INFO: task syz-executor.2:20724 blocked for more than 144 seconds.
Not tainted 6.4.0-rc7-syzkaller-00019-g99ec1ed7c2ed #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.2 state:D stack:24512 pid:20724 ppid:5031 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5343 [inline]
__schedule+0x187b/0x4900 kernel/sched/core.c:6669
schedule+0xc3/0x180 kernel/sched/core.c:6745
__wait_on_freeing_inode fs/inode.c:2196 [inline]
find_inode_fast+0x319/0x450 fs/inode.c:950
iget_locked+0xcb/0x830 fs/inode.c:1273
__ext4_iget+0x261/0x3f30 fs/ext4/inode.c:4696
ext4_xattr_inode_cache_find fs/ext4/xattr.c:1542 [inline]
ext4_xattr_inode_lookup_create fs/ext4/xattr.c:1577 [inline]
ext4_xattr_set_entry+0x219f/0x3e80 fs/ext4/xattr.c:1719
ext4_xattr_block_set+0xb12/0x3630 fs/ext4/xattr.c:2025
ext4_xattr_set_handle+0xcd4/0x15c0 fs/ext4/xattr.c:2442
ext4_xattr_set+0x241/0x3d0 fs/ext4/xattr.c:2544
__vfs_setxattr+0x460/0x4a0 fs/xattr.c:201
__vfs_setxattr_noperm+0x12e/0x5e0 fs/xattr.c:235
vfs_setxattr+0x221/0x420 fs/xattr.c:322
do_setxattr fs/xattr.c:630 [inline]
setxattr+0x25d/0x2f0 fs/xattr.c:653
path_setxattr+0x1c0/0x2a0 fs/xattr.c:672
__do_sys_setxattr fs/xattr.c:688 [inline]
__se_sys_setxattr fs/xattr.c:684 [inline]
__x64_sys_setxattr+0xbb/0xd0 fs/xattr.c:684
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f743028c389
RSP: 002b:00007f7431043168 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
RAX: ffffffffffffffda RBX: 00007f74303ac050 RCX: 00007f743028c389
RDX: 00000000200005c0 RSI: 0000000020000180 RDI: 00000000200000c0
RBP: 00007f74302d7493 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd88c057af R14: 00007f7431043300 R15: 0000000000022000
INFO: task syz-executor.2:20725 blocked for more than 144 seconds.
Not tainted 6.4.0-rc7-syzkaller-00019-g99ec1ed7c2ed #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.2 state:D stack:25792 pid:20725 ppid:5031 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5343 [inline]
__schedule+0x187b/0x4900 kernel/sched/core.c:6669
schedule+0xc3/0x180 kernel/sched/core.c:6745
mb_cache_entry_wait_unused+0x166/0x250 fs/mbcache.c:148
ext4_evict_ea_inode+0x14a/0x2f0 fs/ext4/xattr.c:480
ext4_evict_inode+0x184/0xf20 fs/ext4/inode.c:180
evict+0x2a4/0x620 fs/inode.c:665
ext4_xattr_set_entry+0x13d4/0x3e80 fs/ext4/xattr.c:1856
ext4_xattr_block_set+0x69c/0x3630 fs/ext4/xattr.c:1956
ext4_xattr_set_handle+0xcd4/0x15c0 fs/ext4/xattr.c:2442
ext4_xattr_set+0x241/0x3d0 fs/ext4/xattr.c:2544
__vfs_setxattr+0x460/0x4a0 fs/xattr.c:201
__vfs_setxattr_noperm+0x12e/0x5e0 fs/xattr.c:235
vfs_setxattr+0x221/0x420 fs/xattr.c:322
do_setxattr fs/xattr.c:630 [inline]
setxattr+0x25d/0x2f0 fs/xattr.c:653
path_setxattr+0x1c0/0x2a0 fs/xattr.c:672
__do_sys_setxattr fs/xattr.c:688 [inline]
__se_sys_setxattr fs/xattr.c:684 [inline]
__x64_sys_setxattr+0xbb/0xd0 fs/xattr.c:684
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f743028c389
RSP: 002b:00007f7431022168 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
RAX: ffffffffffffffda RBX: 00007f74303ac120 RCX: 00007f743028c389
RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000020000140
RBP: 00007f74302d7493 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd88c057af R14: 00007f7431022300 R15: 0000000000022000
Showing all locks held in the system:
1 lock held by rcu_tasks_kthre/13:
#0: ffffffff8cf276f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xd20 kernel/rcu/tasks.h:518
1 lock held by rcu_tasks_trace/14:
#0: ffffffff8cf27ab0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xd20 kernel/rcu/tasks.h:518
1 lock held by khungtaskd/28:
#0: ffffffff8cf27520 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
2 locks held by getty/4753:
#0: ffff88814c090098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc900015a02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ab/0x1db0 drivers/tty/n_tty.c:2176
5 locks held by kworker/1:3/5037:
#0: ffff888147643d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x77e/0x10e0 kernel/workqueue.c:2378
#1: ffffc9000496fd20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7c8/0x10e0 kernel/workqueue.c:2380
#2: ffff888023949190
(&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:837 [inline]
(&dev->mutex){....}-{3:3}, at: hub_event+0x20e/0x5460 drivers/usb/core/hub.c:5739
#3: ffff888080631190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:837 [inline]
#3: ffff888080631190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x510 drivers/base/dd.c:1005
#4: ffff88808156b160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:837 [inline]
#4: ffff88808156b160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x510 drivers/base/dd.c:1005
6 locks held by kworker/1:8/5825:
