device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 INFO: task syz-executor0:9720 blocked for more than 140 seconds. b_state=0x00000029, b_size=512 Not tainted 4.9.112-g9e79039 #7 device loop0 blocksize: 4096 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor0 D __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 29432 9720 3860 0x00000004 b_state=0x00000029, b_size=512 ffff8801d3ede000 device loop0 blocksize: 4096 0000000000000000 ffff8801bf2964c0__find_get_block_slow() failed. block=1, b_blocknr=8 ffff8801d91d3000b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 ffff8801db321c18 ffff8801a4657728 __find_get_block_slow() failed. block=1, b_blocknr=8 ffffffff839e907db_state=0x00000029, b_size=512 ffffffff81235667device loop0 blocksize: 4096 0000000000000000 ffff8801d3ede8c0 __find_get_block_slow() failed. block=1, b_blocknr=8 0000000600000007b_state=0x00000029, b_size=512 ffff8801db3224e8device loop0 blocksize: 4096 Call Trace: __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 [] schedule+0x7f/0x1b0 kernel/sched/core.c:3557 b_state=0x00000029, b_size=512 [] __rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:526 [inline] [] rwsem_down_write_failed+0x598/0x990 kernel/locking/rwsem-xadd.c:555 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 [] call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:105 b_state=0x00000029, b_size=512 [] __down_write arch/x86/include/asm/rwsem.h:125 [inline] [] down_write+0x5c/0xa0 kernel/locking/rwsem.c:54 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 [] inode_lock include/linux/fs.h:766 [inline] [] do_truncate2+0x128/0x1f0 fs/open.c:61 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 [] handle_truncate fs/namei.c:2990 [inline] [] do_last fs/namei.c:3419 [inline] [] path_openat+0x251e/0x3590 fs/namei.c:3534 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 [] do_filp_open+0x197/0x270 fs/namei.c:3568 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 [] do_sys_open+0x30d/0x5c0 fs/open.c:1072 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 [] SYSC_open fs/open.c:1090 [inline] [] SyS_open fs/open.c:1085 [inline] [] SYSC_creat fs/open.c:1110 [inline] [] SyS_creat+0x27/0x30 fs/open.c:1108 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 [] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 device loop0 blocksize: 4096 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb __find_get_block_slow() failed. block=1, b_blocknr=8 Showing all locks held in the system: b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 2 locks held by khungtaskd/519: __find_get_block_slow() failed. block=1, b_blocknr=8 #0: b_state=0x00000029, b_size=512 (device loop0 blocksize: 4096 rcu_read_lock){......}__find_get_block_slow() failed. block=1, b_blocknr=8 , at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] , at: [] watchdog+0x11c/0xa20 kernel/hung_task.c:239 #1: device loop0 blocksize: 4096 (tasklist_lock){.+.+..}__find_get_block_slow() failed. block=1, b_blocknr=8 , at: [] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 1 lock held by rsyslogd/3679: b_state=0x00000029, b_size=512 #0: device loop0 blocksize: 4096 (&f->f_pos_lock){+.+.+.}__find_get_block_slow() failed. block=1, b_blocknr=8 , at: [] __fdget_pos+0xac/0xd0 fs/file.c:781 2 locks held by getty/3774: device loop0 blocksize: 4096 #0: (&tty->ldisc_sem __find_get_block_slow() failed. block=1, b_blocknr=8 ){++++++}b_state=0x00000029, b_size=512 , at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock __find_get_block_slow() failed. block=1, b_blocknr=8 ){+.+...}b_state=0x00000029, b_size=512 , at: [] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2142 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 2 locks held by syz-executor0/9720: device loop0 blocksize: 4096 #0: (sb_writers __find_get_block_slow() failed. block=1, b_blocknr=8 #13b_state=0x00000029, b_size=512 ){.+.+.+}device loop0 blocksize: 4096 , at: [] sb_start_write include/linux/fs.h:1573 [inline] , at: [] mnt_want_write+0x3f/0xb0 fs/namespace.c:391 #1: b_state=0x00000029, b_size=512 (device loop0 blocksize: 4096 &sb->s_type->i_mutex_key#16){++++++}__find_get_block_slow() failed. block=1, b_blocknr=8 , at: [] inode_lock include/linux/fs.h:766 [inline] , at: [] do_truncate2+0x128/0x1f0 fs/open.c:61 1 lock held by init/9735: device loop0 blocksize: 4096 #0: (tty_mutex __find_get_block_slow() failed. block=1, b_blocknr=8 ){+.+.+.}b_state=0x00000029, b_size=512 , at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] , at: [] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125 1 lock held by init/9736: #0: __find_get_block_slow() failed. block=1, b_blocknr=8 (b_state=0x00000029, b_size=512 tty_mutexdevice loop0 blocksize: 4096 ){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] ){+.+.+.}, at: [] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125 1 lock held by init/9737: b_state=0x00000029, b_size=512 #0: device loop0 blocksize: 4096 (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] (tty_mutex){+.+.+.