INFO: task syz-executor.4:5938 blocked for more than 143 seconds. Not tainted 6.1.87-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:0 pid:5938 ppid:4252 flags:0x0000000d Call trace: __switch_to+0x320/0x754 arch/arm64/kernel/process.c:553 context_switch kernel/sched/core.c:5245 [inline] __schedule+0xee4/0x1c98 kernel/sched/core.c:6558 schedule+0xc4/0x170 kernel/sched/core.c:6634 xlog_grant_head_wait+0x3bc/0xbac fs/xfs/xfs_log.c:307 xlog_grant_head_check+0x218/0x3d8 xfs_log_reserve+0x3a8/0xd20 fs/xfs/xfs_log.c:486 xfs_trans_reserve+0x1f4/0x5e0 fs/xfs/xfs_trans.c:194 xfs_trans_alloc+0x440/0x9d0 fs/xfs/xfs_trans.c:283 xfs_trans_alloc_inode+0x114/0x404 fs/xfs/xfs_trans.c:1191 xfs_attr_set+0x8e8/0x13d0 fs/xfs/libxfs/xfs_attr.c:1024 xfs_attr_change fs/xfs/xfs_xattr.c:106 [inline] xfs_xattr_set+0x1a8/0x30c fs/xfs/xfs_xattr.c:151 __vfs_setxattr+0x388/0x3a4 fs/xattr.c:182 __vfs_setxattr_noperm+0x110/0x528 fs/xattr.c:216 __vfs_setxattr_locked+0x1ec/0x218 fs/xattr.c:277 vfs_setxattr+0x1a8/0x344 fs/xattr.c:309 do_setxattr fs/xattr.c:594 [inline] setxattr+0x230/0x294 fs/xattr.c:617 path_setxattr+0x17c/0x258 fs/xattr.c:636 __do_sys_lsetxattr fs/xattr.c:659 [inline] __se_sys_lsetxattr fs/xattr.c:655 [inline] __arm64_sys_lsetxattr+0xbc/0xd8 fs/xattr.c:655 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x64/0x218 arch/arm64/kernel/syscall.c:206 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/12: #0: ffff800015a24e70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 kernel/rcu/tasks.h:516 1 lock held by rcu_tasks_trace/13: #0: ffff800015a25670 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 kernel/rcu/tasks.h:516 1 lock held by khungtaskd/28: #0: ffff800015a24ca0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:349 2 locks held by getty/3987: #0: ffff0000d5eb4098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80001bce02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214 drivers/tty/n_tty.c:2188 3 locks held by syz-executor.4/5938: #0: ffff0000c462a460 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c fs/namespace.c:393 #1: ffff0000e2bd1a78 (&inode->i_sb->s_type->i_mutex_dir_key){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline] #1: ffff0000e2bd1a78 (&inode->i_sb->s_type->i_mutex_dir_key){++++}-{3:3}, at: vfs_setxattr+0x17c/0x344 fs/xattr.c:308 #2: ffff0000c462a650 (sb_internal#4){.+.+}-{0:0}, at: xfs_trans_alloc_inode+0x114/0x404 fs/xfs/xfs_trans.c:1191 3 locks held by syz-executor.2/6050: #0: ffff0000e8c6e460 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c fs/namespace.c:393 #1: ffff0000f1031a78 (&inode->i_sb->s_type->i_mutex_dir_key){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline] #1: ffff0000f1031a78 (&inode->i_sb->s_type->i_mutex_dir_key){++++}-{3:3}, at: vfs_setxattr+0x17c/0x344 fs/xattr.c:308 #2: ffff0000e8c6e650 (sb_internal#4){.+.+}-{0:0}, at: xfs_trans_alloc_inode+0x114/0x404 fs/xfs/xfs_trans.c:1191 3 locks held by kworker/0:9/6104: #0: ffff0000c48f1938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 kernel/workqueue.c:2265 #1: ffff8000212e7c20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 kernel/workqueue.c:2267 #2: ffff0000d1e29190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:837 [inline] #2: ffff0000d1e29190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1b0/0x42e4 drivers/usb/core/hub.c:5789 3 locks held by syz-executor.3/6342: #0: ffff0001009be460 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c fs/namespace.c:393 #1: ffff0000e2bd6038 (&inode->i_sb->s_type->i_mutex_dir_key){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline] #1: ffff0000e2bd6038 (&inode->i_sb->s_type->i_mutex_dir_key){++++}-{3:3}, at: vfs_setxattr+0x17c/0x344 fs/xattr.c:308 #2: ffff0001009be650 (sb_internal#4){.+.+}-{0:0}, at: xfs_trans_alloc_inode+0x114/0x404 fs/xfs/xfs_trans.c:1191 1 lock held by syz-executor.0/6639: #0: ffff0000eac100e0 (&type->s_umount_key#80){++++}-{3:3}, at: deactivate_super+0xe8/0x110 fs/super.c:362 1 lock held by udevd/6768: 2 locks held by syz-executor.2/8196: #0: ffff0000d2841110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_close_device drivers/input/evdev.c:411 [inline] #0: ffff0000d2841110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_release+0x208/0x2ec drivers/input/evdev.c:456 #1: ffff0000ca1192c0 (&dev->mutex#2){+.+.}-{3:3}, at: input_close_device+0x50/0x1d4 drivers/input/input.c:700 1 lock held by syz-executor.4/8199: =============================================