INFO: task kworker/u32:11:1237 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u32:11 state:D stack:21928 pid:1237 tgid:1237 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: writeback wb_workfn (flush-7:0) Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7026 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083 __mutex_lock_common kernel/locking/mutex.c:676 [inline] __mutex_lock+0x818/0x1060 kernel/locking/mutex.c:760 hfsplus_find_init+0x186/0x2d0 fs/hfsplus/bfind.c:28 hfsplus_cat_write_inode+0x255/0x7e0 fs/hfsplus/inode.c:592 hfsplus_write_inode+0x9b/0x5a0 fs/hfsplus/super.c:174 write_inode fs/fs-writeback.c:1564 [inline] __writeback_single_inode+0xb3e/0xfb0 fs/fs-writeback.c:1784 writeback_sb_inodes+0x60d/0xfa0 fs/fs-writeback.c:2015 __writeback_inodes_wb+0xf8/0x2d0 fs/fs-writeback.c:2086 wb_writeback+0x7f3/0xb70 fs/fs-writeback.c:2197 wb_check_old_data_flush fs/fs-writeback.c:2301 [inline] wb_do_writeback fs/fs-writeback.c:2354 [inline] wb_workfn+0x8ca/0xbe0 fs/fs-writeback.c:2382 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263 process_scheduled_works kernel/workqueue.c:3346 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x675/0x7d0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Showing all locks held in the system: 1 lock held by khungtaskd/41: #0: ffffffff8e3c4460 (rcu_read_lock ){....}-{1:3} , at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] , at: rcu_read_lock include/linux/rcupdate.h:867 [inline] , at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6775 4 locks held by kworker/u32:11/1237: #0: ffff888103288148 ((wq_completion)writeback ){+.+.}-{0:0} , at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3238 #1: ffffc90006747d00 ((work_completion)(&(&wb->dwork)->work) ){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3239 #2: ffff88802a5ac0e0 (&type->s_umount_key#66 ){.+.+}-{4:4}, at: super_trylock_shared+0x1e/0xf0 fs/super.c:562 #3: ffff88802d0ea0b0 (&tree->tree_lock){+.+.}-{4:4} , at: hfsplus_find_init+0x186/0x2d0 fs/hfsplus/bfind.c:28 2 locks held by getty/5733: #0: ffff88802c5600a0 (&tty->ldisc_sem ){++++}-{0:0} , at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc900033f32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 drivers/tty/n_tty.c:2222 11 locks held by syz-executor.0/6092: 2 locks held by syz-executor.0/19978: #0: ffff88806a63a398 ( &rq->__lock ){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:638 #1: ffff88806a624088 (psi_seq ){-.-.}-{0:0} , at: psi_sched_switch kernel/sched/stats.h:220 [inline] , at: __schedule+0x1861/0x5de0 kernel/sched/core.c:6923 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 41 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:332 [inline] watchdog+0xf3f/0x1170 kernel/hung_task.c:495 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x675/0x7d0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1-3: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 6092 Comm: syz-executor.0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:__asan_memmove+0x16/0x60 mm/kasan/shadow.c:94 Code: 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 54 49 89 fc 55 48 89 f5 53 48 89 d3 48 8b 4c 24 18 <31> d2 48 89 de 48 89 ef e8 8d ef ff ff 84 c0 74 2b 48 8b 4c 24 18 RSP: 0018:ffffc9000166f188 EFLAGS: 00000293 RAX: 0000000000000000 RBX: 000000000000002d RCX: ffffffff819b8177 RDX: 000000000000002d RSI: ffffffff9ab04ce0 RDI: ffffffff9ab04cf7 RBP: ffffffff9ab04ce0 R08: 0000000000000006 R09: 0000000000000046 R10: 0000000000000800 R11: 0000000000000001 R12: ffffffff9ab04cf7 R13: 0000000000000800 R14: 0000000000000017 R15: 0000000000000046 FS: 00007f5b69f9c6c0(0000) GS:ffff8880d6ad1000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa90a3ad988 CR3: 0000000039e91000 CR4: 0000000000352ef0 Call Trace: record_print_text+0x1f7/0x400 kernel/printk/printk.c:1461 printk_get_next_message+0x2d1/0x6d0 kernel/printk/printk.c:2997 console_emit_next_record kernel/printk/printk.c:3065 [inline] console_flush_all+0x6ea/0xc60 kernel/printk/printk.c:3199 __console_flush_and_unlock kernel/printk/printk.c:3258 [inline] console_unlock+0xd8/0x210 kernel/printk/printk.c:3298 vprintk_emit+0x3d7/0x680 kernel/printk/printk.c:2423 _printk+0xc7/0x100 kernel/printk/printk.c:2448 is_bnode_offset_valid fs/hfsplus/hfsplus_fs.h:557 [inline] hfsplus_bnode_read+0x4b9/0x690 fs/hfsplus/bnode.c:28 hfsplus_bnode_read_u16 fs/hfsplus/bnode.c:60 [inline] hfsplus_bnode_dump+0x162/0x800 fs/hfsplus/bnode.c:362 hfsplus_brec_remove+0x4ad/0x610 fs/hfsplus/brec.c:229 __hfsplus_delete_attr+0x2a0/0x3b0 fs/hfsplus/attributes.c:299 hfsplus_delete_all_attrs+0x15e/0x310 fs/hfsplus/attributes.c:378 hfsplus_delete_cat+0x93b/0xf40 fs/hfsplus/catalog.c:425 hfsplus_unlink+0x212/0x7f0 fs/hfsplus/dir.c:385 vfs_unlink+0x2fe/0x9b0 fs/namei.c:4673 do_unlinkat+0x4c5/0x6a0 fs/namei.c:4737 __do_sys_unlink fs/namei.c:4783 [inline] __se_sys_unlink fs/namei.c:4781 [inline] __x64_sys_unlink+0xc5/0x110 fs/namei.c:4781 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f5b6927dca9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f5b69f9c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 RAX: ffffffffffffffda RBX: 00007f5b693abf80 RCX: 00007f5b6927dca9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 RBP: 00007f5b692c947e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f5b693abf80 R15: 00007ffe1e86fa78 NMI backtrace for cpu 3 CPU: 3 UID: 0 PID: 19985 Comm: syz-executor.0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0033:0x7fa90a2298e6 Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 RSP: 002b:00007fa90af8b530 EFLAGS: 00010206 RAX: 0000000000038001 RBX: 00007fa90af8b5d0 RCX: 000000000000005c RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007fa90af8b670 RBP: 0000000000000102 R08: 00007fa901000000 R09: 0000000000038000 R10: 0000000000000000 R11: 00007fa90af8b5e0 R12: 0000000000000001 R13: 00007fa90a2ebe80 R14: 0000000000000000 R15: 00007fa90af8b670 FS: 00007fa90af8c6c0 GS: 0000000000000000 NMI backtrace for cpu 2 CPU: 2 UID: 0 PID: 5331 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:bytes_is_nonzero mm/kasan/generic.c:100 [inline] RIP: 0010:memory_is_nonzero mm/kasan/generic.c:115 [inline] RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:140 [inline] RIP: 0010:memory_is_poisoned mm/kasan/generic.c:172 [inline] RIP: 0010:check_region_inline mm/kasan/generic.c:191 [inline] RIP: 0010:kasan_check_range+0x150/0x1b0 mm/kasan/generic.c:200 Code: 11 80 38 00 74 ef 4d 8d 1c 2c 48 89 c2 48 85 c0 75 ad 48 89 da 4c 89 d8 4c 29 da e9 46 ff ff ff 48 85 d2 74 18 48 01 ea eb 09 <48> 83 c0 01 48 39 d0 74 0a 80 38 00 74 f2 e9 75 ff ff ff 5b b8 01 RSP: 0018:ffffc900040df930 EFLAGS: 00000046 RAX: ffffed100491c490 RBX: ffffed100491c491 RCX: ffffffff818fae93 RDX: ffffed100491c491 RSI: 0000000000000008 RDI: ffff8880248e2480 RBP: ffffed100491c490 R08: 0000000000000000 R09: ffffed100491c490 R10: ffff8880248e2487 R11: 0000000000000002 R12: ffff8880248e2480 R13: ffff8880248e2480 R14: ffff888022c92480 R15: ffff88806a63a380 FS: 00007f219c3e5c80(0000) GS:ffff8880d6bd1000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555556df5788 CR3: 0000000028f53000 CR4: 0000000000352ef0 Call Trace: instrument_atomic_read include/linux/instrumented.h:68 [inline] _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline] test_ti_thread_flag include/linux/thread_info.h:126 [inline] test_tsk_thread_flag include/linux/sched.h:2039 [inline] test_tsk_need_resched include/linux/sched.h:2058 [inline] check_preempt_wakeup_fair+0x73/0x980 kernel/sched/fair.c:8765 wakeup_preempt+0x118/0x320 kernel/sched/core.c:2208 ttwu_do_activate+0x1bd/0xb00 kernel/sched/core.c:3707 ttwu_queue kernel/sched/core.c:3969 [inline] try_to_wake_up+0x7a1/0x1870 kernel/sched/core.c:4293 autoremove_wake_function+0x16/0x150 kernel/sched/wait.c:403 receiver_wake_function+0x53/0x80 net/core/datagram.c:84 __wake_up_common+0x135/0x1f0 kernel/sched/wait.c:108 __wake_up_common_lock kernel/sched/wait.c:125 [inline] __wake_up_sync_key+0x36/0x50 kernel/sched/wait.c:192 sock_def_readable+0x15b/0x600 net/core/sock.c:3551 unix_dgram_sendmsg+0xd1b/0x17f0 net/unix/af_unix.c:2309 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] __sys_sendto+0x4a3/0x520 net/socket.c:2244 __do_sys_sendto net/socket.c:2251 [inline] __se_sys_sendto net/socket.c:2247 [inline] __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2247 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f219c535407 Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff RSP: 002b:00007fff6dd93520 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f219c3e5c80 RCX: 00007f219c535407 RDX: 000000000000004c RSI: 00007fff6dd93660 RDI: 0000000000000003 RBP: 00007fff6dd93a90 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff6dd93aa8 R13: 00007fff6dd93660 R14: 0000000000000031 R15: 00007fff6dd93660