INFO: task syz-executor.3:6138 blocked for more than 143 seconds. Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.3 state:D stack:0 pid:6138 ppid:1 flags:0x0000000d Call trace: __switch_to+0x314/0x560 arch/arm64/kernel/process.c:556 context_switch kernel/sched/core.c:5382 [inline] __schedule+0x1364/0x23b4 kernel/sched/core.c:6695 schedule+0xc4/0x170 kernel/sched/core.c:6771 io_schedule+0x8c/0x12c kernel/sched/core.c:9026 bit_wait_io+0x1c/0xac kernel/sched/wait_bit.c:209 __wait_on_bit_lock+0xcc/0x1e8 kernel/sched/wait_bit.c:90 out_of_line_wait_on_bit_lock+0x194/0x21c kernel/sched/wait_bit.c:117 wait_on_bit_lock_io include/linux/wait_bit.h:208 [inline] __lock_buffer+0x78/0xac fs/buffer.c:71 lock_buffer include/linux/buffer_head.h:385 [inline] hfs_mdb_commit+0x9fc/0xf2c fs/hfs/mdb.c:325 hfs_sync_fs+0x20/0x34 fs/hfs/super.c:35 sync_filesystem+0xe8/0x218 fs/sync.c:56 generic_shutdown_super+0x70/0x2b8 fs/super.c:666 kill_block_super+0x40/0x74 fs/super.c:1646 deactivate_locked_super+0xac/0x12c fs/super.c:481 deactivate_super+0xe0/0x100 fs/super.c:514 cleanup_mnt+0x34c/0x3dc fs/namespace.c:1254 __cleanup_mnt+0x20/0x30 fs/namespace.c:1261 task_work_run+0x230/0x2e0 kernel/task_work.c:180 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] do_notify_resume+0x214c/0x393c arch/arm64/kernel/signal.c:1305 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:137 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:144 [inline] el0_svc+0x9c/0x158 arch/arm64/kernel/entry-common.c:679 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:696 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:595 INFO: task kworker/1:7:6192 blocked for more than 143 seconds. Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:7 state:D stack:0 pid:6192 ppid:2 flags:0x00000008 Workqueue: events_long flush_mdb Call trace: __switch_to+0x314/0x560 arch/arm64/kernel/process.c:556 context_switch kernel/sched/core.c:5382 [inline] __schedule+0x1364/0x23b4 kernel/sched/core.c:6695 schedule+0xc4/0x170 kernel/sched/core.c:6771 io_schedule+0x8c/0x12c kernel/sched/core.c:9026 bit_wait_io+0x1c/0xac kernel/sched/wait_bit.c:209 __wait_on_bit_lock+0xcc/0x1e8 kernel/sched/wait_bit.c:90 out_of_line_wait_on_bit_lock+0x194/0x21c kernel/sched/wait_bit.c:117 wait_on_bit_lock_io include/linux/wait_bit.h:208 [inline] __lock_buffer+0x78/0xac fs/buffer.c:71 lock_buffer include/linux/buffer_head.h:385 [inline] hfs_mdb_commit+0x140/0xf2c fs/hfs/mdb.c:271 flush_mdb+0x6c/0x9c fs/hfs/super.c:66 process_one_work+0x694/0x1204 kernel/workqueue.c:2630 process_scheduled_works kernel/workqueue.c:2703 [inline] worker_thread+0x938/0xef4 kernel/workqueue.c:2784 kthread+0x288/0x310 kernel/kthread.c:388 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:857 Showing all locks held in the system: 1 lock held by khungtaskd/29: #0: ffff80008e513840 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:302 2 locks held by getty/5847: #0: ffff0000d29630a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff800094e502f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214 drivers/tty/n_tty.c:2206 1 lock held by syz-executor.3/6138: #0: ffff000129adc0e0 (&type->s_umount_key#68){+.+.}-{3:3}, at: __super_lock fs/super.c:56 [inline] #0: ffff000129adc0e0 (&type->s_umount_key#68){+.+.}-{3:3}, at: __super_lock_excl fs/super.c:71 [inline] #0: ffff000129adc0e0 (&type->s_umount_key#68){+.+.}-{3:3}, at: deactivate_super+0xd8/0x100 fs/super.c:513 2 locks held by kworker/1:7/6192: #0: ffff0000c0021538 ((wq_completion)events_long){+.+.}-{0:0}, at: process_one_work+0x560/0x1204 kernel/workqueue.c:2603 #1: ffff800097277c20 ((work_completion)(&(&sbi->mdb_work)->work)){+.+.}-{0:0}, at: process_one_work+0x5a0/0x1204 kernel/workqueue.c:2605 =============================================