INFO: task syz.4.5:4454 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.5 state:D stack:0 pid:4454 ppid:4333 flags:0x00000009 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5245 [inline] __schedule+0xdd0/0x1b0c kernel/sched/core.c:6562 schedule+0xc4/0x170 kernel/sched/core.c:6638 io_schedule+0x84/0x154 kernel/sched/core.c:8798 folio_wait_bit_common+0x584/0x9e4 mm/filemap.c:1324 folio_wait_bit+0x30/0x40 mm/filemap.c:1468 folio_wait_locked include/linux/pagemap.h:1059 [inline] gfs2_jhead_process_page+0x154/0x5b4 fs/gfs2/lops.c:476 gfs2_find_jhead+0x9f4/0xb30 fs/gfs2/lops.c:594 check_journal_clean+0x1bc/0x324 fs/gfs2/util.c:76 init_journal+0x1390/0x1e94 fs/gfs2/ops_fstype.c:830 init_inodes+0xe0/0x2d4 fs/gfs2/ops_fstype.c:889 gfs2_fill_super+0x11c0/0x194c fs/gfs2/ops_fstype.c:1246 get_tree_bdev+0x358/0x544 fs/super.c:1366 gfs2_get_tree+0x54/0x1b4 fs/gfs2/ops_fstype.c:1327 vfs_get_tree+0x90/0x274 fs/super.c:1573 do_new_mount+0x228/0x810 fs/namespace.c:3078 path_mount+0x5bc/0xe80 fs/namespace.c:3408 do_mount fs/namespace.c:3421 [inline] __do_sys_mount fs/namespace.c:3629 [inline] __se_sys_mount fs/namespace.c:3606 [inline] __arm64_sys_mount+0x49c/0x59c fs/namespace.c:3606 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 INFO: task syz.3.69:4720 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.69 state:D stack:0 pid:4720 ppid:4321 flags:0x00000009 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5245 [inline] __schedule+0xdd0/0x1b0c kernel/sched/core.c:6562 schedule+0xc4/0x170 kernel/sched/core.c:6638 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6697 rwsem_down_read_slowpath+0x4b8/0x79c kernel/locking/rwsem.c:1094 __down_read_common kernel/locking/rwsem.c:1261 [inline] __down_read kernel/locking/rwsem.c:1274 [inline] down_read+0xa8/0x300 kernel/locking/rwsem.c:1522 iterate_supers+0xa8/0x1d0 fs/super.c:755 ksys_sync+0x9c/0x17c fs/sync.c:102 __arm64_sys_sync+0x14/0x24 fs/sync.c:113 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/12: #0: ffff8000153e7c30 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 kernel/rcu/tasks.h:517 1 lock held by rcu_tasks_trace/13: #0: ffff8000153e8450 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 kernel/rcu/tasks.h:517 3 locks held by kworker/1:1/24: #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x6b8/0x13a4 kernel/workqueue.c:2265 #1: ffff80001cab7c20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6fc/0x13a4 kernel/workqueue.c:2267 #2: ffff0000dd9fe240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x1d0/0x27cc drivers/net/netdevsim/fib.c:1491 1 lock held by khungtaskd/28: #0: ffff8000153e72c0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:349 3 locks held by kworker/0:2/111: #0: ffff0000d5620938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x6b8/0x13a4 kernel/workqueue.c:2265 #1: ffff800020617c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6fc/0x13a4 kernel/workqueue.c:2267 #2: ffff80001787f1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 2 locks held by getty/4076: #0: ffff0000d6d7c098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80001cfd32f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2ec/0xfa0 drivers/tty/n_tty.c:2198 3 locks held by kworker/1:4/4368: #0: ffff0000d5620938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x6b8/0x13a4 kernel/workqueue.c:2265 #1: ffff800020ca7c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6fc/0x13a4 kernel/workqueue.c:2267 #2: ffff80001787f1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 1 lock held by syz.4.5/4454: #0: ffff0000dec2e0e0 (&type->s_umount_key#47/1){+.+.}-{3:3}, at: alloc_super+0x1a4/0x800 fs/super.c:228 1 lock held by syz.3.69/4720: #0: ffff0000dec2e0e0 (&type->s_umount_key#86){.+.+}-{3:3}, at: iterate_supers+0xa8/0x1d0 fs/super.c:755 8 locks held by kworker/u4:16/6072: #0: ffff0000c0845138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x6b8/0x13a4 kernel/workqueue.c:2265 #1: ffff800021c37c20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6fc/0x13a4 kernel/workqueue.c:2267 #2: ffff800017872910 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x134/0xa84 net/core/net_namespace.c:594 #3: ffff80001787f1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 #4: ffff0000d5ae87c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: wiphy_lock include/net/cfg80211.h:5693 [inline] #4: ffff0000d5ae87c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_netdev_notifier_call+0x174/0x12bc net/wireless/core.c:1511 #5: ffff0000fb2d4d40 (&wdev->mtx){+.+.}-{3:3}, at: wdev_lock net/wireless/core.h:231 [inline] #5: ffff0000fb2d4d40 (&wdev->mtx){+.+.}-{3:3}, at: cfg80211_leave net/wireless/core.c:1349 [inline] #5: ffff0000fb2d4d40 (&wdev->mtx){+.+.}-{3:3}, at: cfg80211_netdev_notifier_call+0x180/0x12bc net/wireless/core.c:1512 #6: ffff0000d5ae97a0 (&local->sta_mtx){+.+.}-{3:3}, at: __sta_info_flush+0x15c/0x430 net/mac80211/sta_info.c:1444 #7: ffff8000153ecf78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:291 [inline] #7: ffff8000153ecf78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3fc/0x77c kernel/rcu/tree_exp.h:962 2 locks held by udevd/6234: 1 lock held by udevd/6238: 2 locks held by kworker/1:13/6259: #0: ffff0000c0021938 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x6b8/0x13a4 kernel/workqueue.c:2265 #1: ffff800022f57c20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x6fc/0x13a4 kernel/workqueue.c:2267 1 lock held by syz.2.509/6880: 1 lock held by syz.5.512/6903: 1 lock held by dhcpcd/6905: #0: ffff00010c42dc10 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline] #0: ffff00010c42dc10 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: __sock_release net/socket.c:653 [inline] #0: ffff00010c42dc10 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: sock_close+0x7c/0x1f8 net/socket.c:1399 1 lock held by syz.8.485/6909: 2 locks held by dhcpcd-run-hook/6914: =============================================