INFO: task kworker/u8:7:2035 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:7 state:D stack:22920 pid:2035 tgid:2035 ppid:2 task_flags:0x4208060 flags:0x00080000
Workqueue: writeback wb_workfn (flush-7:3)
Call Trace:
context_switch kernel/sched/core.c:5257 [inline]
__schedule+0x14bc/0x5000 kernel/sched/core.c:6864
__schedule_loop kernel/sched/core.c:6946 [inline]
schedule+0x165/0x360 kernel/sched/core.c:6961
io_schedule+0x80/0xd0 kernel/sched/core.c:7793
folio_wait_bit_common+0x6b0/0xb80 mm/filemap.c:1323
folio_lock include/linux/pagemap.h:1159 [inline]
writeback_get_folio mm/page-writeback.c:2462 [inline]
writeback_iter+0x8d8/0x1280 mm/page-writeback.c:2556
blkdev_writepages+0xb7/0x170 block/fops.c:490
do_writepages+0x32e/0x550 mm/page-writeback.c:2598
__writeback_single_inode+0x133/0x1240 fs/fs-writeback.c:1737
writeback_sb_inodes+0x93a/0x1870 fs/fs-writeback.c:2030
__writeback_inodes_wb+0x111/0x240 fs/fs-writeback.c:2107
wb_writeback+0x43f/0xaa0 fs/fs-writeback.c:2218
wb_check_start_all fs/fs-writeback.c:2344 [inline]
wb_do_writeback fs/fs-writeback.c:2370 [inline]
wb_workfn+0x8ee/0xed0 fs/fs-writeback.c:2403
process_one_work+0x93a/0x15a0 kernel/workqueue.c:3261
process_scheduled_works kernel/workqueue.c:3344 [inline]
worker_thread+0x9b0/0xee0 kernel/workqueue.c:3425
kthread+0x711/0x8a0 kernel/kthread.c:463
ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
INFO: task udevd:5198 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd state:D stack:25560 pid:5198 tgid:5198 ppid:1 task_flags:0x400140 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5257 [inline]
__schedule+0x14bc/0x5000 kernel/sched/core.c:6864
__schedule_loop kernel/sched/core.c:6946 [inline]
schedule+0x165/0x360 kernel/sched/core.c:6961
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7018
__mutex_lock_common kernel/locking/mutex.c:692 [inline]
__mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
bdev_open+0xe0/0xd30 block/bdev.c:962
blkdev_open+0x457/0x600 block/fops.c:702
do_dentry_open+0x7ce/0x1420 fs/open.c:962
vfs_open+0x3b/0x340 fs/open.c:1094
do_open fs/namei.c:4628 [inline]
path_openat+0x340e/0x3dd0 fs/namei.c:4787
do_filp_open+0x1fa/0x410 fs/namei.c:4814
do_sys_openat2+0x121/0x200 fs/open.c:1430
do_sys_open fs/open.c:1436 [inline]
__do_sys_openat fs/open.c:1452 [inline]
__se_sys_openat fs/open.c:1447 [inline]
__x64_sys_openat+0x138/0x170 fs/open.c:1447
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f193a1db407
RSP: 002b:00007ffe22f7b230 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f193a14f880 RCX: 00007f193a1db407
RDX: 00000000000a0800 RSI: 000055afc86c39a0 RDI: ffffffffffffff9c
RBP: 000055afc86d37b0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 000055afc86f3de0
R13: 000055afb2f8a100 R14: 0000000000000000 R15: 00007ffe22f7b510
INFO: task syz.4.59:6305 blocked for more than 144 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.59 state:D stack:25592 pid:6305 tgid:6303 ppid:6103 task_flags:0x400140 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5257 [inline]
__schedule+0x14bc/0x5000 kernel/sched/core.c:6864
__schedule_loop kernel/sched/core.c:6946 [inline]
schedule+0x165/0x360 kernel/sched/core.c:6961
io_schedule+0x80/0xd0 kernel/sched/core.c:7793
bit_wait_io+0x11/0xd0 kernel/sched/wait_bit.c:250
__wait_on_bit_lock+0xec/0x4f0 kernel/sched/wait_bit.c:93
out_of_line_wait_on_bit_lock+0x123/0x170 kernel/sched/wait_bit.c:120
wait_on_bit_lock_io include/linux/wait_bit.h:221 [inline]
__lock_buffer fs/buffer.c:71 [inline]
lock_buffer include/linux/buffer_head.h:432 [inline]
__block_write_full_folio+0x54f/0xe10 fs/buffer.c:1910
blkdev_writepages+0xd1/0x170 block/fops.c:491
do_writepages+0x32e/0x550 mm/page-writeback.c:2598
filemap_writeback mm/filemap.c:387 [inline]
filemap_fdatawrite_range mm/filemap.c:412 [inline]
filemap_fdatawrite+0x199/0x240 mm/filemap.c:418
sync_bdevs+0x30a/0x470 block/bdev.c:1317
ksys_sync+0xb9/0x150 fs/sync.c:105
__ia32_sys_sync+0xe/0x20 fs/sync.c:113
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f496038ebe9
RSP: 002b:00007f4961289038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
RAX: ffffffffffffffda RBX: 00007f49605b5fa0 RCX: 00007f496038ebe9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007f49605b5fa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f49605b6038 R14: 00007f49605b5fa0 R15: 00007ffc749adef8
