INFO: task syz-executor:4294 blocked for more than 143 seconds. Not tainted 6.1.103-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:4294 ppid:1 flags:0x00000009 Call trace: __switch_to+0x320/0x754 arch/arm64/kernel/process.c:553 context_switch kernel/sched/core.c:5241 [inline] __schedule+0xef4/0x1d44 kernel/sched/core.c:6558 schedule+0xc4/0x170 kernel/sched/core.c:6634 schedule_timeout+0xb8/0x344 kernel/time/timer.c:1941 do_wait_for_common+0x30c/0x468 kernel/sched/completion.c:85 __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion+0x48/0x60 kernel/sched/completion.c:138 kthread_stop+0x1d8/0x8c0 kernel/kthread.c:709 ext4_stop_mmpd+0x48/0xb4 fs/ext4/mmp.c:261 ext4_put_super+0xa58/0xf2c fs/ext4/super.c:1293 generic_shutdown_super+0x130/0x328 fs/super.c:501 kill_block_super+0x70/0xdc fs/super.c:1470 deactivate_locked_super+0xac/0x124 fs/super.c:332 deactivate_super+0xf0/0x110 fs/super.c:363 cleanup_mnt+0x394/0x41c fs/namespace.c:1186 __cleanup_mnt+0x20/0x30 fs/namespace.c:1193 task_work_run+0x240/0x2f0 kernel/task_work.c:203 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] do_notify_resume+0x2148/0x3474 arch/arm64/kernel/signal.c:1132 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline] el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 INFO: task kmmpd-loop1:5116 blocked for more than 143 seconds. Not tainted 6.1.103-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kmmpd-loop1 state:D stack:0 pid:5116 ppid:2 flags:0x00000048 Call trace: __switch_to+0x320/0x754 arch/arm64/kernel/process.c:553 context_switch kernel/sched/core.c:5241 [inline] __schedule+0xef4/0x1d44 kernel/sched/core.c:6558 schedule+0xc4/0x170 kernel/sched/core.c:6634 percpu_rwsem_wait+0x288/0x3cc kernel/locking/percpu-rwsem.c:162 __percpu_down_read+0x7c/0xac kernel/locking/percpu-rwsem.c:177 percpu_down_read include/linux/percpu-rwsem.h:65 [inline] __sb_start_write include/linux/fs.h:1891 [inline] sb_start_write include/linux/fs.h:1966 [inline] write_mmp_block+0x48c/0x734 fs/ext4/mmp.c:66 kmmpd+0x708/0x9f8 fs/ext4/mmp.c:246 kthread+0x250/0x2d8 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/12: #0: ffff800015b95030 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 kernel/rcu/tasks.h:516 1 lock held by rcu_tasks_trace/13: #0: ffff800015b95830 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 kernel/rcu/tasks.h:516 3 locks held by kworker/1:0/22: #0: ffff0000d62c7138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 kernel/workqueue.c:2265 #1: ffff80001b037c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 kernel/workqueue.c:2267 #2: ffff800017fe3848 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 1 lock held by khungtaskd/28: #0: ffff800015b94e60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:349 3 locks held by kworker/u5:0/47: #0: ffff0000dd85a938 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 kernel/workqueue.c:2265 #1: ffff80001b4f7c20 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 kernel/workqueue.c:2267 #2: ffff0000fbc5d0b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x194/0x34c net/bluetooth/hci_sync.c:321 1 lock held by dhcpcd/3964: #0: ffff800017fe3848 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x104/0x698 net/netlink/af_netlink.c:2300 2 locks held by getty/4058: #0: ffff0000d650b098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80001beb02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214 drivers/tty/n_tty.c:2198 1 lock held by syz-executor/4294: #0: ffff0000db2980e0 (&type->s_umount_key#30){++++}-{3:3}, at: deactivate_super+0xe8/0x110 fs/super.c:362 3 locks held by kworker/0:5/4344: #0: ffff0000d62c7138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 kernel/workqueue.c:2265 #1: ffff80001e307c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 kernel/workqueue.c:2267 #2: ffff800017fe3848 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 5 locks held by kworker/u4:7/4398: 3 locks held by kworker/0:7/4441: #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 kernel/workqueue.c:2265 #1: ffff80001e837c20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 kernel/workqueue.c:2267 #2: ffff800017fe3848 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 1 lock held by kmmpd-loop1/5116: #0: ffff0000db298460 (sb_writers#3){++++}-{0:0}, at: kmmpd+0x708/0x9f8 fs/ext4/mmp.c:246 3 locks held by kworker/u4:18/5883: #0: ffff0000c002a138 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 kernel/workqueue.c:2265 #1: ffff80001f6c7c20 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 kernel/workqueue.c:2267 #2: ffff800017fe3848 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 1 lock held by syz-executor/6088: #0: ffff800017fe3848 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline] #0: ffff800017fe3848 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 net/core/rtnetlink.c:6118 4 locks held by syz-executor/6137: #0: ffff0000d85d6460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x244/0x91c fs/read_write.c:580 #1: ffff0000fe65ec88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1c8/0x48c fs/kernfs/file.c:325 #2: ffff0000cc6b8830 (kn->active#46){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1e4/0x48c fs/kernfs/file.c:326 #3: ffff8000173a6008 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x170/0x664 drivers/net/netdevsim/bus.c:160 5 locks held by syz-executor/6151: #0: ffff0000d85d6460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x244/0x91c fs/read_write.c:580 #1: ffff000101bbf888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1c8/0x48c fs/kernfs/file.c:325 #2: ffff0000cc6b8918 (kn->active#45){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1e4/0x48c fs/kernfs/file.c:326 #3: ffff8000173a6008 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xec/0x39c drivers/net/netdevsim/bus.c:209 #4: ffff0000f05c30e8 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:837 [inline] #4: ffff0000f05c30e8 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1080 [inline] #4: ffff0000f05c30e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xbc/0x724 drivers/base/dd.c:1283 1 lock held by syz-executor/6155: #0: ffff800017fe3848 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline] #0: ffff800017fe3848 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 net/core/rtnetlink.c:6118 1 lock held by syz-executor/6316: #0: ffff800017fe3848 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline] #0: ffff800017fe3848 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 net/core/rtnetlink.c:6118 1 lock held by syz-executor/6382: #0: ffff800017fe3848 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline] #0: ffff800017fe3848 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 net/core/rtnetlink.c:6118 1 lock held by syz-executor/6388: #0: ffff800017fe3848 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline] #0: ffff800017fe3848 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 net/core/rtnetlink.c:6118 1 lock held by syz-executor/6394: #0: ffff800017fe3848 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline] #0: ffff800017fe3848 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 net/core/rtnetlink.c:6118 1 lock held by syz-executor/6395: #0: ffff800017fe3848 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline] #0: ffff800017fe3848 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 net/core/rtnetlink.c:6118 1 lock held by syz-executor/6401: #0: ffff800017fe3848 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline] #0: ffff800017fe3848 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 net/core/rtnetlink.c:6118 =============================================