INFO: task syz-executor:6492 blocked for more than 143 seconds. Not tainted 6.15.0-rc4-syzkaller-g66d2d510fea3 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:6492 tgid:6492 ppid:6488 task_flags:0x400140 flags:0x0000000c Call trace: __switch_to+0x404/0x778 arch/arm64/kernel/process.c:701 (T) context_switch kernel/sched/core.c:5382 [inline] __schedule+0x13b0/0x28d4 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6860 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6917 __mutex_lock_common+0xbd0/0x2190 kernel/locking/mutex.c:678 __mutex_lock kernel/locking/mutex.c:746 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:798 kmem_cache_destroy+0x58/0x178 mm/slab_common.c:511 bio_put_slab block/bio.c:155 [inline] bioset_exit+0x2e8/0x3dc block/bio.c:1664 bch2_fs_fs_io_direct_exit+0x30/0x40 fs/bcachefs/fs-io-direct.c:685 __bch2_fs_free fs/bcachefs/super.c:542 [inline] bch2_fs_release+0x1c0/0x714 fs/bcachefs/super.c:609 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x2b0/0x438 lib/kobject.c:737 bch2_fs_free+0x308/0x378 fs/bcachefs/super.c:672 bch2_kill_sb+0x48/0x58 fs/bcachefs/fs.c:2621 deactivate_locked_super+0xc4/0x12c fs/super.c:473 deactivate_super+0xe0/0x100 fs/super.c:506 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1435 __cleanup_mnt+0x20/0x30 fs/namespace.c:1442 task_work_run+0x1dc/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] do_notify_resume+0x178/0x1f8 arch/arm64/kernel/entry-common.c:151 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:169 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:178 [inline] el0_svc+0xb0/0x150 arch/arm64/kernel/entry-common.c:745 el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 Showing all locks held in the system: 1 lock held by kthreadd/2: 1 lock held by kworker/R-rcu_g/4: #0: ffff80008f3902a8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x348 kernel/workqueue.c:2678 1 lock held by kworker/R-kvfre/6: #0: ffff80008f3902a8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x348 kernel/workqueue.c:2678 3 locks held by kworker/u8:0/12: 3 locks held by kworker/u8:1/13: 1 lock held by kworker/R-mm_pe/14: #0: ffff80008f3902a8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x348 kernel/workqueue.c:2678 2 locks held by kworker/1:0/24: 2 locks held by kworker/1:1/26: 1 lock held by khungtaskd/32: #0: ffff80008f4e7c60 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 include/linux/rcupdate.h:330 3 locks held by kworker/u8:2/44: 2 locks held by kworker/u8:3/45: 2 locks held by pr/ttyAMA0/46: 3 locks held by kworker/u8:4/235: 3 locks held by kworker/u8:5/774: 3 locks held by kworker/u8:6/2076: 3 locks held by kworker/u8:7/2078: 4 locks held by kworker/u8:8/2102: #0: ffff0000c0031948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212 #1: ffff80009fe87bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212 #2: ffff800092467668 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 #3: ffff0000dc6c8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6092 [inline] #3: ffff0000dc6c8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_leave_invalid_chans net/wireless/reg.c:2471 [inline] #3: ffff0000dc6c8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x11c/0xd88 net/wireless/reg.c:2486 3 locks held by kworker/u8:9/2119: 3 locks held by kworker/u8:10/2164: 4 locks held by kworker/1:2/2309: 3 locks held by kworker/u8:11/2638: 3 locks held by kworker/R-ipv6_/4145: #0: ffff0000d1d6c948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212 #1: ffff80009d757ba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212 #2: ffff800092467668 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 1 lock held by kworker/R-bat_e/4226: #0: ffff80008f3902a8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline] #0: ffff80008f3902a8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x86c/0xec8 kernel/workqueue.c:3529 1 lock held by syslogd/6094: 2 locks held by klogd/6098: 1 lock held by udevd/6109: 1 lock held by dhcpcd/6162: 3 locks held by dhcpcd/6163: 2 locks held by getty/6247: #0: ffff0000d7c380a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80009b5ae2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x34c/0xfa0 drivers/tty/n_tty.c:2222 3 locks held by syz-executor/6492: #0: ffff80008fc027e8 (bio_slab_lock){+.