INFO: task syz-executor.3:5867 blocked for more than 143 seconds. Not tainted 6.4.0-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.3 state:D stack:13408 pid:5867 ppid:5110 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5381 [inline] __schedule+0x6cd/0x13c0 kernel/sched/core.c:6710 schedule+0x54/0xc0 kernel/sched/core.c:6786 __wait_on_freeing_inode fs/inode.c:2238 [inline] find_inode_fast+0x150/0x200 fs/inode.c:950 iget_locked+0x6f/0x3a0 fs/inode.c:1315 __ext4_iget+0x125/0x1620 fs/ext4/inode.c:4696 ext4_xattr_inode_cache_find fs/ext4/xattr.c:1542 [inline] ext4_xattr_inode_lookup_create fs/ext4/xattr.c:1577 [inline] ext4_xattr_set_entry+0xaba/0x1980 fs/ext4/xattr.c:1719 ext4_xattr_block_set+0x34a/0x13f0 fs/ext4/xattr.c:2025 ext4_xattr_set_handle+0x7a5/0xa60 fs/ext4/xattr.c:2442 ext4_xattr_set+0x116/0x1d0 fs/ext4/xattr.c:2544 __vfs_setxattr+0x276/0x290 fs/xattr.c:201 __vfs_setxattr_noperm+0xb6/0x330 fs/xattr.c:235 vfs_setxattr+0xf6/0x1f0 fs/xattr.c:322 do_setxattr fs/xattr.c:630 [inline] setxattr+0x1bc/0x230 fs/xattr.c:653 path_setxattr+0xe5/0x180 fs/xattr.c:672 __do_sys_setxattr fs/xattr.c:688 [inline] __se_sys_setxattr fs/xattr.c:684 [inline] __x64_sys_setxattr+0x2c/0x30 fs/xattr.c:684 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fdb7007cb29 RSP: 002b:00007fdb70e890c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc RAX: ffffffffffffffda RBX: 00007fdb7019c050 RCX: 00007fdb7007cb29 RDX: 00000000200005c0 RSI: 0000000020000180 RDI: 00000000200000c0 RBP: 00007fdb700c847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007fdb7019c050 R15: 00007fffd2cf94a8 INFO: task syz-executor.3:5871 blocked for more than 143 seconds. Not tainted 6.4.0-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.3 state:D stack:13312 pid:5871 ppid:5110 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5381 [inline] __schedule+0x6cd/0x13c0 kernel/sched/core.c:6710 schedule+0x54/0xc0 kernel/sched/core.c:6786 mb_cache_entry_wait_unused+0xde/0x130 fs/mbcache.c:148 ext4_evict_ea_inode+0x4f/0x110 fs/ext4/xattr.c:480 ext4_evict_inode+0xb4/0xbd0 fs/ext4/inode.c:180 evict+0x10a/0x390 fs/inode.c:665 ext4_xattr_set_entry+0x100e/0x1980 fs/ext4/xattr.c:1856 ext4_xattr_block_set+0x6a0/0x13f0 fs/ext4/xattr.c:1956 ext4_xattr_set_handle+0x7a5/0xa60 fs/ext4/xattr.c:2442 ext4_xattr_set+0x116/0x1d0 fs/ext4/xattr.c:2544 __vfs_setxattr+0x276/0x290 fs/xattr.c:201 __vfs_setxattr_noperm+0xb6/0x330 fs/xattr.c:235 vfs_setxattr+0xf6/0x1f0 fs/xattr.c:322 do_setxattr fs/xattr.c:630 [inline] setxattr+0x1bc/0x230 fs/xattr.c:653 path_setxattr+0xe5/0x180 fs/xattr.c:672 __do_sys_setxattr fs/xattr.c:688 [inline] __se_sys_setxattr fs/xattr.c:684 [inline] __x64_sys_setxattr+0x2c/0x30 fs/xattr.c:684 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fdb7007cb29 RSP: 002b:00007fdb70e680c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc RAX: ffffffffffffffda RBX: 00007fdb7019c120 RCX: 00007fdb7007cb29 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 00000000200001c0 RBP: 00007fdb700c847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007fdb7019c120 R15: 00007fffd2cf94a8 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/13: #0: ffffffff85dfc958 (rcu_tasks.tasks_gp_mutex){....}-{3:3}, at: rcu_tasks_one_gp kernel/rcu/tasks.h:522 [inline] #0: ffffffff85dfc958 (rcu_tasks.tasks_gp_mutex){....}-{3:3}, at: rcu_tasks_kthread+0x9c/0x460 kernel/rcu/tasks.h:567 1 lock held by rcu_tasks_trace/14: #0: ffffffff85dfcc38 (rcu_tasks_trace.tasks_gp_mutex){....}-{3:3}, at: rcu_tasks_one_gp kernel/rcu/tasks.h:522 [inline] #0: ffffffff85dfcc38 (rcu_tasks_trace.tasks_gp_mutex){....}-{3:3}, at: rcu_tasks_kthread+0x9c/0x460 kernel/rcu/tasks.h:567 1 lock held by khungtaskd/28: #0: ffffffff85dfc830 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 arch/x86/kernel/nmi.c:311 2 locks held by kworker/0:2/745: #0: ffff88810006a738 ((wq_completion)events){....}-{0:0}, at: process_one_work+0x286/0x720 kernel/workqueue.c:2569 #1: ffffc900038f3e60 ((work_completion)(&pwq->unbound_release_work)){....