FAT-fs (loop1): Filesystem has been set read-only vlan0: renamed from team_slave_0 INFO: task syz-executor4:12127 blocked for more than 140 seconds. Not tainted 4.9.116-g0137ea2 #18 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor4 D28552 12127 9095 0x00000004 ffff88019bb61800 ffff8801cf4aea00 ffff8801cf4aea00 ffff8801b7633000 ffff8801db221c18 ffff8801c0ad7ac8 ffffffff839ead0d ffffffff81235647 0000000000000000 ffff88019bb620c0 0000000600000007 ffff8801db2224e8 Call Trace: [] schedule+0x7f/0x1b0 kernel/sched/core.c:3553 [] __rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:526 [inline] [] rwsem_down_write_failed+0x598/0x990 kernel/locking/rwsem-xadd.c:555 [] call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:105 [] __down_write arch/x86/include/asm/rwsem.h:125 [inline] [] down_write_nested+0x60/0xa0 kernel/locking/rwsem.c:174 [] inode_lock_nested include/linux/fs.h:801 [inline] [] filename_create+0x17a/0x490 fs/namei.c:3639 [] user_path_create fs/namei.c:3697 [inline] [] SYSC_mkdirat fs/namei.c:3841 [inline] [] SyS_mkdirat+0xbb/0x260 fs/namei.c:3833 [] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/519: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 kernel/hung_task.c:239 #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336 2 locks held by rs:main Q:Reg/3674: #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xac/0xd0 fs/file.c:781 #1: (sb_writers#3){.+.+.+}, at: [] file_start_write include/linux/fs.h:2640 [inline] #1: (sb_writers#3){.+.+.+}, at: [] vfs_write+0x3ae/0x530 fs/read_write.c:556 1 lock held by rsyslogd/3676: #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xac/0xd0 fs/file.c:781 2 locks held by getty/3772: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2142 2 locks held by syz-executor4/12127: #0: (sb_writers#19){.+.+.+}, at: [] sb_start_write include/linux/fs.h:1573 [inline] #0: (sb_writers#19){.+.+.+}, at: [] mnt_want_write+0x3f/0xb0 fs/namespace.c:391 #1: (&type->i_mutex_dir_key#4/1){+.+.+.}, at: [] inode_lock_nested include/linux/fs.h:801 [inline] #1: (&type->i_mutex_dir_key#4/1){+.+.+.}, at: [] filename_create+0x17a/0x490 fs/namei.c:3639 1 lock held by syz-executor4/12135: #0: (&type->i_mutex_dir_key#5){+.+...}, at: [] inode_lock include/linux/fs.h:766 [inline] #0: (&type->i_mutex_dir_key#5){+.+...}, at: [] lock_mount+0x8c/0x2c0 fs/namespace.c:2077 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 519 Comm: khungtaskd Not tainted 4.9.116-g0137ea2 #18 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801d8667d08 ffffffff81eb46a9 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ffffffff810b9bd0 ffff8801d8667d40 ffffffff81ebf9a7 0000000000000000 0000000000000000 0000000000000003 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold.2+0x48/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x12a/0x14f lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6b4/0xa20 kernel/hung_task.c:239 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 12118 Comm: syz-executor4 Not tainted 4.9.116-g0137ea2 #18 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff88019c62e000 task.stack: ffff88019b680000 RIP: 0010:[] c [] __lock_release kernel/locking/lockdep.c:3521 [inline] RIP: 0010:[] c [] lock_release+0x19d/0xb80 kernel/locking/lockdep.c:3775 RSP: 0018:ffff88019b687778 EFLAGS: 00000097 RAX: 0000000000000004 RBX: ffff8801d00ba330 RCX: ffff88019b687960 RDX: 0000000000000004 RSI: 0000000000000001 RDI: ffffffff84870b00 RBP: ffff88019b687820 R08: 0000000000000296 R09: 0000000000000001 R10: 0000000000000000 R11: 1ffff100338c5d27 R12: ffff8801d00ba318 R13: ffff88019c62e000 R14: ffff8801d00ba318 R15: 0000000000000001 FS: 00007f24d3a5c700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000014a30e8 CR3: 00000001bf516000 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: 0000000000000046c ffff88019c62e000c 0000000000000000c 0000000000000000c 0000000000000000c ffff88019b687818c 0000000000000046c 0000000000000000c ffffffff812215bbc ffff88019c62e8c0c ffff880100000000c 0000000000000046c Call Trace: [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] [] _raw_spin_unlock_irqrestore+0x1f/0x70 kernel/locking/spinlock.c:191 [] spin_unlock_irqrestore include/linux/spinlock.h:362 [inline] [] prepare_to_wait_event+0x1d9/0x450 kernel/sched/wait.c:238 [] request_wait_answer+0x22e/0x6e0 fs/fuse/dev.c:459 [] __fuse_request_send+0x109/0x1b0 fs/fuse/dev.c:480 [] fuse_request_send+0x5d/0x70 fs/fuse/dev.c:493 [] fuse_simple_request+0x2f4/0x660 fs/fuse/dev.c:551 [] fuse_lookup_name+0x253/0x5d0 fs/fuse/dir.c:369 [] fuse_lookup+0xed/0x3a0 fs/fuse/dir.c:406 [] lookup_real fs/namei.c:1522 [inline] [] __lookup_hash+0x11c/0x190 fs/namei.c:1542 [] filename_create+0x1a6/0x490 fs/namei.c:3640 [] user_path_create fs/namei.c:3697 [inline] [] SYSC_mkdirat fs/namei.c:3841 [inline] [] SyS_mkdirat+0xbb/0x260 fs/namei.c:3833 [] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: ccc c48 cb8 c00 c00 c00 c00 c00 cfc cff cdf c0f cb6 c14 c02 c48 cc7 cc0 cc0 cd6 cb2 c85 c83 ce0 c07 c83 cc0 c03 c38 cd0 c7c c08 c84 cd2 c0f c85 c92 c07 c00 c00 c8b c45 ccc c<0b> c05 cdd c25 c8f c04 c0f c84 c10 c05 c00 c00 c8b c45 ccc c83 ce8 c01 c89 c45 cc8 c