INFO: task kworker/u8:6:85 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:6 state:D stack:23512 pid:85 tgid:85 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: writeback wb_workfn (flush-7:4) Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x145f/0x5070 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] rt_mutex_schedule+0x77/0xf0 kernel/sched/core.c:7241 rt_mutex_slowlock_block kernel/locking/rtmutex.c:1647 [inline] __rt_mutex_slowlock kernel/locking/rtmutex.c:1721 [inline] __rt_mutex_slowlock_locked+0x1dfe/0x25e0 kernel/locking/rtmutex.c:1760 rt_mutex_slowlock+0xb5/0x160 kernel/locking/rtmutex.c:1800 __rt_mutex_lock kernel/locking/rtmutex.c:1815 [inline] rwbase_write_lock+0x14f/0x750 kernel/locking/rwbase_rt.c:244 f2fs_down_write fs/f2fs/f2fs.h:2313 [inline] f2fs_issue_checkpoint+0x38a/0x5b0 fs/f2fs/checkpoint.c:1893 f2fs_balance_fs_bg+0x54a/0x9b0 fs/f2fs/segment.c:544 f2fs_write_node_pages+0x146/0x6e0 fs/f2fs/node.c:2218 do_writepages+0x32e/0x550 mm/page-writeback.c:2598 __writeback_single_inode+0x133/0x1240 fs/fs-writeback.c:1737 writeback_sb_inodes+0x8c8/0x1840 fs/fs-writeback.c:2030 __writeback_inodes_wb+0x111/0x240 fs/fs-writeback.c:2107 wb_writeback+0x43f/0xaa0 fs/fs-writeback.c:2218 wb_check_old_data_flush fs/fs-writeback.c:2322 [inline] wb_do_writeback fs/fs-writeback.c:2375 [inline] wb_workfn+0xad7/0xee0 fs/fs-writeback.c:2403 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 Showing all locks held in the system: 1 lock held by khungtaskd/38: #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775 4 locks held by kworker/u8:6/85: #0: ffff88801c6e9938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3232 [inline] #0: ffff88801c6e9938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 kernel/workqueue.c:3340 #1: ffffc9000157fbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3233 [inline] #1: ffffc9000157fbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 kernel/workqueue.c:3340 #2: ffff888020b800d0 (&type->s_umount_key#87){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 fs/super.c:563 #3: ffff88805dbe5a80 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write fs/f2fs/f2fs.h:2313 [inline] #3: ffff88805dbe5a80 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_issue_checkpoint+0x38a/0x5b0 fs/f2fs/checkpoint.c:1893 2 locks held by getty/5563: #0: ffff888030c8b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 drivers/tty/n_tty.c:2211 4 locks held by syz.4.38/6103: ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline] watchdog+0xf95/0xfe0 kernel/hung_task.c:515 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 6103 Comm: syz.4.38 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 RIP: 0010:check_kcov_mode kernel/kcov.c:185 [inline] RIP: 0010:write_comp_data kernel/kcov.c:246 [inline] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x45/0xa0 kernel/kcov.c:321 Code: e0 00 00 ff 00 ba 00 01 00 00 23 91 7c 0b 00 00 41 89 d1 45 09 c1 74 12 45 85 c0 75 5b 85 d2 74 57 83 b9 3c 16 00 00 00 74 4e <8b> 91 18 16 00 00 83 fa 03 75 43 48 8b 91 20 16 00 00 44 8b 89 1c RSP: 0018:ffffc90005fb7138 EFLAGS: 00000246 RAX: ffffffff81f82372 RBX: ffffea00016f1640 RCX: ffff888024265ac0 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 R10: dffffc0000000000 R11: fffff940002de2c9 R12: 1ffffd40002de2c9 R13: 0080000000004135 R14: ffffea0000bc39c8 R15: dffffc0000000000 FS: 00007fb8394d66c0(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055ab83de34b0 CR3: 0000000052b34000 CR4: 00000000003526f0 Call Trace: folio_flags include/linux/page-flags.h:360 [inline] folio_xor_flags_has_waiters include/linux/page-flags.h:772 [inline] folio_unlock+0xb2/0x160 mm/filemap.c:1505 f2fs_folio_put+0xc0/0x1a0 fs/f2fs/f2fs.h:2990 __get_node_folio+0xf3a/0x14d0 fs/f2fs/node.c:1590 f2fs_update_inode_page+0x82/0x190 fs/f2fs/inode.c:772 f2fs_sync_inode_meta fs/f2fs/checkpoint.c:1156 [inline] block_operations fs/f2fs/checkpoint.c:1263 [inline] f2fs_write_checkpoint+0xb44/0x2430 fs/f2fs/checkpoint.c:1678 f2fs_issue_checkpoint+0x39a/0x5b0 fs/f2fs/checkpoint.c:1894 f2fs_do_shutdown+0x111/0x570 fs/f2fs/file.c:2441 f2fs_ioc_shutdown fs/f2fs/file.c:2525 [inline] __f2fs_ioctl+0x4328/0xb840 fs/f2fs/file.c:4635 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl+0xff/0x170 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb83b26f749 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb8394d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fb83b4c5fa0 RCX: 00007fb83b26f749 RDX: 0000200000000100 RSI: 000000008004587d RDI: 0000000000000008 RBP: 00007fb83b2f3f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fb83b4c6038 R14: 00007fb83b4c5fa0 R15: 00007ffcc00ace08