#0: ffff888147643d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x77e/0x10e0 kernel/workqueue.c:2378
#1: ffffc9000cbf7d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7c8/0x10e0 kernel/workqueue.c:2380
#2: ffff888141f09190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:837 [inline]
#2: ffff888141f09190 (&dev->mutex){....}-{3:3}, at: hub_event+0x20e/0x5460 drivers/usb/core/hub.c:5739
#3: ffff8880b983c1d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 kernel/sched/core.c:566
#4: ffff8880b99287c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 kernel/sched/psi.c:996
#5: ffff8880b983c1d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 kernel/sched/core.c:566
3 locks held by syz-executor.2/20724:
#0: ffff888083296460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 fs/namespace.c:394
#1: ffff88808da30400
(&sb->s_type->i_mutex_key#7){++++}-{3:3}, at: inode_lock include/linux/fs.h:775 [inline]
(&sb->s_type->i_mutex_key#7){++++}-{3:3}, at: vfs_setxattr+0x1e1/0x420 fs/xattr.c:321
#2: ffff88808da300c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_write_lock_xattr fs/ext4/xattr.h:155 [inline]
#2: ffff88808da300c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_xattr_set_handle+0x274/0x15c0 fs/ext4/xattr.c:2357
3 locks held by syz-executor.2/20725:
#0: ffff888083296460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 fs/namespace.c:394
#1: ffff88808d8d2200 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock include/linux/fs.h:775 [inline]
#1: ffff88808d8d2200 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: vfs_setxattr+0x1e1/0x420 fs/xattr.c:321
#2: ffff88808d8d1ec8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_write_lock_xattr fs/ext4/xattr.h:155 [inline]
#2: ffff88808d8d1ec8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_xattr_set_handle+0x274/0x15c0 fs/ext4/xattr.c:2357
1 lock held by syz-executor.2/22248:
#0: ffff8880b983c1d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 kernel/sched/core.c:566
2 locks held by syz-executor.4/22269:
2 locks held by syz-executor.1/22271:
3 locks held by syz-executor.2/22273:
#0: ffff8880b983c1d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 kernel/sched/core.c:566
#1: ffff8880b98287c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 kernel/sched/psi.c:996
#2: ffff8880b98287c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_change+0xfd/0x280 kernel/sched/psi.c:920
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.4.0-rc7-syzkaller-00019-g99ec1ed7c2ed #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x1e7/0x2d0 lib/dump_stack.c:106
nmi_cpu_backtrace+0x498/0x4d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x187/0x300 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline]
watchdog+0xec2/0xf00 kernel/hung_task.c:379
kthread+0x2b8/0x350 kernel/kthread.c:379
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 22266 Comm: syz-executor.1 Not tainted 6.4.0-rc7-syzkaller-00019-g99ec1ed7c2ed #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
RIP: 0010:__sanitizer_cov_trace_pc+0x5c/0x60 kernel/kcov.c:225
Code: e8 15 00 00 83 fa 02 75 21 48 8b 91 f0 15 00 00 48 8b 32 48 8d 7e 01 8b 89 ec 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 0f 1f 00 f3 0f 1e fa 4c 8b 04 24 65 48 8b 15 b0 37 78 7e 65 8b
RSP: 0000:ffffc9001501fbf8 EFLAGS: 00000293
RAX: ffffffff8aa5c6dc RBX: ffff888076ac6e00 RCX: ffff888083259dc0
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: 0000000000000003 R08: ffffffff8aa5c672 R09: ffffffff8aa5c534
R10: 0000000000000003 R11: ffff888083259dc0 R12: 0000000000000000
R13: 0000000000000000 R14: ffff8880345c620c R15: 00007f764edfffff
FS: 0000555557319400(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2e829000 CR3: 000000002d660000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
mtree_range_walk+0x55c/0x7c0 lib/maple_tree.c:2980
mas_state_walk lib/maple_tree.c:3881 [inline]
mt_find+0x6f2/0xc00 lib/maple_tree.c:6505
find_vma+0x13a/0x1b0 mm/mmap.c:1863
do_user_addr_fault arch/x86/mm/fault.c:1401 [inline]
handle_page_fault arch/x86/mm/fault.c:1534 [inline]
exc_page_fault+0x6bf/0x910 arch/x86/mm/fault.c:1590
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
RIP: 0033:0x7f764f227986
Code: ff ff 66 90 48 8b 0d 69 dd ca 00 4c 63 05 52 dd ca 00 48 8b 05 53 dd ca 00 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 39 dd ca 00 c3 52 48 8d 35 b7 e7 0a 00 48 89 c2 48
RSP: 002b:00007ffeab56e348 EFLAGS: 00010287
RAX: 0000001b2e829000 RBX: 0000000081bae410 RCX: 0000001b2e820000
RDX: 0000001b2e829004 RSI: 000000000001d8e6 RDI: 0000000081bae410
RBP: 0000000000000001 R08: 0000001b2ec20000 R09: 0000000081bae414
R10: 0000000000000000 R11: 0000000000000000 R12: 00007f764f3a0000
R13: 00000000000000ae R14: ffffffff81bae833 R15: 00007f764f3ac018