device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 INFO: task syz-executor6:11398 blocked for more than 140 seconds. b_state=0x00000029, b_size=512 Not tainted 4.9.111-g03c70fe #6 device loop0 blocksize: 4096 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor6 D __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 27928 11398 1 0x00000004 b_state=0x00000029, b_size=512 ffff8801d813b000 device loop0 blocksize: 4096 0000000000000000 ffff8801d7492f40 ffff8801cfa08000__find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 ffff8801db321c18 device loop0 blocksize: 4096 ffff8801ac007b40 ffffffff839e7ded__find_get_block_slow() failed. block=1, b_blocknr=8 0000000000000002b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 0000000041b58ab3 ffffffff843bac1b __find_get_block_slow() failed. block=1, b_blocknr=8 00ffffff81221510b_state=0x00000029, b_size=512 ffff8801db3224e8device loop0 blocksize: 4096 Call Trace: __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 [] schedule+0x7f/0x1b0 kernel/sched/core.c:3557 [] wb_wait_for_completion+0x149/0x1b0 fs/fs-writeback.c:221 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 [] __writeback_inodes_sb_nr+0x207/0x300 fs/fs-writeback.c:2310 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 [] writeback_inodes_sb_nr fs/fs-writeback.c:2327 [inline] [] writeback_inodes_sb+0x27/0x30 fs/fs-writeback.c:2342 b_state=0x00000029, b_size=512 [] __sync_filesystem fs/sync.c:35 [inline] [] sync_filesystem+0x93/0x240 fs/sync.c:63 device loop0 blocksize: 4096 [] generic_shutdown_super+0x75/0x300 fs/super.c:423 __find_get_block_slow() failed. block=1, b_blocknr=8 [] kill_block_super+0x9f/0x120 fs/super.c:1127 b_state=0x00000029, b_size=512 [] deactivate_locked_super+0x75/0xd0 fs/super.c:310 device loop0 blocksize: 4096 [] deactivate_super+0x91/0xd0 fs/super.c:341 __find_get_block_slow() failed. block=1, b_blocknr=8 [] cleanup_mnt+0xb2/0x160 fs/namespace.c:1134 b_state=0x00000029, b_size=512 [] __cleanup_mnt+0x16/0x20 fs/namespace.c:1141 device loop0 blocksize: 4096 [] task_work_run+0x10c/0x180 kernel/task_work.c:116 __find_get_block_slow() failed. block=1, b_blocknr=8 [] tracehook_notify_resume include/linux/tracehook.h:191 [inline] [] exit_to_usermode_loop+0xfc/0x120 arch/x86/entry/common.c:161 b_state=0x00000029, b_size=512 [] prepare_exit_to_usermode arch/x86/entry/common.c:191 [inline] [] syscall_return_slowpath arch/x86/entry/common.c:260 [inline] [] do_syscall_64+0x364/0x490 arch/x86/entry/common.c:287 device loop0 blocksize: 4096 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb __find_get_block_slow() failed. block=1, b_blocknr=8 Showing all locks held in the system: b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 2 locks held by khungtaskd/519: #0: __find_get_block_slow() failed. block=1, b_blocknr=8 (b_state=0x00000029, b_size=512 rcu_read_lockdevice loop0 blocksize: 4096 ){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] ){......}, at: [] watchdog+0x11c/0xa20 kernel/hung_task.c:239 #1: b_state=0x00000029, b_size=512 (device loop0 blocksize: 4096 tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 1 lock held by rsyslogd/3679: __find_get_block_slow() failed. block=1, b_blocknr=8 #0: b_state=0x00000029, b_size=512 (device loop0 blocksize: 4096 &f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xac/0xd0 fs/file.c:781 2 locks held by getty/3775: b_state=0x00000029, b_size=512 #0: device loop0 blocksize: 4096 (&tty->ldisc_sem){++++++}__find_get_block_slow() failed. block=1, b_blocknr=8 , at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: device loop0 blocksize: 4096 (&ldata->atomic_read_lock){+.