INFO: task kworker/u4:1:11 blocked for more than 143 seconds.
Not tainted 6.1.104-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u4:1 state:D stack:23392 pid:11 ppid:2 flags:0x00004000
Workqueue: writeback wb_workfn (flush-7:1)
Call Trace:
context_switch kernel/sched/core.c:5241 [inline]
__schedule+0x143f/0x4570 kernel/sched/core.c:6558
schedule+0xbf/0x180 kernel/sched/core.c:6634
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6693
__mutex_lock_common kernel/locking/mutex.c:679 [inline]
__mutex_lock+0x6b9/0xd80 kernel/locking/mutex.c:747
jfs_commit_inode+0x242/0x580 fs/jfs/inode.c:102
jfs_write_inode+0x13f/0x210 fs/jfs/inode.c:132
write_inode fs/fs-writeback.c:1460 [inline]
__writeback_single_inode+0x67d/0x11e0 fs/fs-writeback.c:1677
writeback_sb_inodes+0xc2b/0x1b20 fs/fs-writeback.c:1903
__writeback_inodes_wb+0x114/0x400 fs/fs-writeback.c:1974
wb_writeback+0x4b1/0xe10 fs/fs-writeback.c:2079
wb_check_background_flush fs/fs-writeback.c:2145 [inline]
wb_do_writeback fs/fs-writeback.c:2233 [inline]
wb_workfn+0xc9e/0x1020 fs/fs-writeback.c:2260
process_one_work+0x8a9/0x11d0 kernel/workqueue.c:2292
worker_thread+0xa47/0x1200 kernel/workqueue.c:2439
kthread+0x28d/0x320 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
INFO: task kworker/u4:4:102 blocked for more than 144 seconds.
Not tainted 6.1.104-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u4:4 state:D stack:22808 pid:102 ppid:2 flags:0x00004000
Workqueue: writeback wb_workfn (flush-7:3)
Call Trace:
context_switch kernel/sched/core.c:5241 [inline]
__schedule+0x143f/0x4570 kernel/sched/core.c:6558
schedule+0xbf/0x180 kernel/sched/core.c:6634
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6693
__mutex_lock_common kernel/locking/mutex.c:679 [inline]
__mutex_lock+0x6b9/0xd80 kernel/locking/mutex.c:747
jfs_commit_inode+0x242/0x580 fs/jfs/inode.c:102
jfs_write_inode+0x13f/0x210 fs/jfs/inode.c:132
write_inode fs/fs-writeback.c:1460 [inline]
__writeback_single_inode+0x67d/0x11e0 fs/fs-writeback.c:1677
writeback_sb_inodes+0xc2b/0x1b20 fs/fs-writeback.c:1903
__writeback_inodes_wb+0x114/0x400 fs/fs-writeback.c:1974
wb_writeback+0x4b1/0xe10 fs/fs-writeback.c:2079
wb_check_old_data_flush fs/fs-writeback.c:2179 [inline]
wb_do_writeback fs/fs-writeback.c:2232 [inline]
wb_workfn+0xbec/0x1020 fs/fs-writeback.c:2260
process_one_work+0x8a9/0x11d0 kernel/workqueue.c:2292
worker_thread+0xa47/0x1200 kernel/workqueue.c:2439
kthread+0x28d/0x320 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
Showing all locks held in the system:
4 locks held by kworker/u4:0/9:
#0: ffff888144e69138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#1: ffffc900000e7d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#2: ffff8880616440e0 (&type->s_umount_key#67){++++}-{3:3}, at: trylock_super+0x1b/0xf0 fs/super.c:415
#3: ffff88804fa781c8 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x242/0x580 fs/jfs/inode.c:102
4 locks held by kworker/u4:1/11:
#0: ffff888144e69138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#1: ffffc90000107d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#2: ffff8880291ae0e0 (&type->s_umount_key#67){++++}-{3:3}, at: trylock_super+0x1b/0xf0 fs/super.c:415
#3: ffff88807236b948 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x242/0x580 fs/jfs/inode.c:102
1 lock held by rcu_tasks_kthre/12:
#0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 kernel/rcu/tasks.h:516
1 lock held by rcu_tasks_trace/13:
#0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 kernel/rcu/tasks.h:516
3 locks held by kworker/0:1/14:
#0: ffff888028907138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#1: ffffc90000137d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#2: ffffffff8e4f7ce8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 net/ipv6/addrconf.c:4115
2 locks held by kworker/1:1/26:
#0: ffff888012872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#1: ffffc90000a1fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
1 lock held by khungtaskd/28:
#0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:350 [inline]
#0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:791 [inline]
#0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 kernel/locking/lockdep.c:6494
4 locks held by kworker/u4:4/102:
#0: ffff888144e69138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#1: ffffc900015c7d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#2: ffff888057cd40e0 (&type->s_umount_key#67){++++}-{3:3}, at: trylock_super+0x1b/0xf0 fs/super.c:415
#3: ffff88805deab008 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x242/0x580 fs/jfs/inode.c:102
1 lock held by dhcpcd/3304:
#0: ffffffff8e4f7ce8 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x12e/0x6e0 net/netlink/af_netlink.c:2300
