netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'.
netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'.
INFO: task syz-executor3:31600 blocked for more than 140 seconds.
      Not tainted 4.9.120-gf85543b #24
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor3   D28656 31600   3875 0x00000004
 ffff88019b8a1800 ffff8801aaeb8a80 ffff88019c90a4c0 ffff8801d3900000
 ffff8801db321c18 ffff8801b6007a38 ffffffff839eedcd ffffffff81237347
 0000000000000000 ffff88019b8a20c0 0000000600000007 ffff8801db3224e8
Call Trace:
 [<ffffffff839f03cf>] schedule+0x7f/0x1b0 kernel/sched/core.c:3553
 [<ffffffff839fba08>] __rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:526 [inline]
 [<ffffffff839fba08>] rwsem_down_write_failed+0x598/0x990 kernel/locking/rwsem-xadd.c:555
 [<ffffffff81eec337>] call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:105
 [<ffffffff839f97dc>] __down_write arch/x86/include/asm/rwsem.h:125 [inline]
 [<ffffffff839f97dc>] down_write+0x5c/0xa0 kernel/locking/rwsem.c:54
 [<ffffffff815e481c>] inode_lock include/linux/fs.h:766 [inline]
 [<ffffffff815e481c>] lock_mount+0x8c/0x2c0 fs/namespace.c:2101
 [<ffffffff815e75e7>] do_add_mount+0x27/0x340 fs/namespace.c:2484
 [<ffffffff815e92d2>] do_new_mount fs/namespace.c:2551 [inline]
 [<ffffffff815e92d2>] do_mount+0x1332/0x2740 fs/namespace.c:2859
 [<ffffffff815eb0be>] SYSC_mount fs/namespace.c:3075 [inline]
 [<ffffffff815eb0be>] SyS_mount+0xfe/0x110 fs/namespace.c:3052
 [<ffffffff81006316>] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282
 [<ffffffff839ffcd3>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb

Showing all locks held in the system:
2 locks held by khungtaskd/519:
 #0:  (rcu_read_lock){......}, at: [<ffffffff813684dc>] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline]
 #0:  (rcu_read_lock){......}, at: [<ffffffff813684dc>] watchdog+0x11c/0xa20 kernel/hung_task.c:239
 #1:  (tasklist_lock){.+.+..}, at: [<ffffffff81427d48>] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336
1 lock held by rsyslogd/3674:
 #0:  (&f->f_pos_lock){+.+.+.}, at: [<ffffffff815db00c>] __fdget_pos+0xac/0xd0 fs/file.c:781
2 locks held by getty/3770:
 #0:  (&tty->ldisc_sem){++++++}, at: [<ffffffff839fde72>] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367
 #1:  (&ldata->atomic_read_lock){+.+...}, at: [<ffffffff82123d42>] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2142
1 lock held by syz-executor3/31573:
 #0:  (&sb->s_type->i_mutex_key#22){++++++}, at: [<ffffffff81597c61>] inode_lock_shared include/linux/fs.h:776 [inline]
 #0:  (&sb->s_type->i_mutex_key#22){++++++}, at: [<ffffffff81597c61>] lookup_slow+0x141/0x470 fs/namei.c:1645
1 lock held by syz-executor3/31600:
 #0:  (&sb->s_type->i_mutex_key#22){++++++}, at: [<ffffffff815e481c>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&sb->s_type->i_mutex_key#22){++++++}, at: [<ffffffff815e481c>] lock_mount+0x8c/0x2c0 fs/namespace.c:2101
1 lock held by syz-executor3/31604:
 #0:  (&sb->s_type->i_mutex_key#22){++++++}, at: [<ffffffff81597c61>] inode_lock_shared include/linux/fs.h:776 [inline]
 #0:  (&sb->s_type->i_mutex_key#22){++++++}, at: [<ffffffff81597c61>] lookup_slow+0x141/0x470 fs/namei.c:1645

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 519 Comm: khungtaskd Not tainted 4.9.120-gf85543b #24
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801d8627d08 ffffffff81eb8049 0000000000000000 0000000000000001
 0000000000000001 0000000000000001 ffffffff810b9fa0 ffff8801d8627d40
