INFO: task syz-executor1:4028 blocked for more than 140 seconds. Not tainted 4.9.130+ #46 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor1 D28488 4028 2107 0x00000004 ffff8801ca88af80 0000000000000000 ffff8801d2958000 ffff8801da6b2f80 ffff8801db721018 ffff8801d9a976a0 ffffffff827f2d82 ffff8801d6377938 ffff8801d9a97650 ffffffff81206c9b 0000000000000292 ffff8801db7218f0 Call Trace: [] schedule+0x7f/0x1b0 kernel/sched/core.c:3553 [] d_wait_lookup fs/dcache.c:2455 [inline] [] d_alloc_parallel+0x10a9/0x1710 fs/dcache.c:2537 [] lookup_slow+0x1af/0x470 fs/namei.c:1650 [] walk_component+0x822/0xcf0 fs/namei.c:1784 [] lookup_last fs/namei.c:2266 [inline] [] path_lookupat.isra.10+0x186/0x410 fs/namei.c:2283 [] filename_lookup.part.18+0x177/0x370 fs/namei.c:2317 [] filename_lookup fs/namei.c:2310 [inline] [] user_path_at_empty+0x53/0x70 fs/namei.c:2578 [] user_path_at include/linux/namei.h:55 [inline] [] vfs_fstatat+0xc6/0x170 fs/stat.c:106 [] vfs_lstat fs/stat.c:129 [inline] [] SYSC_newlstat fs/stat.c:283 [inline] [] SyS_newlstat+0x89/0x100 fs/stat.c:277 [] do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/24: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 kernel/hung_task.c:239 #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336 2 locks held by getty/2020: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2142 1 lock held by syz-executor1/4028: #0: (&type->i_mutex_dir_key#7){++++++}, at: [] inode_lock_shared include/linux/fs.h:776 [inline] #0: (&type->i_mutex_dir_key#7){++++++}, at: [] lookup_slow+0x154/0x470 fs/namei.c:1645 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.130+ #46 ffff8801d9907d08 ffffffff81b36c89 0000000000000000 0000000000000001 0000000000000001 0000000000000001 ffffffff81098180 ffff8801d9907d40 ffffffff81b41d99 0000000000000001 0000000000000000 0000000000000003 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold.0+0x48/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x12c/0x151 lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6ad/0xa20 kernel/hung_task.c:239 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 4024 Comm: syz-executor1 Not tainted 4.9.130+ #46 task: ffff8801a3f88000 task.stack: ffff8801d6370000 RIP: 0010:[] c [] __lock_acquire+0x264/0x4a10 kernel/locking/lockdep.c:3262 RSP: 0018:ffff8801d6377180 EFLAGS: 00000802 RAX: ffff8801a3f888d8 RBX: 0000000000000050 RCX: 0000000000000000 RDX: 0000000000000001 RSI: dffffc0000000000 RDI: ffff8801a3f888f8 RBP: ffff8801d6377328 R08: 0000000000000001 R09: 0000000000000001 R10: ffff8801a3f88000 R11: 1ffff100347f111f R12: 000000000000046a R13: 0000000000000002 R14: ffff8801cfd24a08 R15: 0000000000000000 FS: 00007fa94389d700(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa0a8667000 CR3: 00000001d7531000 CR4: 00000000001606b0 DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Stack: ffff8801a3f888b0c ffffed00347f1115c ffff8801a3f88000c dffffc0000000000c ffff8801d63771f0c ffffffff812068a7c 0000000000000000c ffff8801a3f888a8c 0000000600000007c ffff8801a3f88000c ffffffff83cdeaf0c ffff8801d2958000c Call Trace: [] lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:112 [inline] [] _raw_spin_lock_irqsave+0x4e/0x70 kernel/locking/spinlock.c:159 [] prepare_to_wait_event+0x6e/0x8c0 kernel/sched/wait.c:213 [] request_wait_answer+0x22e/0x820 fs/fuse/dev.c:470 [] __fuse_request_send+0x109/0x1b0 fs/fuse/dev.c:491 [] fuse_request_send+0x5d/0x70 fs/fuse/dev.c:504 [] fuse_simple_request+0x2f4/0x660 fs/fuse/dev.c:562 [] fuse_lookup_name+0x253/0x5d0 fs/fuse/dir.c:369 [] fuse_lookup+0xf3/0x3b0 fs/fuse/dir.c:407 [] lookup_slow+0x24a/0x470 fs/namei.c:1668 [] walk_component+0x822/0xcf0 fs/namei.c:1784 [] lookup_last fs/namei.c:2266 [inline] [] path_lookupat.isra.10+0x186/0x410 fs/namei.c:2283 [] filename_lookup.part.18+0x177/0x370 fs/namei.c:2317 [] filename_lookup fs/namei.c:2310 [inline] [] user_path_at_empty+0x53/0x70 fs/namei.c:2578 [] user_path_at include/linux/namei.h:55 [inline] [] vfs_fstatat+0xc6/0x170 fs/stat.c:106 [] vfs_stat fs/stat.c:123 [inline] [] SYSC_newstat fs/stat.c:270 [inline] [] SyS_newstat+0x86/0xf0 fs/stat.c:266 [] do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: c01 c44 c89 ce8 c48 c8d c1c c80 c48 cc1 ce3 c03 c45 c85 ced c74 c4c c48 c8d c44 c1f cd8 c48 cbe c00 c00 c00 c00 c00 cfc cff cdf c48 c8d c78 c20 c49 c89 cfb c49 cc1 ceb c03 c<41> c0f cb6 c34 c33 c40 c84 cf6 c74 c0a c40 c80 cfe c03 c0f c8e c99 c13 c00 c00 c0f c