INFO: task jbd2/sda1-8:2821 blocked for more than 149 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:jbd2/sda1-8 state:D
stack:25960 pid:2821 tgid:2821 ppid:2 task_flags:0x240040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5256 [inline]
__schedule+0x145d/0x4a00 kernel/sched/core.c:6863
__schedule_loop kernel/sched/core.c:6945 [inline]
schedule+0xe7/0x3a0 kernel/sched/core.c:6960
io_schedule+0xbf/0x130 kernel/sched/core.c:7789
bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:250
__wait_on_bit+0x65/0x180 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:67
wait_on_bit_io include/linux/wait_bit.h:105 [inline]
__wait_on_buffer+0x64/0x70 fs/buffer.c:123
wait_on_buffer include/linux/buffer_head.h:420 [inline]
journal_wait_on_commit_record fs/jbd2/commit.c:171 [inline]
jbd2_journal_commit_transaction+0x49e0/0x67f0 fs/jbd2/commit.c:881
kjournald2+0x1f4/0x760 fs/jbd2/journal.c:201
kthread+0x3c5/0x780 kernel/kthread.c:463
ret_from_fork+0x74f/0xa30 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
Showing all locks held in the system:
6 locks held by kworker/0:0/9:
1 lock held by khungtaskd/30:
#0: ffffffff892cd6e0 (rcu_read_lock
){....}-{1:3}
, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:867 [inline]
, at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6775
3 locks held by kworker/u8:10/344:
#0: ffff8881126ec148
((wq_completion)ipv6_addrconf
){+.+.}-{0:0}
, at: process_one_work+0x128d/0x1b20 kernel/workqueue.c:3232
#1: ffffc90001927ca0
((work_completion)(&(&net->ipv6.addr_chk_work)->work)
){+.+.}-{0:0}
, at: process_one_work+0x914/0x1b20 kernel/workqueue.c:3233
#2: ffffffff8a666c68
(
rtnl_mutex
){+.+.}-{4:4}
, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
, at: addrconf_verify_work+0x12/0x30 net/ipv6/addrconf.c:4734
2 locks held by getty/2922:
#0:
ffff88811288f0a0 (
&tty->ldisc_sem
){++++}-{0:0}
, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
#1: ffffc900000452f0
(&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 drivers/tty/n_tty.c:2211
5 locks held by kworker/0:3/5227:
5 locks held by kworker/1:3/5273:
5 locks held by kworker/1:6/5782:
#0:
ffff8881056df148 ((wq_completion)usb_hub_wq
){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 kernel/workqueue.c:3232
#1: ffffc9001283fca0 (
(work_completion)(&hub->events)
){+.+.}-{0:0}
, at: process_one_work+0x914/0x1b20 kernel/workqueue.c:3233
#2:
ffff88810abd3198 (
&dev->mutex
){....}-{4:4}
, at: device_lock include/linux/device.h:895 [inline]
, at: hub_event+0x1be/0x5420 drivers/usb/core/hub.c:5899
#3: ffff88810a6c4198
(
&dev->mutex
){....}-{4:4}
, at: hrtimer_update_base kernel/time/hrtimer.c:633 [inline]
, at: hrtimer_interrupt+0x13e/0x8e0 kernel/time/hrtimer.c:1885
#4:
ffffffff93c101e0
(
&obj_hash[i].lock
){-.-.}-{2:2}
, at: rcu_try_lock_acquire include/linux/rcupdate.h:336 [inline]
, at: srcu_read_lock_nmisafe include/linux/srcu.h:409 [inline]
, at: console_srcu_read_lock kernel/printk/printk.c:289 [inline]
, at: console_flush_one_record+0x103/0xc60 kernel/printk/printk.c:3192
4 locks held by udevd/9566:
#0:
ffff88811478c2f0
(&p->lock
){+.+.}-{4:4}
, at: seq_read_iter+0xe1/0x12d0 fs/seq_file.c:182
#1: ffff88811e00bc88
(&of->mutex
#2
){+.+.}-{4:4}
, at: kernfs_seq_start+0x4f/0x2a0 fs/kernfs/file.c:172
#2:
ffff8881399dc008
(
kn->active
#9
){++++}-{0:0}
, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
, at: kernfs_seq_start+0xbc/0x2a0 fs/kernfs/file.c:173
#3:
ffff88811c34b198
(
&dev->mutex
){....}-{4:4}
, at: device_lock_interruptible include/linux/device.h:900 [inline]
, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
4 locks held by udevd/9585:
#0:
ffff88811d35fc30
(
&p->lock
){+.+.}-{4:4}
, at: seq_read_iter+0xe1/0x12d0 fs/seq_file.c:182
