INFO: task syz-executor0:28096 blocked for more than 120 seconds. Not tainted 4.9.105-ga56900fa #39 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor0 D28312 28096 12030 0x00000004 ffff8801c62a1800 0000000000000000 ffff8801c53b2f40 ffffffff84629800 ffff8801db221c18 ffff880186767ac8 ffffffff839e8c1d ffff880186767ae8 ffff880183c060c8 0000000000000000 0000000000000000 ffff8801db2224e8 Call Trace: [] schedule+0x7f/0x1b0 kernel/sched/core.c:3557 [] __rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:526 [inline] [] rwsem_down_write_failed+0x598/0x990 kernel/locking/rwsem-xadd.c:555 [] call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:105 [] __down_write arch/x86/include/asm/rwsem.h:125 [inline] [] down_write_nested+0x60/0xa0 kernel/locking/rwsem.c:174 [] inode_lock_nested include/linux/fs.h:801 [inline] [] filename_create+0x17a/0x490 fs/namei.c:3639 [] user_path_create fs/namei.c:3697 [inline] [] SYSC_mkdirat fs/namei.c:3841 [inline] [] SyS_mkdirat fs/namei.c:3833 [inline] [] SYSC_mkdir fs/namei.c:3860 [inline] [] SyS_mkdir+0xb1/0x260 fs/namei.c:3858 [] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/519: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 kernel/hung_task.c:239 #1: (tasklist_lock){.+.?..}, at: [] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336 2 locks held by getty/3775: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2133 2 locks held by syz-executor0/28096: #0: (sb_writers#21){.+.+.+}, at: [] sb_start_write include/linux/fs.h:1573 [inline] #0: (sb_writers#21){.+.+.+}, at: [] mnt_want_write+0x3f/0xb0 fs/namespace.c:391 #1: (&sb->s_type->i_mutex_key#21/1){+.+.+.}, at: [] inode_lock_nested include/linux/fs.h:801 [inline] #1: (&sb->s_type->i_mutex_key#21/1){+.+.+.}, at: [] filename_create+0x17a/0x490 fs/namei.c:3639 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 519 Comm: khungtaskd Not tainted 4.9.105-ga56900fa #39 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801d8fafd08 ffffffff81eb41a9 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ffffffff810b96a0 ffff8801d8fafd40 ffffffff81ebf4a7 0000000000000000 0000000000000000 0000000000000003 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold.2+0x48/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x12a/0x14f lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6b4/0xa20 kernel/hung_task.c:239 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 28080 Comm: syz-executor0 Not tainted 4.9.105-ga56900fa #39 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff880187748000 task.stack: ffff8801d0538000 RIP: 0010:[] c [] __sanitizer_cov_trace_pc+0x0/0x50 RSP: 0018:ffff8801db307d98 EFLAGS: 00000097 RAX: 0000000000010002 RBX: 0000000000000001 RCX: 1ffffffff0886481 RDX: 0000000000000000 RSI: ffffffff81f1bc0b RDI: ffffffff85b2d700 RBP: ffff8801db307da0 R08: ffff8801877489b0 R09: 0000000000000001 R10: 0000000000000000 R11: 1ffff10030ee9131 R12: ffffffff813f9a80 R13: ffff8801db31c900 R14: dffffc0000000000 R15: dffffc0000000000 FS: 00007f18474e1700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fbdf49bf000 CR3: 00000001d6e22000 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: ffffffff81f1bd49c ffff8801db307dd0c ffffffff812845dcc ffff8801db307dd0c ffffffff84870a60c ffffffff813f9a80c ffff8801db31c900c ffff8801db307de8c ffffffff8127c526c ffff8801ba062bc8c ffff8801db307f20c ffffffff812a527ac Call Trace: [] rcu_lockdep_current_cpu_online+0x3c/0x140 kernel/rcu/tree.c:1105 [] rcu_read_lock_sched_held+0x96/0x120 kernel/rcu/update.c:109 [] trace_hrtimer_expire_entry include/trace/events/timer.h:212 [inline] [] __run_hrtimer kernel/time/hrtimer.c:1254 [inline] [] __hrtimer_run_queues+0xa6a/0xe50 kernel/time/hrtimer.c:1319 [] hrtimer_interrupt+0x1b1/0x430 kernel/time/hrtimer.c:1353 [] local_apic_timer_interrupt+0x74/0xa0 arch/x86/kernel/apic/apic.c:935 [] smp_apic_timer_interrupt+0x7c/0xa0 arch/x86/kernel/apic/apic.c:959 [] apic_timer_interrupt+0xa0/0xb0 arch/x86/entry/entry_64.S:648 d [] ? radix_tree_lookup_slot+0x46/0xc0 lib/radix-tree.c:722 [] find_get_entry+0x8e/0x540 mm/filemap.c:1095 [] pagecache_get_page+0x4b/0x720 mm/filemap.c:1203 [] find_or_create_page include/linux/pagemap.h:309 [inline] [] grow_dev_page fs/buffer.c:1005 [inline] [] grow_buffers fs/buffer.c:1078 [inline] [] __getblk_slow fs/buffer.c:1105 [inline] [] __getblk_gfp+0x249/0x710 fs/buffer.c:1386 [] __bread_gfp+0x2d/0x270 fs/buffer.c:1420 [] sb_bread include/linux/buffer_head.h:300 [inline] [] fat__get_entry+0x4c8/0x8f0 fs/fat/dir.c:100 [] fat_get_entry fs/fat/dir.c:128 [inline] [] fat_get_short_entry+0x131/0x2a0 fs/fat/dir.c:876 [] fat_scan+0xfd/0x340 fs/fat/dir.c:961 [] msdos_find+0xf9/0x2d0 fs/fat/namei_msdos.c:128 [] msdos_lookup+0x135/0x250 fs/fat/namei_msdos.c:208 [] lookup_real fs/namei.c:1522 [inline] [] __lookup_hash+0x11c/0x190 fs/namei.c:1542 [] filename_create+0x1a6/0x490 fs/namei.c:3640 [] user_path_create fs/namei.c:3697 [inline] [] SYSC_mkdirat fs/namei.c:3841 [inline] [] SyS_mkdirat fs/namei.c:3833 [inline] [] SYSC_mkdir fs/namei.c:3860 [inline] [] SyS_mkdir+0xb1/0x260 fs/namei.c:3858 [] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: c1d c00 ceb c81 c4c c89 cff ce8 c9f cd0 c1d c00 ce9 c5f cff cff cff c48 c89 cdf ce8 cf2 ccf c1d c00 ce9 cf9 cfe cff cff c66 c2e c0f c1f c84 c00 c00 c00 c00 c00 c0f c1f c00 c<55> c48 c89 ce5 c65 c48 c8b c04 c25 cc0 c7d c01 c00 c65 c8b c15 c8c c8e ccb c7e c81 c