Buffer I/O error on dev loop0, logical block 0, async page read print_req_error: I/O error, dev loop0, sector 0 flags 0 Buffer I/O error on dev loop0, logical block 0, async page read print_req_error: I/O error, dev loop0, sector 0 flags 0 Buffer I/O error on dev loop0, logical block 0, async page read INFO: task syz-executor.4:1269 blocked for more than 140 seconds. Not tainted 5.0.0-rc6+ #76 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.4 D28416 1269 8107 0x00000004 Call Trace: context_switch kernel/sched/core.c:2844 [inline] __schedule+0x817/0x1cc0 kernel/sched/core.c:3485 schedule+0x92/0x180 kernel/sched/core.c:3529 __rwsem_down_read_failed_common kernel/locking/rwsem-xadd.c:287 [inline] rwsem_down_read_failed+0x213/0x420 kernel/locking/rwsem-xadd.c:304 call_rwsem_down_read_failed+0x18/0x30 arch/x86/lib/rwsem.S:94 __down_read arch/x86/include/asm/rwsem.h:83 [inline] down_read+0x49/0x90 kernel/locking/rwsem.c:26 __get_super.part.0+0x203/0x2e0 fs/super.c:699 __get_super include/linux/spinlock.h:329 [inline] get_super+0x2e/0x50 fs/super.c:728 fsync_bdev+0x19/0xd0 fs/block_dev.c:506 invalidate_partition+0x36/0x60 block/genhd.c:1579 drop_partitions block/partition-generic.c:443 [inline] rescan_partitions+0xef/0xa20 block/partition-generic.c:516 __blkdev_reread_part+0x1a2/0x230 block/ioctl.c:173 blkdev_reread_part+0x27/0x40 block/ioctl.c:193 loop_reread_partitions+0x1c/0x40 drivers/block/loop.c:633 loop_set_status+0xe57/0x1380 drivers/block/loop.c:1282 loop_set_status64+0xc2/0x120 drivers/block/loop.c:1402 lo_ioctl+0x43b/0x20d0 drivers/block/loop.c:1545 __blkdev_driver_ioctl block/ioctl.c:303 [inline] blkdev_ioctl+0xee8/0x1c40 block/ioctl.c:605 block_ioctl+0xee/0x130 fs/block_dev.c:1914 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:509 [inline] do_vfs_ioctl+0xd6e/0x1390 fs/ioctl.c:696 ksys_ioctl+0xab/0xd0 fs/ioctl.c:713 __do_sys_ioctl fs/ioctl.c:720 [inline] __se_sys_ioctl fs/ioctl.c:718 [inline] __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:718 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457c97 Code: Bad RIP value. RSP: 002b:00007f8c0f6aaa18 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f8c0f6ab6d4 RCX: 0000000000457c97 RDX: 00007f8c0f6aaab0 RSI: 0000000000004c04 RDI: 0000000000000007 RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a R10: 0000000000000075 R11: 0000000000000202 R12: 0000000000000000 R13: 0000000000000006 R14: 0000000000000007 R15: 00000000ffffffff INFO: task syz-executor.4:1310 blocked for more than 140 seconds. Not tainted 5.0.0-rc6+ #76 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.4 D28544 1310 8107 0x00000004 Call Trace: context_switch kernel/sched/core.c:2844 [inline] __schedule+0x817/0x1cc0 kernel/sched/core.c:3485 schedule+0x92/0x180 kernel/sched/core.c:3529 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3587 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x726/0x1310 kernel/locking/mutex.c:1072 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087 __blkdev_get+0x19b/0x1660 fs/block_dev.c:1494 blkdev_get+0xc4/0x990 fs/block_dev.c:1648 blkdev_open+0x205/0x290 fs/block_dev.c:1806 do_dentry_open+0x47d/0x1130 fs/open.c:771 vfs_open+0xa0/0xd0 fs/open.c:880 do_last fs/namei.c:3418 [inline] path_openat+0x10d7/0x4690 fs/namei.c:3534 do_filp_open+0x1a1/0x280 fs/namei.c:3564 do_sys_open+0x3fe/0x5d0 fs/open.c:1063 __do_sys_open fs/open.c:1081 [inline] __se_sys_open fs/open.c:1076 [inline] __x64_sys_open+0x7e/0xc0 fs/open.c:1076 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x411f11 Code: e9 62 ff ff ff 0f 1f 40 00 b8 18 fc ff ff e9 56 ff ff ff bf 97 30 44 00 b9 0d 00 00 00 48 89 ee f3 a6 75 0c 48 c7 03 20 2e 41 <00> e9 37 ff ff ff bf a4 30 44 00 b9 11 00 00 00 48 89 ee f3 a6 75 RSP: 