INFO: task syz.1.275:8297 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.275 state:D stack:25568 pid:8297 tgid:8296 ppid:8018 task_flags:0x400140 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5298 [inline]
__schedule+0x1553/0x5240 kernel/sched/core.c:6911
__schedule_loop kernel/sched/core.c:6993 [inline]
schedule+0x164/0x360 kernel/sched/core.c:7008
io_schedule+0x80/0xe0 kernel/sched/core.c:7835
folio_wait_bit_common+0x6dd/0xbc0 mm/filemap.c:1323
folio_lock include/linux/pagemap.h:1159 [inline]
release_metapage+0x103/0xab0 fs/jfs/jfs_metapage.c:870
discard_metapage fs/jfs/jfs_metapage.h:88 [inline]
__get_metapage+0x9a3/0xde0 fs/jfs/jfs_metapage.c:753
dtSearch+0x591/0x21b0 fs/jfs/jfs_dtree.c:624
jfs_lookup+0x1b0/0x420 fs/jfs/namei.c:1464
lookup_one_qstr_excl+0x131/0x360 fs/namei.c:1805
__start_dirop fs/namei.c:2931 [inline]
start_dirop fs/namei.c:2940 [inline]
filename_create+0x20e/0x370 fs/namei.c:4928
filename_mkdirat+0xd2/0x520 fs/namei.c:5265
__do_sys_mkdirat fs/namei.c:5293 [inline]
__se_sys_mkdirat+0x35/0x150 fs/namei.c:5290
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb4207cb687
RSP: 002b:00007fb41ea1de58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
RAX: ffffffffffffffda RBX: 00007fb41ea1dee0 RCX: 00007fb4207cb687
RDX: 00000000000001ff RSI: 0000200000000680 RDI: 00000000ffffff9c
RBP: 0000200000000080 R08: 0000200000000d40 R09: 0000000000000000
R10: 0000200000000080 R11: 0000000000000246 R12: 0000200000000680
R13: 00007fb41ea1dea0 R14: 0000000000000000 R15: 0000000000000000
Showing all locks held in the system:
1 lock held by khungtaskd/37:
#0: ffffffff8ddcb980 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:312 [inline]
#0: ffffffff8ddcb980 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:850 [inline]
#0: ffffffff8ddcb980 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775
3 locks held by kworker/u8:6/163:
#0: ffff888031eca938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3251 [inline]
#0: ffff888031eca938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 kernel/workqueue.c:3359
#1: ffffc90003b8fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3252 [inline]
#1: ffffc90003b8fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 kernel/workqueue.c:3359
#2: ffffffff8f15d4b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
#2: ffffffff8f15d4b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x124/0x1680 net/ipv6/addrconf.c:4198
2 locks held by kworker/u8:10/1420:
5 locks held by kworker/u8:11/1432:
3 locks held by kworker/u8:12/1491:
#0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3251 [inline]
#0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 kernel/workqueue.c:3359
#1: ffffc90006227c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3252 [inline]
#1: ffffc90006227c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 kernel/workqueue.c:3359
#2: ffffffff8f15d4b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:313
2 locks held by kworker/1:4/1811:
3 locks held by kworker/u8:13/4030:
#0: ffff88801eace138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3251 [inline]
#0: ffff88801eace138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 kernel/workqueue.c:3359
#1: ffffc9000f8d7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3252 [inline]
#1: ffffc9000f8d7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 kernel/workqueue.c:3359
#2: ffff88803e8720d0 (&type->s_umount_key#71){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 fs/super.c:565
2 locks held by getty/5557:
#0: ffff888036c570a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 drivers/tty/n_tty.c:2211
2 locks held by syz.0.256/8001:
#0: ffff88803e8720d0 (&type->s_umount_key#71){++++}-{4:4}, at: __super_lock fs/super.c:60 [inline]
#0: ffff88803e8720d0 (&type->s_umount_key#71){++++}-{4:4}, at: super_lock+0x2d6/0x3d0 fs/super.c:122
#1: ffff888011530150 (&(log)->loglock){+.+.}-{4:4}, at: jfs_syncpt+0x25/0x90 fs/jfs/jfs_logmgr.c:1039
3 locks held by syz-executor/8043:
10 locks held by syz-executor/8199:
1 lock held by syz.1.275/8297:
#0: ffff88805cb449f8 (&type->i_mutex_dir_key#11/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1073 [inline]
#0: ffff88805cb449f8 (&type->i_mutex_dir_key#11/1){+.+.}-{4:4}, at: __start_dirop fs/namei.c:2929 [inline]
#0: ffff88805cb449f8 (&type->i_mutex_dir_key#11/1){+.+.}-{4:4}, at: start_dirop fs/namei.c:2940 [inline]
#0: ffff88805cb449f8 (&type->i_mutex_dir_key#11/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 fs/namei.c:4928
1 lock held by syz-executor/10121:
#0: ffffffff8f15d4b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
#0: ffffffff8f15d4b8 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x65f/0xe30 net/ipv6/addrconf.c:5031
2 locks held by syz-executor/10441:
#0: ffffffff8e8b84e8 (&ops->srcu#2){.+.+}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:312 [inline]
#0: ffffffff8e8b84e8 (&ops->srcu#2){.+.+}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:850 [inline]
