INFO: task kworker/0:6:20844 blocked for more than 143 seconds.
Tainted: G L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:6 state:D stack:22216 pid:20844 tgid:20844 ppid:2 task_flags:0x4208060 flags:0x00080000
Workqueue: gfs2_recovery gfs2_recover_func
Call Trace:
context_switch kernel/sched/core.c:5295 [inline]
__schedule+0x15dd/0x52d0 kernel/sched/core.c:6908
__schedule_loop kernel/sched/core.c:6990 [inline]
schedule+0x164/0x360 kernel/sched/core.c:7005
io_schedule+0x7f/0xd0 kernel/sched/core.c:7832
folio_wait_bit_common+0x6d8/0xbc0 mm/filemap.c:1323
folio_wait_locked include/linux/pagemap.h:1245 [inline]
gfs2_jhead_process_page+0x175/0x670 fs/gfs2/lops.c:470
gfs2_find_jhead+0xbd2/0xd30 fs/gfs2/lops.c:586
gfs2_recover_func+0x6cf/0x1f60 fs/gfs2/recovery.c:459
process_one_work kernel/workqueue.c:3275 [inline]
process_scheduled_works+0xb02/0x1830 kernel/workqueue.c:3358
worker_thread+0xa50/0xfc0 kernel/workqueue.c:3439
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
INFO: task syz.3.3969:21488 blocked for more than 145 seconds.
Tainted: G L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.3969 state:D stack:23944 pid:21488 tgid:21487 ppid:19710 task_flags:0x400140 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5295 [inline]
__schedule+0x15dd/0x52d0 kernel/sched/core.c:6908
__schedule_loop kernel/sched/core.c:6990 [inline]
schedule+0x164/0x360 kernel/sched/core.c:7005
bit_wait+0x11/0xd0 kernel/sched/wait_bit.c:240
__wait_on_bit+0xb9/0x310 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67
wait_on_bit include/linux/wait_bit.h:77 [inline]
gfs2_recover_journal+0xda/0x140 fs/gfs2/recovery.c:579
init_journal+0x16ad/0x22b0 fs/gfs2/ops_fstype.c:794
init_inodes+0xdb/0x320 fs/gfs2/ops_fstype.c:844
gfs2_fill_super+0x1a38/0x21d0 fs/gfs2/ops_fstype.c:1250
get_tree_bdev_flags+0x431/0x4f0 fs/super.c:1694
gfs2_get_tree+0x51/0x1e0 fs/gfs2/ops_fstype.c:1332
vfs_get_tree+0x92/0x2a0 fs/super.c:1754
fc_mount fs/namespace.c:1193 [inline]
do_new_mount_fc fs/namespace.c:3763 [inline]
do_new_mount+0x341/0xd30 fs/namespace.c:3839
do_mount fs/namespace.c:4172 [inline]
__do_sys_mount fs/namespace.c:4361 [inline]
__se_sys_mount+0x31d/0x420 fs/namespace.c:4338
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8afa79da0a
RSP: 002b:00007f8afb5c3e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f8afb5c3ee0 RCX: 00007f8afa79da0a
RDX: 0000200000037f40 RSI: 00002000000008c0 RDI: 00007f8afb5c3ea0
RBP: 0000200000037f40 R08: 00007f8afb5c3ee0 R09: 0000000001010084
R10: 0000000001010084 R11: 0000000000000246 R12: 00002000000008c0
R13: 00007f8afb5c3ea0 R14: 0000000000037f4b R15: 0000200000000480
Showing all locks held in the system:
1 lock held by khungtaskd/32:
#0: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:312 [inline]
#0: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:850 [inline]
#0: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775
2 locks held by getty/5574:
#0: ffff8880371210a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 drivers/tty/n_tty.c:2211
2 locks held by kworker/0:6/20844:
#0: ffff88801dfbcd48 ((wq_completion)gfs2_recovery){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3250 [inline]
#0: ffff88801dfbcd48 ((wq_completion)gfs2_recovery){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 kernel/workqueue.c:3358
#1: ffffc90005cefc40 ((work_completion)(&jd->jd_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3251 [inline]
#1: ffffc90005cefc40 ((work_completion)(&jd->jd_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 kernel/workqueue.c:3358
1 lock held by syz.3.3969/21488:
#0: ffff88803d0820e0 (&type->s_umount_key#86/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xab0 fs/super.c:345
