binder: 4577:4578 ioctl c0306201 200005c0 returned -22 Dev loop0: unable to read RDB block 8 loop0: unable to read partition table loop0: partition table beyond EOD, truncated loop_reread_partitions: partition scan of loop0 () failed (rc=-5) INFO: task syz-executor1:4599 blocked for more than 120 seconds. Not tainted 4.9.99-gc462abb #20 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor1 D28568 4599 24080 0x00000004 ffff8801cb241800 ffff8801bf177480 ffff8801cfde8fc0 ffff8801bfcb4800 ffff8801db221b98 ffff8801852f7b48 ffffffff839e377d ffff8801cb2420c8 ffffed0039648418 ffff8801cb241800 00fffc0000000000 ffff8801db222468 Call Trace: [] schedule+0x7f/0x1b0 kernel/sched/core.c:3557 [] schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3590 [] __mutex_lock_common kernel/locking/mutex.c:582 [inline] [] mutex_lock_nested+0x326/0x870 kernel/locking/mutex.c:621 [] loop_control_ioctl+0x186/0x300 drivers/block/loop.c:1920 [] vfs_ioctl fs/ioctl.c:43 [inline] [] file_ioctl fs/ioctl.c:493 [inline] [] do_vfs_ioctl+0x1ac/0x11a0 fs/ioctl.c:677 [] SYSC_ioctl fs/ioctl.c:694 [inline] [] SyS_ioctl+0x8f/0xc0 fs/ioctl.c:685 [] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/519: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 kernel/hung_task.c:239 #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336 2 locks held by getty/3771: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+.+.}, at: [] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2133 2 locks held by syz-executor1/4599: #0: (loop_index_mutex){+.+.+.}, at: [] loop_control_ioctl+0x7a/0x300 drivers/block/loop.c:1906 #1: (&lo->lo_ctl_mutex#2){+.+.+.}, at: [] loop_control_ioctl+0x186/0x300 drivers/block/loop.c:1920 2 locks held by syz-executor0/4587: #0: (&lo->lo_ctl_mutex/1){+.+.+.}, at: [] lo_ioctl+0x8b/0x1aa0 drivers/block/loop.c:1344 #1: (&bdev->bd_mutex){+.+.+.}, at: [] blkdev_reread_part+0x1e/0x40 block/ioctl.c:189 2 locks held by blkid/4608: #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_get+0x10c/0xd60 fs/block_dev.c:1268 #1: (loop_index_mutex){+.+.+.}, at: [] lo_open+0x1b/0xa0 drivers/block/loop.c:1555 2 locks held by blkid/4609: #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_get+0x10c/0xd60 fs/block_dev.c:1268 #1: (loop_index_mutex){+.+.+.}, at: [] lo_open+0x1b/0xa0 drivers/block/loop.c:1555 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 519 Comm: khungtaskd Not tainted 4.9.99-gc462abb #20 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801d84a7d08 ffffffff81eb0f09 0000000000000000 0000000000000001 0000000000000001 0000000000000001 ffffffff810b7da0 ffff8801d84a7d40 ffffffff81ebc207 0000000000000001 0000000000000000 0000000000000003 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold.2+0x48/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x12a/0x14f lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6b4/0xa20 kernel/hung_task.c:239 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.9.99-gc462abb #20 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffffffff84629800 task.stack: ffffffff84600000 RIP: 0010:[] c [] check_preemption_disabled+0x36/0x170 lib/smp_processor_id.c:15 RSP: 0018:ffff8801db207f20 EFLAGS: 00000093 RAX: ffffffff84629800 RBX: 0000000000000000 RCX: 0000000000000001 RDX: 0000000000000000 RSI: ffffffff81f18966 RDI: ffffffff83e2cde0 RBP: ffff8801db207f50 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff83e2cde0 R13: ffffffff83e2cda0 R14: ffffffff84c5df08 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000001a50978 CR3: 00000001cb635000 CR4: 00000000001606f0 DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000020000000 DR3: 0000000020000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Stack: ffffffff846deea0c 000000000001ce80c 0000000000000000c 0000000000000000c ffffffff84c5df08c 0000000000000000c ffff8801db207f60c ffffffff81f18abcc ffff8801db207f80c ffffffff812c84f3c 0000000000000046c 000000000001ce80c Call Trace: d [] debug_smp_processor_id+0x1c/0x20 lib/smp_processor_id.c:56 [] tick_check_oneshot_broadcast_this_cpu+0x13/0xe0 kernel/time/tick-broadcast.c:581 [] tick_irq_enter+0x20/0x220 kernel/time/tick-sched.c:1164 [] irq_enter+0xb3/0xd0 kernel/softirq.c:345 [] smp_reschedule_interrupt+0xa/0x90 arch/x86/kernel/smp.c:267 [] reschedule_interrupt+0xa0/0xb0 arch/x86/entry/entry_64.S:671 d [] ? native_safe_halt+0x6/0x10 arch/x86/include/asm/irqflags.h:53 [] arch_safe_halt arch/x86/include/asm/paravirt.h:104 [inline] [] default_idle+0x55/0x360 arch/x86/kernel/process.c:295 [] arch_cpu_idle+0x10/0x20 arch/x86/kernel/process.c:286 [] default_idle_call+0x45/0x60 kernel/sched/idle.c:97 [] cpuidle_idle_call kernel/sched/idle.c:155 [inline] [] cpu_idle_loop kernel/sched/idle.c:248 [inline] [] cpu_startup_entry+0x2b5/0x380 kernel/sched/idle.c:303 [] rest_init+0x183/0x189 init/main.c:409 [] start_kernel+0x67e/0x6b2 init/main.c:664 [] x86_64_start_reservations+0x29/0x2b arch/x86/kernel/head64.c:196 [] x86_64_start_kernel+0x13f/0x162 arch/x86/kernel/head64.c:177 Code: c89 cf5 c41 c54 c49 c89 cfc c53 c48 c83 cec c08 ce8 cb4 c40 c44 cff c65 c8b c1d cd5 cd7 c0f c7e c65 c8b c05 c76 cf3 c0f c7e ca9 cff cff cff c7f c74 c1b ce8 c9a c40 c44 cff c c95 c40 c44 cff c89 cd8 c48 c83 cc4 c08 c5b c41 c5c c41 c5d c41 c5e c41 c5f c5d c