INFO: task syz-executor0:7300 blocked for more than 140 seconds. Not tainted 5.0.0-rc1-next-20190109 #8 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor0 D20440 7300 1 0x00000004 Call Trace: context_switch kernel/sched/core.c:2834 [inline] __schedule+0x897/0x1e60 kernel/sched/core.c:3475 schedule+0xfe/0x350 kernel/sched/core.c:3519 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3577 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0xa3b/0x1670 kernel/locking/mutex.c:1072 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087 vfat_lookup+0xed/0x6b0 fs/fat/namei_vfat.c:709 __lookup_slow+0x2cd/0x560 fs/namei.c:1671 lookup_slow+0x58/0x80 fs/namei.c:1688 walk_component+0x8e5/0x26a0 fs/namei.c:1810 link_path_walk.part.0+0xa57/0x1550 fs/namei.c:2141 link_path_walk fs/namei.c:2072 [inline] path_openat+0x222/0x5660 fs/namei.c:3533 do_filp_open+0x26f/0x370 fs/namei.c:3564 do_sys_open+0x59a/0x7c0 fs/open.c:1063 __do_sys_open fs/open.c:1081 [inline] __se_sys_open fs/open.c:1076 [inline] __x64_sys_open+0x7e/0xc0 fs/open.c:1076 do_syscall_64+0x1a3/0x800 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x455ef0 Code: Bad RIP value. RSP: 002b:00007ffccc39cbb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000455ef0 RDX: 0000000000000000 RSI: 0000000000090800 RDI: 00000000004bc9af RBP: 0000000000000145 R08: 0000000000000001 R09: 0000000002953940 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000010 R13: 000000000003bf4d R14: 0000000000000061 R15: 0000000000000000 INFO: task syz-executor0:10026 blocked for more than 140 seconds. Not tainted 5.0.0-rc1-next-20190109 #8 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor0 D26344 10026 7300 0x00000004 Call Trace: context_switch kernel/sched/core.c:2834 [inline] __schedule+0x897/0x1e60 kernel/sched/core.c:3475 schedule+0xfe/0x350 kernel/sched/core.c:3519 d_wait_lookup fs/dcache.c:2408 [inline] d_alloc_parallel+0x143c/0x1f10 fs/dcache.c:2490 __lookup_slow+0x1fa/0x560 fs/namei.c:1654 lookup_slow+0x58/0x80 fs/namei.c:1688 walk_component+0x8e5/0x26a0 fs/namei.c:1810 link_path_walk.part.0+0xa57/0x1550 fs/namei.c:2141 link_path_walk fs/namei.c:2072 [inline] path_openat+0x222/0x5660 fs/namei.c:3533 do_filp_open+0x26f/0x370 fs/namei.c:3564 do_sys_open+0x59a/0x7c0 fs/open.c:1063 __do_sys_open fs/open.c:1081 [inline] __se_sys_open fs/open.c:1076 [inline] __x64_sys_open+0x7e/0xc0 fs/open.c:1076 do_syscall_64+0x1a3/0x800 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x411e71 Code: 48 c7 03 90 1c 41 00 31 c0 48 83 c4 08 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 c7 03 b0 20 41 00 eb e5 0f 1f 80 00 00 00 00 bf <69> 30 44 00 b9 08 00 00 00 48 89 ee f3 a6 74 1f bf 71 30 44 00 b9 RSP: 002b:00007f50bd203c30 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000411e71 RDX: 0000000000000003 RSI: 0000000000000000 RDI: 00000000004bcb1c RBP: 000000000000001f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 R13: 0000000000000003 R14: 00000000004db530 R15: 00000000ffffffff INFO: task syz-executor0:10028 blocked for more than 140 seconds. Not tainted 5.0.0-rc1-next-20190109 #8 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor0 D22744 10028 7300 0x00000004 Call Trace: context_switch kernel/sched/core.c:2834 [inline] __schedule+0x897/0x1e60 kernel/sched/core.c:3475 schedule+0xfe/0x350 kernel/sched/core.c:3519 d_wait_lookup fs/dcache.c:2408 [inline] d_alloc_parallel+0x143c/0x1f10 fs/dcache.c:2490 __lookup_slow+0x1fa/0x560 fs/namei.c:1654 lookup_slow+0x58/0x80 fs/namei.c:1688 walk_component+0x8e5/0x26a0 fs/namei.c:1810 link_path_walk.part.0+0xa57/0x1550 fs/namei.c:2141 link_path_walk fs/namei.c:2072 [inline] path_openat+0x222/0x5660 fs/namei.c:3533 do_filp_open+0x26f/0x370 fs/namei.c:3564 do_sys_open+0x59a/0x7c0 fs/open.c:1063 __do_sys_open fs/open.c:1081 [inline] __se_sys_open fs/open.c:1076 [inline] __x64_sys_open+0x7e/0xc0 fs/open.c:1076 do_syscall_64+0x1a3/0x800 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x411e71 Code: 48 c7 03 90 1c 41 00 31 c0 48 83 c4 08 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 c7 03 b0 20 41 00 eb e5 0f 