002b:00007f8c0f689a10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 00007f8c0f68a6d4 RCX: 0000000000411f11 RDX: 00007f8c0f689baa RSI: 0000000000000002 RDI: 00007f8c0f689ba0 RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000000 R13: 0000000000000003 R14: 0000000000000003 R15: 00000000ffffffff INFO: task blkid:1277 blocked for more than 140 seconds. Not tainted 5.0.0-rc6+ #76 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. blkid D28720 1277 9705 0x00000004 Call Trace: context_switch kernel/sched/core.c:2844 [inline] __schedule+0x817/0x1cc0 kernel/sched/core.c:3485 schedule+0x92/0x180 kernel/sched/core.c:3529 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3587 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x726/0x1310 kernel/locking/mutex.c:1072 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087 __blkdev_get+0x19b/0x1660 fs/block_dev.c:1494 blkdev_get+0xc4/0x990 fs/block_dev.c:1648 blkdev_open+0x205/0x290 fs/block_dev.c:1806 do_dentry_open+0x47d/0x1130 fs/open.c:771 vfs_open+0xa0/0xd0 fs/open.c:880 do_last fs/namei.c:3418 [inline] path_openat+0x10d7/0x4690 fs/namei.c:3534 do_filp_open+0x1a1/0x280 fs/namei.c:3564 do_sys_open+0x3fe/0x5d0 fs/open.c:1063 __do_sys_open fs/open.c:1081 [inline] __se_sys_open fs/open.c:1076 [inline] __x64_sys_open+0x7e/0xc0 fs/open.c:1076 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7fa594093120 Code: Bad RIP value. RSP: 002b:00007ffe40ad83b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa594093120 RDX: 00007ffe40ad8f40 RSI: 0000000000000000 RDI: 00007ffe40ad8f40 RBP: 0000000000000000 R08: 0000000000000078 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000002306030 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005 Showing all locks held in the system: 1 lock held by khungtaskd/1040: #0: 000000003b8820a7 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e kernel/locking/lockdep.c:4389 2 locks held by rs:main Q:Reg/7932: #0: 00000000c2905847 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 fs/file.c:795 #1: 00000000affee413 (sb_writers#4){.+.+}, at: file_start_write include/linux/fs.h:2816 [inline] #1: 00000000affee413 (sb_writers#4){.+.+}, at: vfs_write+0x429/0x580 fs/read_write.c:548 1 lock held by rsyslogd/7934: #0: 00000000b28cbcdc (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 fs/file.c:795 2 locks held by getty/8057: #0: 00000000781e274d (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 00000000b7b2d3be (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2154 2 locks held by getty/8058: #0: 000000005ccf7401 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 000000003e80796b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2154 2 locks held by getty/8059: #0: 00000000ad53b3eb (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 000000002b1651cb (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2154 2 locks held by getty/8060: #0: 00000000c5450453 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 0000000010b4ca00 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2154 2 locks held by getty/8061: #0: 00000000c893113e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 00000000738ffd14 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2154 2 locks held by getty/8062: #0: 00000000fb3adf08 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 000000004d7f4e4b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2154 2 locks held by getty/8063: #0: 00000000c291d2c9 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 000000001fa44c73 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2154 1 lock held by syz-executor.2/1196: 2 locks held by syz-executor.4/1269: #0: 00000000f076d669 (&bdev->bd_mutex){+.+.