INFO: task syz.1.249:8010 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.249 state:D stack:29048 pid:8010 tgid:7990 ppid:5606 task_flags:0x400040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5504 [inline]
__schedule+0x16dc/0x5500 kernel/sched/core.c:7228
__schedule_loop kernel/sched/core.c:7307 [inline]
rt_mutex_schedule+0x76/0xf0 kernel/sched/core.c:7603
rt_mutex_slowlock_block kernel/locking/rtmutex.c:1670 [inline]
__rt_mutex_slowlock kernel/locking/rtmutex.c:1747 [inline]
__rt_mutex_slowlock_locked+0x1f84/0x25b0 kernel/locking/rtmutex.c:1787
rt_mutex_slowlock+0xbd/0x170 kernel/locking/rtmutex.c:1827
__rt_mutex_lock kernel/locking/rtmutex.c:1842 [inline]
rwbase_write_lock+0x14c/0x720 kernel/locking/rwbase_rt.c:251
inode_lock include/linux/fs.h:1024 [inline]
open_last_lookups fs/namei.c:4605 [inline]
path_openat+0xae9/0x3850 fs/namei.c:4856
do_file_open+0x23e/0x4a0 fs/namei.c:4888
do_sys_openat2+0x115/0x200 fs/open.c:1368
do_sys_open fs/open.c:1374 [inline]
__do_sys_openat fs/open.c:1390 [inline]
__se_sys_openat fs/open.c:1385 [inline]
__x64_sys_openat+0x138/0x170 fs/open.c:1385
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7efec390ce59
RSP: 002b:00007efec1b24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007efec3b86180 RCX: 00007efec390ce59
RDX: 00000000000c4842 RSI: 0000200000000300 RDI: ffffffffffffff9c
RBP: 00007efec39a2e6f R08: 0000000000000000 R09: 0000000000000000
R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000000
R13: 00007efec3b86218 R14: 00007efec3b86180 R15: 00007ffef9dfd428
INFO: task syz.1.249:8016 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.249 state:D stack:29304 pid:8016 tgid:7990 ppid:5606 task_flags:0x400040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5504 [inline]
__schedule+0x16dc/0x5500 kernel/sched/core.c:7228
__schedule_loop kernel/sched/core.c:7307 [inline]
rt_mutex_schedule+0x76/0xf0 kernel/sched/core.c:7603
rt_mutex_slowlock_block kernel/locking/rtmutex.c:1670 [inline]
__rt_mutex_slowlock kernel/locking/rtmutex.c:1747 [inline]
__rt_mutex_slowlock_locked+0x1f84/0x25b0 kernel/locking/rtmutex.c:1787
rt_mutex_slowlock+0xbd/0x170 kernel/locking/rtmutex.c:1827
__rt_mutex_lock kernel/locking/rtmutex.c:1842 [inline]
rwbase_write_lock+0x14c/0x720 kernel/locking/rwbase_rt.c:251
inode_lock_nested include/linux/fs.h:1069 [inline]
__start_dirop fs/namei.c:2918 [inline]
start_dirop fs/namei.c:2942 [inline]
filename_create+0x200/0x370 fs/namei.c:4951
filename_symlinkat+0xf7/0x420 fs/namei.c:5675
__do_sys_symlink fs/namei.c:5708 [inline]
__se_sys_symlink+0x4d/0x2b0 fs/namei.c:5704
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7efec390ce59
RSP: 002b:00007efec1701028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
RAX: ffffffffffffffda RBX: 00007efec3b86270 RCX: 00007efec390ce59
RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000300
RBP: 00007efec39a2e6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007efec3b86308 R14: 00007efec3b86270 R15: 00007ffef9dfd428
INFO: lockdep is turned off.
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)}
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Call Trace:
dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:122
nmi_trigger_cpumask_backtrace+0x17a/0x380 lib/nmi_backtrace.c:65
trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
__sys_info lib/sys_info.c:157 [inline]
sys_info+0x135/0x170 lib/sys_info.c:165
check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]
watchdog+0xfd7/0x1030 kernel/hung_task.c:561
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 7991 Comm: syz.1.249 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
RIP: 0010:get_partial_node_bulk mm/slub.c:3780 [inline]
RIP: 0010:__refill_objects_node+0xc7/0x5b0 mm/slub.c:7197
Code: 00 00 4c 8b 83 88 00 00 00 49 39 d0 0f 84 e1 00 00 00 48 89 5c 24 20 45 31 ed 45 31 f6 31 db 48 89 54 24 28 4d 89 c7 4d 8b 00 <8b> 7c 24 50 49 f7 47 f0 00 01 00 00 75 5b 49 8b 47 18 0f b7 c8 41
RSP: 0018:ffffc90004c27370 EFLAGS: 00000216
RAX: ffff88801a015d00 RBX: ffffea0000aec400 RCX: 0000000000000003
RDX: ffff88801a015d88 RSI: ffffffff8ba92960 RDI: 0000000000082cc0
RBP: ffffc90004c27438 R08: ffffea0000c92810 R09: 0000000000000000
R10: dffffc0000000000 R11: fffffbfff1f1579f R12: 0000000000000003
R13: 0000000000000003 R14: ffffea0000af6e00 R15: ffffea0000c8de10
FS: 00007efec1b666c0(0000) GS:ffff88812611d000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbd131f5368 CR3: 000000003f16a000 CR4: 00000000003526f0
Call Trace:
refill_objects+0x56/0x350 mm/slub.c:7325
refill_sheaf mm/slub.c:2832 [inline]
__pcs_replace_empty_main+0x330/0x690 mm/slub.c:4703
alloc_from_pcs mm/slub.c:4801 [inline]
slab_alloc_node mm/slub.c:4933 [inline]
__kmalloc_cache_noprof+0x468/0x6b0 mm/slub.c:5511
_kmalloc_noprof include/linux/slab.h:969 [inline]
ntfs_readdir+0x539/0xe90 fs/ntfs3/dir.c:471
iterate_dir+0x2f1/0x4e0 fs/readdir.c:110
ovl_dir_read+0x141/0x4a0 fs/overlayfs/readdir.c:388
ovl_dir_read_merged+0x402/0x520 fs/overlayfs/readdir.c:461
ovl_cache_get fs/overlayfs/readdir.c:504 [inline]
ovl_iterate_merged fs/overlayfs/readdir.c:846 [inline]
ovl_iterate+0xd6c/0x2170 fs/overlayfs/readdir.c:906
wrap_directory_iterator+0x99/0xe0 fs/readdir.c:67
iterate_dir+0x2f1/0x4e0 fs/readdir.c:110
__do_sys_getdents64 fs/readdir.c:399 [inline]
__se_sys_getdents64+0xf1/0x280 fs/readdir.c:384
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7efec390ce59
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007efec1b66028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
RAX: ffffffffffffffda RBX: 00007efec3b85fa0 RCX: 00007efec390ce59
RDX: 00000000000000e0 RSI: 0000200000000fc0 RDI: 0000000000000005
RBP: 00007efec39a2e6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007efec3b86038 R14: 00007efec3b85fa0 R15: 00007ffef9dfd428