INFO: task kworker/1:1H:1045 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:1H state:D
stack:26096 pid:1045 ppid:2 flags:0x00004000
Workqueue: xfs-log/loop9 xlog_ioend_work
Call Trace:
context_switch kernel/sched/core.c:5245 [inline]
__schedule+0x107f/0x4030 kernel/sched/core.c:6562
schedule+0xb9/0x180 kernel/sched/core.c:6638
schedule_timeout+0xbd/0x2d0 kernel/time/timer.c:2144
___down_common kernel/locking/semaphore.c:229 [inline]
__down_common+0x30c/0x740 kernel/locking/semaphore.c:250
down+0x7c/0xd0 kernel/locking/semaphore.c:64
xfs_buf_lock+0x163/0x560 fs/xfs/xfs_buf.c:1120
xfs_buf_item_unpin+0x1c3/0x780 fs/xfs/xfs_buf_item.c:582
xfs_trans_committed_bulk+0x399/0x8a0 fs/xfs/xfs_trans.c:808
xlog_cil_committed+0x25c/0xe60 fs/xfs/xfs_log_cil.c:795
xlog_cil_process_committed+0x14d/0x1a0 fs/xfs/xfs_log_cil.c:823
xlog_state_shutdown_callbacks+0x26a/0x360 fs/xfs/xfs_log.c:538
xlog_force_shutdown+0x2c5/0x320 fs/xfs/xfs_log.c:3804
xlog_ioend_work+0xab/0x100 fs/xfs/xfs_log.c:1393
process_one_work+0x8ab/0x1160 kernel/workqueue.c:2292
worker_thread+0xaf5/0x12a0 kernel/workqueue.c:2439
kthread+0x29d/0x330 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
INFO: task syz.9.189:5337 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.9.189 state:D stack:26528 pid:5337 ppid:5015 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5245 [inline]
__schedule+0x107f/0x4030 kernel/sched/core.c:6562
schedule+0xb9/0x180 kernel/sched/core.c:6638
xlog_wait fs/xfs/xfs_log_priv.h:617 [inline]
xlog_wait_on_iclog+0x487/0x730 fs/xfs/xfs_log.c:890
xlog_force_lsn+0x52a/0x9a0 fs/xfs/xfs_log.c:3339
xfs_log_force_seq+0x1bf/0x420 fs/xfs/xfs_log.c:3376
__xfs_trans_commit+0x95b/0xe00 fs/xfs/xfs_trans.c:1013
xfs_sync_sb_buf+0xf9/0x190 fs/xfs/libxfs/xfs_sb.c:1162
xfs_ioc_setlabel fs/xfs/xfs_ioctl.c:1827 [inline]
xfs_file_ioctl+0x147c/0x1780 fs/xfs/xfs_ioctl.c:1925
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:870 [inline]
__se_sys_ioctl+0xfa/0x170 fs/ioctl.c:856
do_syscall_x64 arch/x86/entry/common.c:46 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fef4899de59
RSP: 002b:00007fef49935028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fef48c26090 RCX: 00007fef4899de59
RDX: 00002000000004c0 RSI: 0000000041009432 RDI: 0000000000000004
RBP: 00007fef48a33e6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fef48c26128 R14: 00007fef48c26090 R15: 00007ffef32195b8
Showing all locks held in the system:
1 lock held by rcu_tasks_kthre/12:
#0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 kernel/rcu/tasks.h:517
1 lock held by rcu_tasks_trace/13:
#0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 kernel/rcu/tasks.h:517
1 lock held by khungtaskd/27:
#0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:350 [inline]
#0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:791 [inline]
#0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 kernel/locking/lockdep.c:6513
2 locks held by kworker/1:1H/1045:
#0: ffff8881433d5d38 ((wq_completion)xfs-log/loop9){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
#1: ffffc90004c3fd00 ((work_completion)(&iclog->ic_end_io_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
2 locks held by getty/4029:
#0: ffff888030143098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:244
#1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 drivers/tty/n_tty.c:2198
3 locks held by kworker/1:4/4318:
#0: ffff88814cb2ed38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
#1: ffffc900049ffd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
#2: ffffffff8dd592a8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1500 net/ipv6/addrconf.c:4131
2 locks held by kworker/1:5/4356:
#0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
#1: ffffc90002e87d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
