350 [inline]
#0: ffffffff849a9410 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:791 [inline]
#0: ffffffff849a9410 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x2c/0x100 kernel/locking/lockdep.c:6510
1 lock held by udevd/1771:
2 locks held by getty/1944:
#0: ffff8881442cc898 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x50 drivers/tty/tty_ldisc.c:244
#1: ffffc9000475f2f0 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x25d/0xba0 drivers/tty/n_tty.c:2198
2 locks held by syz.2.18/6425:
1 lock held by syz.2.18/6443:
#0: ffff888110a98188 (&type->i_mutex_dir_key#8){....}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline]
#0: ffff888110a98188 (&type->i_mutex_dir_key#8){....}-{3:3}, at: lookup_slow+0x25/0x50 fs/namei.c:1706
2 locks held by syz.0.16/6451:
1 lock held by syz.0.16/6458:
#0: ffff888110a98648 (&type->i_mutex_dir_key#8){....}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline]
#0: ffff888110a98648 (&type->i_mutex_dir_key#8){....}-{3:3}, at: lookup_slow+0x25/0x50 fs/namei.c:1706
2 locks held by syz.4.20/6502:
1 lock held by syz.4.20/6508:
#0: ffff888110a98b08 (&type->i_mutex_dir_key#8){....}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline]
#0: ffff888110a98b08 (&type->i_mutex_dir_key#8){....}-{3:3}, at: lookup_slow+0x25/0x50 fs/namei.c:1706
2 locks held by syz.3.19/6507:
1 lock held by syz.3.19/6509:
#0: ffff888110a98fc8 (&type->i_mutex_dir_key#8){....}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline]
#0: ffff888110a98fc8 (&type->i_mutex_dir_key#8){....}-{3:3}, at: lookup_slow+0x25/0x50 fs/namei.c:1706
3 locks held by syz.6.17/6516:
1 lock held by syz.6.17/6517:
#0: ffff888110a99488 (&type->i_mutex_dir_key#8){....}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline]
#0: ffff888110a99488 (&type->i_mutex_dir_key#8){....}-{3:3}, at: lookup_slow+0x25/0x50 fs/namei.c:1706
2 locks held by syz.7.21/8269:
1 lock held by syz.7.21/8275:
#0: ffff888110a99948 (&type->i_mutex_dir_key#8){....}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline]
#0: ffff888110a99948 (&type->i_mutex_dir_key#8){....}-{3:3}, at: lookup_slow+0x25/0x50 fs/namei.c:1706
3 locks held by syz.8.22/8292:
1 lock held by syz.8.22/8298:
#0: ffff888110a99e08 (&type->i_mutex_dir_key#8){....}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline]
#0: ffff888110a99e08 (&type->i_mutex_dir_key#8){....}-{3:3}, at: lookup_slow+0x25/0x50 fs/namei.c:1706
2 locks held by syz.5.25/8320:
1 lock held by syz.5.25/8324:
#0: ffff88800b4bc188 (&type->i_mutex_dir_key#8){....}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline]
#0: ffff88800b4bc188 (&type->i_mutex_dir_key#8){....}-{3:3}, at: lookup_slow+0x25/0x50 fs/namei.c:1706
2 locks held by syz.1.24/8323:
1 lock held by syz.1.24/8326:
#0: ffff88800b4bc648 (&type->i_mutex_dir_key#8){....}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline]
#0: ffff88800b4bc648 (&type->i_mutex_dir_key#8){....}-{3:3}, at: lookup_slow+0x25/0x50 fs/namei.c:1706
3 locks held by syz.9.23/8332:
1 lock held by syz.9.23/8333:
#0: ffff888110a9a2c8 (&type->i_mutex_dir_key#8){....}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline]
#0: ffff888110a9a2c8 (&type->i_mutex_dir_key#8){....}-{3:3}, at: lookup_slow+0x25/0x50 fs/namei.c:1706
1 lock held by syz-executor/8337:
1 lock held by udevd/12015:
#0: ffff88813bc2c418 (&rq->__lock){....}-{2:2}, at: raw_spin_rq_lock_nested+0x1f/0xd0 kernel/sched/core.c:537
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.132-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xf0/0x176 lib/dump_stack.c:106
nmi_cpu_backtrace+0x22c/0x240 lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x118/0x240 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline]
watchdog+0x839/0x870 kernel/hung_task.c:377
kthread+0xf5/0x120 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 6507 Comm: syz.3.19 Not tainted 6.1.132-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x0/0x80 kernel/kcov.c:321
Code: 39 c8 77 22 89 f8 89 f6 49 ff c2 4c 89 11 48 c7 44 0a 08 05 00 00 00 48 89 44 0a 10 48 89 74 0a 18 4c 89 44 0a 20 c3 0f 1f 00 <4c> 8b 04 24 65 48 8b 0d 84 af d4 7e 65 8b 05 85 af d4 7e 25 00 01
RSP: 0018:ffffc90002b23a80 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888108a88000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffff8138db48 R09: 0000000000000000
R10: 0000000000000000 R11: 39312e332e7a7973 R12: ffffea0004e388c0
R13: ffff888110a990a0 R14: 0000000000000000 R15: ffffea0004e388c0
FS: 00007fbe922406c0(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fdd00ad56c0 CR3: 000000011ebe5000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
PageTail include/linux/page-flags.h:292 [inline]
folio_flags include/linux/page-flags.h:319 [inline]
folio_test_unevictable include/linux/page-flags.h:558 [inline]
folio_add_lru+0xf9/0x7e0 mm/swap.c:519
filemap_add_folio+0xed/0x320 mm/filemap.c:977
do_read_cache_folio+0x192/0x530 mm/filemap.c:3593
do_read_cache_page+0x30/0x160 mm/filemap.c:3668
read_mapping_page include/linux/pagemap.h:791 [inline]
dir_get_page fs/sysv/dir.c:58 [inline]
sysv_find_entry+0x97/0x310 fs/sysv/dir.c:146
sysv_inode_by_name+0x33/0x1c0 fs/sysv/dir.c:360
sysv_lookup+0x3f/0x80 fs/sysv/namei.c:38
lookup_open fs/namei.c:3460 [inline]
open_last_lookups fs/namei.c:3550 [inline]
path_openat+0x861/0x1570 fs/namei.c:3780
do_filp_open+0xc5/0x1b0 fs/namei.c:3810
do_sys_openat2+0xb5/0x250 fs/open.c:1318
do_sys_open fs/open.c:1334 [inline]
__do_sys_openat fs/open.c:1350 [inline]
__se_sys_openat fs/open.c:1345 [inline]
__x64_sys_openat+0xcb/0xf0 fs/open.c:1345
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fbe9138d169
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fbe92240038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fbe915a5fa0 RCX: 00007fbe9138d169
RDX: 0000000000141842 RSI: 0000400000000100 RDI: ffffffffffffff9c
RBP: 00007fbe9140e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 000000000000017a R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fbe915a5fa0 R15: 00007fff6eeeb078