INFO: task kworker/u4:2:148 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u4:2 state:D stack: 0 pid: 148 ppid: 2 flags:0x00000008 Workqueue: writeback wb_workfn (flush-7:0) Call trace: __switch_to+0x2f4/0x558 arch/arm64/kernel/process.c:521 context_switch kernel/sched/core.c:5049 [inline] __schedule+0xe08/0x1bf8 kernel/sched/core.c:6395 schedule+0x11c/0x1c8 kernel/sched/core.c:6478 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6537 __mutex_lock_common+0xa9c/0x1edc kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0xac/0x11c kernel/locking/mutex.c:743 hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 hfsplus_cat_write_inode+0x1a0/0x6b8 fs/hfsplus/inode.c:588 hfsplus_write_inode+0x154/0x4d4 fs/hfsplus/super.c:160 write_inode fs/fs-writeback.c:1495 [inline] __writeback_single_inode+0x560/0x11f0 fs/fs-writeback.c:1705 writeback_sb_inodes+0x7fc/0x1378 fs/fs-writeback.c:1930 __writeback_inodes_wb+0x110/0x394 fs/fs-writeback.c:2001 wb_writeback+0x3ec/0xe44 fs/fs-writeback.c:2106 wb_check_background_flush fs/fs-writeback.c:2172 [inline] wb_do_writeback fs/fs-writeback.c:2260 [inline] wb_workfn+0xa7c/0xdd8 fs/fs-writeback.c:2288 process_one_work+0x79c/0x1140 kernel/workqueue.c:2310 worker_thread+0x8f4/0x101c kernel/workqueue.c:2457 kthread+0x374/0x454 kernel/kthread.c:334 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:856 INFO: task kworker/0:5:4114 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:5 state:D stack: 0 pid: 4114 ppid: 2 flags:0x00000008 Workqueue: events_long delayed_sync_fs Call trace: __switch_to+0x2f4/0x558 arch/arm64/kernel/process.c:521 context_switch kernel/sched/core.c:5049 [inline] __schedule+0xe08/0x1bf8 kernel/sched/core.c:6395 schedule+0x11c/0x1c8 kernel/sched/core.c:6478 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6537 __mutex_lock_common+0xa9c/0x1edc kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0xac/0x11c kernel/locking/mutex.c:743 hfsplus_sync_fs+0x254/0x6f0 fs/hfsplus/super.c:210 delayed_sync_fs+0x84/0xdc fs/hfsplus/super.c:258 process_one_work+0x79c/0x1140 kernel/workqueue.c:2310 worker_thread+0x8f4/0x101c kernel/workqueue.c:2457 kthread+0x374/0x454 kernel/kthread.c:334 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:856 Showing all locks held in the system: 3 locks held by kworker/0:0/7: #0: ffff0000c0021138 ((wq_completion)events_long ){+.+.}-{0:0} , at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001b2d7c00 ((work_completion)(&(&sbi->sync_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000d5c11198 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_sync_fs+0x254/0x6f0 fs/hfsplus/super.c:210 4 locks held by kworker/u4:0/9: #0: ffff0000c21e0138 ((wq_completion)writeback ){+.+.}-{0:0} , at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001b2f7c00 ( (work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0} , at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000d91a40e0 (&type->s_umount_key#52){.+.+}-{3:3}, at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000dbc360b0 ( &tree->tree_lock ){+.+.}-{3:3} , at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 3 locks held by kworker/1:1/25: #0: ffff0000c0021138 ((wq_completion)events_long ){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001b417c00 ( (work_completion)(&(&sbi->sync_work)->work) ){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000ca68c998 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_sync_fs+0x254/0x6f0 fs/hfsplus/super.c:210 1 lock held by khungtaskd/27: #0: ffff8000143513a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:311 4 locks held by kworker/u4:2/148: #0: ffff0000c21e0138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001be47c00 ( (work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0} , at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000d6a620e0 (&type->s_umount_key#52){.+.+}-{3:3}, at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000c97600b0 ( &tree->tree_lock){+.+.}-{3:3} , at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 4 locks held by kworker/u4:3/357: #0: ffff0000c21e0138 ( (wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001f5b7c00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000c0ebe0e0 ( &type->s_umount_key#52){.+.+}-{3:3}, at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000c26340b0 ( &tree->tree_lock){+.+.}-{3:3} , at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 4 locks held by kworker/u4:4/598: #0: ffff0000c21e0138 ((wq_completion)writeback ){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff800020447c00 ((work_completion)(&(&wb->dwork)->work) ){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000dba9e0e0 (&type->s_umount_key#52){.+.+}-{3:3}, at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000c115c0b0 (&tree->tree_lock){+.+.}-{3:3} , at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 4 locks held by kworker/u4:5/1661: #0: ffff0000c21e0138 ((wq_completion)writeback){+.+.}-{0:0} , at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff800023e57c00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000d54760e0 ( &type->s_umount_key #52){.+.+}-{3:3}, at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000d5b080b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 4 locks held by kworker/u4:6/1785: #0: ffff0000c21e0138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff800024647c00 ((work_completion)(&(&wb->dwork)->work) ){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000cf5720e0 ( &type->s_umount_key#52){.+.