INFO: task syz-executor.3:14698 blocked for more than 143 seconds.
Not tainted 5.11.0-rc4-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3 state:D stack:29264 pid:14698 ppid: 8689 flags:0x20004004
Call Trace:
context_switch kernel/sched/core.c:4327 [inline]
__schedule+0x90c/0x21a0 kernel/sched/core.c:5078
schedule+0xcf/0x270 kernel/sched/core.c:5157
rwsem_down_write_slowpath+0x7e5/0x1200 kernel/locking/rwsem.c:1106
__down_write_common kernel/locking/rwsem.c:1261 [inline]
__down_write_common kernel/locking/rwsem.c:1258 [inline]
__down_write kernel/locking/rwsem.c:1270 [inline]
down_write+0x132/0x150 kernel/locking/rwsem.c:1407
inode_lock include/linux/fs.h:773 [inline]
vfs_setxattr+0x117/0x320 fs/xattr.c:290
setxattr+0x1ff/0x290 fs/xattr.c:553
path_setxattr+0x170/0x190 fs/xattr.c:572
__do_sys_lsetxattr fs/xattr.c:594 [inline]
__se_sys_lsetxattr fs/xattr.c:590 [inline]
__ia32_sys_lsetxattr+0xb9/0x150 fs/xattr.c:590
do_syscall_32_irqs_on arch/x86/entry/common.c:77 [inline]
__do_fast_syscall_32+0x56/0x80 arch/x86/entry/common.c:139
do_fast_syscall_32+0x2f/0x70 arch/x86/entry/common.c:164
entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7f15549
RSP: 002b:00000000f54ee0cc EFLAGS: 00000296 ORIG_RAX: 00000000000000e3
RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 0000000020000200
RDX: 00000000200000c0 RSI: 0000000000000034 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
INFO: task syz-executor.3:14702 blocked for more than 143 seconds.
Not tainted 5.11.0-rc4-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3 state:D stack:28520 pid:14702 ppid: 8689 flags:0x20000004
Call Trace:
context_switch kernel/sched/core.c:4327 [inline]
__schedule+0x90c/0x21a0 kernel/sched/core.c:5078
schedule+0xcf/0x270 kernel/sched/core.c:5157
rwsem_down_write_slowpath+0x7e5/0x1200 kernel/locking/rwsem.c:1106
__down_write_common kernel/locking/rwsem.c:1261 [inline]
__down_write_common kernel/locking/rwsem.c:1258 [inline]
__down_write kernel/locking/rwsem.c:1270 [inline]
down_write+0x132/0x150 kernel/locking/rwsem.c:1407
inode_lock include/linux/fs.h:773 [inline]
vfs_setxattr+0x117/0x320 fs/xattr.c:290
setxattr+0x1ff/0x290 fs/xattr.c:553
path_setxattr+0x170/0x190 fs/xattr.c:572
__do_sys_lsetxattr fs/xattr.c:594 [inline]
__se_sys_lsetxattr fs/xattr.c:590 [inline]
__ia32_sys_lsetxattr+0xb9/0x150 fs/xattr.c:590
do_syscall_32_irqs_on arch/x86/entry/common.c:77 [inline]
__do_fast_syscall_32+0x56/0x80 arch/x86/entry/common.c:139
do_fast_syscall_32+0x2f/0x70 arch/x86/entry/common.c:164
entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7f15549
RSP: 002b:00000000f54cd0cc EFLAGS: 00000296 ORIG_RAX: 00000000000000e3
RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 0000000020000200
RDX: 00000000200000c0 RSI: 0000000000000034 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
INFO: task syz-executor.3:14704 blocked for more than 144 seconds.
Not tainted 5.11.0-rc4-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3 state:D stack:27192 pid:14704 ppid: 8689 flags:0x20000004
Call Trace:
context_switch kernel/sched/core.c:4327 [inline]
__schedule+0x90c/0x21a0 kernel/sched/core.c:5078
schedule+0xcf/0x270 kernel/sched/core.c:5157
rwsem_down_write_slowpath+0x7e5/0x1200 kernel/locking/rwsem.c:1106
__down_write_common kernel/locking/rwsem.c:1261 [inline]
__down_write_common kernel/locking/rwsem.c:1258 [inline]
__down_write kernel/locking/rwsem.c:1270 [inline]
down_write+0x132/0x150 kernel/locking/rwsem.c:1407
inode_lock include/linux/fs.h:773 [inline]
lock_mount+0x8a/0x2e0 fs/namespace.c:2198
do_new_mount_fc fs/namespace.c:2824 [inline]
do_new_mount fs/namespace.c:2883 [inline]
path_mount+0x1787/0x20c0 fs/namespace.c:3211
do_mount fs/namespace.c:3224 [inline]
__do_sys_mount fs/namespace.c:3432 [inline]
__se_sys_mount fs/namespace.c:3409 [inline]
__ia32_sys_mount+0x27e/0x300 fs/namespace.c:3409
do_syscall_32_irqs_on arch/x86/entry/common.c:77 [inline]
__do_fast_syscall_32+0x56/0x80 arch/x86/entry/common.c:139
do_fast_syscall_32+0x2f/0x70 arch/x86/entry/common.c:164
entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7f15549
RSP: 002b:00000000f54ac0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000200020c0
RDX: 0000000020002100 RSI: 0000000000000000 RDI: 0000000020002140
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Showing all locks held in the system:
1 lock held by khungtaskd/1658:
#0: ffffffff8b373ce0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6259
