INFO: task syz.8.5785:29281 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.8.5785 state:D stack:25464 pid:29281 ppid: 7240 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5049 [inline] __schedule+0x11ef/0x43c0 kernel/sched/core.c:6395 schedule+0x11b/0x1e0 kernel/sched/core.c:6478 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6537 rwsem_down_read_slowpath+0x548/0x9d0 kernel/locking/rwsem.c:1055 __down_read_common kernel/locking/rwsem.c:1239 [inline] __down_read kernel/locking/rwsem.c:1252 [inline] down_read+0x96/0x2e0 kernel/locking/rwsem.c:1500 iterate_supers+0xa4/0x1d0 fs/super.c:716 quota_sync_all fs/quota/quota.c:68 [inline] __do_sys_quotactl fs/quota/quota.c:936 [inline] __se_sys_quotactl+0x33b/0x6f0 fs/quota/quota.c:915 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7fa4fbc2af79 RSP: 002b:00007fa4f9e85028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 RAX: ffffffffffffffda RBX: 00007fa4fbea4fa0 RCX: 00007fa4fbc2af79 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000101 RBP: 00007fa4fbcc17e0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fa4fbea5038 R14: 00007fa4fbea4fa0 R15: 00007ffeee029a78 Showing all locks held in the system: 1 lock held by ksoftirqd/1/20: #0: ffff8880b903a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa5/0x140 kernel/sched/core.c:483 1 lock held by khungtaskd/27: #0: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 2 locks held by udevd/3561: #0: ffff888020be4518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 block/bdev.c:915 #1: ffff888146f81468 (&lo->lo_mutex){+.+.}-{3:3}, at: lo_release+0x4d/0x1f0 drivers/block/loop.c:2071 2 locks held by getty/3950: #0: ffff88814ccb9098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:252 #1: ffffc90002d032e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 drivers/tty/n_tty.c:2158 1 lock held by syz-executor/19484: #0: ffff888040e740e0 (&type->s_umount_key#60){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 fs/super.c:365 1 lock held by syz.8.5785/29281: #0: ffff888040e740e0 (&type->s_umount_key#60){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 fs/super.c:716 1 lock held by udevd/29571: #0: ffff888020be4518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x157/0xa60 block/bdev.c:820 2 locks held by kworker/u4:2/29787: 1 lock held by dhcpcd-run-hook/30981: #0: ffff8880b903a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa5/0x140 kernel/sched/core.c:483 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 Call Trace: dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106 nmi_cpu_backtrace+0x3a2/0x3d0 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x163/0x280 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:212 [inline] watchdog+0xe0f/0xe50 kernel/hung_task.c:369 kthread+0x436/0x520 kernel/kthread.c:334 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 30986 Comm: sed Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 RIP: 0033:0x7ff9a39b4330 Code: 4c 89 9c 24 e8 00 00 00 4c 89 54 24 48 44 89 4c 24 50 eb 13 66 0f 1f 44 00 00 49 83 c6 04 83 e5 01 0f 85 51 07 00 00 41 8b 2e <89> e8 44 31 e8 d1 e8 75 e7 48 83 ec 08 4c 89 f0 ff 74 24 38 4c 29 RSP: 002b:00007ffdb2c8f290 EFLAGS: 00000206 RAX: 00007ffdb2c8f304 RBX: 00007ff9a39a95f0 RCX: 00000000a069e9c7 RDX: 00007ff9a370d41c RSI: 00007ff9a3710580 RDI: 00000000000003f1 RBP: 00000000a069e9c6 R08: 00000000a069e9c7 R09: 0000000000000000 R10: 000000000000000a R11: 00007ff9a39aaab0 R12: 00007ff9a370d41c R13: 00000000a069e9c7 R14: 00007ff9a370d860 R15: 00007ff9a3722dd8 FS: 00007ff9a363ec80 GS: 0000000000000000