syzbot


INFO: task hung in vfat_lookup

Status: closed as dup on 2018/09/05 22:07
Subsystems: exfat
[Documentation on labels]
Reported-by: syzbot+72000baa7858f1703b04@syzkaller.appspotmail.com
First crash: 2053d, last: 1904d
Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
INFO: task hung in generic_file_write_iter fs mm 7 1943d 2081d
Discussions (1)
Title Replies (including bot) Last reply
INFO: task hung in vfat_lookup 1 (2) 2018/09/05 22:07
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-49 INFO: task hung in vfat_lookup 13 2041d 2053d 0/3 auto-closed as invalid on 2019/02/22 16:49
linux-4.19 INFO: task hung in vfat_lookup 1 546d 546d 0/1 auto-obsoleted due to no activity on 2023/01/28 11:59

Sample crash report:
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
INFO: task syz-executor0:8654 blocked for more than 140 seconds.
__find_get_block_slow() failed. block=1, b_blocknr=8
      Not tainted 5.0.0-rc1+ #19
b_state=0x00000029, b_size=512
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
device loop0 blocksize: 4096
syz-executor0   D20440  8654      1 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2831 [inline]
 __schedule+0x897/0x1e60 kernel/sched/core.c:3472
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
 schedule+0xfe/0x350 kernel/sched/core.c:3516
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3574
__find_get_block_slow() failed. block=1, b_blocknr=8
 __mutex_lock_common kernel/locking/mutex.c:1002 [inline]
 __mutex_lock+0xa3b/0x1670 kernel/locking/mutex.c:1072
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
 vfat_lookup+0xed/0x6b0 fs/fat/namei_vfat.c:709
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
 __lookup_slow+0x2cd/0x560 fs/namei.c:1671
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
 lookup_slow+0x58/0x80 fs/namei.c:1688
device loop0 blocksize: 4096
 walk_component+0x8e5/0x26a0 fs/namei.c:1810
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
 link_path_walk.part.0+0xa57/0x1550 fs/namei.c:2141
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
 link_path_walk fs/namei.c:2072 [inline]
 path_openat+0x222/0x5650 fs/namei.c:3533
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
 do_filp_open+0x26f/0x370 fs/namei.c:3564
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
 do_sys_open+0x59a/0x7c0 fs/open.c:1063
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
 __do_sys_open fs/open.c:1081 [inline]
 __se_sys_open fs/open.c:1076 [inline]
 __x64_sys_open+0x7e/0xc0 fs/open.c:1076
device loop0 blocksize: 4096
 do_syscall_64+0x1a3/0x800 arch/x86/entry/common.c:290
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455ef0
Code: Bad RIP value.
__find_get_block_slow() failed. block=1, b_blocknr=8
RSP: 002b:00007ffdb6355f80 EFLAGS: 00000202 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000455ef0
RDX: 0000000000000000 RSI: 0000000000090800 RDI: 00000000004bc9af
RBP: 0000000000000042 R08: 0000000000000001 R09: 00000000016ee940
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000018
R13: 0000000000048203 R14: 0000000000000015 R15: 0000000000000000
b_state=0x00000029, b_size=512
INFO: task syz-executor0:9130 blocked for more than 140 seconds.
