b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 INFO: task syz-executor0:28620 blocked for more than 140 seconds. __find_get_block_slow() failed. block=1, b_blocknr=8 Not tainted 4.9.111-g03c70fe #6 b_state=0x00000029, b_size=512 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. device loop0 blocksize: 4096 syz-executor0 D __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 27880 28620 3866 0x00000004 b_state=0x00000029, b_size=512 ffff8801d95c4800 device loop0 blocksize: 4096 ffff88019ce4ea00 ffff880199d779c0 ffff88019d7fe000 __find_get_block_slow() failed. block=1, b_blocknr=8 ffffffff81235607b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 0000000000000000 ffff8801d95c50c0 0000000600000007 __find_get_block_slow() failed. block=1, b_blocknr=8 ffff8801db3224e8b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 Call Trace: __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 [] schedule+0x7f/0x1b0 kernel/sched/core.c:3557 device loop0 blocksize: 4096 [] __rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:526 [inline] [] rwsem_down_write_failed+0x598/0x990 kernel/locking/rwsem-xadd.c:555 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 [] call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:105 b_state=0x00000029, b_size=512 [] __down_write arch/x86/include/asm/rwsem.h:125 [inline] [] down_write+0x5c/0xa0 kernel/locking/rwsem.c:54 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 [] inode_lock include/linux/fs.h:766 [inline] [] do_truncate2+0x128/0x1f0 fs/open.c:61 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 [] do_sys_ftruncate.constprop.16+0x3ce/0x4a0 fs/open.c:213 __find_get_block_slow() failed. block=1, b_blocknr=8 [] SYSC_ftruncate fs/open.c:223 [inline] [] SyS_ftruncate+0x1c/0x30 fs/open.c:221 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 [] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 __find_get_block_slow() failed. block=1, b_blocknr=8 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb b_state=0x00000029, b_size=512 Showing all locks held in the system: device loop0 blocksize: 4096 2 locks held by khungtaskd/519: __find_get_block_slow() failed. block=1, b_blocknr=8 #0: b_state=0x00000029, b_size=512 (device loop0 blocksize: 4096 rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 kernel/hung_task.c:239 #1: b_state=0x00000029, b_size=512 (device loop0 blocksize: 4096 tasklist_lock){.+.?..}, at: [] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 1 lock held by rsyslogd/3676: #0: __find_get_block_slow() failed. block=1, b_blocknr=8 (b_state=0x00000029, b_size=512 &f->f_pos_lockdevice loop0 blocksize: 4096 ){+.+.+.}, at: [] __fdget_pos+0xac/0xd0 fs/file.c:781 2 locks held by getty/3772: b_state=0x00000029, b_size=512 #0: device loop0 blocksize: 4096 (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: b_state=0x00000029, b_size=512 (device loop0 blocksize: 4096 &ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2133 b_state=0x00000029, b_size=512 2 locks held by syz-executor0/28620: device loop0 blocksize: 4096 #0: (sb_writers __find_get_block_slow() failed. block=1, b_blocknr=8 #14b_state=0x00000029, b_size=512 ){.+.+.+}device loop0 blocksize: 4096 , at: [] sb_start_write include/linux/fs.h:1573 [inline] , at: [] do_sys_ftruncate.constprop.16+0x20a/0x4a0 fs/open.c:208 #1: b_state=0x00000029, b_size=512 (device loop0 blocksize: 4096 &sb->s_type->i_mutex_key#17){++++++}__find_get_block_slow() failed. block=1, b_blocknr=8 , at: [] inode_lock include/linux/fs.h:766 [inline] , at: [] do_truncate2+0x128/0x1f0 fs/open.c:61 2 locks held by syz-executor0/28629: device loop0 blocksize: 4096 #0: (sb_writers#14 __find_get_block_slow() failed. block=1, b_blocknr=8 ){.