INFO: task kworker/u8:6:2998 blocked for more than 143 seconds.
Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:6 state:D stack:20928 pid:2998 tgid:2998 ppid:2 task_flags:0x4208060 flags:0x00004000
Workqueue: netns cleanup_net
Call Trace:
context_switch kernel/sched/core.c:5367 [inline]
__schedule+0x1ac3/0x5090 kernel/sched/core.c:6748
__schedule_loop kernel/sched/core.c:6825 [inline]
schedule+0x163/0x360 kernel/sched/core.c:6840
afs_cell_purge+0x3e3/0x550 fs/afs/cell.c:893
afs_net_exit+0x50/0x100 fs/afs/main.c:146
ops_exit_list net/core/net_namespace.c:172 [inline]
cleanup_net+0x814/0xd60 net/core/net_namespace.c:652
process_one_work kernel/workqueue.c:3238 [inline]
process_scheduled_works+0xac3/0x18e0 kernel/workqueue.c:3319
worker_thread+0x870/0xd30 kernel/workqueue.c:3400
kthread+0x7a9/0x920 kernel/kthread.c:464
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:153
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Showing all locks held in the system:
1 lock held by ksoftirqd/0/15:
#0: ffff8880b8639958 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 kernel/sched/core.c:595
1 lock held by khungtaskd/31:
#0: ffffffff8eb3a760 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
#0: ffffffff8eb3a760 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
#0: ffffffff8eb3a760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 kernel/locking/lockdep.c:6761
2 locks held by kworker/u8:4/67:
3 locks held by kworker/1:2/1163:
3 locks held by kworker/u8:6/2998:
#0: ffff88801baf3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3213 [inline]
#0: ffff88801baf3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 kernel/workqueue.c:3319
#1: ffffc9000c287c60 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline]
#1: ffffc9000c287c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 kernel/workqueue.c:3319
#2: ffffffff8feb7610 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 net/core/net_namespace.c:606
2 locks held by getty/5582:
#0: ffff888035b020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc900032fb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x53d/0x16b0 drivers/tty/n_tty.c:2211
3 locks held by kworker/1:6/5945:
2 locks held by syz-executor/6975:
#0: ffff8880283700e0 (&type->s_umount_key#81){++++}-{4:4}, at: __super_lock fs/super.c:56 [inline]
#0: ffff8880283700e0 (&type->s_umount_key#81){++++}-{4:4}, at: __super_lock_excl fs/super.c:71 [inline]
#0: ffff8880283700e0 (&type->s_umount_key#81){++++}-{4:4}, at: deactivate_super+0xb5/0xf0 fs/super.c:505
#1: ffffffff8ef5b7a8 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xb2/0x530 fs/jfs/jfs_logmgr.c:1444
1 lock held by syz.6.124/7198:
#0: ffff88806ccec0e0 (&type->s_umount_key#81){++++}-{4:4}, at: __super_lock fs/super.c:58 [inline]
#0: ffff88806ccec0e0 (&type->s_umount_key#81){++++}-{4:4}, at: super_lock+0x27c/0x400 fs/super.c:120
1 lock held by syz.6.124/7204:
#0: ffff88806ccec0e0 (&type->s_umount_key#81){++++}-{4:4}, at: __super_lock fs/super.c:58 [inline]
#0: ffff88806ccec0e0 (&type->s_umount_key#81){++++}-{4:4}, at: super_lock+0x27c/0x400 fs/super.c:120
2 locks held by syz-executor/7848:
#0: ffff88806ccec0e0 (&type->s_umount_key#81){++++}-{4:4}, at: __super_lock fs/super.c:56 [inline]
#0: ffff88806ccec0e0 (&type->s_umount_key#81){++++}-{4:4}, at: __super_lock_excl fs/super.c:71 [inline]
#0: ffff88806ccec0e0 (&type->s_umount_key#81){++++}-{4:4}, at: deactivate_super+0xb5/0xf0 fs/super.c:505
#1: ffffffff8ef5b7a8 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xb2/0x530 fs/jfs/jfs_logmgr.c:1444
2 locks held by syz-executor/10181:
#0: ffff88807f96e0e0 (&type->s_umount_key#81){++++}-{4:4}, at: __super_lock fs/super.c:56 [inline]
#0: ffff88807f96e0e0 (&type->s_umount_key#81){++++}-{4:4}, at: __super_lock_excl fs/super.c:71 [inline]
#0: ffff88807f96e0e0 (&type->s_umount_key#81){++++}-{4:4}, at: deactivate_super+0xb5/0xf0 fs/super.c:505
#1: ffffffff8ef5b7a8 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xb2/0x530 fs/jfs/jfs_logmgr.c:1444
2 locks held by syz-executor/10526:
#0: ffff88802e23e0e0 (&type->s_umount_key#81){++++}-{4:4}, at: __super_lock fs/super.c:56 [inline]
#0: ffff88802e23e0e0 (&type->s_umount_key#81){++++}-{4:4}, at: __super_lock_excl fs/super.c:71 [inline]