+}-{3:3} , at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000cf5760b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 3 locks held by kworker/0:2/1970: #0: ffff0000c0021138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff800025227c00 ( (work_completion)(&(&sbi->sync_work)->work) ){+.+.}-{0:0} , at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000c216c998 ( &sbi->vh_mutex ){+.+.}-{3:3}, at: hfsplus_sync_fs+0x254/0x6f0 fs/hfsplus/super.c:210 3 locks held by kworker/1:3/3626: #0: ffff0000c0021138 ((wq_completion)events_long ){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff800022dd7c00 ( (work_completion)(&(&sbi->sync_work)->work)){+.+.}-{0:0} , at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000d13cf198 ( &sbi->vh_mutex ){+.+.}-{3:3} , at: hfsplus_sync_fs+0x254/0x6f0 fs/hfsplus/super.c:210 2 locks held by getty/3806: #0: ffff0000d414e098 ( &tty->ldisc_sem ){++++}-{0:0} , at: ldsem_down_read+0x40/0x50 drivers/tty/tty_ldsem.c:340 #1: ffff80001bd7b2e8 ( &ldata->atomic_read_lock){+.+.}-{3:3} , at: n_tty_read+0x2f0/0xf6c drivers/tty/n_tty.c:2158 3 locks held by kworker/0:3/4064: #0: ffff0000c0021138 ( (wq_completion)events_long ){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001f0f7c00 ( (work_completion)(&(&sbi->sync_work)->work) ){+.+.}-{0:0} , at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000d5c11998 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_sync_fs+0x254/0x6f0 fs/hfsplus/super.c:210 3 locks held by kworker/1:4/4081: #0: ffff0000c0021138 ( (wq_completion)events_long ){+.+.}-{0:0} , at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001f207c00 ( (work_completion)(&(&sbi->sync_work)->work)){+.+.}-{0:0} , at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000ee181998 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_sync_fs+0x254/0x6f0 fs/hfsplus/super.c:210 3 locks held by kworker/0:5/4114: #0: ffff0000c0021138 ( (wq_completion)events_long ){+.+.}-{0:0} , at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001f237c00 ( (work_completion)(&(&sbi->sync_work)->work) ){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000dc807198 ( &sbi->vh_mutex ){+.+.}-{3:3}, at: hfsplus_sync_fs+0x254/0x6f0 fs/hfsplus/super.c:210 2 locks held by kworker/1:6/4153: #0: ffff0000c0021938 ( (wq_completion)rcu_gp){+.+.}-{0:0} , at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001f497c00 ( (work_completion)(&rew.rew_work)){+.+.}-{0:0} , at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 3 locks held by kworker/1:16/4165: #0: ffff0000c0021138 ((wq_completion)events_long ){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001f557c00 ( (work_completion)(&(&sbi->sync_work)->work) ){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000d7518998 (&sbi->vh_mutex){+.+.}-{3:3} , at: hfsplus_sync_fs+0x254/0x6f0 fs/hfsplus/super.c:210 6 locks held by syz.0.16/5099: 3 locks held by kworker/0:6/5141: #0: ffff0000c0021138 ( (wq_completion)events_long){+.+.}-{0:0} , at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001f477c00 ((work_completion)(&(&sbi->sync_work)->work) ){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000d5c14198 ( &sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_sync_fs+0x254/0x6f0 fs/hfsplus/super.c:210 6 locks held by syz.1.17/5147: 6 locks held by syz.2.18/5172: 6 locks held by syz.3.19/5194: 4 locks held by kworker/u4:7/5195: #0: ffff0000c21e0138 ((wq_completion)writeback ){+.+.}-{0:0} , at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff800020077c00 ( (work_completion)(&(&wb->dwork)->work) ){+.+.}-{0:0} , at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000e8df00e0 ( &type->s_umount_key #52 ){.+.+}-{3:3} , at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000c785e0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 6 locks held by syz.4.20/5232: 4 locks held by kworker/u4:8/5233: #0: ffff0000c21e0138 ( (wq_completion)writeback ){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff800020187c00 ( (work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0} , at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000f10120e0 (&type->s_umount_key#52){.+.+}-{3:3}, at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000f10160b0 ( &tree->tree_lock){+.+.}-{3:3} , at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 6 locks held by syz.5.21/5266: 6 locks held by syz.6.22/5298: 4 locks held by kworker/u4:10/5299: #0: ffff0000c21e0138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff800020237c00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000d56660e0 (&type->s_umount_key#52){.+.+}-{3:3}, at: trylock_super+0x24/0xf4 fs/super.c:418 #3: ffff0000cab220b0 (&tree->tree_lock ){+.+.}-{3:3}, at: hfsplus_find_init+0x144/0x1bc fs/hfsplus/bfind.c:28 6 locks held by syz.7.23/5332: 6 locks held by syz.8.24/5371: 3 locks held by syz-executor/5373: #0: ffff8000162aea68 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:72 [inline] (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x98c/0xd04 net/core/rtnetlink.c:5647 #1: ffff0000da2353e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_open+0x208/0x430 drivers/net/wireguard/device.c:49 #2: ffff800014355e68 ( rcu_state.exp_mutex){+.+.}-{3:3} , at: exp_funnel_lock kernel/rcu/tree_exp.h:290 [inline] , at: synchronize_rcu_expedited+0x2f0/0x5e0 kernel/rcu/tree_exp.h:845 3 locks held by kworker/0:9/5393: #0: ffff0000d2edd938 ( (wq_completion)ipv6_addrconf){+.+.}-{0:0} , at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff800020647c00 ( (work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0} , at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff8000162aea68 ( rtnl_mutex ){+.+.}-{3:3} , at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:72 =============================================