+.+.}__find_get_block_slow() failed. block=1, b_blocknr=8 , at: [] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2133 device loop0 blocksize: 4096 1 lock held by syz-executor6/11398: #0: __find_get_block_slow() failed. block=1, b_blocknr=8 (b_state=0x00000029, b_size=512 &type->s_umount_keydevice loop0 blocksize: 4096 #38){+.+...}, at: [] deactivate_super+0x89/0xd0 fs/super.c:340 b_state=0x00000029, b_size=512 2 locks held by syz-executor0/14977: device loop0 blocksize: 4096 #0: (sb_writers#12 __find_get_block_slow() failed. block=1, b_blocknr=8 ){.+.+.+}b_state=0x00000029, b_size=512 , at: [] sb_start_write include/linux/fs.h:1573 [inline] , at: [] mnt_want_write+0x3f/0xb0 fs/namespace.c:391 #1: (&sb->s_type->i_mutex_key __find_get_block_slow() failed. block=1, b_blocknr=8 #19b_state=0x00000029, b_size=512 ){+.+.+.}device loop0 blocksize: 4096 , at: [] inode_lock include/linux/fs.h:766 [inline] , at: [] do_last fs/namei.c:3312 [inline] , at: [] path_openat+0xed5/0x3590 fs/namei.c:3534 1 lock held by init/15048: b_state=0x00000029, b_size=512 #0: device loop0 blocksize: 4096 (tty_mutex){+.+.+.}__find_get_block_slow() failed. block=1, b_blocknr=8 , at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] , at: [] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125 1 lock held by init/15049: device loop0 blocksize: 4096 #0: (tty_mutex){+.+.+.} __find_get_block_slow() failed. block=1, b_blocknr=8 , at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] , at: [] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125 1 lock held by init/15050: device loop0 blocksize: 4096 #0: (tty_mutex){+.+.+.} __find_get_block_slow() failed. block=1, b_blocknr=8 , at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] , at: [] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125 1 lock held by init/15051: device loop0 blocksize: 4096 #0: (tty_mutex){+.+.+.} __find_get_block_slow() failed. block=1, b_blocknr=8 , at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] , at: [] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125 1 lock held by init/15052: device loop0 blocksize: 4096 #0: (tty_mutex){+.+.+.} __find_get_block_slow() failed. block=1, b_blocknr=8 , at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] , at: [] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125 1 lock held by init/15053: device loop0 blocksize: 4096 #0: (tty_mutex){+.+.+.} __find_get_block_slow() failed. block=1, b_blocknr=8 , at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] , at: [] tty_open+0x46c/0xe20 drivers/tty/tty_io.c:2125 device loop0 blocksize: 4096 ============================================= NMI backtrace for cpu 0 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 CPU: 0 PID: 519 Comm: khungtaskd Not tainted 4.9.111-g03c70fe #6 __find_get_block_slow() failed. block=1, b_blocknr=8 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 b_state=0x00000029, b_size=512 ffff8801d96dfd08 device loop0 blocksize: 4096 ffffffff81eb2729 0000000000000000 0000000000000000__find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 0000000000000000 device loop0 blocksize: 4096 0000000000000001 ffffffff810b9af0 ffff8801d96dfd40__find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 ffffffff81ebda27 device loop0 blocksize: 4096 0000000000000000 0000000000000000 0000000000000002__find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 Call Trace: device loop0 blocksize: 4096 [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 [] nmi_cpu_backtrace.cold.2+0x48/0x87 lib/nmi_backtrace.c:99 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 [] nmi_trigger_cpumask_backtrace+0x12a/0x14f lib/nmi_backtrace.c:60 b_state=0x00000029, b_size=512 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 device loop0 blocksize: 4096 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6b4/0xa20 kernel/hung_task.c:239 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 [] kthread+0x26d/0x300 kernel/kthread.c:211 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 b_state=0x00000029, b_size=512 Sending NMI from CPU 0 to CPUs 1: device loop0 blocksize: 4096 NMI backtrace for cpu 1 CPU: 1 PID: 14960 Comm: syz-executor0 Not tainted 4.9.111-g03c70fe #6 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8801a0250000 task.stack: ffff8801a16d0000 RIP: 0010:[] c [] __read_once_size include/linux/compiler.h:243 [inline] RIP: 0010:[] c [] __sanitizer_cov_trace_pc+0x3b/0x50 kernel/kcov.c:105 RSP: 0018:ffff8801a16d70d8 EFLAGS: 00000246 RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc900008e1000 RDX: 000000000003ffff RSI: ffffffff81f1a18b RDI: ffffffff83e2d9e0 RBP: ffff8801a16d70d8 R08: ffff8801a0250960 R09: 0000000000000001 R10: ffff8801a0250000 R11: 1ffff1003404a127 R12: ffffffff83e2d9e0 R13: ffffffff83e2d9a0 R14: ffffea0006e7611c R15: ffffea0006e76100 FS: 00007fc5722a4700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f7da9ef3a30 CR3: 00000001a11c9000 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: ffff8801a16d7118c ffffffff81f1a18bc 0000000000000246c ffffea0006e76100c ffff88019ce6d8f0c dffffc0000000000c ffffea0006e7611cc ffffea0006e76100c ffff8801a16d7128c ffffffff81f1a2dcc ffff8801a16d7148c ffffffff8127f5e5c Call Trace: [] check_preemption_disabled+0x3b/0x170 lib/smp_processor_id.c:51 [] debug_smp_processor_id+0x1c/0x20 lib/smp_processor_id.c:56 [] __rcu_is_watching kernel/rcu/tree.c:1053 [inline] [] rcu_is_watching+0x15/0xa0 kernel/rcu/tree.c:1067 [] rcu_read_unlock include/linux/rcupdate.h:927 [inline] [] find_get_entry+0x3e9/0x540 mm/filemap.c:1132 [] pagecache_get_page+0x4b/0x720 mm/filemap.c:1203 [] find_get_page_flags include/linux/pagemap.h:264 [inline] [] __find_get_block_slow+0xc2/0x330 fs/buffer.c:212 [] __find_get_block+0x23e/0x4c0 fs/buffer.c:1360 [] __getblk_slow fs/buffer.c:1101 [inline] [] __getblk_gfp+0x189/0x710 fs/buffer.c:1386 [] __bread_gfp+0x2d/0x270 fs/buffer.c:1420 [] sb_bread include/linux/buffer_head.h:300 [inline] [] fat__get_entry+0x4c8/0x8f0 fs/fat/dir.c:100 [] fat_get_entry fs/fat/dir.c:128 [inline] [] fat_search_long+0x277/0x1180 fs/fat/dir.c:477 [] vfat_find+0x134/0x180 fs/fat/namei_vfat.c:708 [] vfat_lookup+0xe1/0x530 fs/fat/namei_vfat.c:731 [] lookup_open+0x63d/0x1930 fs/namei.c:3203 [] do_last fs/namei.c:3315 [inline] [] path_openat+0xef8/0x3590 fs/namei.c:3534 [] do_filp_open+0x197/0x270 fs/namei.c:3568 [] do_sys_open+0x30d/0x5c0 fs/open.c:1072 [] SYSC_open fs/open.c:1090 [inline] [] SyS_open fs/open.c:1085 [inline] [] SYSC_creat fs/open.c:1110 [inline] [] SyS_creat+0x27/0x30 fs/open.c:1108 [] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: c2c c93 ccb c7e c81 ce2 c00 c01 c1f c00 c48 c8b c75 c08 c75 c2b c8b c90 c80 c12 c00 c00 c83 cfa c02 c75 c20 c48 c8b c88 c88 c12 c00 c00 c8b c80 c84 c12 c00 c00 c48 c8b c11 c<48> c83 cc2 c01 c48 c39 cd0 c76 c07 c48 c89 c34 cd1 c48 c89 c11 c5d cc3 c0f c1f c00 c __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096 __find_get_block_slow() failed. block=1, b_blocknr=8 b_state=0x00000029, b_size=512 device loop0 blocksize: 4096