#0: ffffffff8e8b84e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 net/core/rtnetlink.c:570
#1: ffffffff8f15d4b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
#1: ffffffff8f15d4b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
#1: ffffffff8f15d4b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 net/core/rtnetlink.c:4107
1 lock held by dhcpcd/10572:
#0: ffff88802b5a0358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1709 [inline]
#0: ffff88802b5a0358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 net/packet/af_packet.c:3198
3 locks held by dhcpcd/10573:
=============================================
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)}
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
Call Trace:
dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:161 [inline]
__sys_info lib/sys_info.c:157 [inline]
sys_info+0x135/0x170 lib/sys_info.c:165
check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline]
watchdog+0xfd9/0x1030 kernel/hung_task.c:515
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 8043 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)}
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
RIP: 0010:__bfs kernel/locking/lockdep.c:1753 [inline]
RIP: 0010:__bfs_backwards kernel/locking/lockdep.c:1860 [inline]
RIP: 0010:check_irq_usage kernel/locking/lockdep.c:2796 [inline]
RIP: 0010:check_prev_add kernel/locking/lockdep.c:3169 [inline]
RIP: 0010:check_prevs_add kernel/locking/lockdep.c:3284 [inline]
RIP: 0010:validate_chain kernel/locking/lockdep.c:3908 [inline]
RIP: 0010:__lock_acquire+0x1821/0x2cf0 kernel/locking/lockdep.c:5237
Code: 00 0f 83 8a 01 00 00 4e 8b 24 fd c0 28 57 95 ff c0 25 ff 0f 00 00 89 05 dd 59 b7 13 4d 85 e4 0f 84 b2 01 00 00 49 8b 44 24 10 <48> 85 c0 0f 84 1c 0d 00 00 8b 0d c8 59 b7 13 39 48 5c 0f 84 67 ff
RSP: 0018:ffffc900054e7458 EFLAGS: 00000082
RAX: ffffffff92fecfe0 RBX: 00000000000003cd RCX: ffffffff95fd10c8
RDX: ffffffff92fae298 RSI: ffff88802bebaab0 RDI: 00000000000003cd
RBP: f366d736d8577eb0 R08: ffffc900054e7420 R09: 0000000000000020
R10: dffffc0000000000 R11: ffffffff81a0a150 R12: ffffffff95fd10c8
R13: ffff88802bebaab0 R14: ffff88802beb9e80 R15: 000000000000004c
FS: 000055557f143500(0000) GS:ffff888126432000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f2fd5822e9c CR3: 00000000591dc000 CR4: 00000000003526f0
Call Trace:
lock_acquire+0xf0/0x2e0 kernel/locking/lockdep.c:5868
do_write_seqcount_begin_nested include/linux/seqlock.h:478 [inline]
do_write_seqcount_begin include/linux/seqlock.h:504 [inline]
psi_write_begin+0xab/0x160 kernel/sched/psi.c:183
psi_account_irqtime+0x1e2/0x6f0 kernel/sched/psi.c:1030
__schedule+0x8bd/0x5240 kernel/sched/core.c:6904
preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7238
irqentry_exit+0x599/0x620 kernel/entry/common.c:239
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:lock_acquire+0x20b/0x2e0 kernel/locking/lockdep.c:5872
Code: e9 30 ff ff ff e8 55 1d 84 09 f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 c1 aa ae 10 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d de 63 cd
RSP: 0018:ffffc900054e79c8 EFLAGS: 00000282
RAX: d16934b2b2af1b00 RBX: 0000000000000246 RCX: 0000000000000046
RDX: 0000000000000001 RSI: ffffffff8d7c20a5 RDI: ffffffff8ba67a80
RBP: 0000000000000000 R08: 0000000000000008 R09: ffffffff9582a670
R10: 000000008446d67c R11: 0000000074a345b5 R12: 0000000000000000
R13: ffff888011623938 R14: 0000000000000000 R15: 0000000000000001
touch_wq_lockdep_map+0xcb/0x180 kernel/workqueue.c:3991
__flush_workqueue+0x14b/0x14f0 kernel/workqueue.c:4033
drain_workqueue+0xd3/0x390 kernel/workqueue.c:4197
destroy_workqueue+0xbb/0xc60 kernel/workqueue.c:5967
xfs_destroy_mount_workqueues+0x3b/0x100 fs/xfs/xfs_super.c:650
xfs_fs_put_super+0x153/0x160 fs/xfs/xfs_super.c:1233
generic_shutdown_super+0x13d/0x2d0 fs/super.c:646
kill_block_super+0x44/0x90 fs/super.c:1725
xfs_kill_sb+0x15/0x50 fs/xfs/xfs_super.c:2284
deactivate_locked_super+0xbc/0x130 fs/super.c:476
cleanup_mnt+0x437/0x4d0 fs/namespace.c:1312
task_work_run+0x1d9/0x270 kernel/task_work.c:233
resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
__exit_to_user_mode_loop kernel/entry/common.c:67 [inline]
exit_to_user_mode_loop+0xed/0x480 kernel/entry/common.c:98
__exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]
syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline]
syscall_exit_to_user_mode include/linux/entry-common.h:325 [inline]
do_syscall_64+0x32d/0xf80 arch/x86/entry/syscall_64.c:100
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f024087da57
Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007ffed6b7a3b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 00007f0240912048 RCX: 00007f024087da57
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed6b7a470
RBP: 00007ffed6b7a470 R08: 00007ffed6b7b470 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed6b7b500
R13: 00007f0240912048 R14: 000000000006177c R15: 00007ffed6b7b540