b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 INFO: task syz-executor0:10193 blocked for more than 120 seconds. Not tainted 4.9.101-gaef17a5 #29 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor0 D29112 10193 3805 0x00000004 ffff8801d9534800 0000000000000000 ffff8801d536ef40 ffff8801d62d9800 ffff8801db221b98 ffff8801d365f6f0 ffffffff839e39bd ffffffff81233857 0000000000000000 ffff8801d95350c0 0000000600000007 ffff8801db222468 Call Trace: [] schedule+0x7f/0x1b0 kernel/sched/core.c:3557 [] rwsem_down_read_failed+0x1e4/0x320 kernel/locking/rwsem-xadd.c:260 [] call_rwsem_down_read_failed+0x18/0x30 arch/x86/lib/rwsem.S:94 [] __down_read arch/x86/include/asm/rwsem.h:65 [inline] [] down_read+0x52/0xb0 kernel/locking/rwsem.c:24 [] inode_lock_shared include/linux/fs.h:776 [inline] [] lookup_slow+0x141/0x470 fs/namei.c:1645 [] walk_component+0x716/0x1bb0 fs/namei.c:1784 [] lookup_last fs/namei.c:2266 [inline] [] path_lookupat.isra.41+0x186/0x410 fs/namei.c:2283 [] filename_lookup.part.55+0x177/0x370 fs/namei.c:2317 [] filename_lookup fs/namei.c:2310 [inline] [] user_path_at_empty+0x53/0x70 fs/namei.c:2578 [] user_path_at include/linux/namei.h:55 [inline] [] SYSC_linkat fs/namei.c:4314 [inline] [] SyS_linkat fs/namei.c:4289 [inline] [] SYSC_link fs/namei.c:4356 [inline] [] SyS_link+0xd4/0x550 fs/namei.c:4354 [] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/519: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 kernel/hung_task.c:239 #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336 1 lock held by rsyslogd/3607: #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xac/0xd0 fs/file.c:781 2 locks held by getty/3703: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2133 1 lock held by syz-executor0/10193: #0: (&sb->s_type->i_mutex_key#19){++++++}, at: [] inode_lock_shared include/linux/fs.h:776 [inline] #0: (&sb->s_type->i_mutex_key#19){++++++}, at: [] lookup_slow+0x141/0x470 fs/namei.c:1645 2 locks held by syz-executor0/10195: #0: (sb_writers#17){.+.+.+}, at: [] sb_start_write include/linux/fs.h:1573 [inline] #0: (sb_writers#17){.+.+.+}, at: [] mnt_want_write+0x3f/0xb0 fs/namespace.c:391 #1: (&sb->s_type->i_mutex_key#19){++++++}, at: [] inode_lock include/linux/fs.h:766 [inline] #1: (&sb->s_type->i_mutex_key#19){++++++}, at: [] do_last fs/namei.c:3312 [inline] #1: (&sb->s_type->i_mutex_key#19){++++++}, at: [] path_openat+0xed5/0x3590 fs/namei.c:3534 1 lock held by syz-executor0/10198: #0: (&sb->s_type->i_mutex_key#19){++++++}, at: [] inode_lock_shared include/linux/fs.h:776 [inline] #0: (&sb->s_type->i_mutex_key#19){++++++}, at: [] lookup_slow+0x141/0x470 fs/namei.c:1645 2 locks held by syz-executor0/10201: #0: (sb_writers#17){.+.+.+}, at: [] sb_start_write include/linux/fs.h:1573 [inline] #0: (sb_writers#17){.+.+.+}, at: [] mnt_want_write+0x3f/0xb0 fs/namespace.c:391 #1: (&sb->s_type->i_mutex_key#19){++++++}, at: [] inode_lock include/linux/fs.h:766 [inline] #1: (&sb->s_type->i_mutex_key#19){++++++}, at: [] do_last fs/namei.c:3312 [inline] #1: (&sb->s_type->i_mutex_key#19){++++++}, at: [] path_openat+0xed5/0x3590 fs/namei.c:3534 1 lock held by init/10205: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125 1 lock held by init/10206: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125 1 lock held by init/10207: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125 1 lock held by init/10208: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125 1 lock held by init/10209: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125 1 lock held by init/10210: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 519 Comm: khungtaskd Not tainted 4.9.101-gaef17a5 #29 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801d8617d08 ffffffff81eb1009 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ffffffff810b7da0 ffff8801d8617d40 ffffffff81ebc307 0000000000000000 0000000000000000 0000000000000003 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold.2+0x48/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x12a/0x14f lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6b4/0xa20 kernel/hung_task.c:239 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 10138 Comm: syz-executor4 Not tainted 4.9.101-gaef17a5 #29 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8801d7f3b000 task.stack: ffff880191ee8000 RIP: 0010:[] c [] inb arch/x86/include/asm/io.h:316 [inline] RIP: 0010:[] c [] io_serial_in+0x6b/0x90 drivers/tty/serial/8250/8250_port.c:414 RSP: 0018:ffff880191eeee30 EFLAGS: 00000002 RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 RDX: 00000000000003fd RSI: ffffffff8214d631 RDI: ffffffff864aae78 RBP: ffff880191eeee40 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff864aae40 R13: 0000000000000020 R14: fffffbfff0c9560f R15: fffffbfff0c955d1 FS: 00007fba507bb700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c42d2d5010 CR3: 00000001c1b84000 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: ffffffff864aae40c 000000000000270dc ffff880191eeee90c ffffffff8214f254c ffffffff81edc2f8c ffffffff864aae88c ffffffff864ab07ac ffffffff864aae40c 0000000000000032c ffffffff8214f3a0c dffffc0000000000c 0000000000000032c Call Trace: [] serial_in drivers/tty/serial/8250/8250.h:111 [inline] [] wait_for_xmitr+0x94/0x1e0 drivers/tty/serial/8250/8250_port.c:1997 [] serial8250_console_putchar+0x1f/0x60 drivers/tty/serial/8250/8250_port.c:3103 [] uart_console_write+0x59/0xf0 drivers/tty/serial/serial_core.c:1859 [] serial8250_console_write+0x528/0x820 drivers/tty/serial/8250/8250_port.c:3169 [] univ8250_console_write+0x5f/0x70 drivers/tty/serial/8250/8250_core.c:594 [] call_console_drivers.isra.18.constprop.28+0x1ad/0x360 kernel/printk/printk.c:1589 [] console_unlock+0x42f/0xb40 kernel/printk/printk.c:2449 [] vprintk_emit+0x448/0x790 kernel/printk/printk.c:1903 [] vprintk+0x28/0x30 kernel/printk/printk.c:1913 [] vprintk_default+0x1d/0x30 kernel/printk/printk.c:1914 [] vprintk_func kernel/printk/internal.h:36 [inline] [] printk+0xaf/0xd7 kernel/printk/printk.c:1975 [] nla_parse.cold.10+0x27/0x2c lib/nlattr.c:205 [] nla_parse_nested include/net/netlink.h:748 [inline] [] ctnetlink_parse_tuple+0x10c/0x740 net/netfilter/nf_conntrack_netlink.c:1024 [] ctnetlink_get_conntrack+0x2cb/0x770 net/netfilter/nf_conntrack_netlink.c:1219 [] nfnetlink_rcv_msg+0xa83/0xc80 net/netfilter/nfnetlink.c:212 [] netlink_rcv_skb+0x145/0x370 net/netlink/af_netlink.c:2358 [] nfnetlink_rcv+0x9cc/0x1100 net/netfilter/nfnetlink.c:474 [] netlink_unicast_kernel net/netlink/af_netlink.c:1278 [inline] [] netlink_unicast+0x4d8/0x6f0 net/netlink/af_netlink.c:1304 [] netlink_sendmsg+0x795/0xc30 net/netlink/af_netlink.c:1852 [] sock_sendmsg_nosec net/socket.c:635 [inline] [] sock_sendmsg+0xcc/0x110 net/socket.c:645 [] ___sys_sendmsg+0x6fc/0x840 net/socket.c:1969 [] __sys_sendmsg+0xd9/0x190 net/socket.c:2003 [] SYSC_sendmsg net/socket.c:2014 [inline] [] SyS_sendmsg+0x2d/0x50 net/socket.c:2010 [] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: c24 cc9 c00 c00 c00 c49 c8d c7c c24 c38 c48 cb8 c00 c00 c00 c00 c00 cfc cff cdf c48 c89 cfa c48 cc1 cea c03 cd3 ce3 c80 c3c c02 c00 c75 c17 c41 c03 c5c c24 c38 c89 cda cec c<5b> c0f cb6 cc0 c41 c5c c5d cc3 ce8 c98 cbd c3e cff ceb cc2 ce8 cf1 cbd c3e cff ceb c