INFO: task kworker/u4:3:47 blocked for more than 143 seconds. Not tainted 6.5.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u4:3 state:D stack:25344 pid:47 ppid:2 flags:0x00004000 Workqueue: writeback wb_workfn (flush-7:4) Call Trace: context_switch kernel/sched/core.c:5381 [inline] __schedule+0xee1/0x59f0 kernel/sched/core.c:6710 schedule+0xe7/0x1b0 kernel/sched/core.c:6786 schedule_timeout+0x27a/0x2c0 kernel/time/timer.c:2143 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x3e2/0x5f0 kernel/sched/completion.c:106 f2fs_issue_checkpoint+0x396/0x4a0 fs/f2fs/checkpoint.c:1880 f2fs_sync_fs+0x2f7/0x3a0 fs/f2fs/super.c:1709 f2fs_balance_fs_bg+0xcce/0xfc0 fs/f2fs/segment.c:513 f2fs_write_node_pages+0x176/0x7b0 fs/f2fs/node.c:2117 do_writepages+0x1b4/0x690 mm/page-writeback.c:2553 __writeback_single_inode+0x158/0xe70 fs/fs-writeback.c:1603 writeback_sb_inodes+0x599/0x1010 fs/fs-writeback.c:1894 __writeback_inodes_wb+0xff/0x2d0 fs/fs-writeback.c:1965 wb_writeback+0x7f8/0xa90 fs/fs-writeback.c:2072 wb_check_old_data_flush fs/fs-writeback.c:2176 [inline] wb_do_writeback fs/fs-writeback.c:2229 [inline] wb_workfn+0xa02/0xfd0 fs/fs-writeback.c:2257 process_one_work+0xaa2/0x16f0 kernel/workqueue.c:2600 worker_thread+0x687/0x1110 kernel/workqueue.c:2751 kthread+0x33a/0x430 kernel/kthread.c:389 ret_from_fork+0x2c/0x70 arch/x86/kernel/process.c:145 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304 INFO: task f2fs_ckpt-7:4:5585 blocked for more than 147 seconds. Not tainted 6.5.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:f2fs_ckpt-7:4 state:D stack:28976 pid:5585 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5381 [inline] __schedule+0xee1/0x59f0 kernel/sched/core.c:6710 schedule+0xe7/0x1b0 kernel/sched/core.c:6786 issue_checkpoint_thread+0x1cd/0x2a0 fs/f2fs/checkpoint.c:1817 kthread+0x33a/0x430 kernel/kthread.c:389 ret_from_fork+0x2c/0x70 arch/x86/kernel/process.c:145 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304 Showing all locks held in the system: 3 locks held by kworker/0:1/9: #0: ffff888012870d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:20 [inline] ffff888012870d38 ((wq_completion)events){+.+.}-{0:0}, at: raw_atomic64_set include/linux/atomic/atomic-arch-fallback.h:2608 [inline] ffff888012870d38 ((wq_completion)events){+.+.}-{0:0}, at: raw_atomic_long_set include/linux/atomic/atomic-long.h:79 [inline] ffff888012870d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:3196 [inline] ffff888012870d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:678 [inline] ffff888012870d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:705 [inline] ffff888012870d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x96a/0x16f0 kernel/workqueue.c:2570 #1: ffffc900000e7d80 ( (linkwatch_work).work ){+.+.}-{0:0} , at: process_one_work+0x99e/0x16f0 kernel/workqueue.c:2574 #2: ffffffff8e3e0f68 (rtnl_mutex ){+.+.}-{3:3} , at: linkwatch_event+0x51/0xc0 net/core/link_watch.c:277 3 locks held by kworker/u4:0/10: #0: ffff888019e68938 ( (wq_completion)writeback ){+.+.}-{0:0} , at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:20 [inline] , at: raw_atomic64_set include/linux/atomic/atomic-arch-fallback.h:2608 [inline] , at: raw_atomic_long_set include/linux/atomic/atomic-long.h:79 [inline] , at: atomic_long_set include/linux/atomic/atomic-instrumented.h:3196 [inline] , at: set_work_data kernel/workqueue.c:678 [inline] , at: set_work_pool_and_clear_pending kernel/workqueue.c:705 [inline] , at: process_one_work+0x96a/0x16f0 kernel/workqueue.c:2570 #1: ffffc900000f7d80 ( (work_completion)(&(&wb->dwork)->work) ){+.+.}-{0:0} , at: process_one_work+0x99e/0x16f0 kernel/workqueue.c:2574 #2: ffff88805c40a0e0 ( &type->s_umount_key #50 ){++++}-{3:3} , at: trylock_super+0x1c/0x100 fs/super.c:413 1 lock held by rcu_tasks_kthre/13: #0: ffffffff8c9a67f0 ( rcu_tasks.tasks_gp_mutex ){+.+.}-{3:3} , at: rcu_tasks_one_gp+0x2c/0xe20 kernel/rcu/tasks.h:522 1 lock held by rcu_tasks_trace/14: #0: ffffffff8c9a64f0 ( rcu_tasks_trace.tasks_gp_mutex ){+.+.}-{3:3} , at: rcu_tasks_one_gp+0x2c/0xe20 kernel/rcu/tasks.h:522 1 lock held by khungtaskd/27: #0: ffffffff8c9a7400 ( rcu_read_lock ){....}-{1:2} , at: debug_show_all_locks+0x55/0x340 kernel/locking/lockdep.c:6615 3 locks held by kworker/u4:4/57: #0: ffff888019e68938 ( (wq_completion)writeback ){+.