netlink: 'syz-executor1': attribute type 1 has an invalid length. netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. netlink: 'syz-executor1': attribute type 1 has an invalid length. netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. INFO: task syz-executor5:24826 blocked for more than 140 seconds. Not tainted 4.18.0-rc4-next-20180713+ #7 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor5 D23632 24826 4492 0x00000004 Call Trace: context_switch kernel/sched/core.c:2848 [inline] __schedule+0x87c/0x1ed0 kernel/sched/core.c:3496 schedule+0xfb/0x450 kernel/sched/core.c:3540 __rwsem_down_write_failed_common+0x95d/0x1630 kernel/locking/rwsem-xadd.c:566 rwsem_down_write_failed+0xe/0x10 kernel/locking/rwsem-xadd.c:595 call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:117 __down_write arch/x86/include/asm/rwsem.h:142 [inline] down_write+0xaa/0x130 kernel/locking/rwsem.c:72 inode_lock include/linux/fs.h:752 [inline] fuse_reverse_inval_entry+0xae/0x6d0 fs/fuse/dir.c:969 fuse_notify_delete fs/fuse/dev.c:1541 [inline] fuse_notify fs/fuse/dev.c:1773 [inline] fuse_dev_do_write+0x2d47/0x36f0 fs/fuse/dev.c:1848 fuse_dev_write+0x19a/0x240 fs/fuse/dev.c:1928 call_write_iter include/linux/fs.h:1826 [inline] new_sync_write fs/read_write.c:474 [inline] __vfs_write+0x6af/0x9d0 fs/read_write.c:487 vfs_write+0x1fc/0x560 fs/read_write.c:549 ksys_write+0x101/0x260 fs/read_write.c:598 __do_sys_write fs/read_write.c:610 [inline] __se_sys_write fs/read_write.c:607 [inline] __x64_sys_write+0x73/0xb0 fs/read_write.c:607 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x455ab9 Code: Bad RIP value. RSP: 002b:00007f25b42fcc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f25b42fd6d4 RCX: 0000000000455ab9 RDX: 000000000000002c RSI: 0000000020000000 RDI: 0000000000000013 RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000004c2834 R14: 00000000004d45c0 R15: 0000000000000000 INFO: task syz-executor5:24847 blocked for more than 140 seconds. Not tainted 4.18.0-rc4-next-20180713+ #7 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor5 D24656 24847 4492 0x00000004 Call Trace: context_switch kernel/sched/core.c:2848 [inline] __schedule+0x87c/0x1ed0 kernel/sched/core.c:3496 schedule+0xfb/0x450 kernel/sched/core.c:3540 __rwsem_down_read_failed_common kernel/locking/rwsem-xadd.c:269 [inline] rwsem_down_read_failed+0x362/0x600 kernel/locking/rwsem-xadd.c:286 call_rwsem_down_read_failed+0x18/0x30 arch/x86/lib/rwsem.S:94 __down_read arch/x86/include/asm/rwsem.h:83 [inline] down_read+0xc3/0x1d0 kernel/locking/rwsem.c:26 inode_lock_shared include/linux/fs.h:767 [inline] lookup_slow+0x49/0x80 fs/namei.c:1687 walk_component+0x94a/0x2630 fs/namei.c:1810 lookup_last fs/namei.c:2278 [inline] path_lookupat.isra.45+0x202/0xbf0 fs/namei.c:2328 filename_lookup+0x264/0x510 fs/namei.c:2362 user_path_at_empty+0x40/0x50 fs/namei.c:2625 user_path include/linux/namei.h:62 [inline] do_mount+0x180/0x1fb0 fs/namespace.c:2829 ksys_mount+0x12d/0x140 fs/namespace.c:3105 __do_sys_mount fs/namespace.c:3119 [inline] __se_sys_mount fs/namespace.c:3116 [inline] __x64_sys_mount+0xbe/0x150 fs/namespace.c:3116 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x455ab9 Code: Bad RIP value. RSP: 002b:00007f25b42dbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f25b42dc6d4 RCX: 0000000000455ab9 RDX: 00000000200004c0 RSI: 0000000020000480 RDI: 0000000000000000 RBP: 000000000072bf48 R08: 0000000020000580 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000004c025d R14: 00000000004cfef8 R15: 0000000000000001 INFO: task syz-executor5:24848 blocked for more than 140 seconds. Not tainted 4.18.0-rc4-next-20180713+ #7 