syzbot

INFO: task syz-executor156:3521 blocked for more than 143 seconds.
      Not tainted 5.15.120-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor156 state:D stack:22512 pid: 3521 ppid:  3520 flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5026 [inline]
 __schedule+0x12c4/0x4590 kernel/sched/core.c:6372
 schedule+0x11b/0x1f0 kernel/sched/core.c:6455
 io_schedule+0x88/0x100 kernel/sched/core.c:8472
 wait_on_page_bit_common+0xa13/0x1180 mm/filemap.c:1356
 wait_on_page_locked include/linux/pagemap.h:688 [inline]
 gfs2_jhead_process_page+0x25e/0xbf0 fs/gfs2/lops.c:476
 gfs2_find_jhead+0xa5c/0x10c0 fs/gfs2/lops.c:586
 check_journal_clean+0x18d/0x350 fs/gfs2/util.c:75
 init_journal+0x1830/0x23c0 fs/gfs2/ops_fstype.c:832
 init_inodes+0xdc/0x310 fs/gfs2/ops_fstype.c:891
 gfs2_fill_super+0x1c2c/0x2750 fs/gfs2/ops_fstype.c:1249
 get_tree_bdev+0x3fe/0x620 fs/super.c:1303
 gfs2_get_tree+0x50/0x210 fs/gfs2/ops_fstype.c:1332
 vfs_get_tree+0x88/0x270 fs/super.c:1508
 do_new_mount+0x28b/0xae0 fs/namespace.c:2994
 do_mount fs/namespace.c:3337 [inline]
 __do_sys_mount fs/namespace.c:3545 [inline]
 __se_sys_mount+0x2d5/0x3c0 fs/namespace.c:3522
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7f4085af316a
RSP: 002b:00007ffc9467fc28 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffc9467fc40 RCX: 00007f4085af316a
RDX: 000000002001f680 RSI: 000000002001f6c0 RDI: 00007ffc9467fc40
RBP: 0000000000000004 R08: 00007ffc9467fc80 R09: 000000000001f672
R10: 0000000000000600 R11: 0000000000000282 R12: 0000000000000600
R13: 00007ffc9467fc80 R14: 0000000000000003 R15: 0000000001000000
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/27:
 #0: ffffffff8c91e6a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
1 lock held by klogd/2950:
 #0: ffff8880b9a396d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 kernel/sched/core.c:475
2 locks held by getty/3256:
 #0: ffff88814b302098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:252
 #1: ffffc900022a42e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1da0 drivers/tty/n_tty.c:2147
1 lock held by syz-executor156/3521:
 #0: ffff888078bb20e0 (&type->s_umount_key#42/1){+.+.}-{3:3}, at: alloc_super+0x210/0x940 fs/super.c:229

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.120-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x1e3/0x2cb lib/dump_stack.c:106
 nmi_cpu_backtrace+0x46a/0x4a0 lib/nmi_backtrace.c:111
 nmi_trigger_cpumask_backtrace+0x181/0x2a0 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:210 [inline]
 watchdog+0xe72/0xeb0 kernel/hung_task.c:295
 kthread+0x3f6/0x4f0 kernel/kthread.c:319
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.15.120-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
RIP: 0010:lockdep_recursion_finish kernel/locking/lockdep.c:436 [inline]
RIP: 0010:lock_is_held_type+0x10a/0x180 kernel/locking/lockdep.c:5666
Code: c0 31 ed 44 39 f0 40 0f 94 c5 eb 05 bd 01 00 00 00 48 c7 c7 00 10 8b 8a e8 83 11 00 00 b8 ff ff ff ff 65 0f c1 05 16 cd e6 75 <83> f8 01 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02
RSP: 0018:ffffc90000007660 EFLAGS: 00000057
RAX: 0000000000000001 RBX: 0000000000000004 RCX: dffffc0000000000
