INFO: task kworker/u8:7:1040 blocked in I/O wait for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:7 state:D stack:20608 pid:1040 tgid:1040 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: writeback wb_workfn (flush-7:4) Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x16ec/0x5620 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0x164/0x360 kernel/sched/core.c:7283 io_schedule+0x80/0xe0 kernel/sched/core.c:8110 TXN_SLEEP_DROP_LOCK fs/jfs/jfs_txnmgr.c:125 [inline] txBegin+0x27d/0xc00 fs/jfs/jfs_txnmgr.c:376 jfs_commit_inode+0x1b3/0[ 908.129749][ T38] jfs_commit_inode+0x1b3/0x530 fs/jfs/inode.c:107 jfs_write_inode+0x145/0x220 fs/jfs/inode.c:138 write_inode fs/fs-writeback.c:1584 [inline] __writeback_single_inode+0x75d/0x10e0 fs/fs-writeback.c:1827 writeback_sb_inodes+0x97f/0x1980 fs/fs-writeback.c:2056 wb_writeback+0x445/0xb00 fs/fs-writeback.c:2241 wb_do_writeback fs/fs-writeback.c:2388 [inline] wb_workfn+0x3fd/0xf20 fs/fs-writeback.c:2428 process_one_work kernel/workqueue.c:3302 [inline] process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3385 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3466 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task syz-executor:9802 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:22080 pid:9802 tgid:9802 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x16ec/0x5620 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0x164/0x360 kernel/sched/core.c:7283 wb_wait_for_completion+0x3e8/0x790 fs/fs-writeback.c:227 __writeback_inodes_sb_nr+0x24c/0x2d0 fs/fs-writeback.c:2847 sync_filesystem+0xa2/0x250 fs/sync.c:54 generic_shutdown_super+0x77/0x2d0 fs/super.c:625 kill_block_super+0x44/0x90 fs/super.c:1725 deactivate_locked_super+0xbc/0x130 fs/super.c:476 cleanup_mnt+0x437/0x4d0 fs/namespace.c:1312 task_work_run+0x1d9/0x270 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:67 [inline] exit_to_user_mode_loop+0xf3/0x4d0 kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:238 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline] do_syscall_64+0x33e/0xf80 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3a3389e017 RSP: 002b:00007ffe27d5d078 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 00007f3a33932120 RCX: 00007f3a3389e017 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe27d5d130 RBP: 00007ffe27d5d130 R08: 00007ffe27d5e130 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe27d5e1c0 R13: 00007f3a33932120 R14: 00000000000b7492 R15: 00007ffe27d5e200 Showing all locks held in the system: 3 locks held by pr/legacy/17: 1 lock held by khungtaskd/38: #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775 2 locks held by kworker/u8:7/1040: #0: ffff88801f2c6938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3277 [inline] #0: ffff88801f2c6938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 kernel/workqueue.c:3385 #1: ffffc90005fbfc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3278 [inline] #1: ffffc90005fbfc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 kernel/workqueue.c:3385 1 lock held by udevd/4965: #0: ffff8880391ada08 (&ep->lock){+.+.}-{3:3}, at: spin_lock_irq include/linux/spinlock_rt.h:96 [inline] #0: ffff8880391ada08 (&ep->lock){+.+.}-{3:3}, at: ep_poll fs/eventpoll.c:2042 [inline] #0: ffff8880391ada08 (&ep->lock){+.+.}-{3:3}, at: do_epoll_wait+0x851/0xbd0 fs/eventpoll.c:2464 2 locks held by getty/5353: #0: ffff888036f4c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 drivers/tty/n_tty.c:2211 1 lock held by syz-executor/9802: #0: ffff888029e7e0d0 (&type->s_umount_key#74){+.+.}-{4:4}, at: __super_lock fs/super.c:58 [inline] #0: ffff888029e7e0d0 (&type->s_umount_key#74){+.+.