INFO: task syz-executor:4673 blocked for more than 148 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:4673 tgid:4673 ppid:4666 task_flags:0x400140 flags:0x00800010 Call trace: __switch_to+0x2b0/0x6e0 arch/arm64/kernel/process.c:810 (T) context_switch kernel/sched/core.c:5387 [inline] __schedule+0x1b74/0x2d24 kernel/sched/core.c:7188 __schedule_loop kernel/sched/core.c:7267 [inline] schedule+0xa4/0x140 kernel/sched/core.c:7282 wb_wait_for_completion+0x158/0x20c fs/fs-writeback.c:227 __writeback_inodes_sb_nr+0x1d0/0x23c fs/fs-writeback.c:2847 writeback_inodes_sb_nr fs/fs-writeback.c:2864 [inline] writeback_inodes_sb+0x78/0x8c fs/fs-writeback.c:2879 sync_filesystem+0xa0/0x210 fs/sync.c:54 generic_shutdown_super+0x78/0x2b8 fs/super.c:625 kill_block_super+0x44/0x90 fs/super.c:1725 deactivate_locked_super+0xc4/0x140 fs/super.c:476 deactivate_super+0xd8/0xf8 fs/super.c:509 cleanup_mnt+0x328/0x3b8 fs/namespace.c:1312 __cleanup_mnt+0x20/0x30 fs/namespace.c:1319 task_work_run+0x1c4/0x254 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:67 [inline] exit_to_user_mode_loop+0x10c/0x17c kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] exit_to_user_mode_prepare_legacy include/linux/irq-entry-common.h:224 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:86 [inline] el0_svc+0x180/0x25c arch/arm64/kernel/entry-common.c:724 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:742 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 INFO: task syz.0.57:5075 blocked for more than 149 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.57 state:D stack:0 pid:5075 tgid:5075 ppid:4674 task_flags:0x400040 flags:0x00800019 Call trace: __switch_to+0x2b0/0x6e0 arch/arm64/kernel/process.c:810 (T) context_switch kernel/sched/core.c:5387 [inline] __schedule+0x1b74/0x2d24 kernel/sched/core.c:7188 __schedule_loop kernel/sched/core.c:7267 [inline] schedule+0xa4/0x140 kernel/sched/core.c:7282 request_wait_answer fs/fuse/dev.c:590 [inline] __fuse_request_send fs/fuse/dev.c:604 [inline] __fuse_simple_request+0xaf0/0x1328 fs/fuse/dev.c:699 fuse_simple_request fs/fuse/fuse_i.h:1262 [inline] fuse_flush+0x3fc/0x5e4 fs/fuse/file.c:500 filp_flush+0xb8/0x190 fs/open.c:1467 filp_close+0x28/0x48 fs/open.c:1480 __range_close fs/file.c:794 [inline] __do_sys_close_range fs/file.c:855 [inline] __se_sys_close_range fs/file.c:819 [inline] __arm64_sys_close_range+0x354/0x808 fs/file.c:819 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:140 el0_svc+0x60/0x25c arch/arm64/kernel/entry-common.c:723 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:742 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 Showing all locks held in the system: 1 lock held by kthreadd/2: 3 locks held by kworker/u8:0/12: 3 locks held by kworker/u8:1/14: 1 lock held by khungtaskd/31: #0: ffff800088ac66e0 (rcu_read_lock){....}-{1:3}, at: __ll_sc_atomic64_fetch_or arch/arm64/include/asm/atomic_ll_sc.h:-1 [inline] #0: ffff800088ac66e0 (rcu_read_lock){....}-{1:3}, at: arch_atomic64_fetch_or arch/arm64/include/asm/atomic.h:86 [inline] #0: ffff800088ac66e0 (rcu_read_lock){....}-{1:3}, at: raw_atomic64_fetch_or include/linux/atomic/atomic-arch-fallback.h:3816 [inline] #0: ffff800088ac66e0 (rcu_read_lock){....}-{1:3}, at: raw_atomic_long_fetch_or include/linux/atomic/atomic-long.h:1090 [inline] #0: ffff800088ac66e0 (rcu_read_lock){....}-{1:3}, at: arch_test_and_set_bit include/asm-generic/bitops/atomic.h:42 [inline] #0: ffff800088ac66e0 (rcu_read_lock){....}-{1:3}, at: test_and_set_bit include/asm-generic/bitops/instrumented-atomic.h:72 [inline] #0: ffff800088ac66e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x0/0x44 kernel/sched/sched.h:3869 6 locks held by kworker/R-write/33: #0: ffff0000c1f21940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x640/0x173c kernel/workqueue.c:3276 #1: ffff80008ef77bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6a4/0x173c kernel/workqueue.c:3276 #2: ffff0000d3aa20d8 (&type->s_umount_key#31){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc fs/super.c:565 #3: ffff0000d3aa0c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: percpu_down_read include/linux/percpu-rwsem.h:77 [inline] ffff0000d3aa0c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages_down_read fs/ext4/ext4.h:1811 [inline] ffff0000d3aa0c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x16c/0x2d8 fs/ext4/inode.c:3041 #4: ffff0000d3aae938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xdcc/0x1020 fs/jbd2/transaction.c:442 #5: ffff0000dcd6b0f0 (&ei->i_data_sem){++++}-{4:4}