INFO: task syz-executor1:13970 blocked for more than 120 seconds. Not tainted 4.9.105-gd7e64f8 #40 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor1 D27184 13970 9175 0x00000004 ffff8801da3a0000 ffff880183e94fc0 ffff880190b24fc0 ffff8801d79b3000 ffff8801db221c18 ffff8801857f7b48 ffffffff839e8c1d ffff8801da3a08c8 ffffed003b474118 ffff8801da3a0000 00fffc0000000000 ffff8801db2224e8 Call Trace: [] schedule+0x7f/0x1b0 kernel/sched/core.c:3557 [] schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3590 [] __mutex_lock_common kernel/locking/mutex.c:582 [inline] [] mutex_lock_nested+0x326/0x870 kernel/locking/mutex.c:621 [] loop_control_ioctl+0x186/0x300 drivers/block/loop.c:1920 [] vfs_ioctl fs/ioctl.c:43 [inline] [] file_ioctl fs/ioctl.c:493 [inline] [] do_vfs_ioctl+0x1ac/0x11a0 fs/ioctl.c:677 [] SYSC_ioctl fs/ioctl.c:694 [inline] [] SyS_ioctl+0x8f/0xc0 fs/ioctl.c:685 [] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/519: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 kernel/hung_task.c:239 #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336 2 locks held by getty/3775: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2133 2 locks held by syz-executor1/13970: #0: (loop_index_mutex){+.+.+.}, at: [] loop_control_ioctl+0x7a/0x300 drivers/block/loop.c:1906 #1: (&lo->lo_ctl_mutex#2){+.+.+.}, at: [] loop_control_ioctl+0x186/0x300 drivers/block/loop.c:1920 2 locks held by syz-executor2/13976: #0: (&lo->lo_ctl_mutex/1){+.+.+.}, at: [] lo_ioctl+0x8b/0x1aa0 drivers/block/loop.c:1344 #1: (&bdev->bd_mutex){+.+.+.}, at: [] blkdev_reread_part+0x1e/0x40 block/ioctl.c:189 1 lock held by syz-executor2/13997: #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_get+0x10c/0xd60 fs/block_dev.c:1268 1 lock held by syz-executor0/13988: #0: (loop_index_mutex){+.+.+.}, at: [] loop_probe+0x74/0x180 drivers/block/loop.c:1886 1 lock held by syz-executor0/13998: #0: (loop_index_mutex){+.+.+.}, at: [] loop_probe+0x74/0x180 drivers/block/loop.c:1886 2 locks held by blkid/13986: #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_get+0x10c/0xd60 fs/block_dev.c:1268 #1: (loop_index_mutex){+.+.+.}, at: [] lo_open+0x1b/0xa0 drivers/block/loop.c:1555 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 519 Comm: khungtaskd Not tainted 4.9.105-gd7e64f8 #40 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801d84c7d08 ffffffff81eb41a9 0000000000000000 0000000000000001 0000000000000001 0000000000000001 ffffffff810b96a0 ffff8801d84c7d40 ffffffff81ebf4a7 0000000000000001 0000000000000000 0000000000000003 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold.2+0x48/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x12a/0x14f lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6b4/0xa20 kernel/hung_task.c:239 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 1835 Comm: kworker/0:2 Not tainted 4.9.105-gd7e64f8 #40 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events_power_efficient gc_workerc task: ffff8801cee0b000 task.stack: ffff8801ce0b0000 RIP: 0010:[] c [] strlen+0x62/0xa0 lib/string.c:481 RSP: 0018:ffff8801ce0b79d8 EFLAGS: 00000046 RAX: ffffffff8411aff3 RBX: dffffc0000000000 RCX: 0000000000000003 RDX: 0000000000000000 RSI: ffffffff84c656a8 RDI: ffffffff8411afe0 RBP: ffff8801ce0b79f0 R08: ffff8801cee0b960 R09: 0000000000000001 R10: 0000000000000000 R11: 1ffff10039dc1727 R12: ffffffff8411afe0 R13: ffffffff846c9620 R14: ffff8801ce0b7ae0 R15: ffffffff84c656a8 FS: 0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c428f47000 CR3: 00000001c438c000 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Stack: ffffffff846def20c ffffffff84c656a8c 1ffff10039c16f48c ffff8801ce0b7b08c ffffffff8122e89dc 00000000000020dac ffff8801cee0b958c ffff8801cee0b8b8c ffff8801cee0b960c ffff8801cee0b8c0c ffffffff84c656c0c 1ffff10039c16f48c Call Trace: [] trace_event_get_offsets_lock include/trace/events/lock.h:38 [inline] [] perf_trace_lock+0xdd/0x520 include/trace/events/lock.h:38 [] trace_lock_release include/trace/events/lock.h:57 [inline] [] lock_release+0x8bf/0xb80 kernel/locking/lockdep.c:3774 [] seqcount_lockdep_reader_access include/linux/seqlock.h:81 [inline] [] read_seqcount_begin include/linux/seqlock.h:163 [inline] [] nf_conntrack_get_ht include/net/netfilter/nf_conntrack.h:325 [inline] [] gc_worker+0x180/0x620 net/netfilter/nf_conntrack_core.c:968 [] process_one_work+0x7e1/0x1500 kernel/workqueue.c:2092 [] worker_thread+0xd6/0x10a0 kernel/workqueue.c:2226 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Code: c3b c48 cbb c00 c00 c00 c00 c00 cfc cff cdf c4c c89 ce0 c48 c83 cc0 c01 c48 c89 cc2 c48 c89 cc1 c48 cc1 cea c03 c83 ce1 c07 c0f cb6 c14 c1a c38 cca c7f c04 c84 cd2 c75 c23 c<80> c38 c00 c75 cde c48 c83 cc4 c08 c4c c29 ce0 c5b c41 c5c c5d cc3 c48 c83 cc4 c08 c