1f 80 00 00 00 00 bf <69> 30 44 00 b9 08 00 00 00 48 89 ee f3 a6 74 1f bf 71 30 44 00 b9 RSP: 002b:00007f50bd1e2c30 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000411e71 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bcb1c RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 R13: 0000000000000000 R14: 00000000004db5d8 R15: 00000000ffffffff INFO: task syz-executor0:10100 blocked for more than 140 seconds. Not tainted 5.0.0-rc1-next-20190109 #8 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor0 D26344 10100 7300 0x00000004 Call Trace: context_switch kernel/sched/core.c:2834 [inline] __schedule+0x897/0x1e60 kernel/sched/core.c:3475 schedule+0xfe/0x350 kernel/sched/core.c:3519 d_wait_lookup fs/dcache.c:2408 [inline] d_alloc_parallel+0x143c/0x1f10 fs/dcache.c:2490 __lookup_slow+0x1fa/0x560 fs/namei.c:1654 lookup_slow+0x58/0x80 fs/namei.c:1688 walk_component+0x8e5/0x26a0 fs/namei.c:1810 link_path_walk.part.0+0xa57/0x1550 fs/namei.c:2141 link_path_walk fs/namei.c:2072 [inline] path_openat+0x222/0x5660 fs/namei.c:3533 do_filp_open+0x26f/0x370 fs/namei.c:3564 do_sys_open+0x59a/0x7c0 fs/open.c:1063 __do_sys_open fs/open.c:1081 [inline] __se_sys_open fs/open.c:1076 [inline] __x64_sys_open+0x7e/0xc0 fs/open.c:1076 do_syscall_64+0x1a3/0x800 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x411e71 Code: 48 c7 03 90 1c 41 00 31 c0 48 83 c4 08 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 c7 03 b0 20 41 00 eb e5 0f 1f 80 00 00 00 00 bf <69> 30 44 00 b9 08 00 00 00 48 89 ee f3 a6 74 1f bf 71 30 44 00 b9 RSP: 002b:00007f50bd1a0c30 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000411e71 RDX: 0000000000000003 RSI: 0000000000000000 RDI: 00000000004bcb1c RBP: 000000000000001f R08: 0000000000000000 R09: 0000000000000000 R10: ffffffffffffffff R11: 0000000000000293 R12: 0000000000000001 R13: 0000000000000003 R14: 00000000004db530 R15: 00000000ffffffff Showing all locks held in the system: 1 lock held by khungtaskd/1039: #0: 000000001f0d7b7c (rcu_read_lock){....}, at: debug_show_all_locks+0xc6/0x41d kernel/locking/lockdep.c:4408 1 lock held by rsyslogd/7171: #0: 00000000ebb2297f (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1b3/0x1f0 fs/file.c:795 2 locks held by getty/7261: #0: 000000000b6ea93c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 000000001e572bb1 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 drivers/tty/n_tty.c:2154 2 locks held by getty/7262: #0: 000000003b8aab57 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 0000000028a1029f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 drivers/tty/n_tty.c:2154 2 locks held by getty/7263: #0: 00000000858b02d7 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 000000008bc2e391 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 drivers/tty/n_tty.c:2154 2 locks held by getty/7264: #0: 00000000402d69ca (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 00000000ea9861be (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 drivers/tty/n_tty.c:2154 2 locks held by getty/7265: #0: 000000006e3b2f94 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 00000000ef18829f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 drivers/tty/n_tty.c:2154 2 locks held by getty/7266: #0: 00000000b17719b0 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 000000009ede6fb7 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 drivers/tty/n_tty.c:2154 2 locks held by getty/7267: #0: 000000006b30c523 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341 #1: 00000000702897fb (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 drivers/tty/n_tty.c:2154 2 locks held by syz-executor0/7300: #0: 0000000024dabe28 (&sb->s_type->i_mutex_key#26){++++}, at: inode_lock_shared include/linux/fs.h:776 [inline] #0: 0000000024dabe28 (&sb->s_type->i_mutex_key#26){++++}, at: lookup_slow+0x4a/0x80 fs/namei.c:1687 #1: 000000008a81cda7 (&sbi->s_lock){+.+.