INFO: task udevd:4433 blocked for more than 143 seconds. Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:24960 pid:4433 ppid:1 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5244 [inline] __schedule+0xb8a/0x5450 kernel/sched/core.c:6555 schedule+0xde/0x1b0 kernel/sched/core.c:6631 rwsem_down_read_slowpath+0x5a7/0xb20 kernel/locking/rwsem.c:1095 __down_read_common kernel/locking/rwsem.c:1260 [inline] __down_read kernel/locking/rwsem.c:1269 [inline] down_read+0xe6/0x450 kernel/locking/rwsem.c:1511 kernfs_dop_revalidate+0xf0/0x5b0 fs/kernfs/dir.c:1130 d_revalidate fs/namei.c:856 [inline] d_revalidate fs/namei.c:853 [inline] lookup_fast+0x22d/0x520 fs/namei.c:1646 walk_component+0x5e/0x5a0 fs/namei.c:1989 link_path_walk.part.0+0x730/0xdf0 fs/namei.c:2320 link_path_walk fs/namei.c:2244 [inline] path_lookupat+0xb7/0x840 fs/namei.c:2473 filename_lookup+0x1d2/0x590 fs/namei.c:2503 vfs_statx+0x14c/0x430 fs/stat.c:238 vfs_fstatat+0x90/0xb0 fs/stat.c:276 __do_sys_newfstatat+0x8a/0x110 fs/stat.c:446 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f43085251da RSP: 002b:00007ffc5e8cbe38 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 000055dd2efcc6c0 RCX: 00007f43085251da RDX: 00007ffc5e8cbe48 RSI: 00007ffc5e8cc2d8 RDI: 00000000ffffff9c RBP: 00007ffc5e8cbed8 R08: 0000000000000000 R09: 000055dd2efb8620 R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc5e8cc2d8 R13: 00007ffc5e8cbe48 R14: 000055dd2efa2910 R15: 0000000000000000 INFO: task syz-executor.1:5100 blocked for more than 143 seconds. Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:24040 pid:5100 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5244 [inline] __schedule+0xb8a/0x5450 kernel/sched/core.c:6555 schedule+0xde/0x1b0 kernel/sched/core.c:6631 rwsem_down_read_slowpath+0x5a7/0xb20 kernel/locking/rwsem.c:1095 __down_read_common kernel/locking/rwsem.c:1260 [inline] __down_read kernel/locking/rwsem.c:1269 [inline] down_read+0xe6/0x450 kernel/locking/rwsem.c:1511 kernfs_iop_permission+0xbc/0x120 fs/kernfs/inode.c:288 do_inode_permission fs/namei.c:458 [inline] inode_permission.part.0+0x3d6/0x670 fs/namei.c:525 inode_permission fs/namei.c:506 [inline] may_lookup fs/namei.c:1715 [inline] link_path_walk.part.0+0x81e/0xdf0 fs/namei.c:2262 link_path_walk fs/namei.c:2245 [inline] path_openat+0x25c/0x2a50 fs/namei.c:3710 do_filp_open+0x1ba/0x410 fs/namei.c:3741 do_sys_openat2+0x16d/0x4c0 fs/open.c:1310 do_sys_open fs/open.c:1326 [inline] __do_sys_openat fs/open.c:1342 [inline] __se_sys_openat fs/open.c:1337 [inline] __x64_sys_openat+0x143/0x1f0 fs/open.c:1337 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f978f88bc48 RSP: 002b:00007fffdd593350 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000116 RCX: 00007f978f88bc48 RDX: 0000000000090800 RSI: 00007f978f8e6bc8 RDI: 00000000ffffff9c RBP: 00007fffdd59341c R08: 0000000000090800 R09: 00007f978f8e6bc8 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 000000000005659d R14: 000000000000000d R15: 00007fffdd593480 INFO: task syz-executor.0:5102 blocked for more than 144 seconds. Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:24040 pid:5102 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5244 [inline] __schedule+0xb8a/0x5450 kernel/sched/core.c:6555 schedule+0xde/0x1b0 kernel/sched/core.c:6631 rwsem_down_read_slowpath+0x5a7/0xb20 kernel/locking/rwsem.c:1095 __down_read_common kernel/locking/rwsem.c:1260 [inline] __down_read kernel/locking/rwsem.c:1269 [inline] down_read+0xe6/0x450 kernel/locking/rwsem.c:1511 kernfs_iop_permission+0xbc/0x120 fs/kernfs/inode.c:288 do_inode_permission fs/namei.c:458 [inline] inode_permission.part.0+0x3d6/0x670 