+.}-{0:0} , at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:20 [inline] , at: raw_atomic64_set include/linux/atomic/atomic-arch-fallback.h:2608 [inline] , at: raw_atomic_long_set include/linux/atomic/atomic-long.h:79 [inline] , at: atomic_long_set include/linux/atomic/atomic-instrumented.h:3196 [inline] , at: set_work_data kernel/workqueue.c:678 [inline] , at: set_work_pool_and_clear_pending kernel/workqueue.c:705 [inline] , at: process_one_work+0x96a/0x16f0 kernel/workqueue.c:2570 #1: ffffc90001587d80 ( (work_completion)(&(&wb->dwork)->work) ){+.+.}-{0:0} , at: process_one_work+0x99e/0x16f0 kernel/workqueue.c:2574 #2: ffff88806c1bc0e0 ( &type->s_umount_key #50 ){++++}-{3:3}, at: trylock_super+0x1c/0x100 fs/super.c:413 2 locks held by kworker/0:2/915: #0: ffff888012872538 ( (wq_completion)rcu_gp ){+.+.}-{0:0} , at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:20 [inline] , at: raw_atomic64_set include/linux/atomic/atomic-arch-fallback.h:2608 [inline] , at: raw_atomic_long_set include/linux/atomic/atomic-long.h:79 [inline] , at: atomic_long_set include/linux/atomic/atomic-instrumented.h:3196 [inline] , at: set_work_data kernel/workqueue.c:678 [inline] , at: set_work_pool_and_clear_pending kernel/workqueue.c:705 [inline] , at: process_one_work+0x96a/0x16f0 kernel/workqueue.c:2570 #1: ffffc9000539fd80 ( (work_completion)(&rew->rew_work) ){+.+.}-{0:0} , at: process_one_work+0x99e/0x16f0 kernel/workqueue.c:2574 5 locks held by kworker/u4:5/2500: 1 lock held by klogd/4464: #0: ffff8880b993c3d8 ( &rq->__lock ){-.-.}-{2:2} , at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:558 2 locks held by getty/4775: #0: ffff888028a72098 ( &tty->ldisc_sem ){++++}-{0:0} , at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc900015a02f0 ( &ldata->atomic_read_lock ){+.+.}-{3:3} , at: n_tty_read+0xfcb/0x1480 drivers/tty/n_tty.c:2187 2 locks held by kworker/1:5/5035: #0: ffff888012870d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:20 [inline] ((wq_completion)events){+.+.}-{0:0}, at: raw_atomic64_set include/linux/atomic/atomic-arch-fallback.h:2608 [inline] ((wq_completion)events){+.+.}-{0:0}, at: raw_atomic_long_set include/linux/atomic/atomic-long.h:79 [inline] ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:3196 [inline] ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:678 [inline] ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:705 [inline] ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x96a/0x16f0 kernel/workqueue.c:2570 #1: ffffc9000463fd80 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x99e/0x16f0 kernel/workqueue.c:2574 3 locks held by kworker/0:8/5517: #0: ffff888012870d38 ( (wq_completion)events ){+.+.}-{0:0} , at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:20 [inline] , at: raw_atomic64_set include/linux/atomic/atomic-arch-fallback.h:2608 [inline] , at: raw_atomic_long_set include/linux/atomic/atomic-long.h:79 [inline] , at: atomic_long_set include/linux/atomic/atomic-instrumented.h:3196 [inline] , at: set_work_data kernel/workqueue.c:678 [inline] , at: set_work_pool_and_clear_pending kernel/workqueue.c:705 [inline] , at: process_one_work+0x96a/0x16f0 kernel/workqueue.c:2570 #1: ffffc90009df7d80 ( (work_completion)(&pwq->unbound_release_work) ){+.+.}-{0:0} , at: process_one_work+0x99e/0x16f0 kernel/workqueue.c:2574 #2: ffffffff8c9b28b8 ( rcu_state.exp_mutex ){+.+.}-{3:3} , at: exp_funnel_lock kernel/rcu/tree_exp.h:325 [inline] , at: synchronize_rcu_expedited+0x404/0x7e0 kernel/rcu/tree_exp.h:992 3 locks held by syz-executor.4/5551: #0: ffff8880701010b8 ( &hdev->req_lock ){+.+.}-{3:3} , at: hci_dev_do_close+0x26/0x70 net/bluetooth/hci_core.c:552 #1: ffff888070100078 ( &hdev->lock ){+.+.}-{3:3} , at: hci_dev_close_sync+0x345/0x10e0 net/bluetooth/hci_sync.c:5026 #2: ffffffff8e638d48 ( hci_cb_list_lock ){+.+.}-{3:3} , at: hci_disconn_cfm include/net/bluetooth/hci_core.h:1836 [inline] , at: hci_conn_hash_flush+0xc4/0x230 net/bluetooth/hci_conn.c:2517 2 locks held by syz-executor.1/5913: 2 locks held by f2fs_ckpt-7:1/5914: #0: ffff88802b8dd2a8 ( &sbi->gc_lock ){+.+.}-{3:3} , at: f2fs_down_write fs/f2fs/f2fs.h:2133 [inline] , at: __write_checkpoint_sync fs/f2fs/checkpoint.c:1764 [inline] , at: __checkpoint_and_complete_reqs+0xdc/0x350 fs/f2fs/checkpoint.c:1784 #1: