INFO: task syz-executor.4:15950 can't die for more than 143 seconds. syz-executor.4 D26616 15950 8757 0x00004004 Call Trace: context_switch kernel/sched/core.c:3265 [inline] __schedule+0x76e/0x17a0 kernel/sched/core.c:3937 schedule+0xd9/0x260 kernel/sched/core.c:4004 io_schedule+0x1c/0x70 kernel/sched/core.c:5678 wait_on_page_bit_common+0x3b6/0xe00 mm/filemap.c:1174 wait_on_page_bit mm/filemap.c:1223 [inline] wait_on_page_locked include/linux/pagemap.h:527 [inline] wait_on_page_read mm/filemap.c:2767 [inline] do_read_cache_page+0x848/0xdb0 mm/filemap.c:2810 read_cache_page+0x5e/0x70 mm/filemap.c:2894 read_mapping_page include/linux/pagemap.h:396 [inline] read_dev_sector+0x71/0x310 block/partition-generic.c:667 read_part_sector block/partitions/check.h:38 [inline] adfspart_check_ICS+0x12d/0xc90 block/partitions/acorn.c:361 check_partition+0x3bc/0x6ce block/partitions/check.c:167 rescan_partitions+0x230/0xa30 block/partition-generic.c:531 __blkdev_get+0x1213/0x1660 fs/block_dev.c:1637 blkdev_get+0x47/0x2c0 fs/block_dev.c:1707 blkdev_open+0x205/0x290 fs/block_dev.c:1846 do_dentry_open+0x4df/0x1250 fs/open.c:797 vfs_open+0xa0/0xd0 fs/open.c:914 do_last fs/namei.c:3416 [inline] path_openat+0x10e9/0x46d0 fs/namei.c:3533 do_filp_open+0x1a1/0x280 fs/namei.c:3563 do_sys_open+0x3fe/0x5d0 fs/open.c:1097 __do_sys_open fs/open.c:1115 [inline] __se_sys_open fs/open.c:1110 [inline] __x64_sys_open+0x7e/0xc0 fs/open.c:1110 do_syscall_64+0xfa/0x760 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4137d1 Code: 48 c7 03 50 37 41 00 31 c0 48 83 c4 08 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 c7 03 40 37 41 00 eb e5 0f 1f 80 00 00 00 00 bf <69> 30 44 00 b9 08 00 00 00 48 89 ee f3 a6 74 1f bf 71 30 44 00 b9 RSP: 002b:00007f940b02d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004137d1 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f940b02d850 RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 00007f940b02e6d4 R13: 00000000004c8d5b R14: 00000000004dfd50 R15: 00000000ffffffff INFO: task syz-executor.4:15950 blocked for more than 143 seconds. Not tainted 5.3.0-rc6-next-20190830 #75 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.4 D26616 15950 8757 0x00004004 Call Trace: context_switch kernel/sched/core.c:3265 [inline] __schedule+0x76e/0x17a0 kernel/sched/core.c:3937 schedule+0xd9/0x260 kernel/sched/core.c:4004 io_schedule+0x1c/0x70 kernel/sched/core.c:5678 wait_on_page_bit_common+0x3b6/0xe00 mm/filemap.c:1174 wait_on_page_bit mm/filemap.c:1223 [inline] wait_on_page_locked include/linux/pagemap.h:527 [inline] wait_on_page_read mm/filemap.c:2767 [inline] do_read_cache_page+0x848/0xdb0 mm/filemap.c:2810 read_cache_page+0x5e/0x70 mm/filemap.c:2894 read_mapping_page include/linux/pagemap.h:396 [inline] read_dev_sector+0x71/0x310 block/partition-generic.c:667 read_part_sector block/partitions/check.h:38 [inline] adfspart_check_ICS+0x12d/0xc90 block/partitions/acorn.c:361 check_partition+0x3bc/0x6ce block/partitions/check.c:167 rescan_partitions+0x230/0xa30 block/partition-generic.c:531 __blkdev_get+0x1213/0x1660 fs/block_dev.c:1637 blkdev_get+0x47/0x2c0 fs/block_dev.c:1707 blkdev_open+0x205/0x290 fs/block_dev.c:1846 do_dentry_open+0x4df/0x1250 fs/open.c:797 vfs_open+0xa0/0xd0 fs/open.c:914 do_last fs/namei.c:3416 [inline] path_openat+0x10e9/0x46d0 fs/namei.c:3533 do_filp_open+0x1a1/0x280 fs/namei.c:3563 do_sys_open+0x3fe/0x5d0 fs/open.c:1097 __do_sys_open fs/open.c:1115 [inline] __se_sys_open fs/open.c:1110 [inline] __x64_sys_open+0x7e/0xc0 fs/open.c:1110 do_syscall_64+0xfa/0x760 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4137d1 Code: 48 c7 03 50 37 41 00 31 c0 48 83 c4 08 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 c7 03 40 37 41 00 eb e5 0f 1f 80 00 00 00 00 bf <69> 30 44 00 b9 08 00 00 00 48 89 ee f3 a6 74 1f bf 71 30 44 00 b9 RSP: 002b:00007f940b02d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004137d1 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f940b02d850 RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 00007f940b02e6d4 R13: 00000000004c8d5b R14: 00000000004dfd50 R15: 00000000ffffffff INFO: task syz-executor.4:15952 can't die for more than 144 seconds. syz-executor.4 D27536 15952 8757 0x00004004 Call Trace: context_switch kernel/sched/core.c:3265 [inline] __schedule+0x76e/0x17a0 kernel/sched/core.c:3937 schedule+0xd9/0x260 kernel/sched/core.c:4004 schedule_timeout+0x717/0xc50 kernel/time/timer.c:1869 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common kernel/sched/completion.c:115 [inline] wait_for_completion+0x29c/0x440 kernel/sched/completion.c:136 flush_workqueue+0x40f/0x14c0 kernel/workqueue.c:2826 nbd_start_device_ioctl drivers/block/nbd.c:1254 [inline] __nbd_ioctl drivers/block/nbd.c:1329 [inline] nbd_ioctl+0xb32/0xc50 drivers/block/nbd.c:1369 __blkdev_driver_ioctl block/ioctl.c:304 [inline] blkdev_ioctl+0xedb/0x1c20 block/ioctl.c:606 block_ioctl+0xee/0x130 fs/block_dev.c:1954 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:509 [inline] do_vfs_ioctl+0xdb6/0x13e0 fs/ioctl.c:696 ksys_ioctl+0xab/0xd0 fs/ioctl.c:713 __do_sys_ioctl fs/ioctl.c:720 [inline] __se_sys_ioctl fs/ioctl.c:718 [inline] __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:718 do_syscall_64+0xfa/0x760 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4598e9 Code: Bad RIP value. RSP: 002b:00007f940b00cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004598e9 RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f940b00d6d4 R13: 00000000004c319f R14: 00000000004d6948 R15: 00000000ffffffff INFO: task syz-executor.4:15952 blocked for more than 144 seconds. Not tainted 5.3.0-rc6-next-20190830 #75 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.4 D27536 15952 8757 0x00004004 Call Trace: context_switch kernel/sched/core.c:3265 [inline] __schedule+0x76e/0x17a0 kernel/sched/core.c:3937 schedule+0xd9/0x260 kernel/sched/core.c:4004 schedule_timeout+0x717/0xc50 kernel/time/timer.c:1869 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common kernel/sched/completion.c:115 [inline] wait_for_completion+0x29c/0x440 kernel/sched/completion.c:136 flush_workqueue+0x40f/0x14c0 kernel/workqueue.c:2826 nbd_start_device_ioctl drivers/block/nbd.c:1254 [inline] __nbd_ioctl drivers/block/nbd.c:1329 [inline] nbd_ioctl+0xb32/0xc50 drivers/block/nbd.c:1369 __blkdev_driver_ioctl block/ioctl.c:304 [inline] blkdev_ioctl+0xedb/0x1c20 block/ioctl.c:606 block_ioctl+0xee/0x130 fs/block_dev.c:1954 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:509 [inline] do_vfs_ioctl+0xdb6/0x13e0 fs/ioctl.c:696 ksys_ioctl+0xab/0xd0 fs/ioctl.c:713 __do_sys_ioctl fs/ioctl.c:720 [inline] __se_sys_ioctl fs/ioctl.c:718 [inline] __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:718 do_syscall_64+0xfa/0x760 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4598e9 Code: Bad RIP value. RSP: 002b:00007f940b00cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004598e9 RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f940b00d6d4 R13: 00000000004c319f R14: 00000000004d6948 R15: 00000000ffffffff Showing all locks held in the system: 1 lock held by khungtaskd/1064: #0: ffffffff88fa7f00 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e kernel/locking/lockdep.c:5337 1 lock held by rsyslogd/8618: #0: ffff88808da8b0e0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 fs/file.c:801 2 locks held by getty/8708: #0: ffff88809ffaa090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f0d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8709: #0: ffff888097b17090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f2d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8710: #0: ffff88808d9c7090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f312e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8711: #0: ffff8880a1ee1090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f292e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8712: #0: ffff8880a63c7090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f212e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8713: #0: ffff8880929fe090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f252e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8714: #0: ffff8880a991e090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f012e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by kworker/u5:1/9134: #0: ffff888096559d28 ((wq_completion)knbd4-recv){+.