+.}-{4:4}, at: bio_put_slab block/bio.c:140 [inline] #0: ffff80008fc027e8 (bio_slab_lock){+.+.}-{4:4}, at: bioset_exit+0x1f8/0x3dc block/bio.c:1664 #1: ffff80008f381810 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x48/0x178 mm/slab_common.c:510 #2: ffff80008f5c4eb8 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x58/0x178 mm/slab_common.c:511 1 lock held by syz-executor/6494: 4 locks held by kworker/1:3/6499: #0: ffff0000c906e548 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212 #1: ffff8000a2627bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212 #2: ffff0000ef4c1308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x130/0x748 drivers/net/wireguard/noise.c:598 #3: ffff0000f099f030 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x414/0x748 drivers/net/wireguard/noise.c:632 4 locks held by kworker/0:3/6506: #0: ffff0000c906e548 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212 #1: ffff8000a1fe7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212 #2: ffff0000ef4c1308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x130/0x748 drivers/net/wireguard/noise.c:598 #3: ffff0000f099f030 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x414/0x748 drivers/net/wireguard/noise.c:632 1 lock held by kworker/R-wg-cr/6537: #0: ffff80008f3902a8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline] #0: ffff80008f3902a8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x86c/0xec8 kernel/workqueue.c:3529 1 lock held by kworker/R-wg-cr/6539: #0: ffff80008f3902a8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x348 kernel/workqueue.c:2678 1 lock held by kworker/R-wg-cr/6542: 3 locks held by kworker/1:5/6547: #0: ffff0000c0028d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212 #1: ffff8000a07a7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212 #2: ffff800092467668 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 4 locks held by kworker/0:7/6575: #0: ffff0000db7c4148 ((wq_completion)wg-kex-wg0#14){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212 #1: ffff8000a1e47bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212 #2: ffff0000d1001308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x130/0x748 drivers/net/wireguard/noise.c:598 #3: ffff0000c9c60338 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x414/0x748 drivers/net/wireguard/noise.c:632 2 locks held by kworker/1:6/6588: 4 locks held by syz-executor/7392: 1 lock held by kworker/R-wg-cr/7479: #0: ffff80008f3902a8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x348 kernel/workqueue.c:2678 1 lock held by kworker/R-wg-cr/7485: #0: ffff80008f3902a8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline] #0: ffff80008f3902a8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x86c/0xec8 kernel/workqueue.c:3529 3 locks held by syz-executor/7530: #0: ffff0000cba440e0 (&type->s_umount_key#55){+.+.}-{4:4}, at: __super_lock fs/super.c:56 [inline] #0: ffff0000cba440e0 (&type->s_umount_key#55){+.+.}-{4:4}, at: __super_lock_excl fs/super.c:71 [inline] #0: ffff0000cba440e0 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xd8/0x100 fs/super.c:505 #1: ffff80008f381810 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x48/0x178 mm/slab_common.c:510 #2: ffff80008f5c4eb8 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x58/0x178 mm/slab_common.c:511 1 lock held by kworker/R-wg-cr/7646: #0: ffff80008f3902a8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x348 kernel/workqueue.c:2678 1 lock held by kworker/R-wg-cr/7651: #0: ffff80008f3902a8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2736 [inline] #0: ffff80008f3902a8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x86c/0xec8 kernel/workqueue.c:3529 1 lock held by kworker/R-wg-cr/8995: #0: ffff80008f3902a8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x348 kernel/workqueue.c:2678 3 locks held by syz.6.1157/10768: 3 locks held by kworker/u8:12/10772: 4 locks held by kworker/u8:13/10773: 2 locks held by kworker/u8:14/10775: 3 locks held by syz-executor/10778: 2 locks held by kworker/1:7/10779: =============================================