fs/namei.c:525 inode_permission fs/namei.c:506 [inline] may_lookup fs/namei.c:1715 [inline] link_path_walk.part.0+0x81e/0xdf0 fs/namei.c:2262 link_path_walk fs/namei.c:2245 [inline] path_openat+0x25c/0x2a50 fs/namei.c:3710 do_filp_open+0x1ba/0x410 fs/namei.c:3741 do_sys_openat2+0x16d/0x4c0 fs/open.c:1310 do_sys_open fs/open.c:1326 [inline] __do_sys_openat fs/open.c:1342 [inline] __se_sys_openat fs/open.c:1337 [inline] __x64_sys_openat+0x143/0x1f0 fs/open.c:1337 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fb187a8bc48 RSP: 002b:00007ffdb4776f60 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00000000000000f8 RCX: 00007fb187a8bc48 RDX: 0000000000090800 RSI: 00007fb187ae6bc8 RDI: 00000000ffffff9c RBP: 00007ffdb477702c R08: 0000000000090800 R09: 00007fb187ae6bc8 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 0000000000056656 R14: 000000000000000c R15: 00007ffdb4777090 INFO: task syz-executor.5:5108 blocked for more than 144 seconds. Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.5 state:D stack:23200 pid:5108 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5244 [inline] __schedule+0xb8a/0x5450 kernel/sched/core.c:6555 schedule+0xde/0x1b0 kernel/sched/core.c:6631 rwsem_down_read_slowpath+0x5a7/0xb20 kernel/locking/rwsem.c:1095 __down_read_common kernel/locking/rwsem.c:1260 [inline] __down_read kernel/locking/rwsem.c:1269 [inline] down_read+0xe6/0x450 kernel/locking/rwsem.c:1511 kernfs_iop_permission+0xbc/0x120 fs/kernfs/inode.c:288 do_inode_permission fs/namei.c:458 [inline] inode_permission.part.0+0x3d6/0x670 fs/namei.c:525 inode_permission fs/namei.c:506 [inline] may_lookup fs/namei.c:1715 [inline] link_path_walk.part.0+0x81e/0xdf0 fs/namei.c:2262 link_path_walk fs/namei.c:2245 [inline] path_openat+0x25c/0x2a50 fs/namei.c:3710 do_filp_open+0x1ba/0x410 fs/namei.c:3741 do_sys_openat2+0x16d/0x4c0 fs/open.c:1310 do_sys_open fs/open.c:1326 [inline] __do_sys_openat fs/open.c:1342 [inline] __se_sys_openat fs/open.c:1337 [inline] __x64_sys_openat+0x143/0x1f0 fs/open.c:1337 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f3994e8bc48 RSP: 002b:00007ffd1eb97350 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000107 RCX: 00007f3994e8bc48 RDX: 0000000000090800 RSI: 00007f3994ee6bc8 RDI: 00000000ffffff9c RBP: 00007ffd1eb9741c R08: 0000000000090800 R09: 00007f3994ee6bc8 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 0000000000056900 R14: 0000000000000014 R15: 00007ffd1eb97480 INFO: task syz-executor.4:5113 blocked for more than 145 seconds. Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:24184 pid:5113 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5244 [inline] __schedule+0xb8a/0x5450 kernel/sched/core.c:6555 schedule+0xde/0x1b0 kernel/sched/core.c:6631 rwsem_down_read_slowpath+0x5a7/0xb20 kernel/locking/rwsem.c:1095 __down_read_common kernel/locking/rwsem.c:1260 [inline] __down_read kernel/locking/rwsem.c:1269 [inline] down_read+0xe6/0x450 kernel/locking/rwsem.c:1511 kernfs_iop_permission+0xbc/0x120 fs/kernfs/inode.c:288 do_inode_permission fs/namei.c:458 [inline] inode_permission.part.0+0x3d6/0x670 fs/namei.c:525 inode_permission fs/namei.c:506 [inline] may_lookup fs/namei.c:1715 [inline] link_path_walk.part.0+0x81e/0xdf0 fs/namei.c:2262 link_path_walk fs/namei.c:2245 [inline] path_openat+0x25c/0x2a50 fs/namei.c:3710 do_filp_open+0x1ba/0x410 fs/namei.c:3741 do_sys_openat2+0x16d/0x4c0 fs/open.c:1310 do_sys_open fs/open.c:1326 [inline] __do_sys_openat fs/open.c:1342 [inline] __se_sys_openat fs/open.c:1337 [inline] __x64_sys_openat+0x143/0x1f0 fs/open.c:1337 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f94f188bc48 RSP: 002b:00007ffdb0e8e8c0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00000000000000c2 RCX: 00007f94f188bc48 RDX: 0000000000090800 RSI: 00007f94f18e6bc8 RDI: 00000000ffffff9c RBP: 00007ffdb0e8e98c R08: 0000000000090800 R09: 00007f94f18e6bc8 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 000000000005670b R14: 0000000000000000 R15: 00007ffdb0e8e9f0 INFO: task syz-executor.2:5114 blocked for more than 145 seconds. Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:24488 pid:5114 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5244 [inline] __schedule+0xb8a/0x5450 kernel/sched/core.c:6555 schedule+0xde/0x1b0 kernel/sched/core.c:6631 rwsem_down_read_slowpath+0x5a7/0xb20 kernel/locking/rwsem.c:1095 __down_read_common kernel/locking/rwsem.c:1260 [inline] __down_read kernel/locking/rwsem.c:1269 [inline] down_read+0xe6/0x450 kernel/locking/rwsem.c:1511 kernfs_iop_permission+0xbc/0x120 fs/kernfs/inode.c:288 do_inode_permission fs/namei.c:458 [inline] inode_permission.part.0+0x3d6/0x670 fs/namei.c:525 inode_permission fs/namei.c:506 [inline] may_lookup fs/namei.c:1715 [inline] link_path_walk.part.0+0x81e/0xdf0 fs/namei.c:2262 link_path_walk fs/namei.c:2245 [inline] path_openat+0x25c/0x2a50 fs/namei.c:3710 do_filp_open+0x1ba/0x410 fs/namei.c:3741 do_sys_openat2+0x16d/0x4c0 fs/open.c:1310 do_sys_open fs/open.c:1326 [inline] __do_sys_openat fs/open.c:1342 [inline] __se_sys_openat fs/open.c:1337 [inline] __x64_sys_openat+0x143/0x1f0 fs/open.c:1337 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f85f768bc48 RSP: 002b:00007fff2a1d7610 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000112 RCX: 00007f85f768bc48 RDX: 0000000000090800 RSI: 00007f85f76e6bc8 RDI: 00000000ffffff9c RBP: 00007fff2a1d76dc R08: 0000000000090800 R09: 00007f85f76e6bc8 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 0000000000056583 R14: 000000000000000d R15: 00007fff2a1d7740 INFO: task syz-executor.0:6871 blocked for more than 146 seconds. Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:27352 pid:6871 ppid:5102 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5244 [inline] __schedule+0xb8a/0x5450 kernel/sched/core.c:6555 schedule+0xde/0x1b0 kernel/sched/core.c:6631 rwsem_down_write_slowpath+0x600/0x12e0 kernel/locking/rwsem.c:1190 __down_write_common kernel/locking/rwsem.c:1305 [inline] __down_write_common kernel/locking/rwsem.c:1302 [inline] __down_write kernel/locking/rwsem.c:1314 [inline] down_write+0x1e8/0x220 kernel/locking/rwsem.c:1563 kernfs_activate fs/kernfs/dir.c:1374 [inline] kernfs_add_one+0x372/0x4f0 fs/kernfs/dir.c:792 kernfs_create_dir_ns+0x18f/0x230 fs/kernfs/dir.c:1042 internal_create_group+0x787/0xb10 fs/sysfs/group.c:136 loop_sysfs_init drivers/block/loop.c:746 [inline] loop_configure+0xf33/0x19e0 drivers/block/loop.c:1097 lo_ioctl+0x936/0x1990 drivers/block/loop.c:1550 blkdev_ioctl+0x369/0xa20 block/ioctl.c:616 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x197/0x210 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fb187a8bec7 RSP: 002b:00007fb18872df38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fb187a8bec7 RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 RBP: 0000000000000006 R08: 0000000000000000 R09: 00000000000004a0 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fb18872dfdc R14: 00007fb18872dfe0 R15: 0000000000000000 INFO: task syz-executor.4:6880 blocked for more than 147 seconds. Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:27080 pid:6880 ppid:5113 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5244 [inline] __schedule+0xb8a/0x5450 kernel/sched/core.c:6555 schedule+0xde/0x1b0 kernel/sched/core.c:6631 rwsem_down_write_slowpath+0x600/0x12e0 kernel/locking/rwsem.c:1190 __down_write_common kernel/locking/rwsem.c:1305 [inline] __down_write_common kernel/locking/rwsem.c:1302 [inline] __down_write kernel/locking/rwsem.c:1314 [inline] down_write+0x1e8/0x220 kernel/locking/rwsem.c:1563 kernfs_add_one+0xa7/0x4f0 fs/kernfs/dir.c:754 kernfs_create_dir_ns+0x18f/0x230 fs/kernfs/dir.c:1042 internal_create_group+0x787/0xb10 fs/sysfs/group.c:136 loop_sysfs_init drivers/block/loop.c:746 [inline] loop_configure+0xf33/0x19e0 drivers/block/loop.c:1097 lo_ioctl+0x936/0x1990 drivers/block/loop.c:1550 blkdev_ioctl+0x369/0xa20 block/ioctl.c:616 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x197/0x210 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f94f188bec7 RSP: 002b:00007f94f250df38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f94f188bec7 RDX: 0000000000000003 RSI: 0000000000004c00 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000606 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f94f250dfdc R14: 00007f94f250dfe0 R15: 0000000000000000 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/12: #0: ffffffff8c790db0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507 1 lock held by rcu_tasks_trace/13: #0: ffffffff8c790ab0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507 1 lock held by khungtaskd/28: #0: ffffffff8c791900 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x57/0x264 kernel/locking/lockdep.c:6494 1 lock held by udevd/4433: #0: ffff888012473948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_dop_revalidate+0xf0/0x5b0 fs/kernfs/dir.c:1130 2 locks held by getty/4750: #0: ffff88802c31a098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 drivers/tty/tty_ldisc.c:244 #1: ffffc900015962f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 drivers/tty/n_tty.c:2177 1 lock held by syz-executor.1/5100: #0: ffff888012473948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_iop_permission+0xbc/0x120 fs/kernfs/inode.c:288 1 lock held by syz-executor.0/5102: #0: ffff888012473948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_iop_permission+0xbc/0x120 fs/kernfs/inode.c:288 1 lock held by syz-executor.5/5108: #0: ffff888012473948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_iop_permission+0xbc/0x120 fs/kernfs/inode.c:288 1 lock held by syz-executor.4/5113: #0: ffff888012473948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_iop_permission+0xbc/0x120 fs/kernfs/inode.c:288 1 lock held by syz-executor.2/5114: #0: ffff888012473948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_iop_permission+0xbc/0x120 fs/kernfs/inode.c:288 2 locks held by syz-executor.1/6856: #0: ffff88802b0420e0 (&type->s_umount_key#27/1){+.+.}-{3:3}, at: alloc_super+0x22e/0xb60 fs/super.c:228 #1: ffff888012473948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_add_one+0xa7/0x4f0 fs/kernfs/dir.c:754 2 locks held by syz-executor.2/6857: 2 locks held by syz-executor.0/6871: #0: ffff8880206dc368 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_global_lock_killable drivers/block/loop.c:120 [inline] #0: ffff8880206dc368 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_configure+0x2f7/0x19e0 drivers/block/loop.c:1026 #1: ffff888012473948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_activate fs/kernfs/dir.c:1374 [inline] #1: ffff888012473948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_add_one+0x372/0x4f0 fs/kernfs/dir.c:792 2 locks held by syz-executor.4/6880: #0: ffff88801e7beb68 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_global_lock_killable drivers/block/loop.c:120 [inline] #0: ffff88801e7beb68 