}, at: vfat_lookup+0xed/0x6b0 fs/fat/namei_vfat.c:709 3 locks held by syz-executor0/10021: 1 lock held by syz-executor0/10026: #0: 0000000024dabe28 (&sb->s_type->i_mutex_key#26){++++}, at: inode_lock_shared include/linux/fs.h:776 [inline] #0: 0000000024dabe28 (&sb->s_type->i_mutex_key#26){++++}, at: lookup_slow+0x4a/0x80 fs/namei.c:1687 1 lock held by syz-executor0/10028: #0: 0000000024dabe28 (&sb->s_type->i_mutex_key#26){++++}, at: inode_lock_shared include/linux/fs.h:776 [inline] #0: 0000000024dabe28 (&sb->s_type->i_mutex_key#26){++++}, at: lookup_slow+0x4a/0x80 fs/namei.c:1687 1 lock held by syz-executor0/10100: #0: 0000000024dabe28 (&sb->s_type->i_mutex_key#26){++++}, at: inode_lock_shared include/linux/fs.h:776 [inline] #0: 0000000024dabe28 (&sb->s_type->i_mutex_key#26){++++}, at: lookup_slow+0x4a/0x80 fs/namei.c:1687 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 1039 Comm: khungtaskd Not tainted 5.0.0-rc1-next-20190109 #8 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1db/0x2d0 lib/dump_stack.c:113 nmi_cpu_backtrace.cold+0x63/0xa4 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1be/0x236 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline] watchdog+0xbbb/0x1170 kernel/hung_task.c:287 kthread+0x357/0x430 kernel/kthread.c:247 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 10021 Comm: syz-executor0 Not tainted 5.0.0-rc1-next-20190109 #8 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__read_once_size include/linux/compiler.h:197 [inline] RIP: 0010:arch_atomic_read arch/x86/include/asm/atomic.h:31 [inline] RIP: 0010:atomic_read include/generated/atomic-instrumented.h:27 [inline] RIP: 0010:rcu_dynticks_curr_cpu_in_eqs+0xe9/0x170 kernel/rcu/tree.c:309 Code: 03 38 d0 7c 04 84 d2 75 77 49 8d 7d c0 41 8b 84 24 b8 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 14 11 <84> d2 74 05 80 fa 03 7e 3a 48 ba 00 00 00 00 00 fc ff df 41 89 45 RSP: 0018:ffff8880510be640 EFLAGS: 00000a02 RAX: 000000000016ad1a RBX: 1ffff1100a217cc9 RCX: 1ffff1100a217ccd RDX: 0000000000000004 RSI: 0000000000000004 RDI: ffff8880510be668 RBP: ffff8880510be6c8 R08: 1ffff11015ce5b8f R09: ffffed1015ce5b90 R10: ffffed1015ce5b8f R11: ffff8880ae72dc7b R12: ffff8880ae72dbc0 R13: ffff8880510be6a8 R14: ffff8880ae72dc78 R15: ffff8880510be798 FS: 00007f50bd225700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000455ec6 CR3: 0000000098e83000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rcu_is_watching+0x10/0x30 kernel/rcu/tree.c:955 rcu_read_lock_held+0x81/0xd0 kernel/rcu/update.c:277 xa_entry include/linux/xarray.h:902 [inline] xas_descend+0x404/0x500 lib/xarray.c:198 xas_load+0xf4/0x160 lib/xarray.c:234 find_get_entry+0x353/0x1090 mm/filemap.c:1476 pagecache_get_page+0xe5/0x1070 mm/filemap.c:1582 find_get_page_flags include/linux/pagemap.h:279 [inline] __find_get_block_slow fs/buffer.c:205 [inline] __find_get_block fs/buffer.c:1331 [inline] __find_get_block+0x615/0xf20 fs/buffer.c:1325 __getblk_slow fs/buffer.c:1058 [inline] __getblk_gfp+0x3c2/0x1140 fs/buffer.c:1357 __bread_gfp+0x2f/0x300 fs/buffer.c:1391 sb_bread include/linux/buffer_head.h:307 [inline] fat__get_entry+0x586/0xa40 fs/fat/dir.c:101 fat_get_entry fs/fat/dir.c:129 [inline] fat_search_long+0x345/0x17d0 fs/fat/dir.c:479 vfat_find+0x10e/0x140 fs/fat/namei_vfat.c:697 vfat_lookup+0x10a/0x6b0 fs/fat/namei_vfat.c:711 __lookup_slow+0x2cd/0x560 fs/namei.c:1671 lookup_slow+0x58/0x80 fs/namei.c:1688 walk_component+0x8e5/0x26a0 fs/namei.c:1810 link_path_walk.part.0+0xa57/0x1550 fs/namei.c:2141 link_path_walk fs/namei.c:2072 [inline] path_openat+0x222/0x5660 fs/namei.c:3533 do_filp_open+0x26f/0x370 fs/namei.c:3564 do_sys_open+0x59a/0x7c0 fs/open.c:1063 __do_sys_open fs/open.c:1081 [inline] __se_sys_open fs/open.c:1076 [inline] __x64_sys_open+0x7e/0xc0 fs/open.c:1076 do_syscall_64+0x1a3/0x800 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x411e71 Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 RSP: 002b:00007f50bd224c30 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000411e71 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bcb1c RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 R10: 00007f50bd2259d0 R11: 0000000000000293 R12: 0000000000000005 R13: 0000000000000000 R14: 00000000004db5d8 R15: 00000000ffffffff