INFO: task syz.9.63:6617 blocked for more than 143 seconds. Not tainted 6.14.0-rc3-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.9.63 state:D stack:23872 pid:6617 tgid:6614 ppid:6306 task_flags:0x400140 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5378 [inline] __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765 __schedule_loop kernel/sched/core.c:6842 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6857 jfs_flush_journal+0x72c/0xec0 fs/jfs/jfs_logmgr.c:1564 jfs_sync_fs+0x80/0xa0 fs/jfs/super.c:649 sync_filesystem+0x1c8/0x230 fs/sync.c:66 jfs_reconfigure+0xd6/0x9d0 fs/jfs/super.c:370 reconfigure_super+0x43a/0x870 fs/super.c:1083 vfs_cmd_reconfigure fs/fsopen.c:262 [inline] vfs_fsconfig_locked fs/fsopen.c:291 [inline] __do_sys_fsconfig fs/fsopen.c:467 [inline] __se_sys_fsconfig+0xb74/0xf60 fs/fsopen.c:344 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f703d38cde9 RSP: 002b:00007f703e2b5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af RAX: ffffffffffffffda RBX: 00007f703d5a5fa0 RCX: 00007f703d38cde9 RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 RBP: 00007f703d40e2a0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f703d5a5fa0 R15: 00007ffd371baf28 Showing all locks held in the system: 1 lock held by pool_workqueue_/3: #0: ffffffff8eb3e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:334 [inline] #0: ffffffff8eb3e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 kernel/rcu/tree_exp.h:996 1 lock held by khungtaskd/30: #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6746 3 locks held by kworker/u8:5/1000: 2 locks held by getty/5576: #0: ffff88814dd9b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 drivers/tty/n_tty.c:2211 2 locks held by kworker/0:4/5871: 1 lock held by syz.3.26/6051: #0: ffff888034cbc0e0 (&type->s_umount_key#80){++++}-{4:4}, at: __super_lock fs/super.c:58 [inline] #0: ffff888034cbc0e0 (&type->s_umount_key#80){++++}-{4:4}, at: super_lock+0x27c/0x400 fs/super.c:120 1 lock held by syz.1.37/6521: #0: ffff888034cbc0e0 (&type->s_umount_key#80){++++}-{4:4}, at: __super_lock fs/super.c:58 [inline] #0: ffff888034cbc0e0 (&type->s_umount_key#80){++++}-{4:4}, at: super_lock+0x27c/0x400 fs/super.c:120 2 locks held by syz.9.63/6617: #0: ffff888035e7b070 (&fc->uapi_mutex){+.+.}-{4:4}, at: __do_sys_fsconfig fs/fsopen.c:465 [inline] #0: ffff888035e7b070 (&fc->uapi_mutex){+.+.}-{4:4}, at: __se_sys_fsconfig+0x9b2/0xf60 fs/fsopen.c:344 #1: ffff888034cbc0e0 (&type->s_umount_key#80){++++}-{4:4}, at: vfs_cmd_reconfigure fs/fsopen.c:261 [inline] #1: ffff888034cbc0e0 (&type->s_umount_key#80){++++}-{4:4}, at: vfs_fsconfig_locked fs/fsopen.c:291 [inline] #1: ffff888034cbc0e0 (&type->s_umount_key#80){++++}-{4:4}, at: __do_sys_fsconfig fs/fsopen.c:467 [inline] #1: ffff888034cbc0e0 (&type->s_umount_key#80){++++}-{4:4}, at: __se_sys_fsconfig+0xb6a/0xf60 fs/fsopen.c:344 1 lock held by syz.9.305/8872: #0: ffff888034cbc0e0 (&type->s_umount_key#80){++++}-{4:4}, at: __super_lock fs/super.c:58 [inline] #0: ffff888034cbc0e0 (&type->s_umount_key#80){++++}-{4:4}, at: super_lock+0x27c/0x400 fs/super.c:120 1 lock held by syz.9.305/8915: #0: ffff888034cbc0e0 (&type->s_umount_key#80){++++}-{4:4}, at: __super_lock fs/super.c:58 [inline] #0: ffff888034cbc0e0 (&type->s_umount_key#80){++++}-{4:4}, at: super_lock+0x27c/0x400 fs/super.c:120 1 lock held by syz.1.370/9444: #0: ffff888034cbc0e0 (&type->s_umount_key#80){++++}-{4:4}, at: __super_lock