sg_write: data in/out 475/204 bytes for SCSI command 0x0-- guessing data in; program syz-executor7 not setting count and/or reply_len properly INFO: task loop2:19231 blocked for more than 120 seconds. Not tainted 4.9.109-ga4230be #48 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. loop2 D27080 19231 2 0x00000000 ffff88017ca84800 ffff8801cf89ea00 ffff88017f561a40 ffff880180ef4800 ffff8801db221c18 ffff880181976df0 ffffffff839e8a8d 0000000041b58ab3 ffffffff843c2288 ffffffff81236160 00000002843b0c9f ffff8801db2224e8 Call Trace: [] schedule+0x7f/0x1b0 kernel/sched/core.c:3557 [] schedule_timeout+0x861/0xf70 kernel/time/timer.c:1768 [] io_schedule_timeout+0x1ba/0x390 kernel/sched/core.c:5180 [] io_schedule include/linux/sched.h:460 [inline] [] bt_get.isra.8+0x27c/0x780 block/blk-mq-tag.c:141 [] __blk_mq_get_tag block/blk-mq-tag.c:163 [inline] [] blk_mq_get_tag+0xac/0x220 block/blk-mq-tag.c:192 [] __blk_mq_alloc_request+0x2a/0xaa0 block/blk-mq.c:196 [] blk_mq_map_request.isra.38+0x3ab/0x900 block/blk-mq.c:1207 [] blk_sq_make_request+0x1d6/0x1220 block/blk-mq.c:1374 [] generic_make_request+0x20e/0x9b0 block/blk-core.c:2055 [] submit_bio+0xb0/0x460 block/blk-core.c:2126 [] dio_bio_submit fs/direct-io.c:420 [inline] [] do_blockdev_direct_IO+0x35da/0x5a80 fs/direct-io.c:1301 [] __blockdev_direct_IO+0xa5/0xd0 fs/direct-io.c:1360 [] blkdev_direct_IO+0xa0/0xd0 fs/block_dev.c:183 [] generic_file_read_iter+0x660/0x1a90 mm/filemap.c:1951 [] blkdev_read_iter+0x105/0x170 fs/block_dev.c:1738 [] lo_rw_aio+0x6b3/0x8a0 drivers/block/loop.c:506 [] do_req_filebacked drivers/block/loop.c:543 [inline] [] loop_handle_cmd drivers/block/loop.c:1698 [inline] [] loop_queue_work+0x3d7/0x2320 drivers/block/loop.c:1710 [] kthread_worker_fn+0x249/0x6b0 kernel/kthread.c:627 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Showing all locks held in the system: 3 locks held by kworker/u4:2/172: #0: ("%s""netns"){.+.+.+}, at: [] work_static include/linux/workqueue.h:186 [inline] #0: ("%s""netns"){.+.+.+}, at: [] set_work_data kernel/workqueue.c:617 [inline] #0: ("%s""netns"){.+.+.+}, at: [] set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: ("%s""netns"){.+.+.+}, at: [] process_one_work+0x6ee/0x1500 kernel/workqueue.c:2085 #1: (net_cleanup_work){+.+.+.}, at: [] process_one_work+0x728/0x1500 kernel/workqueue.c:2089 #2: (net_mutex){+.+.+.}, at: [] cleanup_net+0x13f/0x630 net/core/net_namespace.c:439 2 locks held by khungtaskd/519: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 kernel/hung_task.c:239 #1: (tasklist_lock){.+.?..}, at: [] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336 2 locks held by getty/3774: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+.+.}, at: [] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2133 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 519 Comm: khungtaskd Not tainted 4.9.109-ga4230be #48 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801d8b27d08 ffffffff81eb3e29 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ffffffff810b9580 ffff8801d8b27d40 ffffffff81ebf127 0000000000000000 0000000000000000 0000000000000003 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold.2+0x48/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x12a/0x14f lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6b4/0xa20 kernel/hung_task.c:239 [] kthread+0x26d/0x300 kernel/kthread.c:211 sock: process `syz-executor2' is using obsolete getsockopt SO_BSDCOMPAT [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 24665 Comm: syz-executor1 Not tainted 4.9.109-ga4230be #48 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff88018f74e000 task.stack: ffff8801823e0000 RIP: 0010:[] c [] __sanitizer_cov_trace_pc+0x1/0x50 kernel/kcov.c:93 RSP: 0018:ffff8801823e7c08 EFLAGS: 00000246 RAX: ffff88018f74e000 RBX: ffff8801b705c3c0 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8112f40c RDI: ffff88018f74e740 RBP: ffff8801823e7da8 R08: ffffed002fd9fe2e R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff88017ecff240 R13: 0000000001200011 R14: 0000000000000000 R15: ffff88017ecfe000 FS: 0000000000dc0940(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000093002d CR3: 00000001d4d7f000 CR4: 00000000001606f0 DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Stack: ffff8801823e7da8c ffffffff8112f616c 0000000000000246c ffff88018f74e000c 0000000000000000c 0000000000000000c 0000000000000000c ffff8801823e7cb8c 0000000000000246c 0000000000000000c ffffffff814d026bc ffff880100000000c Call Trace: [] copy_process kernel/fork.c:1497 [inline] [] _do_fork+0x1b0/0xdc0 kernel/fork.c:1955 [] SYSC_clone kernel/fork.c:2065 [inline] [] SyS_clone+0x37/0x50 kernel/fork.c:2059 [] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: c00 ceb c81 c4c c89 cff ce8 c4f cd2 c1d c00 ce9 c5f cff cff cff c48 c89 cdf ce8 ca2 cd1 c1d c00 ce9 cf9 cfe cff cff c66 c2e c0f c1f c84 c00 c00 c00 c00 c00 c0f c1f c00 c55 c<48> c89 ce5 c65 c48 c8b c04 c25 cc0 c7d c01 c00 c65 c8b c15 cfc c93 ccb c7e c81 ce2 c