INFO: task kworker/1:2:790 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:2 state:D
stack:22152 pid:790 ppid:2 flags:0x00004000
Workqueue: gfs2_recovery gfs2_recover_func
Call Trace:
context_switch kernel/sched/core.c:5393 [inline]
__schedule+0x156f/0x4720 kernel/sched/core.c:6722
schedule+0xbd/0x170 kernel/sched/core.c:6796
io_schedule+0x80/0xd0 kernel/sched/core.c:9075
folio_wait_bit_common+0x886/0xff0 mm/filemap.c:1329
folio_wait_locked include/linux/pagemap.h:1149 [inline]
gfs2_jhead_process_page+0x17e/0x750 fs/gfs2/lops.c:477
gfs2_find_jhead+0xc84/0xdc0 fs/gfs2/lops.c:594
gfs2_recover_func+0x6cd/0x1c80 fs/gfs2/recovery.c:460
process_one_work kernel/workqueue.c:2657 [inline]
process_scheduled_works+0xa60/0x1600 kernel/workqueue.c:2734
worker_thread+0xa5e/0xfe0 kernel/workqueue.c:2815
kthread+0x2fa/0x390 kernel/kthread.c:388
ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
INFO: task syz.6.675:9352 blocked for more than 144 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.6.675 state:D stack:24688 pid:9352 ppid:8821 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5393 [inline]
__schedule+0x156f/0x4720 kernel/sched/core.c:6722
schedule+0xbd/0x170 kernel/sched/core.c:6796
bit_wait+0x13/0x100 kernel/sched/wait_bit.c:199
__wait_on_bit+0x9f/0x2c0 kernel/sched/wait_bit.c:49
out_of_line_wait_on_bit+0x13c/0x190 kernel/sched/wait_bit.c:64
wait_on_bit include/linux/wait_bit.h:76 [inline]
gfs2_recover_journal+0xda/0x130 fs/gfs2/recovery.c:577
init_journal+0x1838/0x22f0 fs/gfs2/ops_fstype.c:833
init_inodes+0xdb/0x320 fs/gfs2/ops_fstype.c:886
gfs2_fill_super+0x1828/0x1f90 fs/gfs2/ops_fstype.c:1266
get_tree_bdev+0x3e5/0x520 fs/super.c:1602
gfs2_get_tree+0x51/0x1e0 fs/gfs2/ops_fstype.c:1344
vfs_get_tree+0x8c/0x280 fs/super.c:1775
do_new_mount+0x24a/0xa60 fs/namespace.c:3412
do_mount fs/namespace.c:3780 [inline]
__do_sys_mount fs/namespace.c:3989 [inline]
__se_sys_mount+0x2e7/0x3d0 fs/namespace.c:3966
do_syscall_x64 arch/x86/entry/common.c:46 [inline]
do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fe4acfa0d8a
RSP: 002b:00007fe4ade80e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007fe4ade80ee0 RCX: 00007fe4acfa0d8a
RDX: 0000200000000100 RSI: 0000200000000900 RDI: 00007fe4ade80ea0
RBP: 0000200000000100 R08: 00007fe4ade80ee0 R09: 0000000000000010
R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000000900
R13: 00007fe4ade80ea0 R14: 0000000000038040 R15: 0000200000000940
Showing all locks held in the system:
1 lock held by khungtaskd/29:
#0: ffffffff8e1322e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:334 [inline]
#0: ffffffff8e1322e0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:786 [inline]
#0: ffffffff8e1322e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 kernel/locking/lockdep.c:6669
2 locks held by kworker/u4:2/34:
2 locks held by kworker/0:2/57:
2 locks held by kworker/1:2/790:
#0: ffff88801a3e6d38 ((wq_completion)gfs2_recovery){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2632 [inline]
#0: ffff88801a3e6d38 ((wq_completion)gfs2_recovery){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2734
#1: ffffc90003ba7d00 ((work_completion)(&jd->jd_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2632 [inline]
#1: ffffc90003ba7d00 ((work_completion)(&jd->jd_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2734
2 locks held by getty/5545:
#0: ffff88814bb2f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc9000327e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x43a/0x1400 drivers/tty/n_tty.c:2217
4 locks held by kworker/0:3/5786:
9 locks held by kworker/1:3/5837:
3 locks held by kworker/u4:15/6336:
5 locks held by kworker/u4:25/6346:
1 lock held by syz.6.675/9352:
#0: ffff88803025c0e0 (&type->s_umount_key#77){+.+.}-{3:3}, at: __super_lock fs/super.c:56 [inline]
#0: ffff88803025c0e0 (&type->s_umount_key#77){+.+.}-{3:3}, at: __super_lock_excl fs/super.c:71 [inline]