+.}, at: __write_once_size include/linux/compiler.h:203 [inline] #0: ffff888096559d28 ((wq_completion)knbd4-recv){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888096559d28 ((wq_completion)knbd4-recv){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: ffff888096559d28 ((wq_completion)knbd4-recv){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: ffff888096559d28 ((wq_completion)knbd4-recv){+.+.}, at: set_work_data kernel/workqueue.c:620 [inline] #0: ffff888096559d28 ((wq_completion)knbd4-recv){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:647 [inline] #0: ffff888096559d28 ((wq_completion)knbd4-recv){+.+.}, at: process_one_work+0x88b/0x1740 kernel/workqueue.c:2240 #1: ffff888055fc7dc0 ((work_completion)(&args->work)){+.+.}, at: process_one_work+0x8c1/0x1740 kernel/workqueue.c:2244 1 lock held by syz-executor.4/15950: #0: ffff888094607738 (&bdev->bd_mutex){+.+.}, at: __blkdev_get+0x19b/0x1660 fs/block_dev.c:1553 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 1064 Comm: khungtaskd Not tainted 5.3.0-rc6-next-20190830 #75 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x172/0x1f0 lib/dump_stack.c:113 nmi_cpu_backtrace.cold+0x70/0xb2 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x23b/0x28b lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:269 [inline] watchdog+0xc99/0x1360 kernel/hung_task.c:353 kthread+0x361/0x430 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.3.0-rc6-next-20190830 #75 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:write_comp_data+0x1e/0x70 kernel/kcov.c:123 Code: 48 89 34 d1 48 89 11 5d c3 0f 1f 00 65 4c 8b 04 25 40 fe 01 00 65 8b 05 98 a7 8f 7e a9 00 01 1f 00 75 51 41 8b 80 00 13 00 00 <83> f8 03 75 45 49 8b 80 08 13 00 00 45 8b 80 04 13 00 00 4c 8b 08 RSP: 0018:ffff8880ae809ef8 EFLAGS: 00000046 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8165f933 RDX: 0000000000000000 RSI: 000000000000003f RDI: 0000000000000005 RBP: ffff8880ae809f00 R08: ffffffff88e7a180 R09: 0000000000000001 R10: ffffed1015d06aec R11: ffff8880ae835763 R12: ffffffff88e7a180 R13: ffffffff88bb2140 R14: ffff8880ae800000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffff600400 CR3: 000000008def9000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: cpu_max_bits_warn include/linux/cpumask.h:137 [inline] cpumask_check include/linux/cpumask.h:144 [inline] cpumask_test_cpu include/linux/cpumask.h:360 [inline] tick_check_oneshot_broadcast_this_cpu+0x23/0x150 kernel/time/tick-broadcast.c:586 tick_irq_enter+0x22/0x3f0 kernel/time/tick-sched.c:1273 irq_enter+0xbd/0xe0 kernel/softirq.c:354 scheduler_ipi+0x28e/0x640 kernel/sched/core.c:2218 smp_reschedule_interrupt+0x78/0x4c0 arch/x86/kernel/smp.c:244 reschedule_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:854 RIP: 0010:native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:61 Code: 38 c1 69 fa eb 8a 90 90 90 90 90 90 e9 07 00 00 00 0f 00 2d 64 b8 64 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 54 b8 64 00 fb f4 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 5e a7 1c fa e8 69 RSP: 0018:ffffffff88e07c50 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff02 RAX: 1ffffffff11e5db7 RBX: 0000000000000000 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffffffff88e7aa1c RBP: ffffffff88e07c80 R08: ffffffff88e7a180 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000060 R15: 0000000000000001 default_enter_idle+0x71/0xf0 drivers/cpuidle/cpuidle-haltpoll.c:27 cpuidle_enter_state+0xef/0xfb0 drivers/cpuidle/cpuidle.c:229 cpuidle_enter+0x4f/0xa0 drivers/cpuidle/cpuidle.c:344 call_cpuidle kernel/sched/idle.c:117 [inline] cpuidle_idle_call kernel/sched/idle.c:201 [inline] do_idle+0x45f/0x6e0 kernel/sched/idle.c:263 cpu_startup_entry+0x1b/0x20 kernel/sched/idle.c:354 rest_init+0x245/0x37b init/main.c:451 arch_call_rest_init+0xe/0x1b start_kernel+0x904/0x943 init/main.c:784 x86_64_start_reservations+0x29/0x2b arch/x86/kernel/head64.c:472 x86_64_start_kernel+0x77/0x7b arch/x86/kernel/head64.c:453 secondary_startup_64+0xa4/0xb0 arch/x86/kernel/head_64.S:241