INFO: task syz-executor.5:16063 blocked for more than 143 seconds. Not tainted 5.2.0+ #37 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.5 D26808 16063 8432 0x00004004 Call Trace: context_switch /kernel/sched/core.c:3254 [inline] __schedule+0x8b7/0xcd0 /kernel/sched/core.c:3880 schedule+0x12f/0x1d0 /kernel/sched/core.c:3944 d_wait_lookup+0x270/0x360 /fs/dcache.c:2506 d_alloc_parallel+0x9e1/0x15a0 /fs/dcache.c:2588 __lookup_slow+0xfc/0x410 /fs/namei.c:1652 lookup_slow /fs/namei.c:1686 [inline] walk_component+0x363/0x830 /fs/namei.c:1808 link_path_walk+0x82a/0x14e0 /fs/namei.c:2125 path_lookupat+0xc7/0xcb0 /fs/namei.c:2315 filename_lookup+0x225/0x6d0 /fs/namei.c:2346 user_path_at_empty+0x40/0x50 /fs/namei.c:2606 user_path_at /./include/linux/namei.h:60 [inline] vfs_statx /fs/stat.c:187 [inline] vfs_lstat /./include/linux/fs.h:3187 [inline] __do_sys_newlstat /fs/stat.c:354 [inline] __se_sys_newlstat+0xc7/0x200 /fs/stat.c:348 __x64_sys_newlstat+0x5b/0x70 /fs/stat.c:348 do_syscall_64+0xfe/0x140 /arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x459819 Code: 9b 00 00 00 48 83 ec 68 48 89 6c 24 60 48 8d 6c 24 60 48 8b 42 08 48 8b 4a 10 48 8b 5a 18 48 8b 72 20 48 8b 7a 28 48 8b 3f 4c <8b> 42 30 48 8b 52 38 48 85 d2 76 62 48 89 44 24 58 4c 89 44 24 28 RSP: 002b:00007f26ff3ddc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000459819 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f26ff3de6d4 R13: 00000000004c5b1d R14: 00000000004da210 R15: 00000000ffffffff Showing all locks held in the system: 1 lock held by khungtaskd/1061: #0: 000000001d205f56 (rcu_read_lock){....}, at: rcu_lock_acquire+0x4/0x30 /./include/linux/rcupdate.h:207 1 lock held by rsyslogd/8284: #0: 0000000030f97f78 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x243/0x2e0 /fs/file.c:801 2 locks held by getty/8374: #0: 000000009d568cc9 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 /drivers/tty/tty_ldisc.c:272 #1: 000000008aa37312 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2ee/0x1c80 /drivers/tty/n_tty.c:2156 2 locks held by getty/8375: #0: 000000003016dfce (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 /drivers/tty/tty_ldisc.c:272 #1: 000000007f2afd38 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2ee/0x1c80 /drivers/tty/n_tty.c:2156 2 locks held by getty/8376: #0: 000000005f7bcbec (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 /drivers/tty/tty_ldisc.c:272 #1: 00000000b34d80a4 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2ee/0x1c80 /drivers/tty/n_tty.c:2156 2 locks held by getty/8377: #0: 00000000dbc6e853 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 /drivers/tty/tty_ldisc.c:272 #1: 00000000f1c9d9c9 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2ee/0x1c80 /drivers/tty/n_tty.c:2156 2 locks held by getty/8378: #0: 000000003fe5fea9 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 /drivers/tty/tty_ldisc.c:272 #1: 0000000089d0a5da (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2ee/0x1c80 /drivers/tty/n_tty.c:2156 2 locks held by getty/8379: #0: 00000000e243efc4 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 /drivers/tty/tty_ldisc.c:272 #1: 000000003795cb9b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2ee/0x1c80 /drivers/tty/n_tty.c:2156 2 locks held by getty/8380: #0: 000000009816d4fc (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 /drivers/tty/tty_ldisc.c:272 #1: 0000000045753f45 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2ee/0x1c80 /drivers/tty/n_tty.c:2156 1 lock held by syz-executor.5/16062: #0: 000000005ac6f8bd (&sb->s_type->i_mutex_key#20){++++}, at: inode_lock_shared /./include/linux/fs.h:788 [inline] #0: 000000005ac6f8bd (&sb->s_type->i_mutex_key#20){++++}, at: lookup_slow /fs/namei.c:1685 [inline] #0: 000000005ac6f8bd (&sb->s_type->i_mutex_key#20){++++}, at: walk_component+0x350/0x830 /fs/namei.c:1808 1 lock held by syz-executor.5/16063: #0: 000000005ac6f8bd (&sb->s_type->i_mutex_key#20){++++}, at: inode_lock_shared /./include/linux/fs.h:788 [inline] #0: 000000005ac6f8bd (&sb->s_type->i_mutex_key#20){++++}, at: lookup_slow /fs/namei.c:1685 [inline] #0: 000000005ac6f8bd (&sb->s_type->i_mutex_key#20){++++}, at: walk_component+0x350/0x830 /fs/namei.c:1808 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 1061 Comm: khungtaskd Not tainted 5.2.0+ #37 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack /lib/dump_stack.c:77 [inline] dump_stack+0x1d8/0x2f8 /lib/dump_stack.c:113 nmi_cpu_backtrace+0xb0/0x1a0 /lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x14c/0x240 /lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x10/0x20 /arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace+0x17/0x20 /./include/linux/nmi.h:146 check_hung_uninterruptible_tasks /kernel/hung_task.c:205 [inline] watchdog+0xbcc/0xbe0 /kernel/hung_task.c:289 kthread+0x332/0x350 /kernel/kthread.c:255 ret_from_fork+0x24/0x30 /arch/x86/entry/entry_64.S:352 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 661 Comm: kworker/u4:10 Not tainted 5.2.0+ #37 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: bat_events batadv_nc_worker RIP: 0010:batadv_nc_purge_orig_hash /net/batman-adv/network-coding.c:408 [inline] RIP: 0010:batadv_nc_worker+0x17e/0x610 /net/batman-adv/network-coding.c:718 Code: 66 90 66 2e 0f 1f 84 00 00 00 00 00 4b 8d 5c fd 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 e5 d8 28 fa 48 8b 1b <31> ff 48 89 de e8 b8 8a ee f9 48 85 db 74 09 48 81 c3 58 fe ff ff RSP: 0018:ffff8880a83d7c10 EFLAGS: 00000246 RAX: 1ffff1100be6d608 RBX: 0000000000000000 RCX: ffff8880a83ca080 RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880aea35e98 RBP: ffff8880a83d7c70 R08: dffffc0000000000 R09: ffffed1015d46bd4 R10: ffffed1015d46bd4 R11: 0000000000000000 R12: dffffc0000000000 R13: ffff88805f369840 R14: ffff88805f3662c0 R15: 0000000000000300 FS: 0000000000000000(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffff600400 CR3: 000000008404f000 CR4: 00000000001406f0 Call Trace: process_one_work+0x83b/0x1150 /kernel/workqueue.c:2269 worker_thread+0xc01/0x1630 /kernel/workqueue.c:2415 kthread+0x332/0x350 /kernel/kthread.c:255 ret_from_fork+0x24/0x30 /arch/x86/entry/entry_64.S:352