device loop0 blocksize: 4096
      Not tainted 5.0.0-rc1+ #19
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
__find_get_block_slow() failed. block=1, b_blocknr=8
syz-executor0   D24680  9130   8654 0x00000004
b_state=0x00000029, b_size=512
Call Trace:
 context_switch kernel/sched/core.c:2831 [inline]
 __schedule+0x897/0x1e60 kernel/sched/core.c:3472
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
 schedule+0xfe/0x350 kernel/sched/core.c:3516
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
 d_wait_lookup fs/dcache.c:2408 [inline]
 d_alloc_parallel+0x143c/0x1f10 fs/dcache.c:2490
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
 __lookup_slow+0x1fa/0x560 fs/namei.c:1654
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
 lookup_slow+0x58/0x80 fs/namei.c:1688
__find_get_block_slow() failed. block=1, b_blocknr=8
 walk_component+0x8e5/0x26a0 fs/namei.c:1810
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
 link_path_walk.part.0+0xa57/0x1550 fs/namei.c:2141
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
 link_path_walk fs/namei.c:2072 [inline]
 path_openat+0x222/0x5650 fs/namei.c:3533
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
 do_filp_open+0x26f/0x370 fs/namei.c:3564
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
 do_sys_open+0x59a/0x7c0 fs/open.c:1063
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
 __do_sys_openat fs/open.c:1090 [inline]
 __se_sys_openat fs/open.c:1084 [inline]
 __x64_sys_openat+0x9d/0x100 fs/open.c:1084
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
 do_syscall_64+0x1a3/0x800 arch/x86/entry/common.c:290
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
__find_get_block_slow() failed. block=1, b_blocknr=8
RIP: 0033:0x457ec9
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
Code: Bad RIP value.
b_state=0x00000029, b_size=512
RSP: 002b:00007f6b54df6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
device loop0 blocksize: 4096
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457ec9
__find_get_block_slow() failed. block=1, b_blocknr=8
RDX: 0000000000000000 RSI: 00000000200000c0 RDI: ffffffffffffff9c
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000
b_state=0x00000029, b_size=512
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6b54df76d4
device loop0 blocksize: 4096
R13: 00000000004c4181 R14: 00000000004d73a8 R15: 00000000ffffffff
__find_get_block_slow() failed. block=1, b_blocknr=8

Showing all locks held in the system:
b_state=0x00000029, b_size=512
1 lock held by khungtaskd/1036:
 #0: 000000006dd00a25 (rcu_read_lock){....}, at: debug_show_all_locks+0xc6/0x41d kernel/locking/lockdep.c:4389
1 lock held by rsyslogd/8493:
2 locks held by getty/8615:
 #0: 0000000058df204d (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 #1: 00000000439ccaf9 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 drivers/tty/n_tty.c:2154
device loop0 blocksize: 4096
2 locks held by getty/8616:
__find_get_block_slow() failed. block=1, b_blocknr=8
 #0: 0000000046994d84 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
b_state=0x00000029, b_size=512
 #1: 0000000061493372 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 drivers/tty/n_tty.c:2154
device loop0 blocksize: 4096
2 locks held by getty/8617:
__find_get_block_slow() failed. block=1, b_blocknr=8
 #0: 000000000f252a9c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
b_state=0x00000029, b_size=512
 #1: 000000005ce7fa46 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 drivers/tty/n_tty.c:2154
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
2 locks held by getty/8618:
b_state=0x00000029, b_size=512
 #0: 0000000070559318 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
 #1: 00000000a9fc1535 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 drivers/tty/n_tty.c:2154