 ffffffff81ec3357 0000000000000001 0000000000000000 0000000000000003
Call Trace:
 [<ffffffff81eb8049>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81eb8049>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff81ec3357>] nmi_cpu_backtrace.cold.2+0x48/0x87 lib/nmi_backtrace.c:99
 [<ffffffff81ec32ea>] nmi_trigger_cpumask_backtrace+0x12a/0x14f lib/nmi_backtrace.c:60
 [<ffffffff810ba0a4>] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37
 [<ffffffff81368a74>] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline]
 [<ffffffff81368a74>] check_hung_task kernel/hung_task.c:125 [inline]
 [<ffffffff81368a74>] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline]
 [<ffffffff81368a74>] watchdog+0x6b4/0xa20 kernel/hung_task.c:239
 [<ffffffff8119ee0d>] kthread+0x26d/0x300 kernel/kthread.c:211
 [<ffffffff839ffe9c>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.9.120-gf85543b #24
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffffffff84629800 task.stack: ffffffff84600000
RIP: 0010:[<ffffffff81eca721>] 
c [<ffffffff81eca721>] __write_once_size include/linux/compiler.h:272 [inline]
RIP: 0010:[<ffffffff81eca721>] 
c [<ffffffff81eca721>] __rb_change_child include/linux/rbtree_augmented.h:130 [inline]
RIP: 0010:[<ffffffff81eca721>] 
c [<ffffffff81eca721>] __rb_erase_augmented include/linux/rbtree_augmented.h:168 [inline]
RIP: 0010:[<ffffffff81eca721>] 
c [<ffffffff81eca721>] rb_erase+0x7e1/0x1cb0 lib/rbtree.c:427
RSP: 0018:ffffffff84607ba8  EFLAGS: 00000046
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff8801db221cd0
RDX: 1ffff1003b644399 RSI: ffff8801db221cc8 RDI: ffff8801cdb4c8a0
RBP: ffffffff84607bf0 R08: ffff8801db221d68 R09: 0000000000000001
R10: dffffc0000000000 R11: 0000000000000001 R12: ffffffff84e992c0
R13: 0000000000000001 R14: ffff8801cdb4c890 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fefe794c000 CR3: 00000001c81cb000 CR4: 00000000001606f0
DR0: ffffffffffffffff DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Stack:
 ffffffff8462a0e8
c ffffffff8462a0c0
c ffffffff8462a0c8
c 1ffffffff08c0f7a
c
 ffff8801cdb4c880
c ffffffff84e992c0
c ffffffff84871040
c ffff8801cdb4c890
c
 ffff8801db221ca0
c ffffffff84607c50
c ffffffff811f0b78
c 0000000000000000
c
Call Trace:
 [<ffffffff811f0b78>] __dequeue_entity kernel/sched/fair.c:593 [inline]
 [<ffffffff811f0b78>] set_next_entity+0x268/0xbf0 kernel/sched/fair.c:3818
 [<ffffffff81208586>] pick_next_task_fair+0xb46/0x1e30 kernel/sched/fair.c:7565
 [<ffffffff839ef4cd>] pick_next_task kernel/sched/core.c:3371 [inline]
 [<ffffffff839ef4cd>] __schedule+0xd4d/0x1bd0 kernel/sched/core.c:3480
 [<ffffffff839f03cf>] schedule+0x7f/0x1b0 kernel/sched/core.c:3553
 [<ffffffff839f0d53>] schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3586
 [<ffffffff81224ddf>] cpu_idle_loop kernel/sched/idle.c:274 [inline]
 [<ffffffff81224ddf>] cpu_startup_entry+0x1bf/0x380 kernel/sched/idle.c:303
 [<ffffffff839ebb9c>] rest_init+0x183/0x189 init/main.c:409
 [<ffffffff84c98943>] start_kernel+0x67e/0x6b2 init/main.c:664
 [<ffffffff84c9729a>] x86_64_start_reservations+0x29/0x2b arch/x86/kernel/head64.c:196
 [<ffffffff84c973db>] x86_64_start_kernel+0x13f/0x162 arch/x86/kernel/head64.c:177
Code: 
cb6 
c0b 
c00 
c00 
c49 
c89 
cc7 
c48 
c8b 
c40 
c08 
ce9 
c01 
cfc 
cff 
cff 
c48 
cb8 
c00 
c00 
c00 
c00 
c00 
cfc 
cff 
cdf 
c48 
c89 
cf2 
c48 
cc1 
cea 
c03 
c80 
c3c 
c02 
c00 
c0f 
c85 
ce3 
c0b 
c00 
c00 
c<4d> 
c85 
cff 
c4c 
c89 
c3e 
c0f 
c84 
c6b 
cfb 
cff 
cff 
c48 
cb8 
c00 
c00 
c00 
c00 
c00 
cfc 
cff 
c