RDX: ffff8880b9a3a1e0 RSI: ffffffff8a8b1000 RDI: ffffffff8ad86280
RBP: 0000000000000001 R08: ffffffff813ac69f R09: fffffbfff1bc7e0e
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000046
R13: ffffffff8c6bd5c0 R14: 00000000ffffffff R15: ffff8880b9a396d8
FS:  0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffdf09700a8 CR3: 0000000023061000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 lock_is_held include/linux/lockdep.h:287 [inline]
 lockdep_assert_rq_held kernel/sched/sched.h:1317 [inline]
 rq_clock_task kernel/sched/sched.h:1477 [inline]
 entity_is_long_sleeper kernel/sched/fair.c:4360 [inline]
 place_entity kernel/sched/fair.c:4420 [inline]
 enqueue_entity+0x6d6/0x1ec0 kernel/sched/fair.c:4518
 enqueue_task_fair+0x245/0x1710 kernel/sched/fair.c:5829
 enqueue_task+0x181/0x3a0 kernel/sched/core.c:1977
 activate_task kernel/sched/core.c:2005 [inline]
 ttwu_do_activate+0x1cf/0x430 kernel/sched/core.c:3610
 ttwu_queue kernel/sched/core.c:3819 [inline]
 try_to_wake_up+0x795/0x1300 kernel/sched/core.c:4142
 __queue_work+0x963/0xd00 kernel/workqueue.c:1529
 queue_work_on+0x14b/0x250 kernel/workqueue.c:1556
 queue_work include/linux/workqueue.h:502 [inline]
 cursor_timer_handler+0x70/0xe0 drivers/video/fbdev/core/fbcon.c:397
 call_timer_fn+0x16d/0x560 kernel/time/timer.c:1421
 expire_timers kernel/time/timer.c:1466 [inline]
 __run_timers+0x67c/0x890 kernel/time/timer.c:1737
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1750
 __do_softirq+0x3b3/0x93a kernel/softirq.c:558
 invoke_softirq kernel/softirq.c:432 [inline]
 __irq_exit_rcu+0x155/0x240 kernel/softirq.c:636
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:648
 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1096
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:22 [inline]
RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:70 [inline]
RIP: 0010:arch_irqs_disabled arch/x86/include/asm/irqflags.h:132 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:110 [inline]
RIP: 0010:acpi_idle_do_entry+0x10f/0x340 drivers/acpi/processor_idle.c:570
Code: 04 5b f7 48 83 e3 08 0f 85 0a 01 00 00 4c 8d 74 24 20 e8 c4 73 61 f7 0f 1f 44 00 00 e8 ba 00 5b f7 0f 00 2d d3 60 bd 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 fb 6e a4 f7
RSP: 0018:ffffffff8c607b80 EFLAGS: 000002d3
RAX: ffffffff8a24ffe6 RBX: 0000000000000000 RCX: ffffffff8c6bd5c0
RDX: 0000000000000000 RSI: ffffffff8a8afd60 RDI: ffffffff8ad86280
RBP: ffffffff8c607c10 R08: ffffffff818673d0 R09: fffffbfff18d7ab9
R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff18c0f70
R13: ffff888146635804 R14: ffffffff8c607ba0 R15: dffffc0000000000
 acpi_idle_enter+0x352/0x4f0 drivers/acpi/processor_idle.c:705
 cpuidle_enter_state+0x521/0xef0 drivers/cpuidle/cpuidle.c:237
 cpuidle_enter+0x59/0x90 drivers/cpuidle/cpuidle.c:351
 call_cpuidle kernel/sched/idle.c:158 [inline]
 cpuidle_idle_call kernel/sched/idle.c:239 [inline]
 do_idle+0x3e4/0x670 kernel/sched/idle.c:306
 cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:403
 start_kernel+0x491/0x53a init/main.c:1144
 secondary_startup_64_no_verify+0xb1/0xbb
 </TASK>
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.976 msecs