INFO: task syz-executor.0:5260 blocked for more than 147 seconds. Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:26464 pid:5260 ppid:5090 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5244 [inline] __schedule+0xb8a/0x5450 kernel/sched/core.c:6555 schedule+0xde/0x1b0 kernel/sched/core.c:6631 __wait_on_freeing_inode+0xf2/0x140 fs/inode.c:2196 find_inode_fast+0x14e/0x220 fs/inode.c:950 iget_locked+0xa8/0x700 fs/inode.c:1273 __ext4_iget+0x3af/0x4230 fs/ext4/inode.c:4861 ext4_xattr_inode_cache_find fs/ext4/xattr.c:1491 [inline] ext4_xattr_inode_lookup_create fs/ext4/xattr.c:1527 [inline] ext4_xattr_set_entry+0x1e1a/0x3a00 fs/ext4/xattr.c:1669 ext4_xattr_block_set+0xcd3/0x3000 fs/ext4/xattr.c:1975 ext4_xattr_set_handle+0xd8a/0x1510 fs/ext4/xattr.c:2390 ext4_xattr_set+0x144/0x360 fs/ext4/xattr.c:2492 __vfs_setxattr+0x173/0x1e0 fs/xattr.c:202 __vfs_setxattr_noperm+0x129/0x5f0 fs/xattr.c:236 __vfs_setxattr_locked+0x1d3/0x260 fs/xattr.c:297 vfs_setxattr+0x143/0x340 fs/xattr.c:323 do_setxattr+0x151/0x190 fs/xattr.c:608 setxattr+0x146/0x160 fs/xattr.c:631 path_setxattr+0x197/0x1c0 fs/xattr.c:650 __do_sys_setxattr fs/xattr.c:666 [inline] __se_sys_setxattr fs/xattr.c:662 [inline] __x64_sys_setxattr+0xc4/0x160 fs/xattr.c:662 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f2f93a8c0c9 RSP: 002b:00007f2f9477f168 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc RAX: ffffffffffffffda RBX: 00007f2f93babf80 RCX: 00007f2f93a8c0c9 RDX: 00000000200005c0 RSI: 0000000020000180 RDI: 0000000020000080 RBP: 00007f2f93ae7ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe2f8529cf R14: 00007f2f9477f300 R15: 0000000000022000 INFO: task syz-executor.0:5281 blocked for more than 148 seconds. Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:24584 pid:5281 ppid:5090 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5244 [inline] __schedule+0xb8a/0x5450 kernel/sched/core.c:6555 schedule+0xde/0x1b0 kernel/sched/core.c:6631 mb_cache_entry_wait_unused+0x16f/0x1f0 fs/mbcache.c:148 ext4_evict_ea_inode+0x195/0x2f0 fs/ext4/xattr.c:449 ext4_evict_inode+0xd13/0x1eb0 fs/ext4/inode.c:181 evict+0x2ed/0x6b0 fs/inode.c:664 iput_final fs/inode.c:1747 [inline] iput.part.0+0x59b/0x880 fs/inode.c:1773 iput+0x5c/0x80 fs/inode.c:1763 ext4_xattr_set_entry+0x4ab/0x3a00 fs/ext4/xattr.c:1806 ext4_xattr_block_set+0x61b/0x3000 fs/ext4/xattr.c:1906 ext4_xattr_set_handle+0xd8a/0x1510 fs/ext4/xattr.c:2390 ext4_xattr_set+0x144/0x360 fs/ext4/xattr.c:2492 __vfs_setxattr+0x173/0x1e0 fs/xattr.c:202 __vfs_setxattr_noperm+0x129/0x5f0 fs/xattr.c:236 __vfs_setxattr_locked+0x1d3/0x260 fs/xattr.c:297 vfs_setxattr+0x143/0x340 fs/xattr.c:323 do_setxattr+0x151/0x190 fs/xattr.c:608 setxattr+0x146/0x160 fs/xattr.c:631 path_setxattr+0x197/0x1c0 fs/xattr.c:650 __do_sys_lsetxattr fs/xattr.c:673 [inline] __se_sys_lsetxattr fs/xattr.c:669 [inline] __x64_sys_lsetxattr+0xc1/0x160 fs/xattr.c:669 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f2f93a8c0c9 RSP: 002b:00007f2f9475e168 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd RAX: ffffffffffffffda RBX: 00007f2f93bac050 RCX: 00007f2f93a8c0c9 RDX: 0000000000000000 RSI: 0000000020000240 RDI: 00000000200001c0 RBP: 00007f2f93ae7ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe2f8529cf R14: 00007f2f9475e300 R15: 0000000000022000 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/11: #0: ffffffff8c78df70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507 1 lock held by rcu_tasks_trace/12: #0: ffffffff8c78dc70 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507 1 lock held by khungtaskd/27: #0: ffffffff8c78eac0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x57/0x264 kernel/locking/lockdep.c:6494 2 locks held by getty/4737: #0: ffff88814b430098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 drivers/tty/tty_ldisc.c:244 #1: ffffc900020382f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 drivers/tty/n_tty.c:2177 3 locks held by syz-executor.0/5260: #0: ffff888035444460 (sb_writers#5){.+.+}-{0:0}, at: path_setxattr+0xb2/0x1c0 fs/xattr.c:648 #1: ffff8880752945c0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff8880752945c0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: vfs_setxattr+0x120/0x340 fs/xattr.c:322 #2: ffff888075294288 (&ei->xattr_sem){++++}-{3:3}, at: ext4_write_lock_xattr fs/ext4/xattr.h:155 [inline] #2: ffff888075294288 (&ei->xattr_sem){++++}-{3:3}, at: ext4_xattr_set_handle+0x160/0x1510 fs/ext4/xattr.c:2305 3 locks held by syz-executor.0/5281: #0: ffff888035444460 (sb_writers#5){.+.+}-{0:0}, at: path_setxattr+0xb2/0x1c0 fs/xattr.c:648 #1: ffff88803bd5f600 (&sb->s_type->i_mutex_key#7){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88803bd5f600 (&sb->s_type->i_mutex_key#7){++++}-{3:3}, at: vfs_setxattr+0x120/0x340 fs/xattr.c:322 #2: ffff88803bd5f2c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_write_lock_xattr fs/ext4/xattr.h:155 [inline] #2: ffff88803bd5f2c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_xattr_set_handle+0x160/0x1510 fs/ext4/xattr.c:2305 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd1/0x138 lib/dump_stack.c:106 nmi_cpu_backtrace.cold+0x24/0x18a lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x333/0x3c0 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline] watchdog+0xc75/0xfc0 kernel/hung_task.c:377 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 5461 Comm: kworker/u4:10 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Workqueue: bat_events batadv_nc_worker RIP: 0010:__lock_acquire+0x2fe/0x56d0 kernel/locking/lockdep.c:4992 Code: ea 03 80 3c 02 00 0f 85 b5 3b 00 00 48 8b 44 24 20 49 8d b5 1c 0a 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 f1 48 89 74 24 40 <49> 89 44 24 18 65 8b 05 1e d6 9f 7e 85 c0 0f 95 c0 48 c1 e9 03 83 RSP: 0018:ffffc90006e3fa28 EFLAGS: 00000046 RAX: 0000000000000000 RBX: ffff88803c2d0c38 RCX: ffff88803c2d0c1c RDX: dffffc0000000000 RSI: ffff88803c2d0c1c RDI: ffff88803c2d0c98 RBP: 0000000000000000 R08: 1ffff1100785a190 R09: 0000000000000000 R10: fffffbfff1ce437a R11: 0000000000000000 R12: ffff88803c2d0c88 R13: ffff88803c2d0200 R14: ffffffff8c78eac0 R15: 0000000000000002 FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055bcc6392510 CR3: 000000000c48e000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_acquire kernel/locking/lockdep.c:5668 [inline] lock_acquire+0x1e3/0x630 kernel/locking/lockdep.c:5633 rcu_lock_acquire include/linux/rcupdate.h:325 [inline] rcu_read_lock include/linux/rcupdate.h:764 [inline] batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:408 [inline] batadv_nc_worker+0x131/0xfa0 net/batman-adv/network-coding.c:719 process_one_work+0x9bf/0x1710 kernel/workqueue.c:2289 worker_thread+0x669/0x1090 kernel/workqueue.c:2436 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308