INFO: task kworker/1:3:3392 blocked for more than 430 seconds. Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:3 state:D stack:0 pid:3392 tgid:3392 ppid:2 task_flags:0x4288060 flags:0x00000008 Workqueue: md_misc mddev_delayed_delete Call trace: __switch_to+0x204/0x4bc arch/arm64/kernel/process.c:701 (T) context_switch kernel/sched/core.c:5382 [inline] __schedule+0xd34/0x3188 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xd0/0x344 kernel/sched/core.c:6860 schedule_timeout+0x1ec/0x224 kernel/time/sleep_timeout.c:75 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common+0x1d0/0x3f8 kernel/sched/completion.c:116 wait_for_common kernel/sched/completion.c:127 [inline] wait_for_completion+0x20/0x2c kernel/sched/completion.c:148 devtmpfs_submit_req+0xac/0x114 drivers/base/devtmpfs.c:122 devtmpfs_delete_node+0xd8/0x128 drivers/base/devtmpfs.c:171 device_del+0x59c/0x7b4 drivers/base/core.c:3834 del_gendisk+0x3fc/0x87c block/genhd.c:734 md_kobj_release+0x84/0xd8 drivers/md/md.c:5749 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x17c/0x430 lib/kobject.c:737 mddev_delayed_delete+0x14/0x20 drivers/md/md.c:5828 process_one_work+0x7cc/0x18d4 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x734/0xb84 kernel/workqueue.c:3400 kthread+0x348/0x5fc kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 Showing all locks held in the system: 3 locks held by kworker/u8:0/12: #0: ffff00000d831148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x6f8/0x18d4 kernel/workqueue.c:3213 #1: ffff80008d507c80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x71c/0x18d4 kernel/workqueue.c:3213 #2: ffff8000887e3e68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x1c/0x28 net/core/rtnetlink.c:80 2 locks held by kdevtmpfs/25: #0: ffff00000e4982c8 (&type->i_mutex_dir_key/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:902 [inline] #0: ffff00000e4982c8 (&type->i_mutex_dir_key/1){+.+.}-{4:4}, at: __kern_path_locked+0xd4/0x1f8 fs/namei.c:2765 #1: ffff80008771a7e8 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x30/0x168 block/genhd.c:820 2 locks held by pr/ttyAMA0/32: 1 lock held by khungtaskd/33: #0: ffff80008728da60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x18/0x1c4 kernel/locking/lockdep.c:6758 3 locks held by kworker/u8:2/36: #0: ffff000012b5c948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x6f8/0x18d4 kernel/workqueue.c:3213 #1: ffff80008d957c80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x71c/0x18d4 kernel/workqueue.c:3213 #2: ffff8000887e3e68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x1c/0x28 net/core/rtnetlink.c:80 1 lock held by klogd/3111: 4 locks held by udevd/3122: #0: ffff000018244668 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe30 fs/seq_file.c:182 #1: ffff0000173cfc88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x48/0x1d8 fs/kernfs/file.c:154 #2: ffff0000183805a8 (kn->active#4){.+.+}-{0:0}, at: kernfs_seq_start+0x64/0x1d8 fs/kernfs/file.c:155 #3: ffff000013489a20 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:922 [inline] #3: ffff000013489a20 (&dev->mutex){....}-{4:4}, at: uevent_show+0x118/0x300 drivers/base/core.c:2730 2 locks held by getty/3241: #0: ffff000017f940a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80008d50b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x3e4/0xdb4 drivers/tty/n_tty.c:2222 2 locks held by syz-executor/3296: 2 locks held by kworker/1:3/3392: #0: ffff00000efad148 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x6f8/0x18d4 kernel/workqueue.c:3213 #1: ffff8000a18d7c80 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}, at: process_one_work+0x71c/0x18d4 kernel/workqueue.c:3213 3 locks held by kworker/1:4/3436: #0: ffff00000f0b6148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x6f8/0x18d4 kernel/workqueue.c:3213 #1: ffff8000a1907c80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x71c/0x18d4 kernel/workqueue.c:3213 #2: ffff000017377198 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:922 [inline] #2: ffff000017377198 (&dev->mutex){....}-{4:4}, at: hub_event+0x10c/0x365c drivers/usb/core/hub.c:5859 4 locks held by kworker/1:5/3568: #0: ffff00000d828d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x6f8/0x18d4 kernel/workqueue.c:3213 #1: ffff8000a24a7c80 ((work_completion)(&uhid->worker)){+.+.}-{0:0}, at: process_one_work+0x71c/0x18d4 kernel/workqueue.c:3213 #2: ffff000013489a20 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:922 [inline] #2: ffff000013489a20 (&dev->mutex){....}-{4:4}, at: __device_attach+0x80/0x35c drivers/base/dd.c:1005 #3: ffff800088484c90 (minors_rwsem){+.+.}-{4:4}, at: hidraw_connect+0x80/0x380 drivers/hid/hidraw.c:592 1 lock held by syz.1.50/3574: #0: ffff80008771a7e8 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x30/0x168 block/genhd.c:820 2 locks held by syz.0.63/3611: #0: ffff00000e490420 (sb_writers){.+.+}-{0:0}, at: __sb_start_write include/linux/fs.h:1783 [inline] #0: ffff00000e490420 (sb_writers){.+.+}-{0:0}, at: sb_start_write include/linux/fs.h:1919 [inline] #0: ffff00000e490420 (sb_writers){.+.+}-{0:0}, at: mnt_want_write+0x3c/0xb0 fs/namespace.c:556 #1: ffff00000e4982c8 (&type->i_mutex_dir_key#2){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:877 [inline] #1: ffff00000e4982c8 (&type->i_mutex_dir_key#2){++++}-{4:4}, at: open_last_lookups fs/namei.c:3799 [inline] #1: ffff00000e4982c8 (&type->i_mutex_dir_key#2){++++}-{4:4}, at: path_openat+0xfa8/0x25e4 fs/namei.c:4036 2 locks held by syz-executor/3621: #0: ffff800087091bb8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0xb8/0x218 net/core/rtnetlink.c:573 #1: ffff8000887e3e68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #1: ffff8000887e3e68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline] #1: ffff8000887e3e68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x4b8/0x1810 net/core/rtnetlink.c:4064 1 lock held by syz-executor/3653: #0: ffff8000887e3e68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x1c/0x28 net/core/rtnetlink.c:80 =============================================