INFO: task syz.1.61:6307 blocked for more than 144 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.61 state:D stack:25592 pid:6307 tgid:6304 ppid:6099 task_flags:0x400140 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5257 [inline]
__schedule+0x14bc/0x5000 kernel/sched/core.c:6864
__schedule_loop kernel/sched/core.c:6946 [inline]
schedule+0x165/0x360 kernel/sched/core.c:6961
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7018
__mutex_lock_common kernel/locking/mutex.c:692 [inline]
__mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
sync_bdevs+0x27e/0x470 block/bdev.c:1305
ksys_sync+0xb9/0x150 fs/sync.c:105
__ia32_sys_sync+0xe/0x20 fs/sync.c:113
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f5ceaf8ebe9
RSP: 002b:00007f5cebed6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
RAX: ffffffffffffffda RBX: 00007f5ceb1b5fa0 RCX: 00007f5ceaf8ebe9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007f5ceb1b5fa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f5ceb1b6038 R14: 00007f5ceb1b5fa0 R15: 00007ffc951784d8
INFO: task syz.0.58:6311 blocked for more than 144 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.58 state:D stack:23720 pid:6311 tgid:6308 ppid:6094 task_flags:0x400140 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5257 [inline]
__schedule+0x14bc/0x5000 kernel/sched/core.c:6864
__schedule_loop kernel/sched/core.c:6946 [inline]
schedule+0x165/0x360 kernel/sched/core.c:6961
io_schedule+0x80/0xd0 kernel/sched/core.c:7793
bit_wait_io+0x11/0xd0 kernel/sched/wait_bit.c:250
__wait_on_bit_lock+0xec/0x4f0 kernel/sched/wait_bit.c:93
out_of_line_wait_on_bit_lock+0x123/0x170 kernel/sched/wait_bit.c:120
lock_buffer include/linux/buffer_head.h:432 [inline]
hfs_mdb_commit+0x115/0x12e0 fs/hfs/mdb.c:271
hfs_sync_fs+0x15/0x20 fs/hfs/super.c:37
__iterate_supers+0x13d/0x290 fs/super.c:924
ksys_sync+0xa3/0x150 fs/sync.c:103
__ia32_sys_sync+0xe/0x20 fs/sync.c:113
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7feba5d8ebe9
RSP: 002b:00007feba6c89038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
RAX: ffffffffffffffda RBX: 00007feba5fb5fa0 RCX: 00007feba5d8ebe9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007feba5fb5fa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007feba5fb6038 R14: 00007feba5fb5fa0 R15: 00007ffd3e5083a8
INFO: task syz.3.60:6312 blocked for more than 145 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.60 state:D stack:25192 pid:6312 tgid:6310 ppid:6101 task_flags:0x400140 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5257 [inline]
__schedule+0x14bc/0x5000 kernel/sched/core.c:6864
__schedule_loop kernel/sched/core.c:6946 [inline]
schedule+0x165/0x360 kernel/sched/core.c:6961
io_schedule+0x80/0xd0 kernel/sched/core.c:7793
folio_wait_bit_common+0x6b0/0xb80 mm/filemap.c:1323
folio_lock include/linux/pagemap.h:1159 [inline]
__find_get_block_slow fs/buffer.c:205 [inline]
find_get_block_common+0x2e9/0xfc0 fs/buffer.c:1408
bdev_getblk+0x53/0x6e0 include/linux/gfp.h:-1
__bread_gfp+0x89/0x3b0 fs/buffer.c:1515
sb_bread include/linux/buffer_head.h:346 [inline]
hfs_mdb_commit+0xc02/0x12e0 fs/hfs/mdb.c:324
hfs_sync_fs+0x15/0x20 fs/hfs/super.c:37
__iterate_supers+0x13d/0x290 fs/super.c:924
ksys_sync+0xa3/0x150 fs/sync.c:103
__ia32_sys_sync+0xe/0x20 fs/sync.c:113
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f948938ebe9
RSP: 002b:00007f948a1de038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
RAX: ffffffffffffffda RBX: 00007f94895b5fa0 RCX: 00007f948938ebe9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007f94895b5fa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f94895b6038 R14: 00007f94895b5fa0 R15: 00007ffcaa05fc48
INFO: task syz.2.63:6314 blocked for more than 145 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.63 state:D stack:25592 pid:6314 tgid:6313 ppid:6092 task_flags:0x400140 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5257 [inline]
__schedule+0x14bc/0x5000 kernel/sched/core.c:6864
__schedule_loop kernel/sched/core.c:6946 [inline]
schedule+0x165/0x360 kernel/sched/core.c:6961
wb_wait_for_completion+0x360/0x680 fs/fs-writeback.c:226
sync_inodes_sb+0x1c9/0xb40 fs/fs-writeback.c:2894
__iterate_supers+0x13d/0x290 fs/super.c:924
ksys_sync+0x94/0x150 fs/sync.c:102
__ia32_sys_sync+0xe/0x20 fs/sync.c:113
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f6dd558ebe9
RSP: 002b:00007f6dd63c8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
RAX: ffffffffffffffda RBX: 00007f6dd57b5fa0 RCX: 00007f6dd558ebe9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007f6dd57b5fa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f6dd57b6038 R14: 00007f6dd57b5fa0 R15: 00007fff864b4828