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
2 locks held by getty/8619:
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
 #0: 0000000063a5091e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
b_state=0x00000029, b_size=512
 #1: 0000000066994fad (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 drivers/tty/n_tty.c:2154
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
2 locks held by getty/8620:
b_state=0x00000029, b_size=512
 #0: 00000000e1b1799f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
device loop0 blocksize: 4096
 #1: 00000000c33f2086 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 drivers/tty/n_tty.c:2154
__find_get_block_slow() failed. block=1, b_blocknr=8
2 locks held by getty/8621:
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
 #0: 00000000b746e509 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
 #1: 0000000084a1d557 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 drivers/tty/n_tty.c:2154
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
2 locks held by syz-executor0/8654:
b_state=0x00000029, b_size=512
 #0: 0000000024dbaf7f (&sb->s_type->i_mutex_key#22){++++}, at: inode_lock_shared include/linux/fs.h:767 [inline]
 #0: 0000000024dbaf7f (&sb->s_type->i_mutex_key#22){++++}, at: lookup_slow+0x4a/0x80 fs/namei.c:1687
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
 #1: 0000000005053b8a (&sbi->s_lock){+.+.}, at: vfat_lookup+0xed/0x6b0 fs/fat/namei_vfat.c:709
b_state=0x00000029, b_size=512
6 locks held by syz-executor0/9122:
device loop0 blocksize: 4096
1 lock held by syz-executor0/9130:
__find_get_block_slow() failed. block=1, b_blocknr=8
 #0: 0000000024dbaf7f (&sb->s_type->i_mutex_key#22){++++}, at: inode_lock_shared include/linux/fs.h:767 [inline]
 #0: 0000000024dbaf7f (&sb->s_type->i_mutex_key#22){++++}, at: lookup_slow+0x4a/0x80 fs/namei.c:1687
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8

b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
=============================================

__find_get_block_slow() failed. block=1, b_blocknr=8
NMI backtrace for cpu 1
b_state=0x00000029, b_size=512
CPU: 1 PID: 1036 Comm: khungtaskd Not tainted 5.0.0-rc1+ #19
device loop0 blocksize: 4096
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
__find_get_block_slow() failed. block=1, b_blocknr=8
Call Trace:
b_state=0x00000029, b_size=512
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1db/0x2d0 lib/dump_stack.c:113
device loop0 blocksize: 4096
 nmi_cpu_backtrace.cold+0x63/0xa4 lib/nmi_backtrace.c:101
__find_get_block_slow() failed. block=1, b_blocknr=8
 nmi_trigger_cpumask_backtrace+0x1be/0x236 lib/nmi_backtrace.c:62
b_state=0x00000029, b_size=512
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline]
 watchdog+0xbbb/0x1170 kernel/hung_task.c:287
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
 kthread+0x357/0x430 kernel/kthread.c:246
device loop0 blocksize: 4096
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
Sending NMI from CPU 1 to CPUs 0:
__find_get_block_slow() failed. block=1, b_blocknr=8
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.403 msecs
NMI backtrace for cpu 0
CPU: 0 PID: 9122 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #19
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__read_once_size include/linux/compiler.h:191 [inline]
RIP: 0010:arch_atomic_read arch/x86/include/asm/atomic.h:31 [inline]
RIP: 0010:atomic_read include/asm-generic/atomic-instrumented.h:22 [inline]
RIP: 0010:rcu_dynticks_curr_cpu_in_eqs+0xed/0x170 kernel/rcu/tree.c:305
Code: 04 84 d2 75 77 49 8d 7d c0 41 8b 84 24 b8 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 14 11 84 d2 74 05 <80> fa 03 7e 3a 48 ba 00 00 00 00 00 fc ff df 41 89 45 c0 d1 e8 83
RSP: 0018:ffff8880ae607740 EFLAGS: 00000002