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_configure+0x2f7/0x19e0 drivers/block/loop.c:1026 #1: ffff888012473948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_add_one+0xa7/0x4f0 fs/kernfs/dir.c:754 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd1/0x138 lib/dump_stack.c:106 nmi_cpu_backtrace.cold+0x24/0x18a lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x333/0x3c0 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline] watchdog+0xc75/0xfc0 kernel/hung_task.c:377 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 6856 Comm: syz-executor.1 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 RIP: 0010:debug_lockdep_rcu_enabled+0x21/0x30 kernel/rcu/update.c:280 Code: bc 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 8b 05 2a c2 6a 04 85 c0 74 21 8b 05 28 f6 6a 04 85 c0 74 17 65 48 8b 04 25 00 ac 03 00 <8b> 80 34 0a 00 00 85 c0 0f 94 c0 0f b6 c0 c3 66 0f 1f 00 41 54 53 RSP: 0018:ffffc90015257498 EFLAGS: 00000002 RAX: ffff888023d81d40 RBX: 0000000000000003 RCX: ffffffff81642c79 RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff8e728c50 RBP: 1ffff92002a4ae98 R08: 0000000000000000 R09: ffffffff8e728c57 R10: fffffbfff1ce518a R11: 0000000000000000 R12: 0000000000000001 R13: ffff888023d81d40 R14: 0000000000000001 R15: ffff8880124738f0 FS: 00007f979066b700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c00b7c1000 CR3: 000000002b113000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rcu_read_lock_held_common kernel/rcu/update.c:104 [inline] rcu_read_lock_sched_held+0x11/0x70 kernel/rcu/update.c:123 trace_lock_release include/trace/events/lock.h:69 [inline] lock_release+0x5cf/0x810 kernel/locking/lockdep.c:5679 __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:157 [inline] _raw_spin_unlock_irq+0x16/0x50 kernel/locking/spinlock.c:202 rwsem_down_write_slowpath+0x5af/0x12e0 kernel/locking/rwsem.c:1166 __down_write_common kernel/locking/rwsem.c:1305 [inline] __down_write_common kernel/locking/rwsem.c:1302 [inline] __down_write kernel/locking/rwsem.c:1314 [inline] down_write+0x1e8/0x220 kernel/locking/rwsem.c:1563 kernfs_add_one+0xa7/0x4f0 fs/kernfs/dir.c:754 __kernfs_create_file+0x2a0/0x350 fs/kernfs/file.c:1076 sysfs_add_file_mode_ns+0x213/0x3f0 fs/sysfs/file.c:294 create_files fs/sysfs/group.c:64 [inline] internal_create_group+0x322/0xb10 fs/sysfs/group.c:148 internal_create_groups.part.0+0x90/0x140 fs/sysfs/group.c:188 internal_create_groups fs/sysfs/group.c:184 [inline] sysfs_create_groups+0x29/0x50 fs/sysfs/group.c:214 create_dir lib/kobject.c:68 [inline] kobject_add_internal+0x318/0x8f0 lib/kobject.c:223 kobject_add_varg lib/kobject.c:358 [inline] kobject_init_and_add+0x105/0x160 lib/kobject.c:441 ext4_register_sysfs+0xb9/0x360 fs/ext4/sysfs.c:526 __ext4_fill_super fs/ext4/super.c:5489 [inline] ext4_fill_super+0x9cbf/0xb200 fs/ext4/super.c:5642 get_tree_bdev+0x444/0x760 fs/super.c:1282 vfs_get_tree+0x8d/0x2f0 fs/super.c:1489 do_new_mount fs/namespace.c:3145 [inline] path_mount+0x132a/0x1e20 fs/namespace.c:3475 do_mount fs/namespace.c:3488 [inline] __do_sys_mount fs/namespace.c:3697 [inline] __se_sys_mount fs/namespace.c:3674 [inline] __x64_sys_mount+0x283/0x300 fs/namespace.c:3674 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f978f88d60a Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f979066af88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00000000000004a6 RCX: 00007f978f88d60a RDX: 00000000200004c0 RSI: 0000000020000500 RDI: 00007f979066afe0 RBP: 00007f979066b020 R08: 00007f979066b020 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200004c0 R13: 0000000020000500 R14: 00007f979066afe0 R15: 0000000020000380