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor5 D25264 24848 4492 0x00000004 Call Trace: context_switch kernel/sched/core.c:2848 [inline] __schedule+0x87c/0x1ed0 kernel/sched/core.c:3496 schedule+0xfb/0x450 kernel/sched/core.c:3540 request_wait_answer+0x4c8/0x920 fs/fuse/dev.c:463 __fuse_request_send+0x12a/0x1d0 fs/fuse/dev.c:483 fuse_request_send+0x62/0xa0 fs/fuse/dev.c:496 fuse_simple_request+0x33d/0x730 fs/fuse/dev.c:554 fuse_lookup_name+0x3ee/0x830 fs/fuse/dir.c:323 fuse_lookup+0xf9/0x4c0 fs/fuse/dir.c:360 __lookup_slow+0x2b5/0x540 fs/namei.c:1671 lookup_slow+0x57/0x80 fs/namei.c:1688 walk_component+0x94a/0x2630 fs/namei.c:1810 lookup_last fs/namei.c:2278 [inline] path_lookupat.isra.45+0x202/0xbf0 fs/namei.c:2328 filename_lookup+0x264/0x510 fs/namei.c:2362 user_path_at_empty+0x40/0x50 fs/namei.c:2625 user_path include/linux/namei.h:62 [inline] do_mount+0x180/0x1fb0 fs/namespace.c:2829 ksys_mount+0x12d/0x140 fs/namespace.c:3105 __do_sys_mount fs/namespace.c:3119 [inline] __se_sys_mount fs/namespace.c:3116 [inline] __x64_sys_mount+0xbe/0x150 fs/namespace.c:3116 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x455ab9 Code: Bad RIP value. RSP: 002b:00007f25b42bac68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f25b42bb6d4 RCX: 0000000000455ab9 RDX: 00000000200004c0 RSI: 0000000020000480 RDI: 0000000000000000 RBP: 000000000072bff0 R08: 0000000020000580 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000004c025d R14: 00000000004cfef8 R15: 0000000000000002 INFO: task syz-executor5:24856 blocked for more than 140 seconds. Not tainted 4.18.0-rc4-next-20180713+ #7 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor5 D24016 24856 4492 0x00000004 Call Trace: context_switch kernel/sched/core.c:2848 [inline] __schedule+0x87c/0x1ed0 kernel/sched/core.c:3496 schedule+0xfb/0x450 kernel/sched/core.c:3540 __rwsem_down_write_failed_common+0x95d/0x1630 kernel/locking/rwsem-xadd.c:566 rwsem_down_write_failed+0xe/0x10 kernel/locking/rwsem-xadd.c:595 call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:117 __down_write arch/x86/include/asm/rwsem.h:142 [inline] down_write+0xaa/0x130 kernel/locking/rwsem.c:72 inode_lock include/linux/fs.h:752 [inline] lock_mount+0x8c/0x2e0 fs/namespace.c:1970 do_add_mount+0x27/0x370 fs/namespace.c:2460 do_new_mount_fc fs/namespace.c:2519 [inline] do_new_mount fs/namespace.c:2571 [inline] do_mount+0x1af2/0x1fb0 fs/namespace.c:2889 ksys_mount+0x12d/0x140 fs/namespace.c:3105 __do_sys_mount fs/namespace.c:3119 [inline] __se_sys_mount fs/namespace.c:3116 [inline] __x64_sys_mount+0xbe/0x150 fs/namespace.c:3116 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x455ab9 Code: Bad RIP value. RSP: 002b:00007f25b4299c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f25b429a6d4 RCX: 0000000000455ab9 RDX: 0000000020000300 RSI: 0000000020000200 RDI: 0000000000000000 RBP: 000000000072c098 R08: 0000000020000400 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000004c025d R14: 00000000004cfef8 R15: 0000000000000003 INFO: lockdep is turned off. NMI backtrace for cpu 0 CPU: 0 PID: 901 Comm: khungtaskd Not tainted 4.18.0-rc4-next-20180713+ #7 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c9/0x2b4 lib/dump_stack.c:113 nmi_cpu_backtrace.cold.3+0x48/0x88 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x151/0x192 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:144 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:231 [inline] watchdog+0xb81/0x10f0 kernel/hung_task.c:292 kthread+0x345/0x410 kernel/kthread.c:246 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:415 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0x6/0x10 arch/x86/include/asm/irqflags.h:54