INFO: task kworker/u32:8:1161 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u32:8 state:D stack:22800 pid:1161 tgid:1161 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: writeback wb_workfn (flush-7:0) Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1295/0x67a0 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7283 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7340 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0xced/0x1b10 kernel/locking/mutex.c:820 hfsplus_system_write_inode fs/hfsplus/super.c:156 [inline] hfsplus_write_inode+0x3fd/0x620 fs/hfsplus/super.c:185 write_inode fs/fs-writeback.c:1584 [inline] __writeback_single_inode+0xcd4/0x1350 fs/fs-writeback.c:1827 writeback_sb_inodes+0x766/0x1c60 fs/fs-writeback.c:2056 __writeback_inodes_wb+0xf8/0x2d0 fs/fs-writeback.c:2132 wb_writeback+0x720/0xb90 fs/fs-writeback.c:2243 wb_check_old_data_flush fs/fs-writeback.c:2347 [inline] wb_do_writeback fs/fs-writeback.c:2400 [inline] wb_workfn+0x8dd/0xc00 fs/fs-writeback.c:2428 process_one_work+0xa0e/0x1980 kernel/workqueue.c:3314 process_scheduled_works kernel/workqueue.c:3397 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3478 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Showing all locks held in the system: 1 lock held by khungtaskd/42: #0: ffffffff8e7e5620 (rcu_read_lock ){....}-{1:3} , at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] , at: rcu_read_lock include/linux/rcupdate.h:838 [inline] , at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775 4 locks held by kworker/u32:8/1161: #0: ffff88801cea3140 ((wq_completion)writeback ){+.+.}-{0:0} , at: process_one_work+0x12d6/0x1980 kernel/workqueue.c:3289 #1: ffffc90005ca7d08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 kernel/workqueue.c:3290 #2: ffff888035d760d8 ( &type->s_umount_key#70 ){.+.+}-{4:4} , at: super_trylock_shared+0x1e/0xf0 fs/super.c:565 #3: ffff88802abc80a8 (&tree->tree_lock ){+.+.}-{4:4}, at: hfsplus_system_write_inode fs/hfsplus/super.c:156 [inline] ){+.+.}-{4:4}, at: hfsplus_write_inode+0x3fd/0x620 fs/hfsplus/super.c:185 2 locks held by getty/5533: #0: ffff88802b3ec0a0 (&tty->ldisc_sem){++++}-{0:0} , at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc900033732e8 ( &ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 drivers/tty/n_tty.c:2211 6 locks held by syz-executor.0/5952: 1 lock held by syz-executor.0/6000: ============================================= NMI backtrace for cpu 3 CPU: 3 UID: 0 PID: 42 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x1d7/0x230 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x141/0x190 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xcb1/0x1030 kernel/hung_task.c:561 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 3 to CPUs 0-2: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 5952 Comm: syz-executor.0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:27 [inline] RIP: 0010:check_kcov_mode kernel/kcov.c:183 [inline] RIP: 0010:write_comp_data+0x0/0x90 kernel/kcov.c:246 Code: 4e 88 02 12 48 8b 80 c8 16 00 00 e9 4a 93 85 09 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <65> 8b 05 39 88 02 12 49 89 f8 49 89 f1 49 89 d2 65 48 8b 3d 10 88 RSP: 0018:ffffc9000340eff8 EFLAGS: 00000246 RAX: 1ffff92000681e2e RBX: 0000000000500b70 RCX: ffffffff81e7e604 RDX: 0000000000500b70 RSI: 0000000000000001 RDI: 0000000000000007 RBP: ffffc9000340f168 R08: 0000000000000005 R09: 0000000000000003 R10: 0000000000000002 R11: 0000000000000000 R12: 1ffff92000681e00 R13: 000000000000b7c0 R14: dffffc0000000000 R15: 000000000000b7c0 FS: 00007ffb473a16c0(0000) GS:ffff8880d636d000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f55d16db788 CR3: 00000000356f9000 CR4: 0000000000352ef0 Call Trace: desc_read_finalized_seq+0x124/0x1d0 kernel/printk/printk_ringbuffer.c:1953 prb_read kernel/printk/printk_ringbuffer.c:1982 [inline] _prb_read_valid+0x1f0/0x880 kernel/printk/printk_ringbuffer.c:2173 prb_read_valid+0x78/0xa0 kernel/printk/printk_ringbuffer.c:2245 printk_get_next_message+0x15b/0x6c0 kernel/printk/printk.c:3052 console_emit_next_record kernel/printk/printk.c:3137 [inline] console_flush_one_record+0x67c/0xe50 kernel/printk/printk.c:3269 console_flush_all kernel/printk/printk.c:3343 [inline] __console_flush_and_unlock kernel/printk/printk.c:3373 [inline] console_unlock+0x103/0x260 kernel/printk/printk.c:3413 vprintk_emit+0x407/0x6b0 kernel/printk/printk.c:2479 _printk+0xcf/0x110 kernel/printk/printk.c:2504 is_bnode_offset_valid fs/hfsplus/hfsplus_fs.h:583 [inline] hfsplus_bnode_read.cold+0x166/0x27a fs/hfsplus/bnode.c:28 hfsplus_bnode_read_u16 fs/hfsplus/bnode.c:60 [inline] hfsplus_bnode_dump+0x164/0x870 fs/hfsplus/bnode.c:362 