INFO: task syz-executor1:16578 blocked for more than 140 seconds. Not tainted 4.9.117-g8b21e85 #19 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor1 D28656 16578 12973 0x00000004 ffff8801d5ec1800 ffff8801ccce1f80 ffff8801b6a90540 ffff88019cc39800 ffff8801db221c18 ffff8801d8f7f590 ffffffff839ebd0d ffffffff81235687 0000000000000000 ffff8801d5ec20c0 0000000600000007 ffff8801db2224e8 Call Trace: [] schedule+0x7f/0x1b0 kernel/sched/core.c:3553 [] rwsem_down_read_failed+0x1e4/0x320 kernel/locking/rwsem-xadd.c:260 [] call_rwsem_down_read_failed+0x18/0x30 arch/x86/lib/rwsem.S:94 [] __down_read arch/x86/include/asm/rwsem.h:65 [inline] [] down_read+0x52/0xb0 kernel/locking/rwsem.c:24 [] inode_lock_shared include/linux/fs.h:776 [inline] [] lookup_slow+0x141/0x470 fs/namei.c:1645 [] walk_component+0x716/0x1bb0 fs/namei.c:1784 [] lookup_last fs/namei.c:2266 [inline] [] path_lookupat.isra.41+0x186/0x410 fs/namei.c:2283 [] filename_lookup.part.55+0x177/0x370 fs/namei.c:2317 [] filename_lookup fs/namei.c:2310 [inline] [] kern_path+0x45/0x70 fs/namei.c:2406 [] lookup_bdev.part.25+0x72/0x180 fs/block_dev.c:1901 [] lookup_bdev+0x5e/0x80 fs/block_dev.c:1922 [] quotactl_block fs/quota/quota.c:808 [inline] [] SYSC_quotactl fs/quota/quota.c:867 [inline] [] SyS_quotactl+0x1ba/0x1240 fs/quota/quota.c:832 [] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/519: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 kernel/hung_task.c:239 #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336 2 locks held by rs:main Q:Reg/3685: #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xac/0xd0 fs/file.c:781 #1: (sb_writers#3){.+.+.+}, at: [] file_start_write include/linux/fs.h:2640 [inline] #1: (sb_writers#3){.+.+.+}, at: [] vfs_write+0x3ae/0x530 fs/read_write.c:556 2 locks held by getty/3783: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2142 1 lock held by syz-executor1/16578: #0: (&type->i_mutex_dir_key#5){++++++}, at: [] inode_lock_shared include/linux/fs.h:776 [inline] #0: (&type->i_mutex_dir_key#5){++++++}, at: [] lookup_slow+0x141/0x470 fs/namei.c:1645 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 519 Comm: khungtaskd Not tainted 4.9.117-g8b21e85 #19 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801d8617d08 ffffffff81eb4be9 0000000000000000 0000000000000001 0000000000000001 0000000000000001 ffffffff810b9bd0 ffff8801d8617d40 ffffffff81ebfee7 0000000000000001 0000000000000000 0000000000000003 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold.2+0x48/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x12a/0x14f lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6b4/0xa20 kernel/hung_task.c:239 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 3685 Comm: rs:main Q:Reg Not tainted 4.9.117-g8b21e85 #19 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8801b9221800 task.stack: ffff8801b7d40000 RIP: 0010:[] c [] match_held_lock+0xb/0x570 kernel/locking/lockdep.c:3404 RSP: 0018:ffff8801b7d475f8 EFLAGS: 00000002 RAX: dffffc0000000000 RBX: ffff8801b9221800 RCX: ffff8801db321d68 RDX: 0000000000000000 RSI: ffff8801db321c18 RDI: ffff8801b9222168 RBP: ffff8801b7d47638 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000000 R11: 1ffff10037244436 R12: ffffed0037244418 R13: ffff8801b92220c8 R14: ffff8801db321c18 R15: 0000000000000004 FS: 00007ff7bf400700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f6ed601edfa CR3: 00000001b9137000 CR4: 00000000001606f0 DR0: 00000000200001c0 DR1: 0000000020000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Stack: ffff8801b7d47638c ffffffff81230262c ffff8801b92220c0c 0000000000000046c ffff8801b9221800c ffff8801db321c18c ffff8801db321c00c 0000000000000001c ffff8801b7d47660c ffffffff81230a94c ffff8801cdb9c880c ffff8801db321ca0c Call Trace: [] lock_is_held+0xb4/0x140 kernel/locking/lockdep.c:3794 [] rq_clock_task kernel/sched/sched.h:821 [inline] [] cfs_rq_clock_task kernel/sched/fair.c:4696 [inline] [] update_load_avg+0xb70/0x1ea0 kernel/sched/fair.c:3319 [] enqueue_entity kernel/sched/fair.c:3647 [inline] [] enqueue_task_fair+0x3b7/0x2680 kernel/sched/fair.c:4823 [] enqueue_task kernel/sched/core.c:774 [inline] [] activate_task+0x153/0x280 kernel/sched/core.c:790 [] ttwu_activate kernel/sched/core.c:1702 [inline] [] ttwu_do_activate+0xd5/0x200 kernel/sched/core.c:1761 [] ttwu_queue kernel/sched/core.c:1917 [inline] [] try_to_wake_up+0x760/0xec0 kernel/sched/core.c:2130 [] default_wake_function+0x30/0x50 kernel/sched/core.c:3722 [] autoremove_wake_function+0x13/0x90 kernel/sched/wait.c:281 [] __wake_up_common+0xb6/0x150 kernel/sched/wait.c:73 [] __wake_up+0x34/0x50 kernel/sched/wait.c:95 [] __jbd2_log_start_commit+0x200/0x250 fs/jbd2/journal.c:518 [] jbd2_log_start_commit+0x2c/0x50 fs/jbd2/journal.c:537 [] jbd2_complete_transaction+0x18c/0x1c0 fs/jbd2/journal.c:749 [] ext4_sync_file+0x727/0x10a0 fs/ext4/fsync.c:150 [] vfs_fsync_range+0x10c/0x260 fs/sync.c:195 [] generic_write_sync include/linux/fs.h:2607 [inline] [] ext4_file_write_iter+0x7a9/0xd90 fs/ext4/file.c:169 [] new_sync_write fs/read_write.c:496 [inline] [] __vfs_write+0x3e0/0x580 fs/read_write.c:509 [] vfs_write+0x187/0x530 fs/read_write.c:557 [] SYSC_write fs/read_write.c:604 [inline] [] SyS_write+0xd9/0x1c0 fs/read_write.c:596 [] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: c55 c48 c89 cd1 c41 cb8 c01 c00 c00 c00 c48 cc7 cc2 cc0 cdc c22 c81 c48 c89 ce5 ce8 cb7 cf9 cff cff c5d cc3 c0f c1f c44 c00 c00 c48 cb8 c00 c00 c00 c00 c00 cfc cff cdf c55 c<48> c89 ce5 c41 c57 c41 c56 c41 c55 c49 c89 cfd c48 c83 cc7 c10 c48 c89 cfa c41 c54 c