INFO: task kworker/0:7:6316 blocked for more than 145 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:7 state:D stack:26176 pid:6316 tgid:6316 ppid:2 task_flags:0x4208060 flags:0x00080000
Workqueue: events_long flush_mdb
Call Trace:
context_switch kernel/sched/core.c:5257 [inline]
__schedule+0x14bc/0x5000 kernel/sched/core.c:6864
__schedule_loop kernel/sched/core.c:6946 [inline]
schedule+0x165/0x360 kernel/sched/core.c:6961
io_schedule+0x80/0xd0 kernel/sched/core.c:7793
bit_wait_io+0x11/0xd0 kernel/sched/wait_bit.c:250
__wait_on_bit_lock+0xec/0x4f0 kernel/sched/wait_bit.c:93
out_of_line_wait_on_bit_lock+0x123/0x170 kernel/sched/wait_bit.c:120
lock_buffer include/linux/buffer_head.h:432 [inline]
hfs_mdb_commit+0x115/0x12e0 fs/hfs/mdb.c:271
process_one_work+0x93a/0x15a0 kernel/workqueue.c:3261
process_scheduled_works kernel/workqueue.c:3344 [inline]
worker_thread+0x9b0/0xee0 kernel/workqueue.c:3425
kthread+0x711/0x8a0 kernel/kthread.c:463
ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
Showing all locks held in the system:
1 lock held by khungtaskd/31:
#0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
#0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline]
#0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775
3 locks held by kworker/u8:7/2035:
#0: ffff8881412a6948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x841/0x15a0 kernel/workqueue.c:3236
#1: ffffc900052b7b80 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x868/0x15a0 kernel/workqueue.c:3237
#2: ffff88801be900e0 (&type->s_umount_key#39){.+.+}-{4:4}, at: super_trylock_shared+0x20/0xf0 fs/super.c:563
1 lock held by udevd/5198:
#0: ffff8880252fa358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 block/bdev.c:962
2 locks held by getty/5585:
#0: ffff88814cb690a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 drivers/tty/n_tty.c:2211
3 locks held by kworker/0:4/5912:
#0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x841/0x15a0 kernel/workqueue.c:3236
#1: ffffc9000438fb80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x868/0x15a0 kernel/workqueue.c:3237
#2: ffffffff8f304e88 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:104
1 lock held by syz.4.59/6305:
#0: ffff8880252fa358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x27e/0x470 block/bdev.c:1305
1 lock held by syz.1.61/6307:
#0: ffff8880252fa358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x27e/0x470 block/bdev.c:1305
1 lock held by syz.0.58/6311:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
1 lock held by syz.3.60/6312:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
2 locks held by syz.2.63/6314:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by kworker/0:7/6316:
#0: ffff88813fe56148 ((wq_completion)events_long){+.+.}-{0:0}, at: process_one_work+0x841/0x15a0 kernel/workqueue.c:3236
#1: ffffc90005117b80 ((work_completion)(&(&sbi->mdb_work)->work)){+.+.}-{0:0}, at: process_one_work+0x868/0x15a0 kernel/workqueue.c:3237
2 locks held by syz.6.65/6451:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by syz.5.64/6453:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by syz.8.67/6456:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by syz.7.66/6458:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by syz.9.68/6460:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
1 lock held by syz-executor/6472:
#0: ffff8880252fa358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 block/bdev.c:962
2 locks held by syz.0.69/6603:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by syz.4.73/6605:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by syz.1.70/6608:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by syz.2.71/6610:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by syz.5.74/6746:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by syz.9.78/6748:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by syz.7.76/6750:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by syz.8.77/6752:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by syz.6.75/6755:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
1 lock held by syz-executor/6781:
#0: ffff8880252fa358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 block/bdev.c:962