1 lock held by sed/23349:
=============================================
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
Call Trace:
dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:161 [inline]
__sys_info lib/sys_info.c:157 [inline]
sys_info+0x135/0x170 lib/sys_info.c:165
check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline]
watchdog+0xfd9/0x1030 kernel/hung_task.c:515
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 23344 Comm: dhcpcd-run-hook Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:css_uses_rstat kernel/cgroup/rstat.c:25 [inline]
RIP: 0010:css_rstat_updated+0xdd/0x530 kernel/cgroup/rstat.c:80
Code: 30 00 74 08 4c 89 e7 e8 c1 bd 71 00 4c 89 64 24 18 4d 8b 67 08 4d 39 ef 74 28 49 83 c4 38 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 <74> 08 4c 89 e7 e8 99 bd 71 00 49 83 3c 24 00 74 68 e8 bd 75 07 00
RSP: 0018:ffffc9000f76f880 EFLAGS: 00000246
RAX: 1ffffffff2023712 RBX: 1ffff92001eedf14 RCX: ffff888053343d00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88801cee1a80
RBP: ffffc9000f76f960 R08: ffffffff82155b71 R09: ffffffff8e75e3e0
R10: dffffc0000000000 R11: ffffed100ed0ca01 R12: ffffffff9011b890
R13: ffff88807605d080 R14: dffffc0000000000 R15: ffff88801cee1a80
FS: 00007f39380b2c80(0000) GS:ffff888125463000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f39380b2ac0 CR3: 0000000053548000 CR4: 0000000000350ef0
Call Trace:
memcg_rstat_updated+0x2c/0x220 mm/memcontrol.c:577
count_memcg_events+0xc5/0x290 mm/memcontrol.c:857
count_memcg_events_mm include/linux/memcontrol.h:986 [inline]
count_memcg_event_mm+0x14c/0x260 include/linux/memcontrol.h:993
mm_account_fault mm/memory.c:6489 [inline]
handle_mm_fault+0x2c01/0x3310 mm/memory.c:6650
do_user_addr_fault+0x75b/0x1340 arch/x86/mm/fault.c:1385
handle_page_fault arch/x86/mm/fault.c:1474 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1527
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618
RIP: 0010:rseq_set_ids_get_csaddr+0x86/0x460 include/linux/rseq_entry.h:503
Code: f0 ff ff ff 7f 00 00 48 89 ea 48 39 c2 48 0f 47 d0 0f 01 cb 49 89 de 49 c1 ee 03 43 0f b6 04 2e 84 c0 0f 85 dc 00 00 00 8b 03 <89> 02 4c 8d 62 04 43 0f b6 04 2e 84 c0 0f 85 ea 00 00 00 8b 03 41
RSP: 0018:ffffc9000f76fdf0 EFLAGS: 00050246
RAX: 0000000000000000 RBX: ffffc9000f76fe50 RCX: ffff888053343d00
RDX: 00007f39380b2ac0 RSI: ffffc9000f76fe50 RDI: ffff888053343d00
RBP: 00007f39380b2ac0 R08: ffffffff90118bb7 R09: 1ffffffff2023176
R10: dffffc0000000000 R11: fffffbfff2023177 R12: ffff8880533452d8
R13: dffffc0000000000 R14: 1ffff92001eedfca R15: ffffc9000f76fe58
rseq_update_usr include/linux/rseq_entry.h:536 [inline]
rseq_slowpath_update_usr kernel/rseq.c:306 [inline]
__rseq_handle_slowpath+0x165/0x310 kernel/rseq.c:332
rseq_handle_slowpath include/linux/rseq.h:17 [inline]
resume_user_mode_work include/linux/resume_user_mode.h:62 [inline]
__exit_to_user_mode_loop kernel/entry/common.c:67 [inline]
exit_to_user_mode_loop+0xd0/0x480 kernel/entry/common.c:98
__exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]
syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline]
syscall_exit_to_user_mode include/linux/entry-common.h:325 [inline]
do_syscall_64+0x32d/0xf80 arch/x86/entry/syscall_64.c:100
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f3938202407
Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
RSP: 002b:00007ffc7a1aff80 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
RAX: 0000000000000048 RBX: 00007f39380b2c80 RCX: 00007f3938202407
RDX: 0000000000000080 RSI: 00007ffc7a1b0098 RDI: 0000000000000003
RBP: 00007ffc7a1b0098 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000080
R13: 00007f39380b2c08 R14: 0000000000000024 R15: 0000000000000000