2 locks held by getty/3395:
#0: ffff88814c1f0098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:244
#1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 drivers/tty/n_tty.c:2198
4 locks held by kworker/1:10/3783:
#0: ffff888012870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#1: ffffc9000476fd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#2: ffffffff8e4f7ce8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 net/core/link_watch.c:263
#3: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:291 [inline]
#3: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 kernel/rcu/tree_exp.h:962
3 locks held by kworker/1:13/3786:
#0: ffff888028907138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#1: ffffc900046dfd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#2: ffffffff8e4f7ce8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 net/ipv6/addrconf.c:4115
4 locks held by kworker/u4:7/3801:
#0: ffff888144e69138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#1: ffffc9000489fd20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#2: ffff88807b8b40e0 (&type->s_umount_key#67){++++}-{3:3}, at: trylock_super+0x1b/0xf0 fs/super.c:415
#3: ffff88805deaf0c8 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x242/0x580 fs/jfs/inode.c:102
3 locks held by kworker/u4:8/3802:
4 locks held by syz.3.83/4012:
4 locks held by kworker/u4:12/4257:
#0: ffff888012a1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#1: ffffc90004b27d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
#2: ffffffff8e4eb990 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 net/core/net_namespace.c:566
#3: ffffffff8e4f7ce8 (rtnl_mutex){+.+.}-{3:3}, at: fib_net_exit_batch+0x1c/0x90 net/ipv4/fib_frontend.c:1638
4 locks held by syz.1.135/4283:
4 locks held by syz.2.148/4364:
4 locks held by syz.4.376/5496:
2 locks held by syz-executor/5723:
#0: ffffffff8e556d70 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 net/netlink/genetlink.c:860
#1: ffffffff8e4f7ce8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5b/0x8a0 net/wireless/nl80211.c:16191
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.104-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x1e3/0x2cb lib/dump_stack.c:106
nmi_cpu_backtrace+0x4e1/0x560 lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline]
watchdog+0xf88/0xfd0 kernel/hung_task.c:377
kthread+0x28d/0x320 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 5723 Comm: syz-executor Not tainted 6.1.104-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
RIP: 0010:preempt_count_sub+0x62/0x160 kernel/sched/core.c:5746
Code: c1 81 e1 ff ff ff 7f 39 d9 7c 23 81 fb fe 00 00 00 77 07 0f b6 c0 85 c0 74 55 65 8b 05 4f 08 a4 7e f7 db 65 01 1d 46 08 a4 7e <5b> 41 5e c3 e8 c5 35 d7 02 85 c0 74 f3 48 c7 c0 68 fb 99 8e 48 c1
RSP: 0018:ffffc9000416f3f0 EFLAGS: 00000297
RAX: 0000000080000001 RBX: 00000000ffffffff RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffff888056a78298 RDI: 0000000000000001
RBP: ffffc9000416f4e8 R08: ffffffff81769794 R09: ffff888056a78110
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888056a78108
R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888056a78298
FS: 000055555628a500(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005652a6c67950 CR3: 0000000050d25000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
is_module_address+0x29/0x60 kernel/module/main.c:3053
static_obj kernel/locking/lockdep.c:851 [inline]
lockdep_init_map_type+0x210/0x900 kernel/locking/lockdep.c:4833
qdisc_alloc+0x24a/0xa30 net/sched/sch_generic.c:947
qdisc_create_dflt+0x5d/0x500 net/sched/sch_generic.c:999
mq_init+0x2c8/0x6b0 net/sched/sch_mq.c:90
qdisc_create_dflt+0x130/0x500 net/sched/sch_generic.c:1006
attach_default_qdiscs net/sched/sch_generic.c:1186 [inline]
dev_activate+0x227/0x1200 net/sched/sch_generic.c:1240
__dev_open+0x3f3/0x510 net/core/dev.c:1466
__dev_change_flags+0x1db/0x6e0 net/core/dev.c:8585
dev_change_flags+0x87/0x190 net/core/dev.c:8656
devinet_ioctl+0x92e/0x1b20 net/ipv4/devinet.c:1146
inet_ioctl+0x32d/0x400 net/ipv4/af_inet.c:1010
sock_do_ioctl+0x152/0x450 net/socket.c:1204
sock_ioctl+0x47f/0x770 net/socket.c:1321
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:870 [inline]
__se_sys_ioctl+0xf1/0x160 fs/ioctl.c:856
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fab301795fb
Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
RSP: 002b:00007fff37085840 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fff37085960 RCX: 00007fab301795fb
RDX: 00007fff370858c0 RSI: 0000000000008914 RDI: 0000000000000005
RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000022
R13: 0000000000000048 R14: 00007fab30e44620 R15: 00007fff370858c0