INFO: task kworker/u4:2:34 blocked for more than 143 seconds. Not tainted 6.1.138-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u4:2 state:D stack:0 pid:34 ppid:2 flags:0x00000008 Workqueue: writeback wb_workfn (flush-7:1) Call trace: __switch_to+0x2f4/0x568 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5244 [inline] __schedule+0xdd4/0x1b2c kernel/sched/core.c:6561 schedule+0xc4/0x170 kernel/sched/core.c:6637 io_schedule+0x84/0x154 kernel/sched/core.c:8797 f2fs_balance_fs+0x380/0x5c4 fs/f2fs/segment.c:418 f2fs_write_inode+0x3f4/0x598 fs/f2fs/inode.c:737 write_inode fs/fs-writeback.c:1460 [inline] __writeback_single_inode+0x5e0/0x157c fs/fs-writeback.c:1677 writeback_sb_inodes+0x824/0x1404 fs/fs-writeback.c:1903 __writeback_inodes_wb+0x110/0x394 fs/fs-writeback.c:1974 wb_writeback+0x414/0xfb0 fs/fs-writeback.c:2079 wb_check_background_flush fs/fs-writeback.c:2145 [inline] wb_do_writeback fs/fs-writeback.c:2233 [inline] wb_workfn+0xac0/0xd98 fs/fs-writeback.c:2260 process_one_work+0x7f4/0x13a8 kernel/workqueue.c:2292 worker_thread+0x8c8/0xfbc kernel/workqueue.c:2439 kthread+0x250/0x2d8 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864 INFO: task syz.1.120:4811 blocked for more than 143 seconds. Not tainted 6.1.138-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.120 state:D stack:0 pid:4811 ppid:4297 flags:0x00000009 Call trace: __switch_to+0x2f4/0x568 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5244 [inline] __schedule+0xdd4/0x1b2c kernel/sched/core.c:6561 schedule+0xc4/0x170 kernel/sched/core.c:6637 io_schedule+0x84/0x154 kernel/sched/core.c:8797 f2fs_balance_fs+0x380/0x5c4 fs/f2fs/segment.c:418 f2fs_map_blocks+0x14a0/0x2b24 fs/f2fs/data.c:1705 expand_inode_data+0x3f8/0x6cc fs/f2fs/file.c:1805 f2fs_fallocate+0x340/0x8bc fs/f2fs/file.c:1908 vfs_fallocate+0x4a4/0x5f4 fs/open.c:323 ioctl_preallocate+0x204/0x2a0 fs/ioctl.c:290 file_ioctl fs/ioctl.c:-1 [inline] do_vfs_ioctl+0x17f4/0x206c fs/ioctl.c:849 __do_sys_ioctl fs/ioctl.c:868 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __arm64_sys_ioctl+0xe4/0x1c8 fs/ioctl.c:856 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/12: #0: ffff800015247630 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 kernel/rcu/tasks.h:517 1 lock held by rcu_tasks_trace/13: #0: ffff800015247e50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 kernel/rcu/tasks.h:517 1 lock held by khungtaskd/28: #0: ffff800015246cc0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:349 3 locks held by kworker/u4:2/34: #0: ffff0000c2e4d938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 kernel/workqueue.c:2265 #1: ffff80001cce7c20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 kernel/workqueue.c:2267 #2: ffff0000f63bc0e0 (&type->s_umount_key#58){++++}-{3:3}, at: trylock_super+0x24/0xf4 fs/super.c:415 2 locks held by getty/4063: #0: ffff0000d64fa098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80001ce602f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2ec/0xf9c drivers/tty/n_tty.c:2198 3 locks held by syz.1.120/4811: #0: ffff0000f63bc460 (sb_writers#16){++++}-{0:0}, at: file_start_write include/linux/fs.h:3015 [inline] #0: ffff0000f63bc460 (sb_writers#16){++++}-{0:0}, at: vfs_fallocate+0x434/0x5f4 fs/open.c:322 #1: ffff0000f49ab690 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline] #1: ffff0000f49ab690 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: f2fs_fallocate+0x1bc/0x8bc fs/f2fs/file.c:1873 #2: ffff0000e08cd330 (&sbi->pin_sem){+.+.}-{3:3}, at: f2fs_down_write fs/f2fs/f2fs.h:2178 [inline] #2: ffff0000e08cd330 (&sbi->pin_sem){+.+.}-{3:3}, at: expand_inode_data+0x3b8/0x6cc fs/f2fs/file.c:1798 4 locks held by f2fs_gc-7:1/4838: 3 locks held by kworker/1:14/5916: #0: ffff0000c4679138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 kernel/workqueue.c:2265 #1: ffff8000211a7c20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 kernel/workqueue.c:2267 #2: ffff0000d187c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:837 [inline] #2: ffff0000d187c190 (&dev->mutex){....}-{3:3}, at: hub_event+0x13c/0x3dc4 drivers/usb/core/hub.c:5813 2 locks held by syz.3.700/7040: 2 locks held by syz.2.702/7045: =============================================