syzbot


INFO: task hung in addrconf_dad_work

Status: auto-closed as invalid on 2019/02/22 20:09
First crash: 2060d, last: 2060d
Similar bugs (10)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 INFO: task hung in addrconf_dad_work (2) 1 53d 53d 0/3 upstream: reported on 2024/02/24 10:20
android-414 INFO: task hung in addrconf_dad_work 1 1773d 1773d 0/1 auto-closed as invalid on 2019/10/25 08:37
upstream INFO: task hung in addrconf_dad_work (2) net C unreliable error 107 146d 501d 0/26 closed as invalid on 2023/11/23 17:05
linux-6.1 INFO: task hung in addrconf_dad_work 2 335d 365d 0/3 auto-obsoleted due to no activity on 2023/08/26 05:16
upstream INFO: task hung in addrconf_dad_work net C inconclusive inconclusive 468 846d 1887d 0/26 closed as invalid on 2022/02/08 10:54
linux-5.15 INFO: task hung in addrconf_dad_work 5 49d 88d 0/3 upstream: reported on 2024/01/20 08:09
upstream INFO: task hung in addrconf_dad_work (3) net C 185 36d 78d 26/26 fixed on 2024/03/25 23:45
linux-4.19 INFO: task hung in addrconf_dad_work 1 1696d 1696d 0/1 auto-closed as invalid on 2019/12/24 18:36
linux-4.19 INFO: task hung in addrconf_dad_work (2) C error 72 414d 1487d 0/1 upstream: reported C repro on 2020/03/22 17:39
linux-4.14 INFO: task hung in addrconf_dad_work C inconclusive 1 661d 1268d 0/1 upstream: reported C repro on 2020/10/27 17:48

Sample crash report:
b_state=0x00000029, b_size=512
device loop7 blocksize: 2048
__find_get_block_slow() failed. block=2, b_blocknr=8
b_state=0x00000029, b_size=512
device loop7 blocksize: 2048
INFO: task kworker/1:3:7054 blocked for more than 140 seconds.
      Not tainted 4.9.124-g09eb2ba #31
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/1:3     D28040  7054      2 0x00000000
Workqueue: ipv6_addrconf addrconf_dad_work
 ffff8801b8cd6000 ffff8801c1aef480 ffff8801ca6d5500 ffff8801b6d2b000
 ffff8801db321c18 ffff8801973cfa38 ffffffff839f0afd ffff8801b8cd68c8
 ffffed003719ad18 ffff8801b8cd6000 00fffc0000000000 ffff8801db3224e8
Call Trace:
__find_get_block_slow() failed. block=2, b_blocknr=8
 [<ffffffff839f20ff>] schedule+0x7f/0x1b0 kernel/sched/core.c:3553
b_state=0x00000029, b_size=512
 [<ffffffff839f2a83>] schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3586
device loop7 blocksize: 2048
 [<ffffffff839f6f06>] __mutex_lock_common kernel/locking/mutex.c:582 [inline]
 [<ffffffff839f6f06>] mutex_lock_nested+0x326/0x870 kernel/locking/mutex.c:621
__find_get_block_slow() failed. block=2, b_blocknr=8
b_state=0x00000029, b_size=512
device loop7 blocksize: 2048
__find_get_block_slow() failed. block=2, b_blocknr=8
 [<ffffffff830bcaa7>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
b_state=0x00000029, b_size=512
 [<ffffffff8358970b>] addrconf_dad_work+0x9b/0xcf0 net/ipv6/addrconf.c:3888
device loop7 blocksize: 2048
__find_get_block_slow() failed. block=2, b_blocknr=8
b_state=0x00000029, b_size=512
 [<ffffffff8118f461>] process_one_work+0x7e1/0x1500 kernel/workqueue.c:2092
device loop7 blocksize: 2048
__find_get_block_slow() failed. block=2, b_blocknr=8
b_state=0x00000029, b_size=512
 [<ffffffff81190256>] worker_thread+0xd6/0x10a0 kernel/workqueue.c:2226
device loop7 blocksize: 2048
__find_get_block_slow() failed. block=2, b_blocknr=8
 [<ffffffff8119f3cd>] kthread+0x26d/0x300 kernel/kthread.c:211
b_state=0x00000029, b_size=512
device loop7 blocksize: 2048
__find_get_block_slow() failed. block=2, b_blocknr=8
b_state=0x00000029, b_size=512
device loop7 blocksize: 2048
__find_get_block_slow() failed. block=2, b_blocknr=8
 [<ffffffff83a01b9c>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373
b_state=0x00000029, b_size=512

Showing all locks held in the system:
device loop7 blocksize: 2048
2 locks held by khungtaskd/519:
__find_get_block_slow() failed. block=2, b_blocknr=8
 #0: 
b_state=0x00000029, b_size=512
 (device loop7 blocksize: 2048
rcu_read_lock){......}, at: [<ffffffff813689dc>] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline]
rcu_read_lock){......}, at: [<ffffffff813689dc>] watchdog+0x11c/0xa20 kernel/hung_task.c:239
 #1: 
b_state=0x00000029, b_size=512
 (device loop7 blocksize: 2048
tasklist_lock){.+.+..}, at: [<ffffffff81428248>] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336
b_state=0x00000029, b_size=512
3 locks held by kworker/0:2/1846:
device loop7 blocksize: 2048
 #0:  ("%s"("ipv6_addrconf")
__find_get_block_slow() failed. block=2, b_blocknr=8
){.+.+..}b_state=0x00000029, b_size=512
, at: [<ffffffff8118f36e>] work_static include/linux/workqueue.h:186 [inline]
, at: [<ffffffff8118f36e>] set_work_data kernel/workqueue.c:617 [inline]
, at: [<ffffffff8118f36e>] set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline]
, at: [<ffffffff8118f36e>] process_one_work+0x6ee/0x1500 kernel/workqueue.c:2085
 #1:  ((addr_chk_work).work
__find_get_block_slow() failed. block=2, b_blocknr=8
){+.+...}b_state=0x00000029, b_size=512
, at: [<ffffffff8118f3a8>] process_one_work+0x728/0x1500 kernel/workqueue.c:2089
 #2:  (rtnl_mutex
__find_get_block_slow() failed. block=2, b_blocknr=8
){+.+.+.}b_state=0x00000029, b_size=512
, at: [<ffffffff830bcaa7>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
1 lock held by rsyslogd/3674:
 #0: 
__find_get_block_slow() failed. block=2, b_blocknr=8
 (b_state=0x00000029, b_size=512
&f->f_pos_lockdevice loop7 blocksize: 2048
){+.+.+.}, at: [<ffffffff815dc7ec>] __fdget_pos+0xac/0xd0 fs/file.c:781
2 locks held by getty/3770:
b_state=0x00000029, b_size=512
 #0: 
device loop7 blocksize: 2048
 (&tty->ldisc_sem){++++++}__find_get_block_slow() failed. block=2, b_blocknr=8
, at: [<ffffffff839ffba2>] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367
 #1: 
device loop7 blocksize: 2048
 (&ldata->atomic_read_lock){+.+...}__find_get_block_slow() failed. block=2, b_blocknr=8
, at: [<ffffffff82125402>] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2142
3 locks held by kworker/1:3/7054:
device loop7 blocksize: 2048
 #0:  ("%s"("ipv6_addrconf")
__find_get_block_slow() failed. block=2, b_blocknr=8
){.+.+..}b_state=0x00000029, b_size=512
, at: [<ffffffff8118f36e>] work_static include/linux/workqueue.h:186 [inline]
, at: [<ffffffff8118f36e>] set_work_data kernel/workqueue.c:617 [inline]
, at: [<ffffffff8118f36e>] set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline]
, at: [<ffffffff8118f36e>] process_one_work+0x6ee/0x1500 kernel/workqueue.c:2085
 #1:  ((&(&ifa->dad_work)->work)
__find_get_block_slow() failed. block=2, b_blocknr=8
){+.+...}b_state=0x00000029, b_size=512
