INFO: task syz.4.3227:18967 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.3227 state:D stack:22656 pid:18967 tgid:18963 ppid:18295 task_flags:0x440140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5290 [inline] __schedule+0x14db/0x5030 kernel/sched/core.c:6902 __schedule_loop kernel/sched/core.c:6984 [inline] schedule+0x165/0x360 kernel/sched/core.c:6999 xlog_grant_head_wait+0x443/0x9e0 fs/xfs/xfs_log.c:217 xlog_grant_head_check+0x286/0x420 fs/xfs/xfs_log.c:-1 xfs_log_reserve+0x2bc/0x740 fs/xfs/xfs_log.c:387 xfs_trans_reserve fs/xfs/xfs_trans.c:176 [inline] xfs_trans_alloc+0x29c/0x960 fs/xfs/xfs_trans.c:258 xfs_trans_alloc_inode+0x13c/0x4a0 fs/xfs/xfs_trans.c:1076 xfs_attr_set+0x7fa/0x1210 fs/xfs/libxfs/xfs_attr.c:1098 xfs_xattr_set+0x14d/0x250 fs/xfs/xfs_xattr.c:186 __vfs_setxattr+0x43c/0x480 fs/xattr.c:200 __vfs_setxattr_noperm+0x12d/0x660 fs/xattr.c:234 vfs_setxattr+0x162/0x360 fs/xattr.c:321 do_setxattr fs/xattr.c:636 [inline] filename_setxattr+0x286/0x610 fs/xattr.c:664 path_setxattrat+0x364/0x3a0 fs/xattr.c:708 __do_sys_lsetxattr fs/xattr.c:749 [inline] __se_sys_lsetxattr fs/xattr.c:745 [inline] __x64_sys_lsetxattr+0xbf/0xe0 fs/xattr.c:745 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f035d38f749 RSP: 002b:00007f035e229038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd RAX: ffffffffffffffda RBX: 00007f035d5e5fa0 RCX: 00007f035d38f749 RDX: 0000200000000000 RSI: 0000200000000300 RDI: 0000200000000100 RBP: 00007f035d413f91 R08: 0000000000000000 R09: 0000000000000000 R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f035d5e6038 R14: 00007f035d5e5fa0 R15: 00007ffcd7515ad8 Showing all locks held in the system: 2 locks held by kworker/u8:1/13: #0: ffff8880b863abe0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xba/0x150 kernel/sched/core.c:655 #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 kernel/sched/psi.c:933 1 lock held by khungtaskd/31: #0: ffffffff8e144ce0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:312 [inline] #0: ffffffff8e144ce0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:850 [inline] #0: ffffffff8e144ce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775 2 locks held by getty/5580: #0: ffff88814d3430a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 drivers/tty/n_tty.c:2211 2 locks held by kworker/u8:14/6021: 3 locks held by syz-executor/18227: 3 locks held by syz.4.3227/18967: #0: ffff888027494420 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:504 #1: ffff88804cb4b030 (&sb->s_type->i_mutex_key#37){++++}-{4:4}, at: inode_lock include/linux/fs.h:1028 [inline] #1: ffff88804cb4b030 (&sb->s_type->i_mutex_key#37){++++}-{4:4}, at: vfs_setxattr+0x13d/0x360 fs/xattr.c:320 #2: ffff888027494610 (sb_internal#4){.+.+}-{0:0}, at: xfs_trans_alloc+0xd7/0x960 fs/xfs/xfs_trans.c:256 2 locks held by kworker/1:6/19322: #0: ffff88802b51f148 ((wq_completion)xfs-sync/loop4){+.+.}-{0:0}, at: process_one_work+0x841/0x15a0 kernel/workqueue.c:3254 #1: ffffc9000b46fc40 ((work_completion)(&(&log->l_work)->work)){+.+.}-{0:0}, at: process_one_work+0x868/0x15a0 kernel/workqueue.c:3255 2 locks held by syz-executor/19362: 1 lock held by syz.0.3492/20144: #0: ffff8880b863abe0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xba/0x150 kernel/sched/core.c:655 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:161 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline] watchdog+0xf95/0xfe0 kernel/hung_task.c:515 kthread+0x389/0x480 kernel/kthread.c:467 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 5813 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 RIP: 0010:hrtimer_active kernel/time/hrtimer.c:1710 [inline] RIP: 0010:hrtimer_try_to_cancel+0x6f/0x420 kernel/time/hrtimer.c:1360 Code: 48 89 4c 24 28 48 89 5c 24 08 eb 0a e8 ba a9 12 00 48 8b 5c 24 08 48 8b 44 24 10 42 80 3c 30 00 74 08 48 89 df e8 d1 7e 79 00 <4c> 8b 3b 49 8d 5f 10 49 89 dc 49 c1 ec 03 43 0f b6 04 34 84 c0 0f RSP: 0018:ffffc900041dfb98 EFLAGS: 00000246 RAX: 1ffff9200083bfae RBX: ffffc900041dfd70 RCX: 1ffff9200083bfaf RDX: 0000000000000000 RSI: ffffffff8be09740 RDI: ffffc900041dfd40 RBP: ffffc900041dfcf0 R08: ffffffff8fa2d9f7 R09: 1ffffffff1f45b3e R10: dffffc0000000000 R11: fffffbfff1f45b3f R12: dffffc0000000000 R13: ffffc900041dfd80 R14: dffffc0000000000 R15: ffffc900041dfd40 FS: 00005555821f5500(0000) GS:ffff888125cf9000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f7ffa1b7198 CR3: 000000007cc08000 CR4: 00000000003526f0 DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: hrtimer_cancel kernel/time/hrtimer.c:1489 [inline] do_nanosleep+0x1cd/0x610 kernel/time/hrtimer.c:2126 hrtimer_nanosleep+0x169/0x360 kernel/time/hrtimer.c:2171 __do_sys_clock_nanosleep kernel/time/posix-timers.c:1391 [inline] __se_sys_clock_nanosleep+0x339/0x390 kernel/time/posix-timers.c:1368 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f256b1c1fc3 Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 RSP: 002b:00007ffedb76d438 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f256b1c1fc3 RDX: 00007ffedb76d450 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 7fffffffffffffff R09: 3fffffffffffffff R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffedb76d8a0 R13: 0000000000000004 R14: 00007ffedb76d48c R15: 00007ffedb76d520