EXT4-fs (loop1): inodes count not valid: 378 vs 256 IPVS: stopping master sync thread 16390 ... INFO: task syz-executor0:24994 blocked for more than 140 seconds. Not tainted 4.9.113-g9905591 #14 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor0 D26536 24994 23504 0x00000004 ffff8801d8820000 ffff8801cd11ca80 ffff880198f464c0 ffff88019b256000 ffff8801db321c18 ffff8801ba12f650 ffffffff839e929d dffffc0000000000 ffff8801bb10c7f0 ffff8801ba12f610 00ff8801d88208c0 ffff8801db3224e8 Call Trace: [] schedule+0x7f/0x1b0 kernel/sched/core.c:3553 [] d_wait_lookup fs/dcache.c:2455 [inline] [] d_alloc_parallel+0xeb2/0x17c0 fs/dcache.c:2537 [] lookup_slow+0x19c/0x470 fs/namei.c:1650 [] walk_component+0x716/0x1bb0 fs/namei.c:1784 [] lookup_last fs/namei.c:2266 [inline] [] path_lookupat.isra.41+0x186/0x410 fs/namei.c:2283 [] filename_lookup.part.55+0x177/0x370 fs/namei.c:2317 [] filename_lookup fs/namei.c:2310 [inline] [] user_path_at_empty+0x53/0x70 fs/namei.c:2578 [] user_path_at include/linux/namei.h:55 [inline] [] vfs_fstatat+0xc6/0x170 fs/stat.c:106 [] vfs_lstat fs/stat.c:129 [inline] [] SYSC_newlstat+0x89/0x100 fs/stat.c:283 [] SyS_newlstat+0x1d/0x30 fs/stat.c:277 [] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/519: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 kernel/hung_task.c:239 #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336 2 locks held by getty/3747: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+.+.}, at: [] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2142 1 lock held by syz-executor0/24994: #0: (&type->i_mutex_dir_key#5){++++++}, at: [] inode_lock_shared include/linux/fs.h:776 [inline] #0: (&type->i_mutex_dir_key#5){++++++}, at: [] lookup_slow+0x141/0x470 fs/namei.c:1645 1 lock held by syz-executor0/25027: #0: (&type->i_mutex_dir_key#5){++++++}, at: [] inode_lock_shared include/linux/fs.h:776 [inline] #0: (&type->i_mutex_dir_key#5){++++++}, at: [] lookup_slow+0x141/0x470 fs/namei.c:1645 1 lock held by syz-executor0/25081: #0: (&type->i_mutex_dir_key#5){++++++}, at: [] inode_lock_shared include/linux/fs.h:776 [inline] #0: (&type->i_mutex_dir_key#5){++++++}, at: [] lookup_slow+0x141/0x470 fs/namei.c:1645 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 519 Comm: khungtaskd Not tainted 4.9.113-g9905591 #14 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801d85d7d08 ffffffff81eb32a9 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ffffffff810b9bd0 ffff8801d85d7d40 ffffffff81ebe5a7 0000000000000000 0000000000000000 0000000000000003 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold.2+0x48/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x12a/0x14f lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6b4/0xa20 kernel/hung_task.c:239 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 25005 Comm: syz-executor0 Not tainted 4.9.113-g9905591 #14 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8801d72bc800 task.stack: ffff8801b1210000 RIP: 0010:[] c [] __lock_is_held+0x85/0xf0 kernel/locking/lockdep.c:3594 RSP: 0018:ffff8801b1217370 EFLAGS: 00000046 RAX: 0000000000000000 RBX: ffff8801d72bc800 RCX: ffffc90009161000 RDX: 0000000000000000 RSI: ffffffff846def20 RDI: ffff8801d72bd0ea RBP: ffff8801b12173a0 R08: ffff8801d72bd110 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffffed003ae57a18 R13: ffff8801d72bd0c8 R14: ffffffff846def20 R15: 0000000000000001 FS: 00007fe15cd36700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f7436975000 CR3: 00000001c9c84000 CR4: 00000000001606f0 DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Stack: ffff8801d72bd0c0c 0000000000000246c ffff8801d72bc800c ffffffff846def20c 00000000000001ccc ffff8801ca6554b8c ffff8801b12173c8c ffffffff81230a54c ffff8801d72bc800c 0000000000000000c ffffffff83db4480c ffff8801b1217400c Call Trace: [] lock_is_held+0xb4/0x140 kernel/locking/lockdep.c:3794 [] ___might_sleep+0x1c7/0x260 kernel/sched/core.c:7954 [] __might_sleep+0x95/0x1a0 kernel/sched/core.c:7945 [] request_wait_answer+0x124/0x6e0 fs/fuse/dev.c:459 [] __fuse_request_send+0x109/0x1b0 fs/fuse/dev.c:480 [] fuse_request_send+0x5d/0x70 fs/fuse/dev.c:493 [] fuse_simple_request+0x2f4/0x660 fs/fuse/dev.c:551 [] fuse_lookup_name+0x253/0x5d0 fs/fuse/dir.c:369 [] fuse_lookup+0xed/0x3a0 fs/fuse/dir.c:406 [] lookup_slow+0x23e/0x470 fs/namei.c:1668 [] walk_component+0x716/0x1bb0 fs/namei.c:1784 [] lookup_last fs/namei.c:2266 [inline] [] path_lookupat.isra.41+0x186/0x410 fs/namei.c:2283 [] filename_lookup.part.55+0x177/0x370 fs/namei.c:2317 [] filename_lookup fs/namei.c:2310 [inline] [] user_path_at_empty+0x53/0x70 fs/namei.c:2578 [] user_path_at include/linux/namei.h:55 [inline] [] vfs_fstatat+0xc6/0x170 fs/stat.c:106 [] vfs_lstat fs/stat.c:129 [inline] [] SYSC_newlstat+0x89/0x100 fs/stat.c:283 [] SyS_newlstat+0x1d/0x30 fs/stat.c:277 [] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: c4c c8d cab cc8 c08 c00 c00 c49 cc1 cec c03 c49 c01 cc4 c8b c83 cc0 c08 c00 c00 c85 cc0 c7f c1c ceb c46 c41 c0f cb6 c04 c24 c41 c83 cc7 c01 c84 cc0 c74 c04 c3c c03 c7e c54 c<44> c39 cbb cc0 c08 c00 c00 c7e c2c c49 c63 cc7 c4c c89 cf6 c48 c8d c04 c80 c49 c8d c