INFO: task jfsCommit:120 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:jfsCommit state:D stack:26920 pid:120 tgid:120 ppid:2 task_flags:0x200040 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x16f3/0x4c20 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] schedule+0x165/0x360 kernel/sched/core.c:7058 io_schedule+0x81/0xe0 kernel/sched/core.c:7903 __lock_metapage fs/jfs/jfs_metapage.c:52 [inline] lock_metapage+0x1f3/0x400 fs/jfs/jfs_metapage.c:66 __get_metapage+0x497/0xde0 fs/jfs/jfs_metapage.c:748 diIAGRead+0xce/0x140 fs/jfs/jfs_imap.c:2672 diFree+0x97f/0x2c30 fs/jfs/jfs_imap.c:959 jfs_evict_inode+0x331/0x440 fs/jfs/inode.c:156 evict+0x504/0x9c0 fs/inode.c:810 txLazyCommit fs/jfs/jfs_txnmgr.c:2664 [inline] jfs_lazycommit+0x3f1/0xa10 fs/jfs/jfs_txnmgr.c:2733 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task syz-executor:16022 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:18856 pid:16022 tgid:16022 ppid:1 task_flags:0x400140 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x16f3/0x4c20 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] schedule+0x165/0x360 kernel/sched/core.c:7058 jfs_flush_journal+0x716/0xed0 fs/jfs/jfs_logmgr.c:1564 jfs_umount+0x178/0x3c0 fs/jfs/jfs_umount.c:58 jfs_put_super+0x8c/0x190 fs/jfs/super.c:194 generic_shutdown_super+0x132/0x2c0 fs/super.c:643 kill_block_super+0x44/0x90 fs/super.c:1766 deactivate_locked_super+0xbc/0x130 fs/super.c:474 cleanup_mnt+0x425/0x4c0 fs/namespace.c:1375 task_work_run+0x1d4/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop+0xec/0x110 kernel/entry/common.c:43 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline] do_syscall_64+0x2bd/0x3b0 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd45f52ff17 RSP: 002b:00007ffcc5b273d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 00007fd45f5b1c05 RCX: 00007fd45f52ff17 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc5b27490 RBP: 00007ffcc5b27490 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcc5b28520 R13: 00007fd45f5b1c05 R14: 000000000016bdc2 R15: 00007ffcc5b28560 Showing all locks held in the system: 7 locks held by kworker/1:0/31: 2 locks held by kworker/u8:2/37: 1 lock held by khungtaskd/39: #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775 2 locks held by kworker/u8:4/67: #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3319 #1: ffffc9000152fbc0 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline] #1: ffffc9000152fbc0 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3319 2 locks held by jfsCommit/120: #0: ffff888059618900 (&(imap->im_aglock[index])){+.+.}-{4:4}, at: diFree+0x29b/0x2c30 fs/jfs/jfs_imap.c:889 #1: ffff88805eb34618 (&jfs_ip->rdwrlock/1){.+.+}-{4:4}, at: diFree+0x2b9/0x2c30 fs/jfs/jfs_imap.c:894 4 locks held by kworker/u8:13/4854: 2 locks held by udevd/5206: #0: ffffffff8dac5368 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:161 [inline] #0: ffffffff8dac5368 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:253 #1: ffff8880b8842b38 ((&c->lock)){+.+.}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:44 [inline] #1: ffff8880b8842b38 ((&c->lock)){+.+.}-{3:3}, at: put_cpu_partial+0x3d/0x100 mm/slub.c:3265 2 locks held by getty/5595: #0: ffff88823bf708a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 drivers/tty/n_tty.c:2222 1 lock held by syz-executor/16022: #0: ffff88805c2a00d0 (&type->s_umount_key#69){++++}-{4:4}, at: __super_lock fs/super.c:57 [inline] #0: ffff88805c2a00d0 (&type->s_umount_key#69){++++}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline] #0: ffff88805c2a00d0 (&type->s_umount_key#69){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 fs/super.c:506 2 locks held by udevd/16113: #0: ffff888023cfdc50 (&mm->mmap_lock){++++}-{4:4}, at: mmap_write_lock_killable include/linux/mmap_lock.h:415 [inline] #0: ffff888023cfdc50 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x214/0x4d0 mm/util.c:578 #1: ffff8880296daa68 (&anon_vma->rwsem){++++}-{4:4}, at: anon_vma_lock_read include/linux/rmap.h:137 [inline] #1: ffff8880296daa68 (&anon_vma->rwsem){++++}-{4:4}, at: validate_mm+0x1d4/0x4b0 mm/vma.c:679 6 locks held by udevd/16241: 2 locks held by udevd/16417: 7 locks held by syz-executor/17354: #0: ffff888032052488 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:557 #1: ffff8880600c4790 (&inode->i_sb->s_type->i_mutex_dir_key/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:914 [inline] #1: ffff8880600c4790 (&inode->i_sb->s_type->i_mutex_dir_key/1){+.