INFO: task kworker/u4:2:154 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u4:2 state:D stack:25064 pid: 154 ppid: 2 flags:0x00004000 Workqueue: writeback wb_workfn (flush-7:1) Call Trace: context_switch kernel/sched/core.c:5049 [inline] __schedule+0x11bb/0x4390 kernel/sched/core.c:6395 schedule+0x11b/0x1e0 kernel/sched/core.c:6478 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6537 __mutex_lock_common+0xc71/0x2390 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743 hfsplus_find_init+0x150/0x1c0 fs/hfsplus/bfind.c:28 hfsplus_cat_write_inode+0x1e3/0x820 fs/hfsplus/inode.c:588 write_inode fs/fs-writeback.c:1505 [inline] __writeback_single_inode+0x6c3/0xda0 fs/fs-writeback.c:1715 writeback_sb_inodes+0x9fe/0x1610 fs/fs-writeback.c:1940 __writeback_inodes_wb+0x12a/0x3f0 fs/fs-writeback.c:2011 wb_writeback+0x455/0xb90 fs/fs-writeback.c:2116 wb_check_background_flush fs/fs-writeback.c:2182 [inline] wb_do_writeback fs/fs-writeback.c:2270 [inline] wb_workfn+0xb47/0xe60 fs/fs-writeback.c:2298 process_one_work+0x863/0x1000 kernel/workqueue.c:2310 worker_thread+0xaa8/0x12a0 kernel/workqueue.c:2457 kthread+0x436/0x520 kernel/kthread.c:334 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287 INFO: task syz.1.22:4368 blocked for more than 145 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.22 state:D stack:27856 pid: 4368 ppid: 4187 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5049 [inline] __schedule+0x11bb/0x4390 kernel/sched/core.c:6395 schedule+0x11b/0x1e0 kernel/sched/core.c:6478 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6537 __mutex_lock_common+0xc71/0x2390 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743 hfsplus_find_init+0x150/0x1c0 fs/hfsplus/bfind.c:28 __hfsplus_getxattr+0x2a3/0x7f0 fs/hfsplus/xattr.c:520 hfsplus_getxattr+0x98/0xd0 fs/hfsplus/xattr.c:594 __vfs_getxattr+0x395/0x3d0 fs/xattr.c:401 cap_inode_need_killpriv+0x41/0x60 security/commoncap.c:301 security_inode_need_killpriv+0x5e/0x90 security/security.c:1423 dentry_needs_remove_privs+0x85/0xf0 fs/inode.c:1989 do_truncate+0xfb/0x220 fs/open.c:57 vfs_truncate+0x262/0x2f0 fs/open.c:111 do_sys_truncate+0xdc/0x190 fs/open.c:134 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7fc173fd2749 RSP: 002b:00007fc172218038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c RAX: ffffffffffffffda RBX: 00007fc174229090 RCX: 00007fc173fd2749 RDX: 0000000000000000 RSI: 000000400000f030 RDI: 0000200000000080 RBP: 00007fc174056f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fc174229128 R14: 00007fc174229090 R15: 00007fff75a6a798 Showing all locks held in the system: 1 lock held by khungtaskd/27: #0: ffffffff8c11c720 ( rcu_read_lock ){....}-{1:2} , at: rcu_lock_acquire+0x0/0x30 2 locks held by kworker/u4:1/144: 4 locks held by kworker/u4:2/154: #0: ffff8881445fc938 ( (wq_completion)writeback ){+.+.}-{0:0} , at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1 #1: ffffc90002027d00 ((work_completion)(&(&wb->dwork)->work) ){+.+.}-{0:0} , at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285 #2: ffff88807a5aa0e0 ( &type->s_umount_key #60 ){++++}-{3:3} , at: trylock_super+0x1c/0xf0 fs/super.c:418 #3: ffff88807a5ae0b0 ( &tree->tree_lock ){+.+.}-{3:3} , at: hfsplus_find_init+0x150/0x1c0 fs/hfsplus/bfind.c:28 4 locks held by kworker/u4:3/1145: #0: ffff888016879138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1 #1: ffffc9000549fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285 #2: ffffffff8d232788 ( rtnl_mutex ){+.+.}-{3:3} , at: linkwatch_event+0xa/0x50 net/core/link_watch.c:251 #3: ffffffff8c1211a8 ( rcu_state.exp_mutex ){+.+.}-{3:3} , at: exp_funnel_lock kernel/rcu/tree_exp.h:290 [inline] , at: synchronize_rcu_expedited+0x347/0x6b0 kernel/rcu/tree_exp.h:845 1 lock held by dhcpcd/3853: #0: ffffffff8d232788 ( rtnl_mutex ){+.+.}-{3:3} , at: devinet_ioctl+0x258/0x1a70 net/ipv4/devinet.c:1076 2 locks held by getty/3944: #0: ffff88814d469098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:252 #1: ffffc900023ce2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 drivers/tty/n_tty.c:2158 2 locks held by kworker/1:4/4230: #0: ffff888016872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1 #1: ffffc9000316fd00 ((work_completion)(&rew.rew_work) ){+.+.}-{0:0} , at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285 3 locks held by kworker/1:5/4258: #0: ffff888016870938 ( (wq_completion)events ){+.+.}-{0:0} , at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1 #1: ffffc9000332fd00 ( deferred_process_work ){+.+.}-{0:0} , at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285 #2: ffffffff8d232788 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 net/switchdev/switchdev.c:74 6 locks held by kworker/u4:5/4263: #0: ffff8880169cd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1 #1: ffffc9000336fd00 ( net_cleanup_work ){+.+.}-{0:0} , at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285 #2: ffffffff8d226b10 ( pernet_ops_rwsem ){++++}-{3:3} , at: cleanup_net+0x132/0xb80 net/core/net_namespace.c:589 #3: ffffffff8d257e48 (devlink_mutex ){+.+.}-{3:3} , at: devlink_pernet_pre_exit+0x97/0x300 net/core/devlink.c:11534 #4: ffff888060d49658 (&nsim_bus_dev->nsim_bus_reload_lock ){+.+.}-{3:3} , at: nsim_dev_reload_up+0xbf/0x7f0 drivers/net/netdevsim/dev.c:897 #5: ffffffff8d232788 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x7d/0x210 net/ipv4/nexthop.c:3620 9 locks held by syz.1.22/4365: 2 locks held by syz.1.22/4368: #0: ffff88807a5aa460 (