, at: [<ffffffff8118f3a8>] process_one_work+0x728/0x1500 kernel/workqueue.c:2089
 #2:  (rtnl_mutex){+.+.+.}
__find_get_block_slow() failed. block=2, b_blocknr=8
, at: [<ffffffff830bcaa7>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
device loop7 blocksize: 2048
1 lock held by syz-executor3/13760:
 #0: 
__find_get_block_slow() failed. block=2, b_blocknr=8
 (b_state=0x00000029, b_size=512
rtnl_mutexdevice loop7 blocksize: 2048
){+.+.+.}, at: [<ffffffff830bcaa7>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
1 lock held by syz-executor0/13761:
b_state=0x00000029, b_size=512
 #0: 
device loop7 blocksize: 2048
 (rtnl_mutex){+.+.+.}, at: [<ffffffff830bcaa7>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
1 lock held by syz-executor0/13813:
b_state=0x00000029, b_size=512
 #0: 
device loop7 blocksize: 2048
 (rtnl_mutex){+.+.+.}, at: [<ffffffff830bcaa7>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
1 lock held by syz-executor1/13757:
b_state=0x00000029, b_size=512
 #0: 
device loop7 blocksize: 2048
 (rtnl_mutex){+.+.+.}, at: [<ffffffff830bcaa7>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
1 lock held by syz-executor1/13815:
b_state=0x00000029, b_size=512
 #0: 
device loop7 blocksize: 2048
 (rtnl_mutex){+.+.+.}, at: [<ffffffff830bcaa7>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
1 lock held by syz-executor1/13820:
b_state=0x00000029, b_size=512
 #0: 
device loop7 blocksize: 2048
 (rtnl_mutex){+.+.+.}, at: [<ffffffff830bcaa7>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
1 lock held by syz-executor1/13827:
b_state=0x00000029, b_size=512
 #0: 
device loop7 blocksize: 2048
 (rtnl_mutex){+.+.+.}, at: [<ffffffff830c15fb>] rtnl_lock net/core/rtnetlink.c:70 [inline]
 (rtnl_mutex){+.+.+.}, at: [<ffffffff830c15fb>] rtnetlink_rcv+0x1b/0x40 net/core/rtnetlink.c:4067
2 locks held by syz-executor2/13773:
b_state=0x00000029, b_size=512
 #0: 
device loop7 blocksize: 2048
 (&sb->s_type->i_mutex_key#9__find_get_block_slow() failed. block=2, b_blocknr=8
){+.+.+.}b_state=0x00000029, b_size=512
, at: [<ffffffff8301830b>] inode_lock include/linux/fs.h:766 [inline]
, at: [<ffffffff8301830b>] __sock_release+0x8b/0x260 net/socket.c:604
 #1:  (rtnl_mutex
__find_get_block_slow() failed. block=2, b_blocknr=8
){+.+.+.}b_state=0x00000029, b_size=512
, at: [<ffffffff830bcaa7>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
1 lock held by syz-executor2/13776:
 #0: 
__find_get_block_slow() failed. block=2, b_blocknr=8
 (b_state=0x00000029, b_size=512
rtnl_mutexdevice loop7 blocksize: 2048
){+.+.+.}, at: [<ffffffff830bcaa7>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
1 lock held by syz-executor7/13807:
b_state=0x00000029, b_size=512
 #0: 
device loop7 blocksize: 2048
 (&sb->s_type->i_mutex_key#19__find_get_block_slow() failed. block=2, b_blocknr=8
){++++++}b_state=0x00000029, b_size=512
, at: [<ffffffff815a9585>] inode_lock include/linux/fs.h:766 [inline]
, at: [<ffffffff815a9585>] do_last fs/namei.c:3312 [inline]
, at: [<ffffffff815a9585>] path_openat+0xed5/0x3590 fs/namei.c:3534
1 lock held by syz-executor4/13797:
 #0: 
__find_get_block_slow() failed. block=2, b_blocknr=8
 (b_state=0x00000029, b_size=512
rtnl_mutexdevice loop7 blocksize: 2048
){+.+.+.}, at: [<ffffffff830bcaa7>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