#0: ffff88803025c0e0 (&type->s_umount_key#77){+.+.}-{3:3}, at: get_tree_bdev+0x345/0x520 fs/super.c:1600
1 lock held by udevd/10583:
1 lock held by syz.5.1159/11895:
1 lock held by dhcpcd-run-hook/11930:
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
Call Trace:
dump_stack_lvl+0x18c/0x250 lib/dump_stack.c:106
nmi_cpu_backtrace+0x3a6/0x3e0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x17a/0x2f0 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline]
watchdog+0xf59/0xfa0 kernel/hung_task.c:379
kthread+0x2fa/0x390 kernel/kthread.c:388
ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 11895 Comm: syz.5.1159 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
RIP: 0010:vsnprintf+0x112/0x1ba0 lib/vsprintf.c:2779
Code: 1a 00 00 4c 63 f0 4b 8d 2c 37 48 8b 5c 24 40 0f b6 fb 48 c7 c6 60 ad 75 8f e8 5a b2 ff f6 0f b6 c3 83 f8 08 0f 8e c4 00 00 00 <83> f8 0c 4c 8b 74 24 28 0f 8e 71 01 00 00 83 f8 0f 49 bf 00 00 00
RSP: 0018:ffffc9000bc26c18 EFLAGS: 00000202
RAX: 0000000000000009 RBX: ffff0a0000000509 RCX: 0000000000000001
RDX: ffffffff8a883106 RSI: ffffffff8f75ad60 RDI: 0000000000000009
RBP: ffffffff8aeb92a5 R08: ffff888019729e00 R09: 0000000000000012
R10: 0000000000000012 R11: 0000000000000000 R12: ffffc9008bc26edf
R13: ffffc9000bc26ee1 R14: 0000000000000004 R15: ffffffff8aeb92a1
FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f74c11d7eb8 CR3: 0000000066ed9000 CR4: 00000000003506e0
Call Trace:
sprintf+0xe8/0x140 lib/vsprintf.c:3027
print_time kernel/printk/printk.c:1327 [inline]
info_print_prefix+0x16c/0x360 kernel/printk/printk.c:1353
record_print_text+0x182/0x4a0 kernel/printk/printk.c:1402
printk_get_next_message+0x2ab/0x980 kernel/printk/printk.c:2876
console_emit_next_record kernel/printk/printk.c:2911 [inline]
console_flush_all+0x38d/0xcf0 kernel/printk/printk.c:3000
console_unlock+0xad/0x350 kernel/printk/printk.c:3069
vprintk_emit+0x497/0x610 kernel/printk/printk.c:2341
_printk+0xde/0x130 kernel/printk/printk.c:2366
__dynamic_pr_debug+0x1a3/0x260 lib/dynamic_debug.c:879
fill_kobj_path lib/kobject.c:139 [inline]
kobject_get_path+0x2b0/0x2c0 lib/kobject.c:164
kobject_uevent_env+0x291/0x890 lib/kobject_uevent.c:544
device_remove drivers/base/dd.c:626 [inline]
__device_release_driver drivers/base/dd.c:1351 [inline]
device_release_driver_internal+0x408/0x6f0 drivers/base/dd.c:1374
driver_detach+0x1f3/0x2d0 drivers/base/dd.c:1437
bus_remove_driver+0x221/0x2f0 drivers/base/bus.c:792
usb_gadget_unregister_driver+0x4e/0x70 drivers/usb/gadget/udc/core.c:1772
raw_release+0xda/0x260 drivers/usb/gadget/legacy/raw_gadget.c:416
__fput+0x221/0x940 fs/file_table.c:418
task_work_run+0x1d4/0x260 kernel/task_work.c:245
exit_task_work include/linux/task_work.h:43 [inline]
do_exit+0x986/0x2530 kernel/exit.c:890
do_group_exit+0x22d/0x2f0 kernel/exit.c:1032
get_signal+0x12a6/0x1390 kernel/signal.c:2927
arch_do_signal_or_restart+0xc2/0x7b0 arch/x86/kernel/signal.c:310
exit_to_user_mode_loop+0x70/0x110 kernel/entry/common.c:177
exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:213
__syscall_exit_to_user_mode_work kernel/entry/common.c:294 [inline]
syscall_exit_to_user_mode+0x1a/0x50 kernel/entry/common.c:305
do_syscall_64+0x61/0xb0 arch/x86/entry/common.c:82
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fcf5b79f7ab
Code: Unable to access opcode bytes at 0x7fcf5b79f781.
RSP: 002b:00007fcf5c69ff50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007fcf5b79f7ab
RDX: 00007fcf5c6a0fe0 RSI: 0000000080085502 RDI: 0000000000000003
RBP: 00007fcf5b837b70 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fcf5ba25fa0 R15: 00007ffe259ecfc8
virtqueue callback for ffff88802024de00 (ffffffff849b2ec0)
virtqueue interrupt with no work for ffff88802024dc00
virtqueue interrupt with no work for ffff88802024da00
virtqueue callback for ffff888140a41400 (ffffffff85c2c4f0)
No more buffers in queue
Receiving skb proto 0x0806 len 28 type 1
No more buffers in queue