kworker/u4:3(2035): getblk(): executed=9 bh_count=0 bh_state=0 syz-executor0(20878): getblk(): executed=9 bh_count=0 bh_state=0 kworker/u4:3(2035): getblk(): executed=9 bh_count=0 bh_state=0 syz-executor0(20878): getblk(): executed=9 bh_count=0 bh_state=0 kworker/u4:3(2035): getblk(): executed=9 bh_count=0 bh_state=0 INFO: task syz-executor0:20896 blocked for more than 140 seconds. Not tainted 4.19.0-rc7-next-20181010+ #91 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor0 D24216 20896 6039 0x00000004 Call Trace: syz-executor0(20878): getblk(): executed=9 bh_count=0 bh_state=0 context_switch kernel/sched/core.c:2831 [inline] __schedule+0x8cf/0x21d0 kernel/sched/core.c:3480 schedule+0xfe/0x460 kernel/sched/core.c:3524 __rwsem_down_write_failed_common+0xc9a/0x15e0 kernel/locking/rwsem-xadd.c:577 rwsem_down_write_failed+0xe/0x10 kernel/locking/rwsem-xadd.c:606 call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:117 __down_write arch/x86/include/asm/rwsem.h:142 [inline] down_write_nested+0xa9/0x130 kernel/locking/rwsem.c:195 inode_lock_nested include/linux/fs.h:804 [inline] filename_create+0x1b2/0x5b0 fs/namei.c:3635 user_path_create fs/namei.c:3693 [inline] do_mknodat+0x1c2/0x530 fs/namei.c:3755 __do_sys_mknod fs/namei.c:3795 [inline] __se_sys_mknod fs/namei.c:3793 [inline] __x64_sys_mknod+0x7b/0xb0 fs/namei.c:3793 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457519 Code: Bad RIP value. RSP: 002b:00007fd414c07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000020000440 RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd414c086d4 R13: 00000000004c27ba R14: 00000000004d3ae0 R15: 00000000ffffffff INFO: task syz-executor0:20899 blocked for more than 140 seconds. Not tainted 4.19.0-rc7-next-20181010+ #91 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor0 D25208 20899 6039 0x00000004 Call Trace: context_switch kernel/sched/core.c:2831 [inline] __schedule+0x8cf/0x21d0 kernel/sched/core.c:3480 schedule+0xfe/0x460 kernel/sched/core.c:3524 __rwsem_down_write_failed_common+0xc9a/0x15e0 kernel/locking/rwsem-xadd.c:577 rwsem_down_write_failed+0xe/0x10 kernel/locking/rwsem-xadd.c:606 call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:117 __down_write arch/x86/include/asm/rwsem.h:142 [inline] down_write+0xa5/0x130 kernel/locking/rwsem.c:72 inode_lock include/linux/fs.h:764 [inline] vfs_setxattr+0x96/0x100 fs/xattr.c:218 setxattr+0x2ea/0x450 fs/xattr.c:450 path_setxattr+0x1e3/0x230 fs/xattr.c:469 __do_sys_setxattr fs/xattr.c:484 [inline] __se_sys_setxattr fs/xattr.c:480 [inline] __x64_sys_setxattr+0xc4/0x150 fs/xattr.c:480 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457519 Code: Bad RIP value. RSP: 002b:00007fd414be6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457519 RDX: 0000000020000500 RSI: 0000000020000400 RDI: 0000000020000380 RBP: 000000000072c040 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000044 R11: 0000000000000246 R12: 00007fd414be76d4 R13: 00000000004bdd8d R14: 00000000004d70f8 R15: 00000000ffffffff INFO: task syz-executor0:20902 blocked for more than 140 seconds. Not tainted 4.19.0-rc7-next-20181010+ #91 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor0 D25208 20902 6039 0x00000004 Call Trace: context_switch kernel/sched/core.c:2831 [inline] __schedule+0x8cf/0x21d0 kernel/sched/core.c:3480 schedule+0xfe/0x460 kernel/sched/core.c:3524 __rwsem_down_write_failed_common+0xc9a/0x15e0 kernel/locking/rwsem-xadd.c:577 rwsem_down_write_failed+0xe/0x10 kernel/locking/rwsem-xadd.c:606 