2 locks held by syz-executor5/13801:
b_state=0x00000029, b_size=512
 #0: 
device loop7 blocksize: 2048
 (&sb->s_type->i_mutex_key#9__find_get_block_slow() failed. block=2, b_blocknr=8
){+.+.+.}b_state=0x00000029, b_size=512
, at: [<ffffffff8301830b>] inode_lock include/linux/fs.h:766 [inline]
, at: [<ffffffff8301830b>] __sock_release+0x8b/0x260 net/socket.c:604
 #1:  (rtnl_mutex
__find_get_block_slow() failed. block=2, b_blocknr=8
){+.+.+.}b_state=0x00000029, b_size=512
, at: [<ffffffff830bcaa7>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
1 lock held by syz-executor6/13824:
 #0: 
__find_get_block_slow() failed. block=2, b_blocknr=8
 (b_state=0x00000029, b_size=512
rtnl_mutexdevice loop7 blocksize: 2048
){+.+.+.}, at: [<ffffffff830bcaa7>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
1 lock held by syz-executor6/13833:
b_state=0x00000029, b_size=512
 #0: 
device loop7 blocksize: 2048
 (rtnl_mutex){+.+.+.}, at: [<ffffffff830bcaa7>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
1 lock held by init/13835:
b_state=0x00000029, b_size=512
 #0: 
device loop7 blocksize: 2048
 (tty_mutex){+.+.+.}__find_get_block_slow() failed. block=2, b_blocknr=8
, at: [<ffffffff8211f80c>] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline]
, at: [<ffffffff8211f80c>] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125
1 lock held by init/13836:
device loop7 blocksize: 2048
 #0:  (tty_mutex){+.+.+.}
__find_get_block_slow() failed. block=2, b_blocknr=8
, at: [<ffffffff8211f80c>] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline]
, at: [<ffffffff8211f80c>] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125
1 lock held by init/13837:
device loop7 blocksize: 2048
 #0:  (tty_mutex){+.+.+.}
__find_get_block_slow() failed. block=2, b_blocknr=8
, at: [<ffffffff8211f80c>] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline]
, at: [<ffffffff8211f80c>] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125
1 lock held by init/13838:
device loop7 blocksize: 2048
 #0:  (tty_mutex){+.+.+.}
__find_get_block_slow() failed. block=2, b_blocknr=8
, at: [<ffffffff8211f80c>] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline]
, at: [<ffffffff8211f80c>] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125
1 lock held by init/13839:
device loop7 blocksize: 2048
 #0:  (tty_mutex){+.+.+.}
__find_get_block_slow() failed. block=2, b_blocknr=8
, at: [<ffffffff8211f80c>] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline]
, at: [<ffffffff8211f80c>] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125
device loop7 blocksize: 2048
1 lock held by init/13840:
__find_get_block_slow() failed. block=2, b_blocknr=8
 #0: 
b_state=0x00000029, b_size=512
 (device loop7 blocksize: 2048
tty_mutex){+.+.+.}, at: [<ffffffff8211f80c>] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline]
tty_mutex){+.+.+.}, at: [<ffffffff8211f80c>] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125

b_state=0x00000029, b_size=512
=============================================

device loop7 blocksize: 2048
NMI backtrace for cpu 1
CPU: 1 PID: 519 Comm: khungtaskd Not tainted 4.9.124-g09eb2ba #31
__find_get_block_slow() failed. block=2, b_blocknr=8
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