#0: ffff88802e23e0e0 (&type->s_umount_key#81){++++}-{4:4}, at: deactivate_super+0xb5/0xf0 fs/super.c:505
#1: ffffffff8ef5b7a8 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xb2/0x530 fs/jfs/jfs_logmgr.c:1444
2 locks held by syz-executor/10709:
#0: ffff88805a8160e0 (&type->s_umount_key#81){++++}-{4:4}, at: __super_lock fs/super.c:56 [inline]
#0: ffff88805a8160e0 (&type->s_umount_key#81){++++}-{4:4}, at: __super_lock_excl fs/super.c:71 [inline]
#0: ffff88805a8160e0 (&type->s_umount_key#81){++++}-{4:4}, at: deactivate_super+0xb5/0xf0 fs/super.c:505
#1: ffffffff8ef5b7a8 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xb2/0x530 fs/jfs/jfs_logmgr.c:1444
1 lock held by syz-executor/11026:
#0: ffff88807e9820e0 (&type->s_umount_key#81){++++}-{4:4}, at: __super_lock fs/super.c:56 [inline]
#0: ffff88807e9820e0 (&type->s_umount_key#81){++++}-{4:4}, at: __super_lock_excl fs/super.c:71 [inline]
#0: ffff88807e9820e0 (&type->s_umount_key#81){++++}-{4:4}, at: deactivate_super+0xb5/0xf0 fs/super.c:505
1 lock held by syz.1.630/11953:
#0: ffff8880283700e0 (&type->s_umount_key#81){++++}-{4:4}, at: __super_lock fs/super.c:58 [inline]
#0: ffff8880283700e0 (&type->s_umount_key#81){++++}-{4:4}, at: super_lock+0x27c/0x400 fs/super.c:120
3 locks held by syz.9.635/12007:
#0: ffff888045a00920 (&c->sb_lock){+.+.}-{4:4}, at: bch2_fs_alloc fs/bcachefs/super.c:833 [inline]
#0: ffff888045a00920 (&c->sb_lock){+.+.}-{4:4}, at: bch2_fs_open+0x1612/0x31f0 fs/bcachefs/super.c:2065
#1: ffff888045a049b0 (&c->mark_lock){++++}-{0:0}, at: bch2_sb_replicas_to_cpu_replicas+0x1e2/0x2f0 fs/bcachefs/replicas.c:600
#2: ffffffff8eb3fc78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:336 [inline]
#2: ffffffff8eb3fc78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x454/0x830 kernel/rcu/tree_exp.h:998
2 locks held by syz.0.642/12010:
=============================================
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
nmi_cpu_backtrace+0x4ab/0x4e0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:236 [inline]
watchdog+0x1058/0x10a0 kernel/hung_task.c:399
kthread+0x7a9/0x920 kernel/kthread.c:464
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:153
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 12010 Comm: syz.0.642 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:check_preemption_disabled+0x2/0x120 lib/smp_processor_id.c:13
Code: 1a 80 8c 48 c7 c6 80 1a 80 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 <41> 56 41 55 41 54 53 48 83 ec 10 49 c7 c4 20 60 3c 93 65 49 8b 04
RSP: 0018:ffffc9000466f748 EFLAGS: 00000046
RAX: 49aeea59faa862cf RBX: ffffffff933c6020 RCX: 0000000000000002
RDX: ffffc90032e15000 RSI: ffffffff8e2abebe RDI: ffffffff8c801aa0
RBP: ffff88807e91e540 R08: ffffffff81fcc477 R09: ffffffff81fcc3d4
R10: 0000000000000003 R11: ffff88807e91da00 R12: 0000000000000002
R13: ffff88807e91da00 R14: 0000000000000206 R15: ffffffff8eb3a760
FS: 00007fb2187f66c0(0000) GS:ffff88812525a000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fb2111ff000 CR3: 0000000026248000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
lockdep_recursion_finish kernel/locking/lockdep.c:472 [inline]
lock_release+0x204/0x3e0 kernel/locking/lockdep.c:5889
rcu_lock_release include/linux/rcupdate.h:341 [inline]
rcu_read_unlock include/linux/rcupdate.h:871 [inline]
filemap_get_entry+0x325/0x3b0 mm/filemap.c:1877
shmem_get_folio_gfp+0x288/0x1800 mm/shmem.c:2469
shmem_get_folio mm/shmem.c:2651 [inline]
shmem_write_begin+0x17e/0x3a0 mm/shmem.c:3301
generic_perform_write+0x329/0xa10 mm/filemap.c:4102
shmem_file_write_iter+0xf9/0x120 mm/shmem.c:3477
new_sync_write fs/read_write.c:591 [inline]
vfs_write+0x70f/0xd10 fs/read_write.c:684
ksys_write+0x19d/0x2d0 fs/read_write.c:736
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb21a98bc1f
Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
RSP: 002b:00007fb2187f5df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000001000000 RCX: 00007fb21a98bc1f
RDX: 0000000001000000 RSI: 00007fb210200000 RDI: 0000000000000008
RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000050ed
R10: 000020000000a2c2 R11: 0000000000000293 R12: 0000000000000008
R13: 00007fb2187f5ef0 R14: 00007fb2187f5eb0 R15: 00007fb210200000