call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:117 __down_write arch/x86/include/asm/rwsem.h:142 [inline] down_write_nested+0xa9/0x130 kernel/locking/rwsem.c:195 inode_lock_nested include/linux/fs.h:804 [inline] filename_create+0x1b2/0x5b0 fs/namei.c:3635 user_path_create fs/namei.c:3693 [inline] do_mkdirat+0xda/0x310 fs/namei.c:3832 __do_sys_mkdir fs/namei.c:3856 [inline] __se_sys_mkdir fs/namei.c:3854 [inline] __x64_sys_mkdir+0x5c/0x80 fs/namei.c:3854 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457519 Code: Bad RIP value. RSP: 002b:00007fd414bc5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000457519 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000f00 RBP: 000000000072c0e0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd414bc66d4 R13: 00000000004bcee2 R14: 00000000004d3a80 R15: 00000000ffffffff INFO: task syz-executor0:20905 blocked for more than 140 seconds. Not tainted 4.19.0-rc7-next-20181010+ #91 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor0 D14408 20905 6039 0x00000004 Call Trace: context_switch kernel/sched/core.c:2831 [inline] __schedule+0x8cf/0x21d0 kernel/sched/core.c:3480 schedule+0xfe/0x460 kernel/sched/core.c:3524 __rwsem_down_write_failed_common+0xc9a/0x15e0 kernel/locking/rwsem-xadd.c:577 rwsem_down_write_failed+0xe/0x10 kernel/locking/rwsem-xadd.c:606 call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:117 __down_write arch/x86/include/asm/rwsem.h:142 [inline] down_write+0xa5/0x130 kernel/locking/rwsem.c:72 inode_lock include/linux/fs.h:764 [inline] __generic_file_fsync+0xb5/0x200 fs/libfs.c:999 generic_file_fsync+0x77/0x120 fs/libfs.c:1036 fat_file_fsync+0x77/0x180 fs/fat/file.c:198 vfs_fsync_range+0x140/0x220 fs/sync.c:197 kworker/u4:3(2035): getblk(): executed=9 bh_count=0 bh_state=0 vfs_fsync fs/sync.c:211 [inline] do_fsync+0x52/0xa0 fs/sync.c:221 __do_sys_fdatasync fs/sync.c:234 [inline] __se_sys_fdatasync fs/sync.c:232 [inline] __x64_sys_fdatasync+0x36/0x50 fs/sync.c:232 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457519 Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fd414ba4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000004b RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457519 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a RBP: 000000000072c180 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd414ba56d4 R13: 00000000004bdd25 R14: 00000000004cca78 R15: 00000000ffffffff INFO: task syz-executor0:20909 blocked for more than 140 seconds. Not tainted 4.19.0-rc7-next-20181010+ #91 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor0 D24968 20909 6039 0x00000004 Call Trace: context_switch kernel/sched/core.c:2831 [inline] __schedule+0x8cf/0x21d0 kernel/sched/core.c:3480 schedule+0xfe/0x460 kernel/sched/core.c:3524 __rwsem_down_read_failed_common kernel/locking/rwsem-xadd.c:280 [inline] rwsem_down_read_failed+0x371/0x710 kernel/locking/rwsem-xadd.c:297 call_rwsem_down_read_failed+0x18/0x30 arch/x86/lib/rwsem.S:94 __down_read arch/x86/include/asm/rwsem.h:83 [inline] down_read+0x9b/0x120 kernel/locking/rwsem.c:26 inode_lock_shared include/linux/fs.h:779 [inline] lookup_slow+0x49/0x80 fs/namei.c:1687 walk_component+0x92b/0x2590 fs/namei.c:1810 lookup_last fs/namei.c:2273 [inline] path_lookupat.isra.43+0x212/0xc00 fs/namei.c:2318 filename_lookup+0x26a/0x520 fs/namei.c:2348 user_path_at_empty+0x40/0x50 fs/namei.c:2608 user_path include/linux/namei.h:62 [inline] do_mount+0x180/0x1d90 fs/namespace.c:2912 