+.+.+}b_state=0x00000029, b_size=512 , at: [] sb_start_write include/linux/fs.h:1573 [inline] , at: [] do_sys_ftruncate.constprop.16+0x20a/0x4a0 fs/open.c:208 #1: (&sb->s_type->i_mutex_key#17 __find_get_block_slow() failed. block=1, b_blocknr=8 ){++++++}b_state=0x00000029, b_size=512 , at: [] inode_lock include/linux/fs.h:766 [inline] , at: [] do_truncate2+0x128/0x1f0 fs/open.c:61 2 locks held by syz-executor0/28631: #0: __find_get_block_slow() failed. block=1, b_blocknr=8 (b_state=0x00000029, b_size=512 sb_writersdevice loop0 blocksize: 4096 #14){.+.+.+}, at: [] sb_start_write include/linux/fs.h:1573 [inline] #14){.+.+.+}, at: [] mnt_want_write+0x3f/0xb0 fs/namespace.c:391 #1: b_state=0x00000029, b_size=512 (device loop0 blocksize: 4096 &sb->s_type->i_mutex_key#17){++++++}__find_get_block_slow() failed. block=1, b_blocknr=8 , at: [] inode_lock include/linux/fs.h:766 [inline] , at: [] do_truncate2+0x128/0x1f0 fs/open.c:61 1 lock held by syz-executor0/28632: device loop0 blocksize: 4096 #0: (&f->f_pos_lock){+.+.+.} __find_get_block_slow() failed. block=1, b_blocknr=8 , at: [] __fdget_pos+0xac/0xd0 fs/file.c:781 2 locks held by syz-executor0/28635: device loop0 blocksize: 4096 #0: (sb_writers#14 __find_get_block_slow() failed. block=1, b_blocknr=8 ){.+.+.+}b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 , at: [] sb_start_write include/linux/fs.h:1573 [inline] , at: [] do_sys_ftruncate.constprop.16+0x20a/0x4a0 fs/open.c:208 #1: b_state=0x00000029, b_size=512 (device loop0 blocksize: 4096 &sb->s_type->i_mutex_key#17){++++++}__find_get_block_slow() failed. block=1, b_blocknr=8 , at: [] inode_lock include/linux/fs.h:766 [inline] , at: [] do_truncate2+0x128/0x1f0 fs/open.c:61 1 lock held by init/28646: device loop0 blocksize: 4096 #0: (tty_mutex){+.+.+.} __find_get_block_slow() failed. block=1, b_blocknr=8 , at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] , at: [] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125 1 lock held by init/28647: device loop0 blocksize: 4096 #0: (tty_mutex){+.+.+.} __find_get_block_slow() failed. block=1, b_blocknr=8 , at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] , at: [] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125 1 lock held by init/28648: device loop0 blocksize: 4096 #0: (tty_mutex){+.+.+.} __find_get_block_slow() failed. block=1, b_blocknr=8 , at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] , at: [] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125 1 lock held by init/28649: device loop0 blocksize: 4096 #0: (tty_mutex){+.+.+.} __find_get_block_slow() failed. block=1, b_blocknr=8 , at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] , at: [] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125 1 lock held by init/28650: device loop0 blocksize: 4096 #0: (tty_mutex){+.+.+.} __find_get_block_slow() failed. block=1, b_blocknr=8 , at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] , at: [] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125 device loop0 blocksize: 4096 ============================================= NMI backtrace for cpu 1 __find_get_block_slow() failed. block=1, b_blocknr=8 CPU: 1 PID: 519 Comm: khungtaskd Not tainted 4.9.111-g03c70fe #6 b_state=0x00000029, b_size=512 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 device loop0 blocksize: 4096 ffff8801d8537d08 ffffffff81eb2729 0000000000000000 __find_get_block_slow() failed. block=1, b_blocknr=8 0000000000000001b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 0000000000000001 0000000000000001 ffffffff810b9af0 __find_get_block_slow() failed. block=1, b_blocknr=8 ffff8801d8537d40b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 ffffffff81ebda27 0000000000000001 0000000000000000 __find_get_block_slow() failed. block=1, b_blocknr=8 0000000000000002b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 [] nmi_cpu_backtrace.cold.2+0x48/0x87 lib/nmi_backtrace.c:99 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 [] nmi_trigger_cpumask_backtrace+0x12a/0x14f lib/nmi_backtrace.c:60 b_state=0x00000029, b_size=512 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 device loop0 blocksize: 4096 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6b4/0xa20 kernel/hung_task.c:239 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 [] kthread+0x26d/0x300 kernel/kthread.c:211 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 b_state=0x00000029, b_size=512 Sending NMI from CPU 1 to CPUs 0: device loop0 blocksize: 4096 NMI backtrace for cpu 0 CPU: 0 PID: 28547 Comm: syz-executor0 Not tainted 4.9.111-g03c70fe #6 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8801bfddc800 task.stack: ffff8801cd3f8000 RIP: 0010:[] c [] spin_lock include/linux/spinlock.h:302 [inline] RIP: 0010:[] c [] __find_get_block_slow+0xd3/0x330 fs/buffer.c:216 RSP: 0018:ffff8801cd3fef48 EFLAGS: 00000246 RAX: 0000000000040000 RBX: ffff8801b6852048 RCX: ffffc90000911000 RDX: 0000000000040000 RSI: ffffffff81623f13 RDI: ffffea0006fda600 RBP: ffff8801cd3fef98 R08: ffff8801bfddd188 R09: 0000000000000001 R10: 0000000000000000 R11: 1ffff10037fbba2c R12: 0000000000000000 R13: ffffea0006fda600 R14: ffff8801b3c89930 R15: ffff8801b6851e50 FS: 00007f296031d700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f9cec087148 CR3: 00000001b30b1000 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: ffff8801b6851f14c dffffc0000000000c ffff8801b6851cc0c 000000000000000fc 0000000000000001c 0000000000000010c 0000000000000000c dffffc0000000000c ffff8801b3c89930c 000000000000000fc ffff8801cd3fefe8c ffffffff816244aec Call Trace: [] __find_get_block+0x23e/0x4c0 fs/buffer.c:1360 [] __getblk_slow fs/buffer.c:1101 [inline] [] __getblk_gfp+0x189/0x710 fs/buffer.c:1386 [] __bread_gfp+0x2d/0x270 fs/buffer.c:1420 [] sb_bread include/linux/buffer_head.h:300 [inline] [] fat_ent_bread+0x160/0x2f0 fs/fat/fatent.c:106 [] fat_ent_read_block fs/fat/fatent.c:441 [inline] [] fat_alloc_clusters+0x51b/0xe10 fs/fat/fatent.c:489 [] fat_add_cluster+0x6f/0xe0 fs/fat/inode.c:100 [] __fat_get_block fs/fat/inode.c:147 [inline] [] fat_get_block+0x2df/0x800 fs/fat/inode.c:176 [] __block_write_begin_int+0x391/0x1040 fs/buffer.c:1987 [] __block_write_begin fs/buffer.c:2038 [inline] [] block_write_begin+0x5f/0x180 fs/buffer.c:2097 [] cont_write_begin+0x4f3/0x810 fs/buffer.c:2450 [] fat_write_begin+0x9a/0x120 fs/fat/inode.c:222 [] generic_perform_write+0x301/0x510 mm/filemap.c:2740 [] __generic_file_write_iter+0x352/0x540 mm/filemap.c:2865 [] generic_file_write_iter+0x2e0/0x610 mm/filemap.c:2893 [] do_iter_readv_writev+0x3d4/0x4b0 fs/read_write.c:695 [] do_readv_writev+0x2f6/0x7a0 fs/read_write.c:871 [] vfs_writev+0x87/0xc0 fs/read_write.c:910 [] do_writev+0xe6/0x260 fs/read_write.c:943 [] SYSC_writev fs/read_write.c:1016 [inline] [] SyS_writev+0x27/0x30 fs/read_write.c:1013 [] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: c00 cba c01 c00 c00 c00 c48 c89 cdf c41 c2b c8f cc4 c00 c00 c00 c48 cd3 cee c31 cc9 ce8 cae c60 ce1 cff c48 c85 cc0 c49 c89 cc5 c0f c84 cc4 c01 c00 c00 ce8 cfd caa cd3 cff c<48> c8d c83 c08 c01 c00 c00 c48 c89 cc7 c48 c89 c45 cb8 ce8 c2a c41 c3d c02 c4c c89 c __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096