}-{4:4}, at: __super_lock_excl fs/super.c:73 [inline] #0: ffff888029e7e0d0 (&type->s_umount_key#74){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 fs/super.c:508 9 locks held by syz-executor/13252: 1 lock held by udevd/13866: 1 lock held by udevd/13931: 7 locks held by udevd/14111: 4 locks held by syz.6.921/15042: 3 locks held by syz.0.922/15053: 3 locks held by syz.0.922/15058: 4 locks held by dhcpcd-run-hook/15057: 2 locks held by syz.1.923/15066: ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xfd3/0x1030 kernel/hung_task.c:561 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 15042 Comm: syz.6.921 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 RIP: 0010:__bfs kernel/locking/lockdep.c:1815 [inline] RIP: 0010:__bfs_backwards kernel/locking/lockdep.c:1860 [inline] RIP: 0010:check_irq_usage kernel/locking/lockdep.c:2796 [inline] RIP: 0010:check_prev_add kernel/locking/lockdep.c:3169 [inline] RIP: 0010:check_prevs_add kernel/locking/lockdep.c:3284 [inline] RIP: 0010:validate_chain kernel/locking/lockdep.c:3908 [inline] RIP: 0010:__lock_acquire+0x197b/0x2cf0 kernel/locking/lockdep.c:5237 Code: 13 25 ff 0f 00 00 39 05 bf f9 d1 11 73 06 89 05 b7 f9 d1 11 48 8b 02 48 89 df 4c 39 e8 0f 84 2c fe ff ff 4c 89 60 30 48 8b 00 <4c> 39 e8 75 f4 48 89 df e9 18 fe ff ff 48 89 fb 48 c7 c7 50 54 e9 RSP: 0018:ffffc9000df3ea70 EFLAGS: 00000002 RAX: ffffffff960121c8 RBX: 00000000000003cd RCX: 00000000000005c6 RDX: ffffffff95f5eae8 RSI: ffff888038210c98 RDI: 00000000000003cd RBP: 51e898d949cdd12d R08: ffffc9000df3ea38 R09: 0000000000000020 R10: dffffc0000000000 R11: ffffffff81a0af20 R12: ffffffff95f7b5d8 R13: ffffffff93138178 R14: ffff888038210000 R15: 00000000000005c5 FS: 00007fda778ce6c0(0000) GS:ffff888126176000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb6b6168000 CR3: 0000000062526000 CR4: 00000000003526f0 Call Trace: lock_acquire+0x106/0x350 kernel/locking/lockdep.c:5868 seqcount_lockdep_reader_access+0x55/0x100 include/linux/seqlock.h:73 ktime_get+0x45/0x220 kernel/time/timekeeping.c:965 hrtick_schedule_exit kernel/sched/core.c:985 [inline] finish_lock_switch kernel/sched/core.c:5124 [inline] finish_task_switch+0x312/0xbe0 kernel/sched/core.c:5243 context_switch kernel/sched/core.c:5391 [inline] __schedule+0x16f4/0x5620 kernel/sched/core.c:7189 preempt_schedule_common+0x82/0xd0 kernel/sched/core.c:7370 preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12 class_preempt_destructor include/linux/preempt.h:468 [inline] raw_spin_unlock_irq_wake include/linux/sched/wake_q.h:89 [inline] rtlock_slowlock_locked+0x36ca/0x3c80 kernel/locking/rtmutex.c:1883 rtlock_slowlock kernel/locking/rtmutex.c:1914 [inline] rtlock_lock kernel/locking/spinlock_rt.c:43 [inline] __rt_spin_lock kernel/locking/spinlock_rt.c:49 [inline] rt_spin_lock+0x165/0x400 kernel/locking/spinlock_rt.c:57 spin_lock include/linux/spinlock_rt.h:45 [inline] finish_wait kernel/sched/wait.c:394 [inline] __wait_on_bit+0x1fe/0x300 kernel/sched/wait_bit.c:55 out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67 wait_on_buffer include/linux/buffer_head.h:420 [inline] ext4_commit_super+0x330/0x430 fs/ext4/super.c:6325 ext4_handle_error+0x65e/0x950 fs/ext4/super.c:725 __ext4_std_error+0x26d/0x4f0 fs/ext4/super.c:981 ext4_orphan_del+0xa46/0xc40 fs/ext4/orphan.c:303 ext4_truncate+0xa5d/0x10b0 fs/ext4/inode.c:4687 ext4_process_orphan+0x1cb/0x300 fs/ext4/orphan.c:337 ext4_orphan_cleanup+0xc38/0x1470 fs/ext4/orphan.c:472 __ext4_fill_super fs/ext4/super.c:5701 [inline] ext4_fill_super+0x59bb/0x62d0 fs/ext4/super.c:5824 get_tree_bdev_flags+0x431/0x4f0 fs/super.c:1694 vfs_get_tree+0x92/0x2a0 fs/super.c:1754 fc_mount fs/namespace.c:1193 [inline] do_new_mount_fc fs/namespace.c:3758 [inline] do_new_mount+0x341/0xd30 fs/namespace.c:3834 do_mount fs/namespace.c:4167 [inline] __do_sys_mount fs/namespace.c:4383 [inline] __se_sys_mount+0x31d/0x420 fs/namespace.c:4360 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fda7967e04a Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fda778cde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fda778cdee0 RCX: 00007fda7967e04a RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007fda778cdea0 RBP: 0000200000000040 R08: 00007fda778cdee0 R09: 000000000001c917 R10: 000000000001c917 R11: 0000000000000246 R12: 0000200000000000 R13: 00007fda778cdea0 R14: 00000000000004f0 R15: 0000200000000980