INFO: task syz.3.26:7304 blocked for more than 143 seconds. Not tainted 6.1.138-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.26 state:D stack:13536 pid:7304 ppid:6884 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5244 [inline] __schedule+0x589/0x10a0 kernel/sched/core.c:6561 schedule+0x50/0xb0 kernel/sched/core.c:6637 schedule_preempt_disabled+0x2e/0x40 kernel/sched/core.c:6696 rwsem_down_read_slowpath+0x24c/0x4f0 kernel/locking/rwsem.c:1094 __down_read_common kernel/locking/rwsem.c:1261 [inline] __down_read kernel/locking/rwsem.c:1274 [inline] down_read+0x82/0xf0 kernel/locking/rwsem.c:1522 user_get_super+0x87/0xd0 fs/super.c:889 quotactl_block fs/quota/quota.c:890 [inline] __do_sys_quotactl fs/quota/quota.c:954 [inline] __se_sys_quotactl+0x22a/0x330 fs/quota/quota.c:916 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7fa976b85d29 RSP: 002b:00007fa97793b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 RAX: ffffffffffffffda RBX: 00007fa976d75fa0 RCX: 00007fa976b85d29 RDX: 0000000000000000 RSI: 00000000200000c0 RDI: ffffffff80000801 RBP: 00007fa976c01b08 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007fa976d75fa0 R15: 00007ffdb51c6098 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/12: #0: ffffffff83571e68 (rcu_tasks.tasks_gp_mutex){....}-{3:3}, at: rcu_tasks_one_gp kernel/rcu/tasks.h:517 [inline] #0: ffffffff83571e68 (rcu_tasks.tasks_gp_mutex){....}-{3:3}, at: rcu_tasks_kthread+0x97/0x4c0 kernel/rcu/tasks.h:562 1 lock held by khungtaskd/27: #0: ffffffff83571c28 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:350 [inline] #0: ffffffff83571c28 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:791 [inline] #0: ffffffff83571c28 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x2a/0xf0 kernel/locking/lockdep.c:6513 2 locks held by getty/1152: #0: ffff888142e65098 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x1c/0x40 drivers/tty/tty_ldisc.c:244 #1: ffffc90000bfb2f0 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x19e/0x6d0 drivers/tty/n_tty.c:2198 4 locks held by syz.3.16/3074: 4 locks held by syz.4.17/3497: 4 locks held by syz.5.18/3920: 4 locks held by syz.6.19/4342: 5 locks held by syz.7.20/4766: 5 locks held by syz.8.21/5189: 4 locks held by syz.9.22/5611: 4 locks held by syz.0.23/6034: 4 locks held by syz.1.24/6457: 4 locks held by syz.2.25/6881: 1 lock held by syz.3.26/7304: #0: ffff888103a860e0 (&type->s_umount_key#44){....}-{3:3}, at: user_get_super+0x87/0xd0 fs/super.c:889 1 lock held by syz.4.27/7726: #0: ffff8881027fe0e0 (&type->s_umount_key#44){....}-{3:3}, at: user_get_super+0x87/0xd0 fs/super.c:889 1 lock held by syz.5.28/8148: #0: ffff888117c140e0 (&type->s_umount_key#44){....}-{3:3}, at: user_get_super+0x87/0xd0 fs/super.c:889 1 lock held by syz.6.29/8570: #0: ffff888146a610e0 (&type->s_umount_key#44){....}-{3:3}, at: user_get_super+0x87/0xd0 fs/super.c:889 1 lock held by syz-executor166/8582: #0: ffff8881087da0e0 (&type->s_umount_key#44){....}-{3:3}, at: user_get_super+0x87/0xd0 fs/super.c:889 1 lock held by syz.7.30/9004: #0: ffff8881180410e0 (&type->s_umount_key#44){....}-{3:3}, at: user_get_super+0x87/0xd0 fs/super.c:889 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.138-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 Call Trace: dump_stack_lvl+0x74/0xbb lib/dump_stack.c:106 nmi_cpu_backtrace+0x102/0x160 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0xa5/0x160 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline] watchdog+0x533/0x560 kernel/hung_task.c:377 kthread+0xcc/0xe0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 47 Comm: kworker/u4:3 Not tainted 6.1.138-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 Workqueue: events_unbound toggle_allocation_gate RIP: 0010:__mutex_lock_common kernel/locking/mutex.c:573 [inline] RIP: 0010:__mutex_lock+0x42/0x9b0 kernel/locking/mutex.c:747 Code: f5 48 89 fb 65 48 8b 04 25 28 00 00 00 48 89 44 24 58 2e 2e 2e 31 c0 83 3d da 0b a8 05 00 75 0a 48 39 5b 60 0f 85 01 02 00 00 <48> c7 44 24 50 00 00 00 00 48 c7 44 24 48 00 00 00 00 48 c7 44 24 RSP: 0018:ffffc900001fbd68 EFLAGS: 00000246 RAX: 0000000000000000 RBX: ffffffff8358b068 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffffffff8358b068 RBP: 0000000000000002 R08: ffffffff811cbe23 R09: 0000000000000002 R10: 0000000000000000 R11: 8080808080808080 R12: 0000000000000000 R13: 0000000000000000 R14: ffffffff811cbe23 R15: ffff888100068c00 FS: 0000000000000000(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fbae3612e80 CR3: 0000000003421000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: jump_label_lock kernel/jump_label.c:27 [inline] static_key_disable_cpuslocked kernel/jump_label.c:235 [inline] static_key_disable+0x23/0x60 kernel/jump_label.c:245 toggle_allocation_gate+0x1df/0x230 mm/kfence/core.c:819 process_one_work+0x27d/0x4c0 kernel/workqueue.c:2292 worker_thread+0x236/0x3a0 kernel/workqueue.c:2439 kthread+0xcc/0xe0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295