IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready INFO: task syz-executor1:9389 blocked for more than 140 seconds. Not tainted 4.9.116-g0137ea2 #18 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor1 D29256 9389 3885 0x00000004 ffff8801b966b000 ffff8801ce9caa00 ffff8801d823c540 ffff88019adb3000 ffff8801db221c18 ffff88019a2d7878 ffffffff839ead0d dffffc0000000000 ffff8801cbcb1870 ffff88019a2d7838 00ff8801b966b8c0 ffff8801db2224e8 Call Trace: [] schedule+0x7f/0x1b0 kernel/sched/core.c:3553 [] d_wait_lookup fs/dcache.c:2455 [inline] [] d_alloc_parallel+0xeb2/0x17c0 fs/dcache.c:2537 [] lookup_slow+0x19c/0x470 fs/namei.c:1650 [] mountpoint_last fs/namei.c:2657 [inline] [] path_mountpoint+0x38a/0x1360 fs/namei.c:2697 [] filename_mountpoint.part.56+0x15b/0x310 fs/namei.c:2717 [] filename_mountpoint fs/namei.c:2714 [inline] [] user_path_mountpoint_at+0x49/0x70 fs/namei.c:2747 [] SYSC_umount fs/namespace.c:1692 [inline] [] SyS_umount+0x126/0x3f0 fs/namespace.c:1676 [] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/519: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 kernel/hung_task.c:239 #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336 2 locks held by rs:main Q:Reg/3670: #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xac/0xd0 fs/file.c:781 #1: (sb_writers#3){.+.+.+}, at: [] file_start_write include/linux/fs.h:2640 [inline] #1: (sb_writers#3){.+.+.+}, at: [] vfs_write+0x3ae/0x530 fs/read_write.c:556 2 locks held by getty/3768: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2142 1 lock held by syz-executor1/9389: #0: (&type->i_mutex_dir_key#6){.+.+.+}, at: [] inode_lock_shared include/linux/fs.h:776 [inline] #0: (&type->i_mutex_dir_key#6){.+.+.+}, at: [] lookup_slow+0x141/0x470 fs/namei.c:1645 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 519 Comm: khungtaskd Not tainted 4.9.116-g0137ea2 #18 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801d8bffd08 ffffffff81eb46a9 0000000000000000 0000000000000001 0000000000000001 0000000000000001 ffffffff810b9bd0 ffff8801d8bffd40 ffffffff81ebf9a7 0000000000000001 0000000000000000 0000000000000003 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold.2+0x48/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x12a/0x14f lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6b4/0xa20 kernel/hung_task.c:239 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 9382 Comm: syz-executor1 Not tainted 4.9.116-g0137ea2 #18 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff88019adb6000 task.stack: ffff8801d4658000 RIP: 0010:[] c [] iterate_chain_key kernel/locking/lockdep.c:319 [inline] RIP: 0010:[] c [] __lock_acquire+0x81e/0x4070 kernel/locking/lockdep.c:3340 RSP: 0018:ffff8801d465f140 EFLAGS: 00000086 RAX: e07c2de400000000 RBX: ffff88019adb6918 RCX: 0000000029eff09e RDX: 000000000d4f3d00 RSI: ffff88019adb6918 RDI: 0000000000000000 RBP: ffff8801d465f2f0 R08: ffff88019adb6938 R09: 0000000000000000 R10: ffff88019adb6000 R11: 1ffff100335b6d22 R12: 000000009d4fd9a7 R13: 0000000000000000 R14: 0000000052ad879c R15: 00000000baa1b564 FS: 00007f4939c2b700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000017b0b10 CR3: 00000001d97c1000 CR4: 00000000001606f0 DR0: 00000000200001c0 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Stack: 0000000000000046c 0000000000000001c ffff88019adb68c8c ffffed00335b6d18c ffff88019adb6000c dffffc0000000000c ffff8801d465f1c0c ffffffff81235647c 0000000000000000c ffff88019adb68c0c ffffffff8560f5e0c ffff88019adb6000c Call Trace: [] lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:112 [inline] [] _raw_spin_lock_irqsave+0x4e/0x62 kernel/locking/spinlock.c:159 [] prepare_to_wait_event+0x6b/0x450 kernel/sched/wait.c:213 [] request_wait_answer+0x22e/0x6e0 fs/fuse/dev.c:459 [] __fuse_request_send+0x109/0x1b0 fs/fuse/dev.c:480 [] fuse_request_send+0x5d/0x70 fs/fuse/dev.c:493 [] fuse_simple_request+0x2f4/0x660 fs/fuse/dev.c:551 [] fuse_lookup_name+0x253/0x5d0 fs/fuse/dir.c:369 [] fuse_lookup+0xed/0x3a0 fs/fuse/dir.c:406 [] lookup_slow+0x23e/0x470 fs/namei.c:1668 [] walk_component+0x716/0x1bb0 fs/namei.c:1784 [] lookup_last fs/namei.c:2266 [inline] [] path_lookupat.isra.41+0x186/0x410 fs/namei.c:2283 [] filename_lookup.part.55+0x177/0x370 fs/namei.c:2317 [] filename_lookup fs/namei.c:2310 [inline] [] user_path_at_empty+0x53/0x70 fs/namei.c:2578 [] user_path_at include/linux/namei.h:55 [inline] [] vfs_fstatat+0xc6/0x170 fs/stat.c:106 [] vfs_stat fs/stat.c:123 [inline] [] SYSC_newstat+0x86/0xf0 fs/stat.c:270 [] SyS_newstat+0x1d/0x30 fs/stat.c:266 [] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: c31 cfc c46 c8d c3c c30 c44 c89 ce0 c45 c29 ce6 cc1 cc8 c0d c44 c89 cfa c45 c01 ce7 c41 c31 cc6 c44 c89 cf0 c44 c29 cf2 cc1 cc0 c04 c31 cd0 c43 c8d c14 c37 c48 cc1 ce0 c20 c<48> c09 cd0 c48 c85 cff c49 c89 cc7 c74 c27 c4c c89 c54 c24 c60 c44 c89 c8c c24 c98 c