}-{0:0}, at: process_one_work+0x2b0/0x720 kernel/workqueue.c:2571 2 locks held by getty/4468: #0: ffff88814267b898 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x50 drivers/tty/tty_ldisc.c:243 #1: ffffc9000ce6f2f0 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x31f/0xf10 drivers/tty/n_tty.c:2176 3 locks held by kworker/0:3/4687: #0: ffff88810006a738 ((wq_completion)events){....}-{0:0}, at: process_one_work+0x286/0x720 kernel/workqueue.c:2569 #1: ffffc90001eb7e60 ((work_completion)(&pwq->unbound_release_work)){....}-{0:0}, at: process_one_work+0x2b0/0x720 kernel/workqueue.c:2571 #2: ffffffff85dfda38 (rcu_state.exp_mutex){....}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:325 [inline] #2: ffffffff85dfda38 (rcu_state.exp_mutex){....}-{3:3}, at: synchronize_rcu_expedited+0x240/0x700 kernel/rcu/tree_exp.h:992 3 locks held by kworker/0:4/4709: #0: ffff88810006a738 ((wq_completion)events){....}-{0:0}, at: process_one_work+0x286/0x720 kernel/workqueue.c:2569 #1: ffffc90002aabe60 ((work_completion)(&pwq->unbound_release_work)){....}-{0:0}, at: process_one_work+0x2b0/0x720 kernel/workqueue.c:2571 #2: ffffffff85dfda38 (rcu_state.exp_mutex){....}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:293 [inline] #2: ffffffff85dfda38 (rcu_state.exp_mutex){....}-{3:3}, at: synchronize_rcu_expedited+0x3a0/0x700 kernel/rcu/tree_exp.h:992 2 locks held by kworker/0:5/4722: #0: ffff88810006a738 ((wq_completion)events){....}-{0:0}, at: process_one_work+0x286/0x720 kernel/workqueue.c:2569 #1: ffffc90002afbe60 ((work_completion)(&pwq->unbound_release_work)){....}-{0:0}, at: process_one_work+0x2b0/0x720 kernel/workqueue.c:2571 2 locks held by kworker/0:6/4723: #0: ffff88810006a738 ((wq_completion)events){....}-{0:0}, at: process_one_work+0x286/0x720 kernel/workqueue.c:2569 #1: ffffc90002b03e60 ((work_completion)(&pwq->unbound_release_work)){....}-{0:0}, at: process_one_work+0x2b0/0x720 kernel/workqueue.c:2571 3 locks held by syz-executor.3/5867: #0: ffff888109471460 (sb_writers#4){....}-{0:0}, at: path_setxattr+0xa3/0x180 fs/xattr.c:670 #1: ffff88811ef52098 (&sb->s_type->i_mutex_key#7){....}-{3:3}, at: inode_lock include/linux/fs.h:771 [inline] #1: ffff88811ef52098 (&sb->s_type->i_mutex_key#7){....}-{3:3}, at: vfs_setxattr+0xd3/0x1f0 fs/xattr.c:321 #2: ffff88811ef51d60 (&ei->xattr_sem){....}-{3:3}, at: ext4_write_lock_xattr fs/ext4/xattr.h:155 [inline] #2: ffff88811ef51d60 (&ei->xattr_sem){....}-{3:3}, at: ext4_xattr_set_handle+0x14f/0xa60 fs/ext4/xattr.c:2357 3 locks held by syz-executor.3/5871: #0: ffff888109471460 (sb_writers#4){....}-{0:0}, at: path_setxattr+0xa3/0x180 fs/xattr.c:670 #1: ffff88812480ecd8 (&type->i_mutex_dir_key#3){....}-{3:3}, at: inode_lock include/linux/fs.h:771 [inline] #1: ffff88812480ecd8 (&type->i_mutex_dir_key#3){....}-{3:3}, at: vfs_setxattr+0xd3/0x1f0 fs/xattr.c:321 #2: ffff88812480e9a0 (&ei->xattr_sem){....}-{3:3}, at: ext4_write_lock_xattr fs/ext4/xattr.h:155 [inline] #2: ffff88812480e9a0 (&ei->xattr_sem){....}-{3:3}, at: ext4_xattr_set_handle+0x14f/0xa60 fs/ext4/xattr.c:2357 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.4.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xf4/0x180 lib/dump_stack.c:106 nmi_cpu_backtrace+0x230/0x250 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0xf2/0x200 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline] watchdog+0x81f/0x860 kernel/hung_task.c:379 kthread+0x10f/0x140 kernel/kthread.c:389 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 6047 Comm: udevd Not tainted 6.4.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 RIP: 0010:__lock_acquire+0x1b4/0x490 kernel/locking/lockdep.c:5122 Code: 11 48 63 c2 48 0f a3 05 da 19 62 06 0f 83 91 02 00 00 4d 8b ae 58 0a 00 00 48 89 4c 24 10 48 85 c9 75 13 83 3d 4c 62 d4 06 00 <75> 0a 49 83 fd ff 0f 85 6d 02 00 00 4b 8d 84 e6 68 0a 00 00 4c 89 RSP: 0018:ffffc90002c9bdc8 EFLAGS: 00000046 RAX: 000000000000009d RBX: 0000000000000000 RCX: 0000000000000000 RDX: 000000000000009d RSI: 0000000000000000 RDI: 000000000000009d RBP: 000000000008009d R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000