INFO: task kworker/u4:1:136 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u4:1 state:D stack: 0 pid: 136 ppid: 2 flags:0x00000008 Workqueue: writeback wb_workfn (flush-7:0) Call trace: __switch_to+0x2f4/0x558 arch/arm64/kernel/process.c:521 context_switch kernel/sched/core.c:5049 [inline] __schedule+0xe08/0x1bf8 kernel/sched/core.c:6395 schedule+0x11c/0x1c8 kernel/sched/core.c:6478 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6537 __mutex_lock_common+0xa9c/0x1edc kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0xac/0x11c kernel/locking/mutex.c:743 hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 hfsplus_cat_write_inode+0x1a0/0x6b8 fs/hfsplus/inode.c:588 hfsplus_write_inode+0x154/0x4d4 fs/hfsplus/super.c:160 write_inode fs/fs-writeback.c:1495 [inline] __writeback_single_inode+0x560/0x11f0 fs/fs-writeback.c:1705 writeback_sb_inodes+0x7fc/0x1378 fs/fs-writeback.c:1930 __writeback_inodes_wb+0x110/0x394 fs/fs-writeback.c:2001 wb_writeback+0x3ec/0xe44 fs/fs-writeback.c:2106 wb_check_background_flush fs/fs-writeback.c:2172 [inline] wb_do_writeback fs/fs-writeback.c:2260 [inline] wb_workfn+0xa7c/0xdd8 fs/fs-writeback.c:2288 process_one_work+0x79c/0x1140 kernel/workqueue.c:2310 worker_thread+0x8f4/0x101c kernel/workqueue.c:2457 kthread+0x374/0x454 kernel/kthread.c:334 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:856 Showing all locks held in the system: 2 locks held by kworker/u4:0/9: #0: ffff0000c0029138 ( (wq_completion)events_unbound){+.+.}-{0:0} , at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001b2f7c00 ( (work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 1 lock held by khungtaskd/27: #0: ffff8000143513a0 (rcu_read_lock){....}-{1:2} , at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:311 4 locks held by kworker/u4:1/136: #0: ffff0000c21e0138 ((wq_completion)writeback ){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001b997c00 ( (work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0} , at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000d7fae0e0 (&type->s_umount_key #52){.+.+}-{3:3}, at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000c98d20b0 ( &tree->tree_lock ){+.+.}-{3:3} , at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 4 locks held by kworker/u4:3/322: #0: ffff0000c21e0138 ( (wq_completion)writeback ){+.+.}-{0:0} , at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001beb7c00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000cab120e0 (&type->s_umount_key#52){.+.+}-{3:3}, at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000c2d420b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 4 locks held by kworker/u4:4/1605: #0: ffff0000c21e0138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff800023b17c00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000c0ca40e0 (&type->s_umount_key#52){.+.+}-{3:3}, at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000c1ef80b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 4 locks held by kworker/u4:5/1613: #0: ffff0000c21e0138 ( (wq_completion)writeback){+.+.}-{0:0} , at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff800023e67c00 ( (work_completion)(&(&wb->dwork)->work) ){+.+.}-{0:0} , at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000c0d7a0e0 (&type->s_umount_key#52){.+.+}-{3:3}, at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000c0f360b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 2 locks held by getty/3802: #0: ffff0000d37e7098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50 drivers/tty/tty_ldsem.c:340 #1: ffff80001bd7b2e8 ( &ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2f0/0xf6c drivers/tty/n_tty.c:2158 3 locks held by kworker/0:4/4112: #0: ffff0000c0020938 ( (wq_completion)events ){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001b8f7c00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000f0088240 (&data->fib_lock){+.+.}-{3:3} , at: nsim_fib_event_work+0x1c8/0x2704 drivers/net/netdevsim/fib.c:1480 3 locks held by kworker/1:16/4173: #0: ffff0000d2e28538 ( (wq_completion)ipv6_addrconf ){+.+.}-{0:0} , at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff0001a10d4c88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x414/0x68c kernel/sched/psi.c:891 #2: ffff0000ccdea458 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x60/0xa64 kernel/sched/core.c:4049 4 locks held by kworker/u4:6/4219: #0: ffff0000c21e0138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff800020637c00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000d15600e0 (&type->s_umount_key#52){.+.+}-{3:3}, at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000d15660b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 3 locks held by kworker/0:6/4639: #0: ffff0000d2e28538 ( (wq_completion)ipv6_addrconf ){+.+.}-{0:0} , at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001f757c00 ( (work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0} , at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff8000162aea68 (rtnl_mutex ){+.+.}-{3:3} , at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:72 4 locks held by syz.0.16/4947: 4 locks held by syz.1.17/4976: 4 locks held by syz.2.18/5000: 4 locks held by syz.3.19/5021: 4 locks held by kworker/u4:7/5047: #0: ffff0000c21e0138 ( (wq_completion)writeback ){+.+.}-{0:0} , at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff800020137c00 ( (work_completion)(&(&wb->dwork)->work) ){+.+.}-{0:0} , at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000dafe60e0 ( &type->s_umount_key#52){.+.+}-{3:3}, at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000d92ee0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 4 locks held by syz.4.20/5060: 4 locks held by syz.5.21/5092: 4 locks held by kworker/u4:9/5103: #0: ffff0000c21e0138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff800020257c00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000d8cda0e0 (&type->s_umount_key#52){.+.+}-{3:3}, at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000d8cde0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 4 locks held by kworker/u4:10/5123: #0: ffff0000c21e0138 ( (wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff800020317c00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000c8b180e0 ( &type->s_umount_key #52){.+.+}-{3:3}, at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000c8b1c0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 4 locks held by syz.6.22/5125: 4 locks held by kworker/u4:11/5126: #0: ffff0000c21e0138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff800020337c00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000d7adc0e0 (&type->s_umount_key#52){.+.+}-{3:3}, at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000d82c40b0 ( &tree->tree_lock){+.+.}-{3:3} , at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 4 locks held by syz.7.23/5157: 4 locks held by syz.8.24/5197: 3 locks held by syz-executor/5199: #0: ffff8000162aea68 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:72 [inline] #0: ffff8000162aea68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x98c/0xd04 net/core/rtnetlink.c:5647 #1: ffff0000f12553e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_open+0x208/0x430 drivers/net/wireguard/device.c:49 #2: ffff800014355e68 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:290 [inline] #2: ffff800014355e68 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2f0/0x5e0 kernel/rcu/tree_exp.h:845 =============================================