+.}-{4:4}, at: do_unlinkat+0x1c7/0x570 fs/namei.c:4637 #2: ffff8880602afa90 (&sb->s_type->i_mutex_key#35){++++}-{4:4}, at: inode_lock include/linux/fs.h:869 [inline] #2: ffff8880602afa90 (&sb->s_type->i_mutex_key#35){++++}-{4:4}, at: vfs_unlink+0xf2/0x660 fs/namei.c:4575 #3: ffff888032052778 (sb_internal#6){.+.+}-{0:0}, at: xfs_trans_alloc+0xd7/0x980 fs/xfs/xfs_trans.c:256 #4: ffff8880600c4508 (&xfs_dir_ilock_class){++++}-{4:4}, at: xfs_lock_two_inodes+0xb0/0x310 fs/xfs/xfs_inode.c:506 #5: ffff8880602af808 (&xfs_nondir_ilock_class/1){+.+.}-{4:4}, at: xfs_trans_alloc_dir+0x154/0x620 fs/xfs/xfs_trans.c:1374 #6: ffff88805e16e7a8 (&dqp->q_qlock){+.+.}-{4:4}, at: xfs_dqlock fs/xfs/xfs_dquot.h:131 [inline] #6: ffff88805e16e7a8 (&dqp->q_qlock){+.+.}-{4:4}, at: xfs_trans_dqlockedjoin+0x1bf/0x2a0 fs/xfs/xfs_trans_dquot.c:396 1 lock held by syz.2.1242/17544: #0: ffff88805c2a00d0 (&type->s_umount_key#69){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline] #0: ffff88805c2a00d0 (&type->s_umount_key#69){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121 1 lock held by syz-executor/17764: 1 lock held by syz.9.1289/17983: #0: ffff88805c2a00d0 (&type->s_umount_key#69){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline] #0: ffff88805c2a00d0 (&type->s_umount_key#69){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121 1 lock held by syz.6.1330/18404: #0: ffff88805c2a00d0 (&type->s_umount_key#69){++++}-{4:4}, at: __super_lock fs/super.c:59 [inline] #0: ffff88805c2a00d0 (&type->s_umount_key#69){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 fs/super.c:121 3 locks held by syz.3.1414/19311: 1 lock held by syz.1.1415/19322: 4 locks held by dhcpcd-run-hook/19376: ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline] watchdog+0xf93/0xfe0 kernel/hung_task.c:491 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 Workqueue: xfs-inodegc/loop0 xfs_inodegc_worker RIP: 0010:__bfs kernel/locking/lockdep.c:1815 [inline] RIP: 0010:__bfs_backwards kernel/locking/lockdep.c:1860 [inline] RIP: 0010:check_irq_usage kernel/locking/lockdep.c:2796 [inline] RIP: 0010:check_prev_add kernel/locking/lockdep.c:3169 [inline] RIP: 0010:check_prevs_add kernel/locking/lockdep.c:3284 [inline] RIP: 0010:validate_chain+0xfd7/0x2140 kernel/locking/lockdep.c:3908 Code: 25 ff 0f 00 00 39 05 24 41 61 11 73 06 89 05 1c 41 61 11 49 8b 04 24 48 89 de 48 39 e8 0f 84 33 fe ff ff 4c 89 68 30 48 8b 00 <48> 39 e8 75 f4 48 89 de e9 1f fe ff ff 48 c7 c7 50 91 87 8d 48 89 RSP: 0018:ffffc90000a5f070 EFLAGS: 00000002 RAX: ffffffff959693d8 RBX: 00000000000003cd RCX: 0000000000000518 RDX: 0000000000000008 RSI: 00000000000003cd RDI: ffff88801caf5940 RBP: ffffffff929f6fd8 R08: ffffc90000a5f038 R09: 0000000000000020 R10: ffff88802c8cbc18 R11: ffffffff819c6180 R12: ffffffff958202f8 R13: ffffffff95820368 R14: ffff88801caf6578 R15: 0000000000000517 FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fecd8e42286 CR3: 00000000355e8000 CR4: 00000000003526f0 Call Trace: __lock_acquire+0xab9/0xd20 kernel/locking/lockdep.c:5237 lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 do_write_seqcount_begin_nested include/linux/seqlock.h:477 [inline] do_write_seqcount_begin include/linux/seqlock.h:503 [inline] psi_write_begin+0xab/0x160 kernel/sched/psi.c:183 psi_task_change+0xd9/0x340 kernel/sched/psi.c:919 psi_enqueue kernel/sched/stats.h:166 [inline] enqueue_task+0x345/0x420 kernel/sched/core.c:2092 activate_task kernel/sched/core.c:2132 [inline] ttwu_do_activate+0x1f3/0x870 kernel/sched/core.c:3741 ttwu_queue kernel/sched/core.c:4004 [inline] try_to_wake_up+0x721/0x12b0 kernel/sched/core.c:4328 wake_up_process kernel/sched/core.c:4459 [inline] wake_up_q+0x85/0xd0 kernel/sched/core.c:1084 rt_mutex_wake_up_q kernel/locking/rtmutex.c:572 [inline] rt_mutex_slowunlock+0x1df/0x2e0 kernel/locking/rtmutex.c:1469 xlog_cil_commit+0x1f8b/0x2b80 fs/xfs/xfs_log_cil.c:1776 __xfs_trans_commit+0x3d8/0xbd0 fs/xfs/xfs_trans.c:869 xfs_trans_commit+0x13e/0x1c0 fs/xfs/xfs_trans.c:927 xfs_inactive_ifree+0x29f/0x410 fs/xfs/xfs_inode.c:1275 xfs_inactive+0x9ce/0xcd0 fs/xfs/xfs_inode.c:1474 xfs_inodegc_inactivate fs/xfs/xfs_icache.c:1944 [inline] xfs_inodegc_worker+0x31e/0x7c0 fs/xfs/xfs_icache.c:1990 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3319 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245