RAX: 00000000000e716a RBX: 1ffff11015cc0ee9 RCX: 1ffff11015cc0eed
RDX: 0000000000000004 RSI: 0000000000000004 RDI: ffff8880ae607768
RBP: ffff8880ae6077c8 R08: 1ffff11015cc5b8f R09: ffffed1015cc5b90
R10: ffffed1015cc5b8f R11: ffff8880ae62dc7b R12: ffff8880ae62dbc0
R13: ffff8880ae6077a8 R14: ffff8880ae62dc78 R15: 0000000000000040
FS:  00007f6b54e39700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000001487000 CR3: 0000000089c2e000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 rcu_is_watching+0x10/0x30 kernel/rcu/tree.c:932
 rcu_read_lock_sched_held+0x8e/0x130 kernel/rcu/update.c:112
 trace_workqueue_queue_work include/trace/events/workqueue.h:40 [inline]
 __queue_work+0xfcf/0x1450 kernel/workqueue.c:1440
 delayed_work_timer_fn+0x5d/0x90 kernel/workqueue.c:1500
 call_timer_fn+0x254/0x900 kernel/time/timer.c:1325
 expire_timers kernel/time/timer.c:1358 [inline]
 __run_timers+0x4a2/0xd50 kernel/time/timer.c:1681
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1694
 __do_softirq+0x30b/0xb11 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x180/0x1d0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1b7/0x760 arch/x86/kernel/apic/apic.c:1062
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:766 [inline]
RIP: 0010:console_trylock_spinning kernel/printk/printk.c:1697 [inline]
RIP: 0010:vprintk_emit+0x84c/0x960 kernel/printk/printk.c:1930
Code: 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 ef 00 00 00 48 83 3d 94 5b 2a 08 00 74 2d e8 ad d2 19 00 48 8b bd 10 ff ff ff 57 9d <0f> 1f 44 00 00 e9 a3 fe ff ff e8 95 d2 19 00 0f 0b e8 8e d2 19 00
RSP: 0018:ffff888054156a50 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 0000000000040000 RBX: 1ffff1100a82ad50 RCX: ffffc90005e6f000
RDX: 0000000000040000 RSI: ffffffff81682463 RDI: 0000000000000246
RBP: ffff888054156b48 R08: 0000000000000006 R09: ffff88805414cab0
R10: ffff88805414c1c0 R11: 0000000000000000 R12: 0000000000000200
R13: ffffed100a82ad5a R14: 0000000000000000 R15: ffff888054156b20
 vprintk_default+0x28/0x30 kernel/printk/printk.c:1958
 vprintk_func+0x7e/0x189 kernel/printk/printk_safe.c:398
 printk+0xba/0xed kernel/printk/printk.c:1991
 __find_get_block_slow fs/buffer.c:231 [inline]
 __find_get_block fs/buffer.c:1294 [inline]
 __find_get_block.cold+0x36/0xfb fs/buffer.c:1288
 __getblk_slow fs/buffer.c:1039 [inline]
 __getblk_gfp+0x295/0xd20 fs/buffer.c:1320
 __bread_gfp+0x2f/0x300 fs/buffer.c:1354
 sb_bread include/linux/buffer_head.h:307 [inline]
 fat__get_entry+0x586/0xa40 fs/fat/dir.c:101
 fat_get_entry fs/fat/dir.c:129 [inline]
 fat_search_long+0x345/0x17d0 fs/fat/dir.c:479
 vfat_find+0x10e/0x140 fs/fat/namei_vfat.c:697
 vfat_lookup+0x10a/0x6b0 fs/fat/namei_vfat.c:711
 __lookup_slow+0x2cd/0x560 fs/namei.c:1671
 lookup_slow+0x58/0x80 fs/namei.c:1688
 walk_component+0x8e5/0x26a0 fs/namei.c:1810
 link_path_walk.part.0+0xa57/0x1550 fs/namei.c:2141
 link_path_walk fs/namei.c:2072 [inline]
 path_openat+0x222/0x5650 fs/namei.c:3533
 do_filp_open+0x26f/0x370 fs/namei.c:3564
 do_sys_open+0x59a/0x7c0 fs/open.c:1063
 __do_sys_openat fs/open.c:1090 [inline]
 __se_sys_openat fs/open.c:1084 [inline]
 __x64_sys_openat+0x9d/0x100 fs/open.c:1084
 do_syscall_64+0x1a3/0x800 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x457ec9
Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f6b54e38c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457ec9
RDX: 0000000000000000 RSI: 00000000200000c0 RDI: ffffffffffffff9c
RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6b54e396d4
R13: 00000000004c4181 R14: 00000000004d73a8 R15: 00000000ffffffff

Crashes (38):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/01/11 06:40 upstream 1bdbe2274920 80dde172 .config console log report ci-upstream-kasan-gce-selinux-root
2019/01/10 13:55 upstream ba422731316d db9b6579 .config console log report ci-upstream-kasan-gce-selinux-root