#1: ffff888117f39488
(
&of->mutex#2
){+.+.}-{4:4}
, at: kernfs_seq_start+0x4f/0x2a0 fs/kernfs/file.c:172
#2:
ffff88811b1473c8
(kn->active
#9){++++}-{0:0}
, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
, at: kernfs_seq_start+0xbc/0x2a0 fs/kernfs/file.c:173
#3: ffff88811ca4a198
(
&dev->mutex){....}-{4:4}, at: device_lock_interruptible include/linux/device.h:900 [inline]
&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142
4 locks held by kworker/u8:1/12640:
#0: ffff888100ac4948
(
(wq_completion)netns){+.+.}-{0:0}
, at: process_one_work+0x128d/0x1b20 kernel/workqueue.c:3232
#1: ffffc900071ffca0
(
net_cleanup_work){+.+.}-{0:0}
, at: process_one_work+0x914/0x1b20 kernel/workqueue.c:3233
#2: ffffffff8a6505b0
(
pernet_ops_rwsem){++++}-{4:4}
, at: cleanup_net+0xad/0x900 net/core/net_namespace.c:670
#3: ffffffff8a666c68
(
rtnl_mutex
){+.+.}-{4:4}
, at: ops_exit_rtnl_list net/core/net_namespace.c:173 [inline]
, at: ops_undo_list+0x7e9/0xab0 net/core/net_namespace.c:248
3 locks held by kworker/1:2/13840:
#0: ffff888100071948
(
(wq_completion)events
){+.+.}-{0:0}
, at: process_one_work+0x128d/0x1b20 kernel/workqueue.c:3232
#1:
ffffc900028d7ca0
(
free_ipc_work){+.+.}-{0:0}
, at: process_one_work+0x914/0x1b20 kernel/workqueue.c:3233
#2: ffffffff892d8e38
(
rcu_state.exp_mutex
){+.+.}-{4:4}
, at: exp_funnel_lock+0x1a3/0x3c0 kernel/rcu/tree_exp.h:343
2 locks held by syz-executor/14034:
#0: ffffffff8a6505b0
(
pernet_ops_rwsem){++++}-{4:4}
, at: copy_net_ns+0x31b/0x780 net/core/net_namespace.c:577
#1:
ffffffff8a666c68
(rtnl_mutex
){+.+.}-{4:4}
, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
, at: register_netdevice_notifier_net+0x23/0xb0 net/core/dev.c:2083
2 locks held by syz-executor/14045:
#0: ffffffff8a6505b0
(
pernet_ops_rwsem){++++}-{4:4}
, at: copy_net_ns+0x31b/0x780 net/core/net_namespace.c:577
#1: ffffffff8a666c68
(
rtnl_mutex){+.+.}-{4:4}
, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
, at: register_netdevice_notifier_net+0x23/0xb0 net/core/dev.c:2083
2 locks held by syz-executor/14047:
#0:
ffffffff8a6505b0
(
pernet_ops_rwsem
){++++}-{4:4}
, at: copy_net_ns+0x31b/0x780 net/core/net_namespace.c:577
#1:
ffffffff8a666c68
(
rtnl_mutex){+.+.}-{4:4}
, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
, at: register_netdevice_notifier_net+0x23/0xb0 net/core/dev.c:2083
2 locks held by syz-executor/14060:
#0: ffffffff8a6505b0 (pernet_ops_rwsem
){++++}-{4:4}, at: copy_net_ns+0x31b/0x780 net/core/net_namespace.c:577
#1:
ffffffff8a666c68
(
rtnl_mutex){+.+.}-{4:4}
, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
, at: register_netdevice_notifier_net+0x23/0xb0 net/core/dev.c:2083
2 locks held by syz-executor/14070:
#0:
ffffffff8a6505b0
(pernet_ops_rwsem
){++++}-{4:4}
, at: copy_net_ns+0x31b/0x780 net/core/net_namespace.c:577
#1: ffffffff8a666c68
(rtnl_mutex
){+.+.}-{4:4}
, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
, at: register_netdevice_notifier_net+0x23/0xb0 net/core/dev.c:2083
1 lock held by syz-executor/14085:
#0:
ffffffff8a666c68
(
rtnl_mutex){+.+.}-{4:4}
, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
, at: inet_rtm_newaddr+0x30c/0x1540 net/ipv4/devinet.c:978
1 lock held by syz-executor/14088:
#0: ffffffff8a666c68
(
rtnl_mutex){+.+.}-{4:4}
, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
, at: inet_rtm_newaddr+0x30c/0x1540 net/ipv4/devinet.c:978
1 lock held by syz-executor/14094:
#0:
ffffffff8a666c68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
ffffffff8a666c68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 net/ipv4/devinet.c:978
1 lock held by syz-executor/14098:
#0: ffffffff8a666c68
(
rtnl_mutex){+.+.}-{4:4}
, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
