INFO: task syz-executor:5052 blocked for more than 144 seconds. Tainted: G L syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:5052 tgid:5052 ppid:1 task_flags:0x40014c flags:0x00800018 Call trace: __switch_to+0x2b0/0x6e0 arch/arm64/kernel/process.c:810 (T) context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1bec/0x2dcc kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0x140/0x218 kernel/sched/core.c:7283 wb_wait_for_completion+0x158/0x20c fs/fs-writeback.c:227 sync_inodes_sb+0x1cc/0xa38 fs/fs-writeback.c:2944 sync_filesystem+0x160/0x210 fs/sync.c:64 generic_shutdown_super+0x78/0x2b8 fs/super.c:625 kill_block_super+0x44/0x90 fs/super.c:1725 ext4_kill_sb+0x68/0xa4 fs/ext4/super.c:7492 deactivate_locked_super+0xc4/0x140 fs/super.c:476 deactivate_super+0xd8/0xf8 fs/super.c:509 cleanup_mnt+0x328/0x3b8 fs/namespace.c:1312 __cleanup_mnt+0x20/0x30 fs/namespace.c:1319 task_work_run+0x1c4/0x254 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x580/0x1a6c kernel/exit.c:976 do_group_exit+0x194/0x22c kernel/exit.c:1119 __do_sys_exit_group kernel/exit.c:1130 [inline] __se_sys_exit_group kernel/exit.c:1128 [inline] pid_child_should_wake+0x0/0x110 kernel/exit.c:1128 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:740 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:759 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 Showing all locks held in the system: 1 lock held by kthreadd/2: 3 locks held by kworker/0:0/9: 4 locks held by kworker/0:1/11: 3 locks held by kworker/u8:0/12: 3 locks held by kworker/u8:1/15: 2 locks held by kworker/1:0/24: 2 locks held by kworker/1:1/26: 1 lock held by khungtaskd/31: #0: ffff800088ad72a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffff800088ad72a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #0: ffff800088ad72a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 kernel/locking/lockdep.c:6775 3 locks held by kworker/u8:2/39: 3 locks held by kworker/u8:3/40: 3 locks held by kworker/u8:4/919: 3 locks held by kworker/u8:5/1418: 4 locks held by kworker/0:2/1898: #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x748/0x1098 kernel/workqueue.c:3397 #1: ffff800097af7c40 (reg_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #1: ffff800097af7c40 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x750/0x1098 kernel/workqueue.c:3397 #2: ffff800089b97600 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 #3: ffff0000c6940780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6645 [inline] #3: ffff0000c6940780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0x94/0x1c0 net/wireless/reg.c:3192 3 locks held by kworker/R-ipv6_/2783: #0: ffff0000cf31c940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #0: ffff0000cf31c940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x748/0x1098 kernel/workqueue.c:3397 #1: ffff8000999e7c00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #1: ffff8000999e7c00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x750/0x1098 kernel/workqueue.c:3397 #2: ffff800089b97600 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 5 locks held by kworker/R-bat_e/2818: 6 locks held by kworker/u8:6/3143: #0: ffff0000c004e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #0: ffff0000c004e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x748/0x1098 kernel/workqueue.c:3397 #1: ffff80009a207c40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #1: ffff80009a207c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x750/0x1098 kernel/workqueue.c:3397 #2: ffff800089b8a108 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x100/0x6b8 net/core/net_namespace.c:673 #3: ffff0000cd465128 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1040 [inline] #3: ffff0000cd465128 (&dev->mutex){....}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:124 [inline] #3: ffff0000cd465128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0xfc/0x30c net/devlink/core.c:555 #4: ffff0000cd463258 (&devlink->lock_key#8){+.+.}-{4:4}, at: devl_lock net/devlink/core.c:292 [inline] #4: ffff0000cd463258 (&devlink->lock_key#8){+.+.}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:125 [inline] #4: ffff0000cd463258 (&devlink->lock_key#8){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x110/0x30c net/devlink/core.c:555 #5: ffff800089b97600 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 3 locks held by kworker/u8:7/3192: 3 locks held by kworker/u8:8/3279: 2 locks held by kworker/u8:9/3403: 3 locks held by kworker/u8:10/3462: 1 lock held by klogd/4292: 1 lock held by udevd/4303: 1 lock held by dhcpcd/4358: 2 locks held by getty/4452: #0: ffff0000d48fb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80009229b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x354/0xf84 drivers/tty/n_tty.c:2211 1 lock held by syz-executor/4658: 1 lock held by syz-executor/4670: #0: ffff0000f3bd20d8 (&type->s_umount_key#31){++++}-{4:4}, at: __super_lock fs/super.c:58 [inline] #0: ffff0000f3bd20d8 (&type->s_umount_key#31){++++}-{4:4}, at: __super_lock_excl fs/super.c:73 [inline] #0: ffff0000f3bd20d8 (&type->s_umount_key#31){++++}-{4:4}, at: deactivate_super+0xd0/0xf8 fs/super.c:508 2 locks held by kworker/0:5/4767: 2 locks held by kworker/0:7/4776: 1 lock held by syz-executor/5027: 2 locks held by syz-executor/5052: #0: ffff0000dceb00d8 (&type->s_umount_key#31){++++}-{4:4}, at: __super_lock fs/super.c:58 [inline] #0: ffff0000dceb00d8 (&type->s_umount_key#31){++++}-{4:4}, at: __super_lock_excl fs/super.c:73 [inline] #0: ffff0000dceb00d8 (&type->s_umount_key#31){++++}-{4:4}, at: deactivate_super+0xd0/0xf8 fs/super.c:508 #1: ffff0000c8a22810 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:396 [inline] #1: ffff0000c8a22810 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1b4/0xa38 fs/fs-writeback.c:2942 1 lock held by udevd/5213: 1 lock held by syz-executor/5938: 3 locks held by kworker/u8:11/6547: 2 locks held by kworker/u8:12/6684: 3 locks held by kworker/u8:13/6686: #0: ffff0000c004b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #0: ffff0000c004b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x748/0x1098 kernel/workqueue.c:3397 #1: ffff800094b07c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #1: ffff800094b07c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x750/0x1098 kernel/workqueue.c:3397 #2: ffff800089b97600 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 2 locks held by kworker/1:6/6687: =============================================