INFO: task kworker/0:6:4338 blocked for more than 143 seconds. Not tainted 6.1.133-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:6 state:D stack:0 pid:4338 ppid:2 flags:0x00000008 Workqueue: events_long flush_old_commits Call trace: __switch_to+0x308/0x598 arch/arm64/kernel/process.c:553 context_switch kernel/sched/core.c:5244 [inline] __schedule+0xef4/0x1d44 kernel/sched/core.c:6561 schedule+0xc4/0x170 kernel/sched/core.c:6637 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6696 __mutex_lock_common+0xbd8/0x21a0 kernel/locking/mutex.c:679 __mutex_lock kernel/locking/mutex.c:747 [inline] mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799 reiserfs_write_lock+0x7c/0xe8 fs/reiserfs/lock.c:27 reiserfs_sync_fs fs/reiserfs/super.c:76 [inline] flush_old_commits+0x1b0/0x2b8 fs/reiserfs/super.c:111 process_one_work+0x804/0x1484 kernel/workqueue.c:2292 worker_thread+0x8e4/0xfec kernel/workqueue.c:2439 kthread+0x250/0x2d8 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864 INFO: task syz.3.24:4438 blocked for more than 144 seconds. Not tainted 6.1.133-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.24 state:D stack:0 pid:4438 ppid:4298 flags:0x00000009 Call trace: __switch_to+0x308/0x598 arch/arm64/kernel/process.c:553 context_switch kernel/sched/core.c:5244 [inline] __schedule+0xef4/0x1d44 kernel/sched/core.c:6561 schedule+0xc4/0x170 kernel/sched/core.c:6637 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6696 __mutex_lock_common+0xbd8/0x21a0 kernel/locking/mutex.c:679 __mutex_lock kernel/locking/mutex.c:747 [inline] mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799 reiserfs_write_lock+0x7c/0xe8 fs/reiserfs/lock.c:27 reiserfs_file_release+0x378/0x884 fs/reiserfs/file.c:53 __fput+0x1c8/0x7c8 fs/file_table.c:320 ____fput+0x20/0x30 fs/file_table.c:348 task_work_run+0x240/0x2f0 kernel/task_work.c:203 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline] el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/12: #0: ffff800015cd79f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 kernel/rcu/tasks.h:517 1 lock held by rcu_tasks_trace/13: #0: ffff800015cd81f0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 kernel/rcu/tasks.h:517 3 locks held by ksoftirqd/0/15: 1 lock held by khungtaskd/28: #0: ffff800015cd7820 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:349 3 locks held by kworker/u4:4/196: #0: ffff0001b3cd6118 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:537 [inline] #0: ffff0001b3cd6118 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock kernel/sched/sched.h:1355 [inline] #0: ffff0001b3cd6118 (&rq->__lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1645 [inline] #0: ffff0001b3cd6118 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x2c4/0x1d44 kernel/sched/core.c:6477 #1: ffff8000210b7c20 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x6fc/0x1484 kernel/workqueue.c:2267 #2: ffff0001b3ce4758 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x67c/0xd30 kernel/time/timer.c:1096 2 locks held by getty/4053: #0: ffff0000d5fda098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80001d9002f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214 drivers/tty/n_tty.c:2198 4 locks held by kworker/0:6/4338: #0: ffff0000c0021138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_one_work+0x6bc/0x1484 kernel/workqueue.c:2265 #1: ffff800021577c20 ((work_completion)(&(&sbi->old_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6fc/0x1484 kernel/workqueue.c:2267 #2: ffff0000d59780e0 (&type->s_umount_key#75){++++}-{3:3}, at: flush_old_commits+0xcc/0x2b8 fs/reiserfs/super.c:97 #3: ffff0000cf155090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x7c/0xe8 fs/reiserfs/lock.c:27 2 locks held by syz.3.24/4438: #0: ffff0000f3921498 (&ei->tailpack){+.+.