fs/super.c:58 [inline] #0: ffff888034cbc0e0 (&type->s_umount_key#80){++++}-{4:4}, at: super_lock+0x27c/0x400 fs/super.c:120 5 locks held by syz.2.377/9526: #0: ffff888050c1c420 (sb_writers#19){++++}-{0:0}, at: file_start_write include/linux/fs.h:3035 [inline] #0: ffff888050c1c420 (sb_writers#19){++++}-{0:0}, at: vfs_fallocate+0x59d/0x7a0 fs/open.c:337 #1: ffff88805cf6c130 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: xfs_ilock+0x102/0x3d0 fs/xfs/xfs_inode.c:149 #2: ffff88805cf6c2d0 (mapping.invalidate_lock#5){++++}-{4:4}, at: xfs_ilock+0x193/0x3d0 fs/xfs/xfs_inode.c:157 #3: ffff888050c1c610 (sb_internal#4){++++}-{0:0}, at: xfs_trans_alloc_inode+0x1ac/0x5d0 fs/xfs/xfs_trans.c:1096 #4: ffff88805cf6bf18 (&xfs_nondir_ilock_class){++++}-{4:4}, at: xfs_trans_alloc_inode+0x1e0/0x5d0 fs/xfs/xfs_trans.c:1102 5 locks held by syz.2.377/9555: #0: ffff888050c1c420 (sb_writers#19){++++}-{0:0}, at: mnt_want_write+0x3f/0x90 fs/namespace.c:547 #1: ffff88805411f770 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: inode_lock include/linux/fs.h:877 [inline] #1: ffff88805411f770 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: do_truncate+0x20c/0x310 fs/open.c:63 #2: ffff88805411f910 (mapping.invalidate_lock#5){++++}-{4:4}, at: xfs_ilock+0x193/0x3d0 fs/xfs/xfs_inode.c:157 #3: ffff888050c1c610 (sb_internal#4){++++}-{0:0}, at: xfs_setattr_size+0x5bd/0xd70 fs/xfs/xfs_iops.c:961 #4: ffff88805411f558 (&xfs_nondir_ilock_class){++++}-{4:4}, at: xfs_setattr_size+0x5e7/0xd70 fs/xfs/xfs_iops.c:967 4 locks held by syz.2.377/9556: #0: ffff888050c1c420 (sb_writers#19){++++}-{0:0}, at: mnt_want_write+0x3f/0x90 fs/namespace.c:547 #1: ffff88805cf69a70 (&inode->i_sb->s_type->i_mutex_dir_key/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:912 [inline] #1: ffff88805cf69a70 (&inode->i_sb->s_type->i_mutex_dir_key/1){+.+.}-{4:4}, at: filename_create+0x260/0x540 fs/namei.c:4082 #2: ffff888050c1c610 (sb_internal#4){++++}-{0:0}, at: xfs_trans_alloc_icreate+0xc9/0x2b0 fs/xfs/xfs_trans.c:1213 #3: ffff88805cf69858 (&xfs_dir_ilock_class/5){+.+.}-{4:4}, at: xfs_create+0x7bf/0xf50 fs/xfs/xfs_inode.c:711 1 lock held by dhcpcd/9536: #0: ffff88805cd6b808 (&sb->s_type->i_mutex_key#9){+.+.}-{4:4}, at: inode_lock include/linux/fs.h:877 [inline] #0: ffff88805cd6b808 (&sb->s_type->i_mutex_key#9){+.+.}-{4:4}, at: __sock_release net/socket.c:646 [inline] #0: ffff88805cd6b808 (&sb->s_type->i_mutex_key#9){+.+.}-{4:4}, at: sock_close+0x90/0x240 net/socket.c:1398 2 locks held by syz.0.378/9552: 1 lock held by dhcpcd-run-hook/9559: ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:236 [inline] watchdog+0x1058/0x10a0 kernel/hung_task.c:399 kthread+0x7a9/0x920 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 9534 Comm: syz.7.379 Not tainted 6.14.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 RIP: 0033:0x7f5c0dc66583 Code: 1f 84 00 00 00 00 00 48 8b 70 f8 48 83 e8 08 48 39 f2 72 f3 48 39 c3 73 3e 48 89 33 48 83 c3 08 48 8b 70 f8 48 89 08 48 8b 0b <49> 8b 14 24 eb bf 48 39 f2 72 97 48 39 f0 73 46 49 89 34 24 48 89 RSP: 002b:00007ffea8348750 EFLAGS: 00000206 RAX: 00007f5c0d328ec0 RBX: 00007f5c0d328e78 RCX: ffffffff84a12a54 RDX: ffffffff84a12a54 RSI: ffffffff84a12a29 RDI: 00007f5c0d329138 RBP: 00007f5c0d328b50 R08: 00007f5c0d328e40 R09: 00007f5c0df92000 R10: 00007f5c0ead5700 R11: 0000000000000001 R12: 00007f5c0d328b48 R13: 0000000000000015 R14: 00000000000417b8 R15: 00007f5c0cffd008 FS: 0000555573461500 GS: 0000000000000000