b_state=0x00000029, b_size=512
 ffff8801d859fd08
device loop7 blocksize: 2048
 ffffffff81eb95e9 0000000000000000 0000000000000001__find_get_block_slow() failed. block=2, b_blocknr=8
b_state=0x00000029, b_size=512
 0000000000000001
device loop7 blocksize: 2048
 0000000000000001 ffffffff810b9fa0 ffff8801d859fd40__find_get_block_slow() failed. block=2, b_blocknr=8
b_state=0x00000029, b_size=512
 ffffffff81ec4927
device loop7 blocksize: 2048
 0000000000000001 0000000000000000 0000000000000003__find_get_block_slow() failed. block=2, b_blocknr=8
b_state=0x00000029, b_size=512
Call Trace:
device loop7 blocksize: 2048
 [<ffffffff81eb95e9>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81eb95e9>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
__find_get_block_slow() failed. block=2, b_blocknr=8
b_state=0x00000029, b_size=512
 [<ffffffff81ec4927>] nmi_cpu_backtrace.cold.2+0x48/0x87 lib/nmi_backtrace.c:99
device loop7 blocksize: 2048
__find_get_block_slow() failed. block=2, b_blocknr=8
 [<ffffffff81ec48ba>] nmi_trigger_cpumask_backtrace+0x12a/0x14f lib/nmi_backtrace.c:60
b_state=0x00000029, b_size=512
 [<ffffffff810ba0a4>] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37
device loop7 blocksize: 2048
 [<ffffffff81368f74>] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline]
 [<ffffffff81368f74>] check_hung_task kernel/hung_task.c:125 [inline]
 [<ffffffff81368f74>] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline]
 [<ffffffff81368f74>] watchdog+0x6b4/0xa20 kernel/hung_task.c:239
__find_get_block_slow() failed. block=2, b_blocknr=8
b_state=0x00000029, b_size=512
 [<ffffffff8119f3cd>] kthread+0x26d/0x300 kernel/kthread.c:211
device loop7 blocksize: 2048
__find_get_block_slow() failed. block=2, b_blocknr=8
b_state=0x00000029, b_size=512
device loop7 blocksize: 2048
__find_get_block_slow() failed. block=2, b_blocknr=8
b_state=0x00000029, b_size=512
 [<ffffffff83a01b9c>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373
device loop7 blocksize: 2048
Sending NMI from CPU 1 to CPUs 0:
__find_get_block_slow() failed. block=2, b_blocknr=8
b_state=0x00000029, b_size=512
NMI backtrace for cpu 0
CPU: 0 PID: 13788 Comm: syz-executor7 Not tainted 4.9.124-g09eb2ba #31
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801b98a0000 task.stack: ffff8801d7da8000
RIP: 0010:[<ffffffff81360cf1>] c [<ffffffff81360cf1>] __sanitizer_cov_trace_pc+0x1/0x50 kernel/kcov.c:93
RSP: 0018:ffff8801d7daf070  EFLAGS: 00000002
RAX: 0000000000000038 RBX: ffff8801d7daf1a0 RCX: 0000000000000004
RDX: 0000000000000018 RSI: ffffffff81edadb5 RDI: 0000000000000002
RBP: ffff8801d7daf128 R08: fffffbfff0b5dcc6 R09: fffffbfff0b5dcc4
R10: fffffbfff0b5dcc5 R11: ffffffff85aee629 R12: ffff8801d7daf100
R13: ffffffff83cced6a R14: ffffffff83cced6b R15: ffffffff83cced6c
FS:  00007f3ad235a700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f244dd20a30 CR3: 00000001c9336000 CR4: 00000000001606f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Stack:
 ffff8801d7daf128c ffffffff81edb065c ffff8801d7daf1a7c 1ffff1003afb5e14c
 ffffffff83cced39c ffffffff83cced6ac 0000000041b58ab3c ffffffff843e464cc
 ffffffff81edaba0c 0000000000000000c ffffffff83cced6cc ffffffff81238a04c
Call Trace:
 [<ffffffff81ee48d3>] vsnprintf+0x163/0x1840 lib/vsprintf.c:1993
 [<ffffffff81ee5fdd>] vscnprintf+0x2d/0x60 lib/vsprintf.c:2144
 [<ffffffff812614d4>] vprintk_emit+0xf4/0x790 kernel/printk/printk.c:1847
 [<ffffffff81261b98>] vprintk+0x28/0x30 kernel/printk/printk.c:1913
 [<ffffffff81261bbd>] vprintk_default+0x1d/0x30 kernel/printk/printk.c:1914
 [<ffffffff8142f016>] vprintk_func kernel/printk/internal.h:36 [inline]
 [<ffffffff8142f016>] printk+0xaf/0xd7 kernel/printk/printk.c:1975
 [<ffffffff81cbf9d5>] __find_get_block_slow.cold.57+0x82/0xf0 fs/buffer.c:242
 [<ffffffff81628cde>] __find_get_block+0x23e/0x4c0 fs/buffer.c:1360
 [<ffffffff81629ae9>] __getblk_slow fs/buffer.c:1101 [inline]
 [<ffffffff81629ae9>] __getblk_gfp+0x189/0x710 fs/buffer.c:1386
 [<ffffffff8162d48d>] __bread_gfp+0x2d/0x270 fs/buffer.c:1420
 [<ffffffff818bc678>] sb_bread include/linux/buffer_head.h:300 [inline]
 [<ffffffff818bc678>] fat__get_entry+0x4c8/0x8f0 fs/fat/dir.c:100
 [<ffffffff818bf301>] fat_get_entry fs/fat/dir.c:128 [inline]
 [<ffffffff818bf301>] fat_get_short_entry+0x131/0x2a0 fs/fat/dir.c:876
 [<ffffffff818bf85d>] fat_scan+0xfd/0x340 fs/fat/dir.c:961
 [<ffffffff818e6f49>] msdos_find+0xf9/0x2d0 fs/fat/namei_msdos.c:128
 [<ffffffff818e7865>] msdos_lookup+0x135/0x250 fs/fat/namei_msdos.c:208
 [<ffffffff8159f93d>] lookup_open+0x63d/0x1930 fs/namei.c:3203
 [<ffffffff815a9eb3>] do_last fs/namei.c:3315 [inline]
 [<ffffffff815a9eb3>] path_openat+0x1803/0x3590 fs/namei.c:3534
 [<ffffffff815aff07>] do_filp_open+0x197/0x270 fs/namei.c:3568
 [<ffffffff815726dd>] do_sys_open+0x30d/0x5c0 fs/open.c:1072
 [<ffffffff815729bd>] SYSC_open fs/open.c:1090 [inline]
 [<ffffffff815729bd>] SyS_open+0x2d/0x40 fs/open.c:1085
 [<ffffffff81006316>] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282
 [<ffffffff83a019d3>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Code: c00 ceb c81 c4c c89 cff ce8 caf cee c1d c00 ce9 c5f cff cff cff c48 c89 cdf ce8 c02 cee c1d c00 ce9 cf9 cfe cff cff c66 c2e c0f c1f c84 c00 c00 c00 c00 c00 c0f c1f c00 c55 c<48> c89 ce5 c65 c48 c8b c04 c25 cc0 c7d c01 c00 c65 c8b c15 c4c c70 ccb c7e c81 ce2 c
device loop7 blocksize: 2048
__find_get_block_slow() failed. block=2, b_blocknr=8
b_state=0x00000029, b_size=512
device loop7 blocksize: 2048
__find_get_block_slow() failed. block=2, b_blocknr=8
b_state=0x00000029, b_size=512
device loop7 blocksize: 2048
__find_get_block_slow() failed. block=2, b_blocknr=8
b_state=0x00000029, b_size=512
device loop7 blocksize: 2048
__find_get_block_slow() failed. block=2, b_blocknr=8
b_state=0x00000029, b_size=512
device loop7 blocksize: 2048
__find_get_block_slow() failed. block=2, b_blocknr=8
b_state=0x00000029, b_size=512
device loop7 blocksize: 2048
__find_get_block_slow() failed. block=2, b_blocknr=8
b_state=0x00000029, b_size=512
device loop7 blocksize: 2048
__find_get_block_slow() failed. block=2, b_blocknr=8
b_state=0x00000029, b_size=512
device loop7 blocksize: 2048
__find_get_block_slow() failed. block=2, b_blocknr=8
b_state=0x00000029, b_size=512

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/08/26 20:00 https://android.googlesource.com/kernel/common android-4.9 09eb2ba5ed0c 758cd203 .config console log report ci-android-49-kasan-gce-root
* Struck through repros no longer work on HEAD.