hfsplus_brec_remove+0x4ca/0x620 fs/hfsplus/brec.c:229 __hfsplus_delete_attr+0x234/0x480 fs/hfsplus/attributes.c:339 hfsplus_delete_all_attrs+0x189/0x300 fs/hfsplus/attributes.c:444 hfsplus_delete_cat+0x9f4/0x1010 fs/hfsplus/catalog.c:427 hfsplus_unlink+0x21c/0x9a0 fs/hfsplus/dir.c:406 vfs_unlink+0x2f0/0xbd0 fs/namei.c:5498 filename_unlinkat+0x408/0x730 fs/namei.c:5568 __do_sys_unlink fs/namei.c:5603 [inline] __se_sys_unlink fs/namei.c:5600 [inline] __x64_sys_unlink+0x46/0x70 fs/namei.c:5600 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x10b/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ffb4666e3b9 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffb473a1078 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 RAX: ffffffffffffffda RBX: 00007ffb467abf80 RCX: 00007ffb4666e3b9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 RBP: 00007ffb466cf498 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007ffb467abf80 R15: 00007ffd2e83dfc8 NMI backtrace for cpu 2 CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:63 Code: 76 92 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 63 81 20 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 RSP: 0018:ffffc90000187df0 EFLAGS: 00000206 RAX: 000000000013f0c5 RBX: ffff88801ead4a00 RCX: ffffffff8b8b1095 RDX: 0000000000000000 RSI: ffffffff8df22fb1 RDI: ffffffff8c1c4180 RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100d4c67b5 R10: ffff88806a633dab R11: 0000000000000000 R12: 0000000000000002 R13: ffffed1003d5a940 R14: 0000000000000002 R15: ffffffff90d7d650 FS: 0000000000000000(0000) GS:ffff8880d656d000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f55c787fc00 CR3: 000000000e596000 CR4: 0000000000352ef0 Call Trace: arch_safe_halt arch/x86/include/asm/paravirt.h:62 [inline] default_idle+0x9/0x10 arch/x86/kernel/process.c:767 default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x464/0x590 kernel/sched/idle.c:352 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:451 start_secondary+0x21d/0x2d0 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x148 NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 6000 Comm: syz-executor.0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:stack_trace_consume_entry+0xaf/0x170 kernel/stacktrace.c:93 Code: c0 03 38 d0 7c 08 84 d2 0f 85 98 00 00 00 8b 43 0c 85 c0 75 57 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 <0f> 85 9a 00 00 00 8d 45 01 89 43 10 48 8b 03 48 8d 2c e8 48 b8 00 RSP: 0018:ffffc900045a7588 EFLAGS: 00000246 RAX: dffffc0000000000 RBX: ffffc900045a7668 RCX: ffffc900045a74fc RDX: 1ffff920008b4ecd RSI: ffffffff81000130 RDI: ffffc900045a7674 RBP: 000000000000000d R08: 0000000000000001 R09: 0000000000000007 R10: 0000000000000200 R11: 00000000000a8a71 R12: ffffffff81f2f410 R13: ffffc900045a7668 R14: 0000000000000000 R15: ffff88802ffca500 FS: 00005555899744c0(0000) GS:ffff8880d646d000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055558997d9d8 CR3: 0000000027397000 CR4: 0000000000352ef0 Call Trace: arch_stack_walk+0x88/0xf0 arch/x86/kernel/stacktrace.c:27 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57 kasan_save_track+0x14/0x30 mm/kasan/common.c:78 poison_kmalloc_redzone mm/kasan/common.c:398 [inline] __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:415 kasan_kmalloc include/linux/kasan.h:263 [inline] __do_kmalloc_node mm/slub.c:5295 [inline] __kmalloc_noprof+0x301/0x850 mm/slub.c:5307 kmalloc_noprof include/linux/slab.h:954 [inline] kzalloc_noprof include/linux/slab.h:1188 [inline] tomoyo_encode2+0xfb/0x3c0 security/tomoyo/realpath.c:45 tomoyo_encode+0x29/0x50 security/tomoyo/realpath.c:80 tomoyo_realpath_from_path+0x18c/0x690 security/tomoyo/realpath.c:283 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_path_perm+0x276/0x460 security/tomoyo/file.c:827 security_inode_getattr+0x116/0x280 security/security.c:1895 vfs_getattr fs/stat.c:259 [inline] vfs_statx_path fs/stat.c:299 [inline] vfs_statx+0x11f/0x3f0 fs/stat.c:356 vfs_fstatat+0x77/0xe0 fs/stat.c:373 __do_sys_newfstatat+0x9d/0x120 fs/stat.c:538 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x10b/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f55d0a9bd0a Code: 48 83 ec 10 48 63 d2 48 63 ff 45 31 c9 6a 3d 45 31 c0 e8 f9 48 ff ff 48 83 c4 18 c3 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 d0 ff ff ff f7 RSP: 002b:00007ffc716a6888 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f55d0a9bd0a RDX: 00007ffc716a68b0 RSI: 00007ffc716a6940 RDI: 00000000ffffff9c RBP: 00007ffc716a6940 R08: 00007ffc716a7940 R09: 00000000ffffffff R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffc716a7a00 R13: 00007f55d0ace3ef R14: 000000000004030b R15: 0000000000000002