2019/01/08 08:17 upstream 3bd6e94bec12 37dd2683 .config console log report ci-upstream-kasan-gce-selinux-root
2019/01/07 01:04 upstream 574823bfab82 ee332608 .config console log report ci-upstream-kasan-gce-selinux-root
2019/01/03 06:31 upstream 85f78456f286 06a2b89f .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/20 00:16 upstream 62393dbcbe0f 02e69052 .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/10 00:20 upstream 0844895a2e51 96cc4c50 .config console log report ci-upstream-kasan-gce-smack-root
2018/12/03 00:06 upstream 6a512726090a 7dcaeaf3 .config console log report ci-upstream-kasan-gce-root
2018/11/30 01:23 upstream f92a2ebb3d55 66071e27 .config console log report ci-upstream-kasan-gce-root
2018/11/24 03:36 upstream e6005d3c4233 eb9ed731 .config console log report ci-upstream-kasan-gce-selinux-root
2018/11/04 22:53 upstream 4710e78940d8 8bd6bd63 .config console log report ci-upstream-kasan-gce-root
2018/11/03 06:18 upstream 5f21585384a4 8bd6bd63 .config console log report ci-upstream-kasan-gce-root
2018/10/29 09:51 upstream dad4f140edaa 9ca2afa1 .config console log report ci-upstream-kasan-gce-root
2018/10/17 21:37 upstream c343db455eb3 b2695b95 .config console log report ci-upstream-kasan-gce-root
2018/10/11 20:47 upstream 0778a9f2dd92 ba6ddb43 .config console log report ci-upstream-kasan-gce-selinux-root
2018/10/10 22:52 upstream 3d647e62686f 5f818b4b .config console log report ci-upstream-kasan-gce-selinux-root
2018/10/08 01:37 upstream 0238df646e62 8b311eaf .config console log report ci-upstream-kasan-gce-smack-root
2018/10/07 19:07 upstream fb1c592cf4c9 8b311eaf .config console log report ci-upstream-kasan-gce-root
2018/10/04 08:48 upstream cec4de302c5f 8b311eaf .config console log report ci-upstream-kasan-gce-smack-root
2018/09/01 16:47 upstream 420f51f4ab6b a4718693 .config console log report ci-upstream-kasan-gce-root
2018/08/29 21:35 upstream 3f16503b7d22 4937cb2b .config console log report ci-upstream-kasan-gce-root
2019/01/10 03:37 linux-next d6e77253170d 45c0c1b1 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/01/07 05:01 linux-next a85b6b4f6416 ee332608 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/07 20:08 linux-next 74c4a24df7ca 1eb6a7e4 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/11/21 12:00 linux-next 442b8cea2477 5d9a3924 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/11/14 15:04 linux-next 442b8cea2477 5f5f6d14 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/10/27 04:57 linux-next 8c60c36d0b8c a8292de9 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/10/25 18:19 linux-next 8c60c36d0b8c a8292de9 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/10/15 15:33 linux-next ca0591d03a2d caf12900 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/10/11 07:33 linux-next 771b65e89c8a 5f818b4b .config console log report ci-upstream-linux-next-kasan-gce-root
2018/10/07 16:31 linux-next 12ffaa1197f5 8b311eaf .config console log report ci-upstream-linux-next-kasan-gce-root
2018/10/06 14:33 linux-next 12ffaa1197f5 8b311eaf .config console log report ci-upstream-linux-next-kasan-gce-root
2018/10/06 10:51 linux-next 12ffaa1197f5 8b311eaf .config console log report ci-upstream-linux-next-kasan-gce-root
2018/10/04 00:33 linux-next 8f84a21675f0 8b311eaf .config console log report ci-upstream-linux-next-kasan-gce-root
2018/09/01 10:44 linux-next a880148cb2af a4718693 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/08/28 08:11 linux-next 18b8bfa7c63b 7ef1de9e .config console log report ci-upstream-linux-next-kasan-gce-root
2018/08/26 09:05 linux-next e27bc174c9c6 758cd203 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/08/15 11:16 linux-next 4e8b38549b50 9ccc1d45 .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.