, at: inet_rtm_newaddr+0x30c/0x1540 net/ipv4/devinet.c:978
1 lock held by syz-executor/14101:
#0:
ffffffff8a666c68 (rtnl_mutex
){+.+.}-{4:4}
, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
, at: inet_rtm_newaddr+0x30c/0x1540 net/ipv4/devinet.c:978
1 lock held by syz-executor/14105:
#0: ffffffff8a666c68
(
rtnl_mutex){+.+.}-{4:4}
, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
, at: inet_rtm_newaddr+0x30c/0x1540 net/ipv4/devinet.c:978
1 lock held by syz-executor/14110:
#0:
ffffffff8a666c68 (
rtnl_mutex
){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 net/ipv4/devinet.c:978
1 lock held by syz-executor/14112:
#0: ffffffff8a666c68
(
rtnl_mutex){+.+.}-{4:4}
, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
, at: inet_rtm_newaddr+0x30c/0x1540 net/ipv4/devinet.c:978
1 lock held by syz-executor/14118:
#0:
ffffffff8a666c68 (
rtnl_mutex
){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 net/ipv4/devinet.c:978
1 lock held by syz-executor/14120:
#0: ffffffff8a666c68
(
rtnl_mutex){+.+.}-{4:4}
, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
, at: inet_rtm_newaddr+0x30c/0x1540 net/ipv4/devinet.c:978
=============================================
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(voluntary)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
__sys_info lib/sys_info.c:157 [inline]
sys_info+0x133/0x180 lib/sys_info.c:165
check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline]
watchdog+0xe66/0x1180 kernel/hung_task.c:515
kthread+0x3c5/0x780 kernel/kthread.c:463
ret_from_fork+0x74f/0xa30 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 5782 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(voluntary)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Workqueue: events dvb_usb_read_remote_control
RIP: 0010:get_current arch/x86/include/asm/current.h:25 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 kernel/kcov.c:216
Code: e9 8d 48 59 00 be 03 00 00 00 5b e9 32 72 0f 01 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 <65> 48 8b 15 58 d3 22 0b 65 8b 05 69 d3 22 0b a9 00 01 ff 00 74 1d
RSP: 0018:ffffc9001283f210 EFLAGS: 00000282
RAX: 0000000000000000 RBX: ffffc9001283f542 RCX: ffffffff8753361f
RDX: ffff88810a6ed7c0 RSI: ffffffff8753368a RDI: 0000000000000005
RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000
R10: 00000000fffffffb R11: 00000000004b3398 R12: 00000000fffffffb
R13: ffffc9001283f2af R14: ffffc9001283f54c R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff888268cf4000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffdebb9fe74 CR3: 0000000117a32000 CR4: 00000000003506f0
Call Trace:
number+0x9aa/0xc70 lib/vsprintf.c:582
vsnprintf+0x5fa/0x11e0 lib/vsprintf.c:2911
snprintf+0xc7/0x100 lib/vsprintf.c:3041
print_caller kernel/printk/printk.c:1366 [inline]
info_print_prefix+0x134/0x350 kernel/printk/printk.c:1385
record_print_text+0x140/0x400 kernel/printk/printk.c:1432
printk_get_next_message+0x2d1/0x6d0 kernel/printk/printk.c:3018
console_emit_next_record kernel/printk/printk.c:3083 [inline]
console_flush_one_record+0x684/0xc60 kernel/printk/printk.c:3215
console_flush_all kernel/printk/printk.c:3289 [inline]
__console_flush_and_unlock kernel/printk/printk.c:3319 [inline]
console_unlock+0xef/0x240 kernel/printk/printk.c:3359
vprintk_emit+0x407/0x6b0 kernel/printk/printk.c:2426
_printk+0xc7/0x100 kernel/printk/printk.c:2451
dvb_usb_read_remote_control+0x174/0x1c0 drivers/media/usb/dvb-usb/dvb-usb-remote.c:263
process_one_work+0x9ba/0x1b20 kernel/workqueue.c:3257
process_scheduled_works kernel/workqueue.c:3340 [inline]
worker_thread+0x6c8/0xf10 kernel/workqueue.c:3421
kthread+0x3c5/0x780 kernel/kthread.c:463
ret_from_fork+0x74f/0xa30 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246