1 lock held by in:imklog/8166:
#0: ffff888011c474f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 fs/file.c:947
2 locks held by agetty/8401:
#0: ffff8880215ab098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:266
#1: ffffc90000fbc2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x21d/0x1aa0 drivers/tty/n_tty.c:2158
3 locks held by syz-executor.3/14694:
2 locks held by syz-executor.3/14698:
#0: ffff8880778f6460 (sb_writers#20){.+.+}-{0:0}, at: path_setxattr+0xb5/0x190 fs/xattr.c:570
#1: ffff8880728fd250 (&type->i_mutex_dir_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:773 [inline]
#1: ffff8880728fd250 (&type->i_mutex_dir_key#8){++++}-{3:3}, at: vfs_setxattr+0x117/0x320 fs/xattr.c:290
2 locks held by syz-executor.3/14702:
#0: ffff8880778f6460 (sb_writers#20){.+.+}-{0:0}, at: path_setxattr+0xb5/0x190 fs/xattr.c:570
#1: ffff8880728fd250 (&type->i_mutex_dir_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:773 [inline]
#1: ffff8880728fd250 (&type->i_mutex_dir_key#8){++++}-{3:3}, at: vfs_setxattr+0x117/0x320 fs/xattr.c:290
1 lock held by syz-executor.3/14704:
#0: ffff8880728fd250 (&type->i_mutex_dir_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:773 [inline]
#0: ffff8880728fd250 (&type->i_mutex_dir_key#8){++++}-{3:3}, at: lock_mount+0x8a/0x2e0 fs/namespace.c:2198
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 1658 Comm: khungtaskd Not tainted 5.11.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:79 [inline]
dump_stack+0x107/0x163 lib/dump_stack.c:120
nmi_cpu_backtrace.cold+0x44/0xd7 lib/nmi_backtrace.c:105
nmi_trigger_cpumask_backtrace+0x1b3/0x230 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:209 [inline]
watchdog+0xd43/0xfa0 kernel/hung_task.c:294
kthread+0x3b1/0x4a0 kernel/kthread.c:292
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 14694 Comm: syz-executor.3 Not tainted 5.11.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:check_wait_context kernel/locking/lockdep.c:4531 [inline]
RIP: 0010:__lock_acquire+0x65c/0x54f0 kernel/locking/lockdep.c:4782
Code: 7c 24 30 4c 89 64 24 50 49 be 00 00 00 00 00 fc ff df 4c 01 f0 48 89 44 24 60 eb 6a 4b 8d 04 64 48 c1 e0 06 48 05 c0 2b d3 8e <48> 8d b8 b8 00 00 00 48 89 fa 48 c1 ea 03 42 0f b6 14 32 84 d2 74
RSP: 0018:ffffc90015737230 EFLAGS: 00000082
RAX: ffffffff8ed52780 RBX: 0000000000000002 RCX: ffffffff81586259
RDX: fffffbfff1da64ff RSI: 0000000000000008 RDI: ffffffff8ed327f0
RBP: ffff888069ebb780 R08: 0000000000000000 R09: ffffffff8ed327f7
R10: fffffbfff1da64fe R11: 0000000000000001 R12: 00000000000002a5
R13: 0000000000000003 R14: dffffc0000000000 R15: ffff888069ebc108
FS: 0000000000000000(0000) GS:ffff8880b9e00000(0063) knlGS:00000000f550fb40
CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 00007f23a55cf000 CR3: 0000000023b4b000 CR4: 00000000001526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
lock_acquire kernel/locking/lockdep.c:5442 [inline]
lock_acquire+0x1a8/0x720 kernel/locking/lockdep.c:5407
__raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
_raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:151
spin_lock include/linux/spinlock.h:354 [inline]
find_inode+0x109/0x220 fs/inode.c:826
ilookup5_nowait fs/inode.c:1334 [inline]
ilookup5 fs/inode.c:1363 [inline]
iget5_locked+0xbd/0x2d0 fs/inode.c:1144
fuse_iget+0x271/0x610 fs/fuse/inode.c:342
fuse_lookup_name+0x447/0x630 fs/fuse/dir.c:439
fuse_lookup.part.0+0xdf/0x390 fs/fuse/dir.c:469
fuse_lookup+0x70/0x90 fs/fuse/dir.c:465
__lookup_slow+0x24c/0x480 fs/namei.c:1544
lookup_slow fs/namei.c:1561 [inline]
walk_component+0x418/0x6a0 fs/namei.c:1861
lookup_last fs/namei.c:2312 [inline]
path_lookupat+0x1ba/0x830 fs/namei.c:2336
filename_lookup+0x19f/0x560 fs/namei.c:2369
user_path_at include/linux/namei.h:59 [inline]
vfs_statx+0x142/0x390 fs/stat.c:185
vfs_fstatat fs/stat.c:207 [inline]
vfs_stat include/linux/fs.h:3118 [inline]
__do_compat_sys_newstat+0x91/0x110 fs/stat.c:646
do_syscall_32_irqs_on arch/x86/entry/common.c:77 [inline]
__do_fast_syscall_32+0x56/0x80 arch/x86/entry/common.c:139
do_fast_syscall_32+0x2f/0x70 arch/x86/entry/common.c:164
entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7f15549
Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 002b:00000000f550f0cc EFLAGS: 00000296 ORIG_RAX: 000000000000006a
RAX: ffffffffffffffda RBX: 00000000200006c0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000