}, at: blkdev_reread_part+0x1f/0x40 block/ioctl.c:192 #1: 000000000a04e6e1 (&type->s_umount_key#82){++++}, at: __get_super.part.0+0x203/0x2e0 fs/super.c:699 1 lock held by syz-executor.4/1310: #0: 00000000f076d669 (&bdev->bd_mutex){+.+.}, at: __blkdev_get+0x19b/0x1660 fs/block_dev.c:1494 1 lock held by blkid/1277: #0: 00000000f076d669 (&bdev->bd_mutex){+.+.}, at: __blkdev_get+0x19b/0x1660 fs/block_dev.c:1494 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 1040 Comm: khungtaskd Not tainted 5.0.0-rc6+ #76 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x172/0x1f0 lib/dump_stack.c:113 nmi_cpu_backtrace.cold+0x63/0xa4 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1be/0x236 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline] watchdog+0x9df/0xee0 kernel/hung_task.c:287 kthread+0x357/0x430 kernel/kthread.c:246 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352 Sending NMI from CPU 1 to CPUs 0: INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.148 msecs NMI backtrace for cpu 0 CPU: 0 PID: 1196 Comm: syz-executor.2 Not tainted 5.0.0-rc6+ #76 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:mark_lock+0x16/0x1380 kernel/locking/lockdep.c:3029 Code: e8 cf 05 50 00 eb c3 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 55 4c 8d 4e 20 89 d1 48 b8 00 00 00 00 00 fc ff df 48 89 e5 41 57 <49> 89 ff 41 56 41 89 d6 4c 89 ca 41 55 48 c1 ea 03 41 bd 01 00 00 RSP: 0018:ffff88804db3f1f8 EFLAGS: 00000046 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000008 RDX: 0000000000000008 RSI: ffff88808af0ab68 RDI: ffff88808af0a2c0 RBP: ffff88804db3f200 R08: 0000000000000001 R09: ffff88808af0ab88 R10: ffff88808af0ab68 R11: 0000000000000000 R12: ffff88808af0ab80 R13: 000000000002002b R14: 000000000000002b R15: ffff88808af0a2c0 FS: 00007f5a04fba700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffff600400 CR3: 000000009a6e0000 CR4: 00000000001406f0 Call Trace: __lock_acquire+0x53b/0x4700 kernel/locking/lockdep.c:3299 lock_acquire+0x16f/0x3f0 kernel/locking/lockdep.c:3841 rcu_lock_acquire include/linux/rcupdate.h:223 [inline] rcu_read_lock include/linux/rcupdate.h:607 [inline] find_get_entry+0xe7/0x8d0 mm/filemap.c:1473 pagecache_get_page+0x4a/0x740 mm/filemap.c:1579 find_get_page_flags include/linux/pagemap.h:278 [inline] __find_get_block_slow fs/buffer.c:206 [inline] __find_get_block fs/buffer.c:1295 [inline] __find_get_block+0x501/0xcf0 fs/buffer.c:1289 __getblk_slow fs/buffer.c:1040 [inline] __getblk_gfp+0x1b1/0x960 fs/buffer.c:1321 __bread_gfp+0x2f/0x300 fs/buffer.c:1355 sb_bread include/linux/buffer_head.h:307 [inline] udf_tread+0xf1/0x140 fs/udf/misc.c:44 udf_read_tagged+0x50/0x530 fs/udf/misc.c:210 udf_check_anchor_block+0x1ef/0x680 fs/udf/super.c:1775 udf_scan_anchors+0x4dd/0x680 fs/udf/super.c:1854 udf_find_anchor fs/udf/super.c:1872 [inline] udf_load_vrs+0x67f/0xc80 fs/udf/super.c:1937 udf_fill_super+0x7d8/0x16d1 fs/udf/super.c:2132 mount_bdev+0x307/0x3c0 fs/super.c:1159 udf_mount+0x35/0x40 fs/udf/super.c:131 mount_fs+0x106/0x3ff fs/super.c:1258 vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:959 vfs_kern_mount fs/namespace.c:949 [inline] do_new_mount fs/namespace.c:2513 [inline] do_mount+0x581/0x2d30 fs/namespace.c:2847 ksys_mount+0xdb/0x150 fs/namespace.c:3063 __do_sys_mount fs/namespace.c:3077 [inline] __se_sys_mount fs/namespace.c:3074 [inline] __x64_sys_mount+0xbe/0x150 fs/namespace.c:3074 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457e29 Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f5a04fb9c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457e29 RDX: 0000000020000100 RSI: 0000000020000080 RDI: 00000000200002c0 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5a04fba6d4 R13: 00000000004c3bf8 R14: 00000000004d6d60 R15: 00000000ffffffff