3 locks held by kworker/0:17/4432:
#0: ffff88814cb2ed38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
#1: ffffc90005267d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
#2: ffffffff8dd592a8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1500 net/ipv6/addrconf.c:4131
3 locks held by kworker/0:20/4907:
#0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
#1: ffffc9000363fd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
#2: ffff88801a694240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x283/0x3320 drivers/net/netdevsim/fib.c:1491
1 lock held by syz.9.189/5337:
#0: ffff888027c3e460 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200 fs/namespace.c:446
1 lock held by syz-executor/7259:
#0: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:291 [inline]
#0: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 kernel/rcu/tree_exp.h:962
3 locks held by syz-executor/7486:
#0: ffffffff8dd592a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
#0: ffffffff8dd592a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 net/core/rtnetlink.c:6155
#1: ffff88807beb93e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_open+0x223/0x420 drivers/net/wireguard/device.c:49
#2: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:323 [inline]
#2: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 kernel/rcu/tree_exp.h:962
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Call Trace:
dump_stack_lvl+0x188/0x24e lib/dump_stack.c:106
nmi_cpu_backtrace+0x3e6/0x460 lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x1d4/0x450 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline]
watchdog+0xf0e/0xf50 kernel/hung_task.c:377
kthread+0x29d/0x330 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 3629 Comm: klogd Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
RIP: 0010:__sanitizer_cov_trace_switch+0x54/0xe0 kernel/kcov.c:348
Code: 48 8b 06 48 85 c0 0f 84 a4 00 00 00 41 57 41 56 41 54 53 48 8d 4c 09 01 48 8b 54 24 20 65 4c 8b 05 81 49 80 7e 45 31 c9 eb 08 <49> ff c1 4c 39 c8 74 77 4e 8b 54 ce 10 65 44 8b 1d 6f 49 80 7e 41
RSP: 0018:ffffc90003257788 EFLAGS: 00000293
RAX: 0000000000000005 RBX: dffffc0000000000 RCX: 0000000000000001
RDX: ffffffff8a212418 RSI: ffffffff8e0a2180 RDI: 0000000000000075
RBP: 0000001000000000 R08: ffff88807cee3c00 R09: 0000000000000001
R10: 0000000000000023 R11: 0000000000000000 R12: ffffffff8a8cde62
R13: 1ffffffff1519bcc R14: ffffffff8a8cde62 R15: 0000000000000075
FS: 00007fd70f6f4c80(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f590ff5e878 CR3: 000000007e050000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
format_decode+0x218/0x1330 lib/vsprintf.c:2556
vsnprintf+0xef/0x1c20 lib/vsprintf.c:2757
sprintf+0xe4/0x140 lib/vsprintf.c:3009
print_syslog kernel/printk/printk.c:1267 [inline]
info_print_prefix+0xd9/0x360 kernel/printk/printk.c:1297
record_print_text+0x17e/0x4a0 kernel/printk/printk.c:1349
syslog_print+0x3c7/0x630 kernel/printk/printk.c:1560
do_syslog+0x817/0x900 kernel/printk/printk.c:1679
__do_sys_syslog kernel/printk/printk.c:1771 [inline]
__se_sys_syslog kernel/printk/printk.c:1769 [inline]
__x64_sys_syslog+0x78/0x90 kernel/printk/printk.c:1769
do_syscall_x64 arch/x86/entry/common.c:46 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fd70f8bea37
Code: 73 01 c3 48 8b 0d c1 f3 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 f3 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007ffcd615deb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000067
RAX: ffffffffffffffda RBX: 00007fd70fa5e490 RCX: 00007fd70f8bea37
RDX: 00000000000003ff RSI: 00007fd70fa5e490 RDI: 0000000000000002
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000004000 R11: 0000000000000206 R12: 00007fd70fa5e490
R13: 00007fd70fa3bdfe R14: 00007fd70fa5e686 R15: 00007fd70fa5e686