}, at: [] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125 1 lock held by init/9738: b_state=0x00000029, b_size=512 #0: device loop0 blocksize: 4096 (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] (tty_mutex){+.+.+.}, at: [] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125 1 lock held by init/9739: b_state=0x00000029, b_size=512 #0: device loop0 blocksize: 4096 (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] (tty_mutex){+.+.+.}, at: [] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125 1 lock held by init/9740: b_state=0x00000029, b_size=512 #0: device loop0 blocksize: 4096 (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] (tty_mutex){+.+.+.}, at: [] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125 b_state=0x00000029, b_size=512 ============================================= device loop0 blocksize: 4096 NMI backtrace for cpu 1 CPU: 1 PID: 519 Comm: khungtaskd Not tainted 4.9.112-g9e79039 #7 __find_get_block_slow() failed. block=1, b_blocknr=8 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 b_state=0x00000029, b_size=512 ffff8801d869fd08 device loop0 blocksize: 4096 ffffffff81eb3249 0000000000000000 0000000000000001__find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 0000000000000001 device loop0 blocksize: 4096 0000000000000001 ffffffff810b9bd0 ffff8801d869fd40__find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 ffffffff81ebe547 device loop0 blocksize: 4096 0000000000000001 0000000000000000 0000000000000002__find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 Call Trace: device loop0 blocksize: 4096 [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 [] nmi_cpu_backtrace.cold.2+0x48/0x87 lib/nmi_backtrace.c:99 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 [] nmi_trigger_cpumask_backtrace+0x12a/0x14f lib/nmi_backtrace.c:60 b_state=0x00000029, b_size=512 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 device loop0 blocksize: 4096 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6b4/0xa20 kernel/hung_task.c:239 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 [] kthread+0x26d/0x300 kernel/kthread.c:211 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 b_state=0x00000029, b_size=512 Sending NMI from CPU 1 to CPUs 0: device loop0 blocksize: 4096 NMI backtrace for cpu 0 CPU: 0 PID: 193 Comm: kworker/u4:2 Not tainted 4.9.112-g9e79039 #7 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: writeback wb_workfnc (flush-7:0)c task: ffff8801d91d3000 task.stack: ffff8801d9268000 RIP: 0010:[] c [] __read_once_size include/linux/compiler.h:243 [inline] RIP: 0010:[] c [] check_kcov_mode kernel/kcov.c:68 [inline] RIP: 0010:[] c [] __sanitizer_cov_trace_pc+0x26/0x50 kernel/kcov.c:100 RSP: 0018:ffff8801d926f488 EFLAGS: 00000246 RAX: ffff8801d91d3000 RBX: ffffea00071546c0 RCX: ffff8801d91d3000 RDX: 0000000000000000 RSI: ffffffff8146766b RDI: ffffea00071546c0 RBP: ffff8801d926f488 R08: ffff8801d91d3960 R09: 0000000000000001 R10: 0000000000000000 R11: 1ffff1003b23a727 R12: ffffea00071546e0 R13: ffffea00071546c0 R14: ffffea0007116660 R15: ffff8801d6192bc8 FS: 0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000608b20 CR3: 00000001b60cf000 CR4: 00000000001606f0 DR0: 00000000200001c0 DR1: 00000000200001c0 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Stack: ffff8801d926f4c8c ffffffff8146766bc ffffea00071546c0c ffffea00071546c0c 0000000000000001c dffffc0000000000c 0000000000000000c ffff8801d6192bc8c ffff8801d926f520c ffffffff8143a3b0c 0000000000000002c ffff8801d91d38c8c Call Trace: [] constant_test_bit arch/x86/include/asm/bitops.h:311 [inline] [] PageReferenced include/linux/page-flags.h:257 [inline] [] mark_page_accessed+0x2ab/0x610 mm/swap.c:383 [] pagecache_get_page+0x3a0/0x720 mm/filemap.c:1229 [] find_get_page_flags include/linux/pagemap.h:264 [inline] [] __find_get_block_slow+0xc2/0x330 fs/buffer.c:212 [] __find_get_block+0x23e/0x4c0 fs/buffer.c:1360 [] __getblk_slow fs/buffer.c:1101 [inline] [] __getblk_gfp+0x189/0x710 fs/buffer.c:1386 [] __bread_gfp+0x2d/0x270 fs/buffer.c:1420 [] sb_bread include/linux/buffer_head.h:300 [inline] [] __fat_write_inode+0x2ab/0x980 fs/fat/inode.c:844 [] fat_write_inode+0x79/0x170 fs/fat/inode.c:893 [] write_inode fs/fs-writeback.c:1180 [inline] [] __writeback_single_inode+0x86d/0x1020 fs/fs-writeback.c:1379 [] writeback_sb_inodes+0x4ac/0xe70 fs/fs-writeback.c:1584 [] __writeback_inodes_wb+0xfb/0x1e0 fs/fs-writeback.c:1653 [] wb_writeback+0x512/0xbd0 fs/fs-writeback.c:1762 [] wb_check_old_data_flush fs/fs-writeback.c:1877 [inline] [] wb_do_writeback fs/fs-writeback.c:1901 [inline] [] wb_workfn+0x850/0xdb0 fs/fs-writeback.c:1930 [] process_one_work+0x7e1/0x1500 kernel/workqueue.c:2092 [] worker_thread+0xd6/0x10a0 kernel/workqueue.c:2226 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Code: c00 c00 c0f c1f c00 c55 c48 c89 ce5 c65 c48 c8b c04 c25 cc0 c7d c01 c00 c65 c8b c15 ccc c92 ccb c7e c81 ce2 c00 c01 c1f c00 c48 c8b c75 c08 c75 c2b c8b c90 c80 c12 c00 c00 c<83> cfa c02 c75 c20 c48 c8b c88 c88 c12 c00 c00 c8b c80 c84 c12 c00 c00 c48 c8b c11 c __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096