2 locks held by syz.0.79/6848:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by syz.4.83/6894:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by syz.2.81/6897:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by syz.1.80/6898:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by syz.5.84/6932:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by syz.7.86/7044:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by syz.6.85/7046:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by syz.9.88/7048:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by syz.8.87/7050:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
3 locks held by kworker/u8:54/7071:
#0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x841/0x15a0 kernel/workqueue.c:3236
#1: ffffc9000d72fb80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x868/0x15a0 kernel/workqueue.c:3237
#2: ffffffff8f304e88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:303
2 locks held by syz.0.89/7080:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
1 lock held by syz-executor/7083:
#0: ffff8880252fa358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 block/bdev.c:962
2 locks held by syz.4.91/7189:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by syz.1.92/7192:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by syz.2.93/7194:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
2 locks held by syz.5.94/7225:
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline]
#0: ffff88805bafa0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:397 [inline]
#1: ffff888025300820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1ad/0xb40 fs/fs-writeback.c:2892
3 locks held by syz-executor/7232:
#0: ffffffff8ea88e08 (&ops->srcu#2){.+.+}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
#0: ffffffff8ea88e08 (&ops->srcu#2){.+.+}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline]
#0: ffffffff8ea88e08 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 net/core/rtnetlink.c:570
#1: ffffffff8f304e88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
#1: ffffffff8f304e88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
#1: ffffffff8f304e88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 net/core/rtnetlink.c:4071
#2: ffffffff8df47538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:311 [inline]
#2: ffffffff8df47538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 kernel/rcu/tree_exp.h:956
1 lock held by syz-executor/7234:
#0: ffffffff8f304e88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
#0: ffffffff8f304e88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
#0: ffffffff8f304e88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 net/core/rtnetlink.c:4071
2 locks held by syz-executor/7244:
#0: ffffffff8f2f7870 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 net/core/net_namespace.c:577
#1: ffffffff8f304e88 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 net/ipv4/ip_tunnel.c:1146
2 locks held by syz-executor/7246:
#0: ffffffff8f2f7870 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 net/core/net_namespace.c:577
#1: ffffffff8f304e88 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 net/ipv4/ip_tunnel.c:1146
=============================================
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
__sys_info lib/sys_info.c:157 [inline]
sys_info+0x135/0x170 lib/sys_info.c:165
check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline]
watchdog+0xf95/0xfe0 kernel/hung_task.c:515
kthread+0x711/0x8a0 kernel/kthread.c:463
ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:82
Code: 13 ee 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 70 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6
RAX: 18856d7de3b75500 RBX: ffffffff8197913a RCX: 18856d7de3b75500
RDX: 0000000000000001 RSI: ffffffff8d784f89 RDI: ffffffff8bc025e0
RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db
R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f814c70
R13: 1ffff11003a5eb70 R14: 0000000000000001 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff888125f4a000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6d923efc18 CR3: 000000004377e000 CR4: 00000000003526f0
Call Trace:
arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline]
default_idle+0x13/0x20 arch/x86/kernel/process.c:767
default_idle_call+0x73/0xb0 kernel/sched/idle.c:122
cpuidle_idle_call kernel/sched/idle.c:191 [inline]
do_idle+0x1ea/0x520 kernel/sched/idle.c:332
cpu_startup_entry+0x44/0x60 kernel/sched/idle.c:430
start_secondary+0x101/0x110 arch/x86/kernel/smpboot.c:312
common_startup_64+0x13e/0x147