INFO: task kworker/u4:0:9 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u4:0 state:D stack: 0 pid: 9 ppid: 2 flags:0x00000008 Workqueue: writeback wb_workfn (flush-7:0) Call trace: __switch_to+0x2f4/0x558 arch/arm64/kernel/process.c:521 context_switch kernel/sched/core.c:5049 [inline] __schedule+0xe08/0x1bf8 kernel/sched/core.c:6395 schedule+0x11c/0x1c8 kernel/sched/core.c:6478 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6537 __mutex_lock_common+0xa9c/0x1edc kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0xac/0x11c kernel/locking/mutex.c:743 hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 hfsplus_cat_write_inode+0x1a0/0x6b8 fs/hfsplus/inode.c:588 hfsplus_write_inode+0x154/0x4d4 fs/hfsplus/super.c:160 write_inode fs/fs-writeback.c:1495 [inline] __writeback_single_inode+0x560/0x11f0 fs/fs-writeback.c:1705 writeback_sb_inodes+0x7fc/0x1378 fs/fs-writeback.c:1930 __writeback_inodes_wb+0x110/0x394 fs/fs-writeback.c:2001 wb_writeback+0x3ec/0xe44 fs/fs-writeback.c:2106 wb_check_background_flush fs/fs-writeback.c:2172 [inline] wb_do_writeback fs/fs-writeback.c:2260 [inline] wb_workfn+0xa7c/0xdd8 fs/fs-writeback.c:2288 process_one_work+0x79c/0x1140 kernel/workqueue.c:2310 worker_thread+0x8f4/0x101c kernel/workqueue.c:2457 kthread+0x374/0x454 kernel/kthread.c:334 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:856 Showing all locks held in the system: 4 locks held by kworker/u4:0/9: #0: ffff0000c21e0138 ((wq_completion)writeback){+.+.}-{0:0} , at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001b2f7c00 ( (work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000d95a60e0 ( &type->s_umount_key#52){.+.+}-{3:3} , at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000ecab00b0 (&tree->tree_lock){+.+.}-{3:3} , at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 1 lock held by khungtaskd/27: #0: ffff8000143513a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:311 4 locks held by kworker/u4:1/136: #0: ffff0000c21e0138 ( (wq_completion)writeback ){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001b987c00 ((work_completion)(&(&wb->dwork)->work) ){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000ec5c20e0 (&type->s_umount_key#52){.+.+}-{3:3}, at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000ec5c60b0 (&tree->tree_lock){+.+.}-{3:3} , at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 4 locks held by kworker/u4:2/148: #0: ffff0000c21e0138 ( (wq_completion)writeback){+.+.}-{0:0} , at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001be47c00 ( (work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000cd3b20e0 (&type->s_umount_key #52){.+.+}-{3:3} , at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000cd3fa0b0 (&tree->tree_lock){+.+.}-{3:3} , at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 4 locks held by kworker/u4:3/349: #0: ffff0000c21e0138 ((wq_completion)writeback){+.+.}-{0:0} , at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001f517c00 ( (work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0} , at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000d1a080e0 ( &type->s_umount_key #52){.+.+}-{3:3} , at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000d7d180b0 (&tree->tree_lock ){+.+.}-{3:3}, at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 2 locks held by getty/3801: #0: ffff0000d353b098 ( &tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50 drivers/tty/tty_ldsem.c:340 #1: ffff80001bd0b2e8 ( &ldata->atomic_read_lock){+.+.}-{3:3} , at: n_tty_read+0x2f0/0xf6c drivers/tty/n_tty.c:2158 4 locks held by kworker/u4:5/4123: #0: ffff0000c21e0138 ( (wq_completion)writeback){+.+.}-{0:0} , at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001f977c00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000d96580e0 ( &type->s_umount_key#52){.+.+}-{3:3} , at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000d4dcc0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 3 locks held by kworker/0:12/4182: #0: ffff0000d20e1d38 ( (wq_completion)ipv6_addrconf ){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff800020557c00 ((work_completion)(&(&ifa->dad_work)->work) ){+.+.}-{0:0} , at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff8000162aea68 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:72 6 locks held by syz.0.16/4956: 8 locks held by syz.1.17/4979: 6 locks held by syz.2.18/5004: 6 locks held by syz.3.19/5026: 4 locks held by kworker/u4:8/5054: #0: ffff0000c21e0138 ( (wq_completion)writeback){+.+.}-{0:0} , at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff800020147c00 ( (work_completion)(&(&wb->dwork)->work) ){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000e94040e0 ( &type->s_umount_key#52){.+.+}-{3:3} , at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000d06e80b0 ( &tree->tree_lock){+.+.}-{3:3} , at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 6 locks held by syz.4.20/5066: 4 locks held by kworker/u4:9/5096: #0: ffff0000c21e0138 ( (wq_completion)writeback){+.+.}-{0:0} , at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff800020247c00 ( (work_completion)(&(&wb->dwork)->work) ){+.+.}-{0:0} , at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000e95a40e0 ( &type->s_umount_key#52){.+.+}-{3:3} , at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000dc7780b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 6 locks held by syz.5.21/5098: 4 locks held by kworker/u4:10/5108: #0: ffff0000c21e0138 ((wq_completion)writeback){+.+.}-{0:0} , at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff8000202a7c00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0} , at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000d55320e0 (&type->s_umount_key#52){.+.+}-{3:3}, at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000e96900b0 ( &tree->tree_lock){+.+.}-{3:3} , at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 6 locks held by syz.6.22/5130: 4 locks held by kworker/u4:11/5131: #0: ffff0000c21e0138 ( (wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff800020237c00 ( (work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0} , at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000cb5a40e0 (&type->s_umount_key#52){.+.+}-{3:3}, at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000da06c0b0 ( &tree->tree_lock){+.+.}-{3:3} , at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 6 locks held by syz.7.23/5162: 6 locks held by syz.8.24/5201: 1 lock held by syz-executor/5203: #0: ffff8000162aea68 (rtnl_mutex){+.+.}-{3:3} , at: rtnl_lock net/core/rtnetlink.c:72 [inline] , at: rtnetlink_rcv_msg+0x98c/0xd04 net/core/rtnetlink.c:5647 3 locks held by kworker/u4:13/5211: #0: ffff0000c0029138 ( (wq_completion)events_unbound ){+.+.}-{0:0} , at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff800020a27c00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff8000162aea68 (rtnl_mutex ){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:72 =============================================