ksys_mount+0x12d/0x140 fs/namespace.c:3190 __do_sys_mount fs/namespace.c:3204 [inline] __se_sys_mount fs/namespace.c:3201 [inline] __x64_sys_mount+0xbe/0x150 fs/namespace.c:3201 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457519 Code: Bad RIP value. RSP: 002b:00007fd414b83c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457519 RDX: 0000000020000840 RSI: 00000000200005c0 RDI: 0000000020000580 RBP: 000000000072c220 R08: 0000000020000cc0 R09: 0000000000000000 R10: 0000000000000040 R11: 0000000000000246 R12: 00007fd414b846d4 R13: 00000000004c286e R14: 00000000004d3c60 R15: 00000000ffffffff syz-executor0(20878): getblk(): executed=9 bh_count=0 bh_state=0 INFO: lockdep is turned off. NMI backtrace for cpu 0 CPU: 0 PID: 979 Comm: khungtaskd Not tainted 4.19.0-rc7-next-20181010+ #91 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x244/0x3ab lib/dump_stack.c:113 nmi_cpu_backtrace.cold.2+0x5c/0xa1 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1e8/0x22a lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:144 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:204 [inline] watchdog+0xb39/0x1050 kernel/hung_task.c:265 kthread+0x35a/0x440 kernel/kthread.c:246 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352 Sending NMI from CPU 0 to CPUs 1: INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.439 msecs NMI backtrace for cpu 1 CPU: 1 PID: 20878 Comm: syz-executor0 Not tainted 4.19.0-rc7-next-20181010+ #91 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x18/0x20 kernel/kcov.c:195 Code: 8b 4d 08 e8 6a fe ff ff 5d c3 0f 1f 84 00 00 00 00 00 55 48 89 f2 48 89 fe bf 07 00 00 00 48 89 e5 48 8b 4d 08 e8 48 fe ff ff <5d> c3 66 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 RSP: 0018:ffff88019923ecb0 EFLAGS: 00000297 RAX: 0000000000000002 RBX: ffffea0006c4cd40 RCX: ffffffff819c85f8 RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000007 RBP: ffff88019923ecb0 R08: ffff8801bccf2380 R09: ffffed0033247cf0 R10: ffffed0033247cf0 R11: 0000000000000003 R12: 1ffff10033247d9a R13: 0000000000000001 R14: 0000000000000000 R15: ffffea00074a04c8 FS: 00007fd414c29700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffff600400 CR3: 0000000199ca2000 CR4: 00000000001406e0 DR0: 000000000000b8c4 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: unlock_page+0x298/0x4c0 mm/filemap.c:1199 grow_dev_page fs/buffer.c:994 [inline] grow_buffers fs/buffer.c:1029 [inline] __getblk_slow fs/buffer.c:1062 [inline] __getblk_gfp+0xa12/0x1030 fs/buffer.c:1351 __bread_gfp+0x2d/0x310 fs/buffer.c:1385 sb_bread include/linux/buffer_head.h:307 [inline] fat__get_entry+0x5a6/0xa40 fs/fat/dir.c:101 fat_get_entry fs/fat/dir.c:129 [inline] fat_search_long+0x33b/0x1570 fs/fat/dir.c:479 vfat_find+0x16d/0x1a0 fs/fat/namei_vfat.c:697 vfat_lookup+0x107/0x640 fs/fat/namei_vfat.c:711 lookup_open+0x72e/0x1b90 fs/namei.c:3213 do_last fs/namei.c:3324 [inline] path_openat+0x15e4/0x5150 fs/namei.c:3534 do_filp_open+0x255/0x380 fs/namei.c:3564 do_sys_open+0x568/0x700 fs/open.c:1063 ksys_open include/linux/syscalls.h:1292 [inline] __do_sys_creat fs/open.c:1121 [inline] __se_sys_creat fs/open.c:1119 [inline] __x64_sys_creat+0x61/0x80 fs/open.c:1119 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457519 Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fd414c28c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000457519 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd414c296d4 R13: 00000000004bdae2 R14: 00000000004cc628 R15: 00000000ffffffff