device lo entered promiscuous mode device lo left promiscuous mode INFO: task syz-executor0:13366 blocked for more than 140 seconds. Not tainted 4.9.124-g09eb2ba #31 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor0 D28536 13366 10846 0x00000004 ffff88019a394800 ffff8801d53bb9c0 ffff8801d53ba4c0 ffff88019923b000 ffff8801db221c18 ffff88018e737ab8 ffffffff839f0afd ffff88018e737ad8 ffff8801d63c5688 0000000000000000 0000000000000000 ffff8801db2224e8 Call Trace: [] schedule+0x7f/0x1b0 kernel/sched/core.c:3553 [] __rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:526 [inline] [] rwsem_down_write_failed+0x598/0x990 kernel/locking/rwsem-xadd.c:555 [] call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:105 [] __down_write arch/x86/include/asm/rwsem.h:125 [inline] [] down_write_nested+0x60/0xa0 kernel/locking/rwsem.c:174 [] inode_lock_nested include/linux/fs.h:801 [inline] [] filename_create+0x17a/0x490 fs/namei.c:3639 [] user_path_create fs/namei.c:3697 [inline] [] SYSC_mknodat fs/namei.c:3764 [inline] [] SyS_mknodat fs/namei.c:3752 [inline] [] SYSC_mknod fs/namei.c:3798 [inline] [] SyS_mknod+0x18d/0x420 fs/namei.c:3796 [] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/519: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 kernel/hung_task.c:239 #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336 2 locks held by rs:main Q:Reg/3664: #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xac/0xd0 fs/file.c:781 #1: (sb_writers#3){.+.+.+}, at: [] file_start_write include/linux/fs.h:2640 [inline] #1: (sb_writers#3){.+.+.+}, at: [] vfs_write+0x3ae/0x530 fs/read_write.c:556 2 locks held by getty/3762: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2142 2 locks held by syz-executor0/13366: #0: (sb_writers#19){.+.+.+}, at: [] sb_start_write include/linux/fs.h:1573 [inline] #0: (sb_writers#19){.+.+.+}, at: [] mnt_want_write+0x3f/0xb0 fs/namespace.c:391 #1: (&sb->s_type->i_mutex_key#24/1){+.+.+.}, at: [] inode_lock_nested include/linux/fs.h:801 [inline] #1: (&sb->s_type->i_mutex_key#24/1){+.+.+.}, at: [] filename_create+0x17a/0x490 fs/namei.c:3639 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 519 Comm: khungtaskd Not tainted 4.9.124-g09eb2ba #31 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801d89f7d08 ffffffff81eb95e9 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ffffffff810b9fa0 ffff8801d89f7d40 ffffffff81ec4927 0000000000000000 0000000000000000 0000000000000003 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold.2+0x48/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x12a/0x14f lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6b4/0xa20 kernel/hung_task.c:239 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 13353 Comm: syz-executor0 Not tainted 4.9.124-g09eb2ba #31 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8801d0741800 task.stack: ffff880198f20000 RIP: 0010:[] c [] lock_is_held+0x105/0x140 kernel/locking/lockdep.c:3799 RSP: 0018:ffff880198f27600 EFLAGS: 00000246 RAX: 0000000000000007 RBX: ffffea00070c7100 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff846df4a0 RDI: 0000000000000246 RBP: ffff880198f27610 R08: ffff8801d0742160 R09: 0000000000000001 R10: ffff8801d0741800 R11: 1ffff1003a0e8427 R12: ffff8801d0741800 R13: 0000000000000001 R14: 0000000002420848 R15: ffff8801cbf70948 FS: 00007f3383fbd700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c42b23d000 CR3: 00000001d018d000 CR4: 00000000001606f0 Stack: ffff880191e308a8c dffffc0000000000c ffff880198f27620c ffffffff8127e464c ffff880198f27688c ffffffff8143b3dbc ffffffff8143b090c ffffffff816288d3c ffff8801cbf70814c 0000000000000008c ffff8801cbf70950c ffffea00070c7100c Call Trace: [] rcu_read_lock_held+0xa4/0xc0 kernel/rcu/update.c:297 [] radix_tree_deref_slot include/linux/radix-tree.h:199 [inline] [] find_get_entry+0x34b/0x540 mm/filemap.c:1095 [] pagecache_get_page+0x4b/0x720 mm/filemap.c:1201 [] find_or_create_page include/linux/pagemap.h:309 [inline] [] grow_dev_page fs/buffer.c:1005 [inline] [] grow_buffers fs/buffer.c:1078 [inline] [] __getblk_slow fs/buffer.c:1105 [inline] [] __getblk_gfp+0x249/0x710 fs/buffer.c:1386 [] __bread_gfp+0x2d/0x270 fs/buffer.c:1420 [] sb_bread include/linux/buffer_head.h:300 [inline] [] fat__get_entry+0x4c8/0x8f0 fs/fat/dir.c:100 [] fat_get_entry fs/fat/dir.c:128 [inline] [] fat_search_long+0x277/0x1180 fs/fat/dir.c:477 [] vfat_find+0x134/0x180 fs/fat/namei_vfat.c:708 [] vfat_lookup+0xe1/0x530 fs/fat/namei_vfat.c:731 [] lookup_real fs/namei.c:1522 [inline] [] __lookup_hash+0x11c/0x190 fs/namei.c:1542 [] filename_create+0x1a6/0x490 fs/namei.c:3640 [] user_path_create fs/namei.c:3697 [inline] [] SYSC_mknodat fs/namei.c:3764 [inline] [] SyS_mknodat fs/namei.c:3752 [inline] [] SYSC_mknod fs/namei.c:3798 [inline] [] SyS_mknod+0x18d/0x420 fs/namei.c:3796 [] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: cb6 c14 c02 c48 c89 cf8 c83 ce0 c07 c83 cc0 c03 c38 cd0 c7c c04 c84 cd2 c75 c3a c41 cc7 c84 c24 cc4 c08 c00 c00 c00 c00 c00 c00 c48 c89 cdf c57 c9d c0f c1f c44 c00 c00 c5b c<44> c89 ce8 c41 c5c c41 c5d c5d cc3 c41 cbd c01 c00 c00 c00 c5b c44 c89 ce8 c41 c5c c