}-{3:3}, at: reiserfs_file_release+0xd0/0x884 fs/reiserfs/file.c:41 #1: ffff0000cf155090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x7c/0xe8 fs/reiserfs/lock.c:27 3 locks held by syz.3.24/4440: 4 locks held by kworker/u4:8/4472: #0: ffff0000c0845138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x6bc/0x1484 kernel/workqueue.c:2265 #1: ffff800021947c20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6fc/0x1484 kernel/workqueue.c:2267 #2: ffff80001817ddd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x13c/0xaec net/core/net_namespace.c:594 #3: ffff800015cdcd00 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x58/0x5c4 kernel/rcu/tree.c:4019 3 locks held by kworker/u4:9/4473: #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x6bc/0x1484 kernel/workqueue.c:2265 #1: ffff800021857c20 ((work_completion)(©->work)){+.+.}-{0:0}, at: process_one_work+0x6fc/0x1484 kernel/workqueue.c:2267 #2: ffff800015cd8318 (rcu_tasks_trace.barrier_q_mutex){+.+.}-{3:3}, at: rcu_barrier_tasks_generic+0x68/0x66c kernel/rcu/tasks.h:358 3 locks held by kworker/u4:14/4663: #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x6bc/0x1484 kernel/workqueue.c:2265 #1: ffff800021e77c20 ((work_completion)(©->work) ){+.+.}-{0:0}, at: process_one_work+0x6fc/0x1484 kernel/workqueue.c:2267 #2: ffff800015cdcd00 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x58/0x5c4 kernel/rcu/tree.c:4019 2 locks held by kworker/1:14/7285: #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x6bc/0x1484 kernel/workqueue.c:2265 #1: ffff800022bc7c20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x6fc/0x1484 kernel/workqueue.c:2267 5 locks held by kworker/1:15/7286: #0: ffff0000c46a9138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x6bc/0x1484 kernel/workqueue.c:2265 #1: ffff800022c07c20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x6fc/0x1484 kernel/workqueue.c:2267 #2: ffff0000d2399190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:837 [inline] #2: ffff0000d2399190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1b0/0x42e4 drivers/usb/core/hub.c:5813 #3: ffff0000d239c510 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_lock_port drivers/usb/core/hub.c:3172 [inline] #3: ffff0000d239c510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect drivers/usb/core/hub.c:5385 [inline] #3: ffff0000d239c510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_port_connect_change drivers/usb/core/hub.c:5629 [inline] #3: ffff0000d239c510 (&port_dev->status_lock){+.+.}-{3:3}, at: port_event drivers/usb/core/hub.c:5785 [inline] #3: ffff0000d239c510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x1bdc/0x42e4 drivers/usb/core/hub.c:5867 #4: ffff0000d1f5e268 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_port_connect drivers/usb/core/hub.c:5386 [inline] #4: ffff0000d1f5e268 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_port_connect_change drivers/usb/core/hub.c:5629 [inline] #4: ffff0000d1f5e268 (hcd->address0_mutex){+.+.}-{3:3}, at: port_event drivers/usb/core/hub.c:5785 [inline] #4: ffff0000d1f5e268 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x1c04/0x42e4 drivers/usb/core/hub.c:5867 2 locks held by kworker/1:16/7287: #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x6bc/0x1484 kernel/workqueue.c:2265 #1: ffff800022c27c20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x6fc/0x1484 kernel/workqueue.c:2267 2 locks held by syz.6.682/7344: #0: ffff0000d59780e0 (&type->s_umount_key#75){++++}-{3:3}, at: iterate_supers+0xb0/0x1dc fs/super.c:755 #1: ffff0000cf155090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x7c/0xe8 fs/reiserfs/lock.c:27 6 locks held by syz.7.693/7377: #0: ffff0000cb7720e0 (&type->s_umount_key#78/1){+.+.}-{3:3}, at: alloc_super+0x1b4/0x824 fs/super.c:228 #1: ffff0000cb772650 (sb_internal#3){.+.+}-{0:0}, at: btrfs_start_transaction+0x34/0x44 fs/btrfs/transaction.c:766 #2: ffff0000d97323f0 (btrfs_trans_completed){.+.+}-{0:0}, at: btrfs_commit_transaction+0xffc/0x2cd4 fs/btrfs/transaction.c:2346 #3: ffff0000d97323c8 (btrfs_trans_super_committed){.+.+}-{0:0}, at: btrfs_commit_transaction+0x102c/0x2cd4 fs/btrfs/transaction.c:2347 #4: ffff0000d9730750 (&fs_info->tree_log_mutex){+.+.}-{3:3}, at: btrfs_commit_transaction+0x1aa4/0x2cd4 fs/btrfs/transaction.c:2485 #5: ffff0000d5b518e0 (&fs_devs->device_list_mutex){+.+.}-{3:3}, at: write_all_supers+0x13ac/0x39c4 fs/btrfs/disk-io.c:4363 1 lock held by syz.2.698/7389: 2 locks held by udevadm/7416: =============================================